last executing test programs: 2m39.945326342s ago: executing program 1 (id=4829): socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0x10, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'wlan1\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x4008040) socket$packet(0x11, 0x3, 0x300) sendto$packet(0xffffffffffffffff, &(0x7f0000000140)="bad330fbc9b5540004f3ffe90756a85d86dde98d2935188b5dcd7bc2a53bd403b5b913aa337d10954f7bfa4b0cb53049118b000000000000000013d4815ad83826a45a7c0c1c1b841b7059a7521403eb7a57f296f4b56792ff", 0x69, 0x40, &(0x7f00000001c0)={0x11, 0x18, r5, 0x1, 0xd8, 0x6, @link_local}, 0x14) r7 = socket(0x2, 0x2, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) pipe(&(0x7f0000000280)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r8, @ANYBLOB="402df80575319ef87fb8d403918dea7248a0faddd75da8ba77efd287e6450c198eed3dcbc028343089b926d6756438f779de1d92aa22e4bd12cda7198c3efda1f635c24e5ef444c112feee89c63161003a368b9a31922b6881edb5a34bd40f24ff768aacdee1e7228155a1beeb7d34706a184939fc54e6311e76c129c68737018c5d695082dddb2fd4ec3631eda356ae5dd266493f7a4d5025af75e685394b0f92ef0fe7289d67a6651852cdca13578187cdd751057784d17893d8e1a62fcb560dace852", @ANYRES32=r3], 0x0, 0x1002f3a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x57}, 0xffffffffffffffea) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept4$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c, 0x800) bind$bt_sco(r7, 0x0, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80900, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) 2m39.501451364s ago: executing program 1 (id=4832): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000000201020000fb0901000000000000000000000000000a00000004000380300002802c00018014000300fe800000000000000000000000002f"], 0xfffffffffffffe14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x10012, r3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x14006040}, 0x8800) 2m39.42161834s ago: executing program 1 (id=4835): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000480)={'syztnl1\x00', r0, 0x0, 0x1, 0x10000, 0x5, {{0x18, 0x4, 0x1, 0x0, 0x60, 0x66, 0x0, 0x7f, 0xf00b034a8e21d1, 0x0, @multicast2, @local, {[@generic={0x82, 0xe, "6433d737b2deebf5d320bfdb"}, @noop, @lsrr={0x83, 0x3, 0xfd}, @cipso={0x86, 0x1b, 0x3, [{0x5, 0x10, "49004746d4bd87df8eafd4e996fd"}, {0x0, 0x5, "e2636d"}]}, @generic={0x83, 0x4, "308d"}, @timestamp={0x44, 0x4, 0x9d, 0x0, 0x4}, @timestamp_addr={0x44, 0x14, 0xf9, 0x1, 0xd, [{@private=0xa010101, 0x2b}, {@multicast2, 0x8001}]}]}}}}}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2, 0x80805, 0x0) close(0x3) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) (async) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x2) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000003c0)={0x0, 0x0, 0x20}, 0xc) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000003c0)={0x0, 0x0, 0x20}, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) (async) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r8, 0x913e0000) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r8, 0x0) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r8, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) write$6lowpan_control(r8, &(0x7f0000000200)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) (async) write$6lowpan_control(r8, &(0x7f0000000200)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd, 0x21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0xf3cd}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x2000c000) (async) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd, 0x21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0xf3cd}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x2000c000) socket$igmp(0x2, 0x3, 0x2) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0xff, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0xff, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 2m39.15179952s ago: executing program 1 (id=4840): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote, r1}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e50002000000000071113d00000000008510000002000000850000007d00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 2m38.826823941s ago: executing program 1 (id=4843): unshare(0x4040600) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x20) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1], 0xe0}], 0x1}, 0x40040) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x80000, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYBLOB="7d4036814623cf5dd0744a43a2de325f955a1952f7ab541ed630ee3f231c0865c9baf2edaa26ffeb68797a6941b4c80fc5680452bc601eb0371ca973459448f35284ecf74d41fb2868b1b1139c4a1f131e9fdc21d08b2cf3ba8a296e373e95d89092ca13d6b7105e872d016cc1233892423e518b4a97f64c2155821af2b79be5da275770c6b91d79035ed3d9d57b3fc0e3ef00ee07abb018f49721c8820c94a071e233a55c73b06745c4e88fe6f86486422fba85d0c8df", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x60}}, 0x8000) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x42, 0x4, 0x410, 0xffffffff, 0x2a8, 0x210, 0x2a8, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc5a, 0x4, 0x7, 0xffffffff, 0xb87d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x2, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x9, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x11, 0x1, 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000000705000100070000000900020073797a3100c9d4bb0000001400078005001500050000000830f540000000000500050002000000050004000100000011000300686173683a69702c706f727400000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket(0x21, 0x1, 0x8a) r9 = accept4$phonet_pipe(r3, &(0x7f0000000180), &(0x7f0000000200)=0x10, 0x80400) sendmmsg$inet(r9, &(0x7f0000000c80)=[{{&(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, &(0x7f0000000400)=[{&(0x7f00000002c0)="a93b6916055ea7c6aba57298f434e9c80037c8e6f777db1ee88fae2bc4dfb4cc071290598fa0e42ac888b88a5a8816c31f3e0bd8cf059ee50cd932f1f21205d2f7fcf502a47daf60ea2b5dfc7bb82a", 0x4f}, {&(0x7f0000000e00)="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", 0x111}], 0x2, &(0x7f00000004c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x50}}, {{&(0x7f0000000ac0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000b00)="e53e9a730b2ef9a3e017b00b58411cbbb24d47538c3d01154514606cc1951fd1df05a39615e3049639a06bee37090ffd755ace4732d8389555d20af2bbd655c37c68cd0354553c0e414049707aa19e306652bb0926e30478cfb99405dd94c3b58e016ba54b38371231083460bd42c2c44e01fba8fd26efae1db2f5b4bae434eccdabfefb2682e799773d21fae316c8840bbd90e265245e4ce10ea26e45a8e6efb36a1b8d214ce2994f1159ddca223a5d76e0512a", 0xb4}], 0x1, &(0x7f0000000c00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @rand_addr=0x64010100, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x30}}], 0x50}}], 0x2, 0x40000c0) sendmsg(r8, &(0x7f0000000700)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0x7, 0x1}, 0x80, &(0x7f0000000680)=[{0x0}, {&(0x7f00000005c0)='r', 0x1}], 0x2}, 0x0) setsockopt(r1, 0x1, 0x9, &(0x7f0000000440)="020000000d8000001c9b043442c9213f2f6095405eda47409fa0fb8989520f755b14fad7875ce6b976ad92b846ec", 0xffffffffffffff5a) shutdown(r7, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r12 = accept4(r11, 0x0, 0x0, 0x80000) sendmsg$alg(r12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) sendmsg$nl_route_sched_retired(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r12, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000000600)=""/134, 0x86}, {&(0x7f00000000c0)=""/26, 0x1a}, {&(0x7f00000006c0)=""/21, 0x15}], 0x5}, 0x4}], 0x2, 0x60, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000140)=0x8) 2m38.641433006s ago: executing program 1 (id=4847): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0xffffffffffffff2f, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4001d}, 0x48000) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f000000a3c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) 2m26.942469001s ago: executing program 4 (id=4940): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf}]}}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}, @IFLA_GRE_TOS={0x5, 0x9, 0x9}]}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2m26.743289302s ago: executing program 4 (id=4943): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x6}, &(0x7f0000000040)=0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000080)={r1, 0x8, 0x2, [0xb, 0x8]}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000100)={0x4}, 0x1) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000140)={r1, 0x0, 0x0, 0x7, 0x7fff, 0x8, 0x1, 0xffffffff, {r3, @in6={{0xa, 0x4e22, 0x5, @loopback, 0x2}}, 0x0, 0x401, 0x887, 0x5, 0x9}}, &(0x7f0000000200)=0xb0) r5 = accept(r0, &(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000002c0)=0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x81, 0x9, 0x4e, @dev={0xfe, 0x80, '\x00', 0x30}, @empty, 0x8, 0x8000, 0x3, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f00000003c0)={'tunl0\x00', r6, 0x7, 0x10, 0x1, 0x5, {{0x18, 0x4, 0x0, 0x0, 0x60, 0x64, 0x0, 0x7, 0x29, 0x0, @remote, @local, {[@generic={0x88, 0x2}, @timestamp_prespec={0x44, 0x24, 0xf4, 0x3, 0x9, [{@local, 0x3}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff8}, {@loopback, 0x1}]}, @timestamp_prespec={0x44, 0x24, 0x29, 0x3, 0x5, [{@private=0xa010102, 0x2}, {@multicast2, 0x8}, {@remote, 0x800}, {@private=0xa010100, 0x1}]}, @end]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000004c0)={'vlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000500)={r4, 0x2}, &(0x7f0000000540)=0x8) ioctl$SIOCRSGCAUSE(r5, 0x89e0, &(0x7f0000000580)) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0xe, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_query, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}]}, &(0x7f0000000680)='syzkaller\x00', 0x3ff, 0xf, &(0x7f00000006c0)=""/15, 0x41000, 0x40, '\x00', r7, 0x25, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x3, 0x8, 0x1, 0x9}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000780)=[{0x0, 0x2, 0xb, 0x4}, {0x3, 0x1, 0x10, 0x6}, {0x3, 0x1, 0xa, 0x2}, {0x5, 0x5, 0xc}], 0x10, 0x8}, 0x94) r12 = socket$kcm(0x29, 0x2, 0x0) poll(&(0x7f0000000880)=[{r12, 0x102}], 0x1, 0x2) getsockopt$bt_BT_SNDMTU(r9, 0x112, 0xc, &(0x7f00000008c0)=0x200, &(0x7f0000000900)=0x2) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000940)=0x1, &(0x7f0000000980)=0x4) r13 = syz_genetlink_get_family_id$team(&(0x7f0000000a00), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a40)={'netpci0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000a80)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000ac0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'erspan0\x00', r7, 0x8, 0x8, 0xe, 0x8f, {{0x16, 0x4, 0x1, 0x18, 0x58, 0x67, 0x0, 0x2, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0x16, 0x3, 0x1, [{@empty, 0x2}, {@multicast1, 0x1}]}, @noop, @end, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xb, "b13fb61a070420bc77"}, {0x7, 0x6, "8a34fd9d"}, {0x5, 0x4, 'B8'}, {0x6, 0x10, "bd0c7e9dda610191bdb576460825"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000c40)={'syztnl0\x00', &(0x7f0000000bc0)={'syztnl1\x00', r6, 0x7800, 0x8, 0xa, 0x3ff, {{0xc, 0x4, 0x1, 0x6, 0x30, 0x68, 0x0, 0xe, 0x29, 0x0, @rand_addr=0x64010102, @local, {[@lsrr={0x83, 0x1b, 0x46, [@multicast2, @broadcast, @multicast2, @broadcast, @multicast2, @private=0xa010101]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000d40)={'erspan0\x00', &(0x7f0000000c80)={'syztnl2\x00', r6, 0x8740, 0x7, 0xffff, 0x6618, {{0x1c, 0x4, 0x0, 0x3b, 0x70, 0x65, 0x0, 0x39, 0x2f, 0x0, @multicast1, @remote, {[@rr={0x7, 0x17, 0x8e, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x1c, 0xc0, 0x1, 0x1, [{@multicast2, 0x7bd4}, {@broadcast, 0xfffffff9}, {@multicast2, 0x4}]}, @generic={0x86, 0x12, "7ae37c0183abea8684e1f592a0095ed6"}, @ssrr={0x89, 0x7, 0x20, [@multicast1]}, @rr={0x7, 0xb, 0xeb, [@remote, @empty]}]}}}}}) sendmsg$TEAM_CMD_NOOP(r10, &(0x7f0000001800)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000000d80)={0xa2c, r13, 0x400, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r14}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x9, 0xd, 0x9}, {0x3ff, 0x79, 0xfa, 0x3}]}}}]}}, {{0x8, 0x1, r8}, {0x104, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x8, 0xf9, 0x1, 0x4}, {0x9, 0x1, 0x0, 0xffff947b}, {0xaa4b, 0x3, 0x0, 0x9}, {0x299c, 0x2, 0x14, 0x4cdc}, {0x2, 0x3, 0x6b, 0xfffffff1}, {0x1, 0x6, 0x80, 0x3}, {0xff, 0x18, 0xff, 0x5}, {0x3ff, 0x1, 0x7, 0x4}, {0x15, 0x4, 0x5, 0x3}, {0x42b2, 0xe1, 0x8, 0x6}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r7}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0xff, 0x40, 0x3}, {0x0, 0x2, 0x9, 0x1}, {0x9, 0xe, 0xf, 0xffffff7f}, {0x82dc, 0x3, 0x40}, {0x125a, 0x2c, 0x6, 0x173}]}}}]}}, {{0x8, 0x1, r8}, {0x220, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1a8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf2}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff6}}}]}}, {{0x8, 0x1, r16}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r7}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r8}, {0x21c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfad}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r18}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r6}, {0xc8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r6}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x85}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}]}}]}, 0xa2c}, 0x1, 0x0, 0x0, 0xc891}, 0x4040851) r20 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001840), 0x1, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r20, 0x9362, 0x0) 2m26.709920803s ago: executing program 4 (id=4944): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYBLOB="2b0300000000000020001280080001006774700014", @ANYRES16=r1, @ANYRESOCT=r2, @ANYRES8=r2], 0x40}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYBLOB="2b0300000000000020001280080001006774700014", @ANYRES16=r1, @ANYRESOCT=r2, @ANYRES8=r2], 0x40}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x3, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x2, 0x70bd2a, 0x25dfdbf7, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0x5}, {0xffff, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x37ec90cb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff1, 0xfff3}, {}, {0x3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0x91d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x3, @loopback, 0x7ff}], 0x2c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x3, @loopback, 0x7ff}], 0x2c) socket(0x40000000015, 0x5, 0x0) (async) r9 = socket(0x40000000015, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="346600001000010000000000000000000000000a20000000000a010300000000000000000100fffe0900010073797a30000000002c000000030a01020000000000000000010000000900010073010000000000000000030073797a310000000054000000060a010400000000000000000008000b400000000009000100606c0004802800018008000100666962001c000280080001400000001108000340000000040800024000000002140000001100010000000000000000000000000a00000000003300"], 0xc8}}, 0x0) connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r9, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r9, &(0x7f0000001740)=[{{0x0, 0xffffffffffffff92, &(0x7f0000001400), 0x1}, 0xfffff2e1}], 0x4000210, 0x10002, 0x0) recvmmsg$unix(r9, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000020, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000080)={0x7, 0x84, 0x2, 0x5, 0x5, 0xfd, 0x0, 0x0, 0xfd, 0x2, 0x3, 0x0, 0x2}, 0xe) recvmmsg(r3, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000025c0)=""/83, 0x53}, {&(0x7f0000000140)=""/62, 0x3e}, {&(0x7f0000000600)=""/66, 0x42}], 0x3, &(0x7f0000002680)}, 0x800}], 0x1, 0x40000002, 0x0) (async) recvmmsg(r3, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000025c0)=""/83, 0x53}, {&(0x7f0000000140)=""/62, 0x3e}, {&(0x7f0000000600)=""/66, 0x42}], 0x3, &(0x7f0000002680)}, 0x800}], 0x1, 0x40000002, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100027bd7000fddbdf250a0000000e0001006e657464657673696d0000000f0002006e65744831a0233f975dfc46b8450165ff0b1064657673696d300000080003000000000008000100706369001100e0ff303030303a30303a"], 0x60}, 0x1, 0x0, 0x0, 0x8000000}, 0x20004804) socket$kcm(0xa, 0x922000000003, 0x11) (async) r11 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_TIOCINQ(r11, 0x541b, &(0x7f00000001c0)) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000000)={r3, 0x4, 0x437, 0xffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c00000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3000000000200007800c000180080014400000000008000840000000000800064000000000050005000200000005000100"], 0x6c}}, 0x0) 2m26.445615949s ago: executing program 4 (id=4946): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="18030000ef7f0000000000009bb111c018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b5020000000000008500000083000000bc0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099, 0x41100, 0x63, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2006, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x72}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) (rerun: 64) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002b40), r3) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000000800)={0x20, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c4) (async) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2m25.557319609s ago: executing program 4 (id=4950): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x25, 0x80805, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@datasec={0x1, 0x1, 0x0, 0xf, 0x3, [{}], "aafada"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "92"}]}, {0x0, [0x2e]}}, 0x0, 0x43, 0x0, 0x8}, 0x20) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x2400c000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e25, 0xf, @empty, 0x4001}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x8, 0x1000, 0x1, 0x9, 0xff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x3, 0x8, 0x6, 0x9046}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xdb7b2e35abe274a3}]}}}]}, 0x6c}}, 0x24044092) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) socket(0x25, 0x80805, 0xfffffffc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@datasec={0x1, 0x1, 0x0, 0xf, 0x3, [{}], "aafada"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "92"}]}, {0x0, [0x2e]}}, 0x0, 0x43, 0x0, 0x8}, 0x20) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x2400c000) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) socket(0x40000000015, 0x5, 0x0) (async) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e25, 0xf, @empty, 0x4001}, 0x1c) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x8, 0x1000, 0x1, 0x9, 0xff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x3, 0x8, 0x6, 0x9046}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xdb7b2e35abe274a3}]}}}]}, 0x6c}}, 0x24044092) (async) 2m25.493091899s ago: executing program 4 (id=4951): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x200}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xe8}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x44040) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x40, 0x107, 0x70bd2d, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c80)={0x20, 0x4, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40c40}, 0x4008c) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000002000)=0x200000) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0000000024210100280012800b00010062726964676500001800028005000700010000000c002e000000000001000000"], 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x200}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xe8}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x44040) (async) socket$kcm(0x29, 0x5, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x40, 0x107, 0x70bd2d, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c80)={0x20, 0x4, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40c40}, 0x4008c) (async) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000002000)=0x200000) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0000000024210100280012800b00010062726964676500001800028005000700010000000c002e000000000001000000"], 0x48}}, 0x0) (async) 2m25.407224652s ago: executing program 2 (id=4952): socket$netlink(0x10, 0x3, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x20002010}, 0x24014085) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @none}, 0x0, 0x80800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x28, 0x24, 0x300, 0x74bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x11}, {0xffff, 0xffff}, {0xc, 0x5}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x2000c000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f00", @ANYRES16=r2, @ANYRES16=r1], 0x28}}, 0x0) mmap(&(0x7f00005b6000/0x1000)=nil, 0x1000, 0x100000a, 0x40010, r0, 0xd7788000) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x0, @dev={0xac, 0x14, 0x14, 0x38}, 0x4e23, 0x4, 'lc\x00', 0x38, 0x6, 0x2b}, 0x2c) ioctl$sock_inet_SIOCGARP(r5, 0x8954, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="2d637075736574202518ab92560cc98e74793b6467daf3bea0be262c1fe41936d0274f87f4d82e66a8c827030000000a00ff7e10378a4aa467d57291da41839c1374f20fe4eecd8cff999b2b377d308dfdf2cbe5005d2609ab69f24e6c8fac96597fe5ea30fe0847b8563f9baff8fdbb85cdc027e7bf41bb8d1ec90fb7040283de92"], 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r4], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="fd460005b95802fbffffef0000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="514e06f6679ce5e8d4c4482e3989", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r9, 0x2000012, 0xe, 0x0, &(0x7f00000003c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRESDEC=r6], 0x18}, 0x1, 0x0, 0x0, 0x8841}, 0x40040) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) 2m25.257745164s ago: executing program 2 (id=4953): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYBLOB="01000100aabaaaaaaa383b398d851a9ade94f51c78d528302093542c905f14e72dd8568683033de42302375226596517eaf3ebbfdcf56fc6dbc63c5df24e1a20e9f011dbb4a5aca93c50ec09af9eea5723ba9ea51118ee65c35c2c834e6ba6ae8c06e666e543397d1d8c257b721d70d07e97ced1373d2622e684cbdacac0777a485f174f9b029713ab0367f179a73ed6048111e12c7af75b9c8122ba579f0af46502d4879c913b0af4b84f10adb21340a5ebab573068bed4849bc252a1f615d3b2dc0d7c93a3219e75"]) (async) sendmsg$nl_generic(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x34, 0x10, 0x70bd28, 0x25dfdbfd, {0x1d}, [@generic="713db41c32d2761b6382542f6bbcbfbde8f97e4e067ae4a6e3283064f429b81ad35a0d00546f9840763f57", @typed={0x14, 0x66, 0x0, 0x0, @ipv6=@empty}]}, 0x54}, 0x1, 0x0, 0x0, 0x4050}, 0x401) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$FICLONE(r3, 0x40049409, r1) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) socket$alg(0x26, 0x5, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1d, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xb5}, @exit], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x21700, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000380)=0x2) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) (async) pselect6(0x40, &(0x7f0000000800)={0x2, 0x9, 0xa, 0x7fff, 0x0, 0xbea, 0x1, 0x8000000000000000}, &(0x7f0000000840)={0x9, 0xec15, 0x0, 0x4, 0xe, 0x200, 0x9, 0x80ffc7}, 0x0, 0x0, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x30, r2, 0x10ada85e65c25349, 0x3, 0x25dfdbfb, {{0x67}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x10}}}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x117, 0x0, 0x1, [{0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x200449a4) (async, rerun: 32) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7e}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0xc1) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)={0x28, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x2, 0x0, 0x1, [@typed={0x4, 0xbe}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0xc010) 2m25.218088079s ago: executing program 2 (id=4954): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4044040}, 0x40090) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x100, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x10000, 0x1cb, 0x0, 0x13e}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000001340)={{0x84, @broadcast, 0x4e24, 0x3, 'lc\x00', 0xc, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0xffffffff, 0x12d5c, 0x1294b}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) write(r6, &(0x7f0000000140)="05000000010000", 0x7) sendmsg$nl_route_sched(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r7, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r7, &(0x7f00000001c0)={0x1f, @any, 0xb}, 0xa) 2m25.165004035s ago: executing program 2 (id=4955): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/72, 0x48}], 0x1000000000000089}, 0x20002061) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c0002800500010000000000470002800500010001f9ffff050004"], 0xe4}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) ioctl$TUNSETLINK(r2, 0x400454cd, 0x17) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmsg(r1, &(0x7f00000003c0)={&(0x7f0000000100)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x80, &(0x7f0000000440)}, 0x40000) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000140)=0xdb) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r7) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="80000000", @ANYRES16=r8, @ANYBLOB="100027ffffffffdbdf25030000010c00020009000000000000000c00020001010000000000000c00050004010000000000000c00040003000000000000000c000600020000000000000009000a002d215e482d000000080d0400000000000c00020009000000000000000f000a0073797a6b616c6c6572300000"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) ioctl$sock_bt_bnep_BNEPCONNDEL(r5, 0x400442c9, &(0x7f0000000540)={0x2a17, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x2c}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 2m23.347539402s ago: executing program 32 (id=4847): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0xffffffffffffff2f, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4001d}, 0x48000) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f000000a3c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) 2m22.859441961s ago: executing program 2 (id=4962): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @local, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x6, 0x2080005, r2}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@mcast1, @mcast2, @private0, 0x80000001, 0x6, 0x0, 0x100, 0x29, 0xc00002, r2}) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 2m22.737921326s ago: executing program 2 (id=4963): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000680)={0x14, 0x26, 0x1, 0x70bd2d, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000000) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) (rerun: 64) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x3, 0x0, &(0x7f0000000100)="b9ff03", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x80}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r4, 0x0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 64) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f00000000c0)='syz1\x00', 0x1ff) (async, rerun: 32) mkdirat$cgroup(r5, &(0x7f0000000100)='syz0\x00', 0x1ff) (rerun: 32) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4a20, 0x8, @mcast2={0xff, 0x5}, 0xffffffff}, 0x1c) (async, rerun: 64) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x4e23, 0xa67, @mcast1, 0xc}, 0x1c) (rerun: 64) 2m10.420921454s ago: executing program 33 (id=4951): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x200}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xe8}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x44040) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x40, 0x107, 0x70bd2d, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c80)={0x20, 0x4, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40c40}, 0x4008c) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000002000)=0x200000) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0000000024210100280012800b00010062726964676500001800028005000700010000000c002e000000000001000000"], 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x200}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xe8}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x44040) (async) socket$kcm(0x29, 0x5, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x40, 0x107, 0x70bd2d, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c80)={0x20, 0x4, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40c40}, 0x4008c) (async) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000002000)=0x200000) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0000000024210100280012800b00010062726964676500001800028005000700010000000c002e000000000001000000"], 0x48}}, 0x0) (async) 2m7.508806575s ago: executing program 34 (id=4963): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000680)={0x14, 0x26, 0x1, 0x70bd2d, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000000) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) (rerun: 64) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x3, 0x0, &(0x7f0000000100)="b9ff03", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x80}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r4, 0x0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 64) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f00000000c0)='syz1\x00', 0x1ff) (async, rerun: 32) mkdirat$cgroup(r5, &(0x7f0000000100)='syz0\x00', 0x1ff) (rerun: 32) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4a20, 0x8, @mcast2={0xff, 0x5}, 0xffffffff}, 0x1c) (async, rerun: 64) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x4e23, 0xa67, @mcast1, 0xc}, 0x1c) (rerun: 64) 4.40935459s ago: executing program 7 (id=5688): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x428, 0xc, 0x6, 0x301, 0x70bd26, 0x25dfdbfb, {0x5, 0x0, 0x8}, [@nested={0x124, 0xdb, 0x0, 0x1, [@typed={0x14, 0xbe, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @nested={0x4, 0x3a}, @generic="3198ac95e571c8f44f43a2ffb882bd23c1a51cbcc6066c835dde231712200c2b8850dc717fc9af5319f70ff119bebfb3c8b9806a901231c5b7bfc674a87fc936238bc5d39f226be2350df46b8a2a2b23adb7f0713a0e4fd05a3487bc", @typed={0x8, 0x8b, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x89, 0x0, 0x0, @pid=r1}, @nested={0x4, 0x12a}, @generic="f15eb298e757a787a379dc6146799adb9cf3f4441efce9d2c1ed029fa328b85f9710fcfc870892424ca125e0e3802b56ea55844cf7650537b65803154cb817ac6afba6dc8de7d68921f1a6a56533739ee1b593d35a070cb6c080278d37de0f5a6f7b8fe36b738f1d8dd2675791cb21b5da94b179bc7f9902d39967fb8945cc04a5423b611e82e6c1aae489238a70113fc3e7f0c79d0d08fc"]}, @generic="abc30d908143455207c06b299fed1ec4d7ab973c8e271811a43c35ae2dd7b7d88fe52f2a666be23c4266f2a7a6df0d0bb4bbd1e8ad069439d31f5209549b9009b085eeb2c97e2e5afee2de6f3bdcb3e3cba0aa9a9b436a2d31aedb510c5f2a061324770ac25d551314b83bafeaea4da81286814123edb81126b1335c3fcf02b12d280ea72db5fb419720ec8098f2285360376006df8efc48b29d48e59e559e61b9a130152f840d2fc60d5f3156dc2c926b310c1c85be3559aa040ba42a4dd5c27b03e50866ec2773498588d74c8c961f0aeb20d6a7f74ce8b2b54649ad796d0dac406c4a9f3417a3e3aff76ea1ce27ea6e0ff928ef5bf8fe", @generic="4068611a09cae8f0dcdd0d8647271787016736a08f4deb5444c90fc73a156b1a0a58933efefa8153e1162c3bd106f9a60df2004c9e3cdaee1c8698048ed127d7bb9bf622af0b6d3d8e0c", @generic="f59a25bf8cb17ab321c3a6fbde51ce0acc7dab8ec355d4c3d4e55f694d63fdea98c1c00d16c41ff17abba34141e6e81ae7b3daa6911ff842139cb0ad65d1a5a98360bf822c9a03896e87d3039559650cc4248eb01288117b5a0ce72f4210074a076a7f7dde5250b5aaec072b3e76dba280bdb4565718c2b32b5c8fbfb46c15dde14e7de80570c7709e18f7d94d85e910450a738a77efb44f7ea2fc1cd32fffdf2bff566c2a90fa98649795f096969a1dda", @generic="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"]}, 0x428}, 0x1, 0x0, 0x0, 0x48040}, 0x4000000) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="150000003e00290200003b0000f2fadb5f250a00"], 0x14}}, 0x8000) 3.974813595s ago: executing program 3 (id=5689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r0, &(0x7f0000000380)=""/46, 0xfffffeb4) (async) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) 3.964281406s ago: executing program 7 (id=5691): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24008090}, 0x40000) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a1c0)=ANY=[], 0x3bfc}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) recvmsg$can_raw(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)=""/124, 0x7c}, {0x0}], 0x2}, 0x1021) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r2, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(r2, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0xfffffffd, 0x0, 0x4, 0x4, 0x0, 0x8}, &(0x7f0000000080)=0x9c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000019c0)={0x14, r4, 0x1, 0x74bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000060}, 0x800) 3.957091832s ago: executing program 3 (id=5696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x74, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x640100fe}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x74}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah', 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = epoll_create1(0x0) r3 = socket$unix(0x1, 0x2, 0x0) close(r3) socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)={0xa0000000}) r4 = socket$inet6(0x10, 0x0, 0x4) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 3.851751341s ago: executing program 3 (id=5701): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000140)='io.pressure\x00', 0x2, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/58, 0x3a}], 0x1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}}, 0x0) 3.66957857s ago: executing program 3 (id=5703): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000091114200000000009500dc0000000000"], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x11, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f0000000000), &(0x7f0000000200)=@tcp, 0x3}, 0x20) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31) (async) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x40080) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x82, 0xfffffffe, 0xffffffff, 0x6}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001a000100fdfff77ffbdbdf250a80800400000000000000000c"], 0x28}}, 0x20000050) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0xfffffffe, @private0}, @in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000004c0)={r5, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x80}, 0x90) (async) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000000), &(0x7f0000000140)=0x4) 3.406492881s ago: executing program 3 (id=5707): syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000440)={r0, 0x1000, 0xe, 0x91d}) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x29080040}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r2, 0x8, 0x70bd25, 0x25dfdbfc}, 0x14}}, 0x40000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, 0x1403, 0x2, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'rose0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x1) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000006c0)=0x1, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000780)={'tunl0\x00', &(0x7f0000000700)={'ip_vti0\x00', 0x0, 0x720, 0x10, 0x8e, 0x5, {{0xc, 0x4, 0x2, 0x2, 0x30, 0x66, 0x0, 0x4, 0x2f, 0x0, @private=0xa010101, @multicast2, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0x42, 0x3, 0x3, [{@multicast2, 0x7}, {@empty, 0x6}]}, @end]}}}}}) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000007c0)=0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000800)={{{@in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e23, 0x5, 0x4e22, 0x0, 0xa, 0x30, 0x20, 0x3a, r4, r5}, {0x6, 0x800, 0x3, 0x5, 0x170, 0x8000000000000001, 0x3, 0x4}, {0x0, 0x4, 0x10, 0x8}, 0x800, 0x6e6bb8, 0x2, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d6, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x38}, 0x3505, 0x4, 0x3, 0x4, 0x0, 0xfd69, 0x80000000}}, 0xe8) setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000900)=0x8, 0x4) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000ac0)={'filter\x00', 0x0, 0x4, 0xd5, [0x7, 0x0, 0x3, 0x2, 0x8, 0x2], 0x8, &(0x7f0000000940)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000009c0)=""/213}, &(0x7f0000000b40)=0x78) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000b80)={0x0, 0x6}, &(0x7f0000000bc0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000c00)={r6, 0x5}, &(0x7f0000000c40)=0x8) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x84, 0x2, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFACCT_FLAGS={0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x4}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4df}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfff}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffffff80}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}]}, 0x84}, 0x1, 0x0, 0x0, 0x841}, 0x1080) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000e40), r3) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x14, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40020}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000001100)={'sit0\x00', &(0x7f0000001040)={@empty, 0x0, 0x0, 0x90, 0x0, [{@multicast1}, {@empty}, {@private}, {@loopback}, {@multicast1}, {@dev}, {@broadcast}, {@remote}, {}]}}) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_QGROUP_CREATE(r8, 0x4010942a, &(0x7f0000001140)={0x1, 0x5}) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000001180), 0x4) sendto$inet6(r1, &(0x7f00000011c0)="37fecccffa688a9f7c202a1d2de855978819250bcd777f1ec5bf6bfaf53ad8332c5ad6db375ce5b064223498087973f717be2dad8f8ca9e2303cbb90f208443edd72f16377efeaf575536a9a9e435b7ee1e401b627d11162ccb84b34b702f9d0a3ab", 0x62, 0x20004800, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000001240), &(0x7f0000001280)=0x4) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000012c0)={{0x2, 0x4e23, @multicast1}, {0x306, @random="9a22eb8c52ed"}, 0x16, {0x2, 0x4e21, @broadcast}, 'bond0\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000001340), r1) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000013c0), r3) sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x210400b0}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, r9, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000001) 3.389987737s ago: executing program 7 (id=5709): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000004c0)=0x79, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="d9ea693249ca", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de2500"/66, 0x42}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179", 0x2d}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0", 0xc3}], 0x3}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000b80)="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", 0x15f}, {&(0x7f0000000d00)="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", 0x12f}], 0x2}}], 0x2, 0x2090) 3.266116098s ago: executing program 3 (id=5710): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, 0x0, 0x8000) sendto$packet(r2, &(0x7f0000000740)='\x00', 0x1, 0x20004090, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="08917168496100f81cc0510000000082800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x7c}]}, &(0x7f00000008c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000020000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r4], 0x38}}, 0x10) 3.256075803s ago: executing program 6 (id=5711): r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000040)={'a', ' *:* ', 'rm\x00'}, 0x9) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)={0x338, 0x12, 0x100, 0x70bd26, 0x25dfdbfe, {0x2, 0x57, 0x2, 0x5, {0x4e22, 0x4e20, [0xe, 0x9, 0xffff, 0xc], [0x4, 0x8, 0xfffffc01, 0x7], 0x0, [0x5, 0x10001]}, 0xd66, 0x8001}, [@INET_DIAG_REQ_BYTECODE={0x35, 0x1, "e33ce0815a9703fa9004534f17b6b5ef6e735ef5f3663093614df05239d9914591cd2e77eadbc7b7262f5fba76b993ee76"}, @INET_DIAG_REQ_BYTECODE={0x8e, 0x1, "56254123c7b5725798793fb897242f18268cebd706e1a53d1ac5a773be6521197b8f3e229c98bab3d3dc51de290edf7bed6fb3d3b6c42d2a8096fe0841f7bee71e55da38d7e2b2c6a079559f85b765901873277f59ccb2e131257567db994a908b074201f4c982a6ba73e6022e981fd71f1ba58c987b3e8ab01d7463da2aa8e65156321874ad3ffab130"}, @INET_DIAG_REQ_BYTECODE={0xe3, 0x1, "ebfb0fc5d6e25eb763597fdf964dc6ffc070625e08ae7372bd413ff5d0a1fde589b45781dea9b9c9cc48bca08e0e4e8cc69aa833c80ab1f6d86b0a73c838795a369691f0e302d661ff00dd1f0ebb5e42ed16fd927bb65cced07cbf926dfb97a780454d3a6d094725aa4c145fbe31f65d67d125c0ab2e0cd9ad132fc6ab0bd318a479e6ded68286b244a05275e9973932568e64628834f9700f6f4fdcb2e95774027da75f4f162486a9287ed46a2e087c4c80cc056e1cf6fa3f11e94aaa4ea8ecbf247fe31045dbc8069eda2b62e5df64d1fe904dacaa4f3ace83d0e515a96d"}, @INET_DIAG_REQ_BYTECODE={0xcc, 0x1, "e2475d5183b615b70d84450b1cbcf4b387ace3d4b7eb77ebcd5bb271c0e7d4ae1209aa3c556fbb32865eb73bfaafc2bf0e9d744d5cfef4f42c42989dbb5769c71de21e0c1b0959020e026c70ec411cfc1d03cb2f8ff42bc604422c1d35d5b4f8c51ad09b68e32c3d7c64f6235f058c661f14b5a306dc3e63f86c67f2ac0d7837c296185f99fde541e600bcdc94cae77ee821d54fdbe7566f90e5af252b0ece23c8b560964a0343e15db565c73693238f7bb9b7968180d4cf809a33c35ae1b4793fe9e9df82ce45cf"}, @INET_DIAG_REQ_BYTECODE={0x72, 0x1, "f99929a869187757f5be46f5c0a37bdf877c28afe57148c7a50774d9ff1100484699829d73424656714f91fe06f1bcd6972f52e8690076f68e4b36c2e872403d7cd482961b3aa361df24978972b5bef072b8e1b12d7ad3c02d6fa9b57a074cf8bfb761d9a92492f5f4739817762a"}]}, 0x338}, 0x1, 0x0, 0x0, 0x4000}, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000480)={r0, 0x3a66ecef, 0x2, 0x8}) sendto$l2tp(r1, &(0x7f00000004c0)="496138bfcb00d35b2c89f85c50f13325dc6fc4d7780e22e6728b2af72dd7550b1627aa35545a9f8ece863ecb89713316a89037b1ed1e0b7c7665be1dab49cd5ed6d9d4be8ecba1becc7c5ab7eb", 0x4d, 0x10, &(0x7f0000000540)={0x2, 0x0, @broadcast, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000580)={0x0, 0x7fffffff}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000600)={r2, 0x4}, &(0x7f0000000640)=0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000780)={'syztnl1\x00', &(0x7f0000000700)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x8, 0xd6, 0x4, @mcast1, @mcast1, 0x7800, 0x80, 0x4, 0x3}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x15}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @exit]}, &(0x7f00000006c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x5a, '\x00', r4, 0x0, r1, 0x8, &(0x7f00000007c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0x6, 0x7, 0xfff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000840)=[r1, r1, r1, r1, r1], &(0x7f0000000880)=[{0x5, 0x4, 0xd}, {0x0, 0x2, 0x2, 0x9}, {0x1, 0x4, 0x5, 0xd}], 0x10, 0x7fff}, 0x94) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000980)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000009c0)={r3, @in6={{0xa, 0x4e20, 0x9, @empty, 0x9}}, 0x6, 0xb318}, &(0x7f0000000a80)=0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ec0)={r5, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000c00)=[0x0], &(0x7f0000000c40)=[0x0], 0x0, 0xde, &(0x7f0000000c80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000d00), &(0x7f0000000d40), 0x8, 0x78, 0x8, 0x8, &(0x7f0000000d80)}}, 0x10) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001200)=@bpf_ext={0x1c, 0x27, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x0, 0xc, 0x6, 0x5, 0xfffffffffffffff0, 0x1}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @alu={0x0, 0x1, 0x5, 0xa, 0x4, 0x10, 0xffffffffffffffff}, @ldst={0x1, 0x1, 0x6, 0xb, 0x1, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @jmp={0x5, 0x1, 0xc, 0x4, 0x8, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xd4b3721539777245}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001040)='GPL\x00', 0xae7, 0x99, &(0x7f0000001080)=""/153, 0x41000, 0x2, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000001140)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x2e3, 0xffffffffffffffff, 0x1, &(0x7f0000001180)=[r1, r1, r1, r1, 0x1, r1], &(0x7f00000011c0)=[{0x3, 0x2, 0x4, 0x5}], 0x10, 0x6}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x1a, 0x5, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000b00)='GPL\x00', 0x800, 0x0, 0x0, 0x41100, 0x2, '\x00', r4, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x6, 0xeb32}, 0x8, 0x10, &(0x7f0000000b80)={0x5, 0x4, 0x5, 0x5}, 0x10, r7, r8, 0x8, &(0x7f00000012c0)=[r1], &(0x7f0000001300)=[{0x0, 0x3, 0x1, 0x7}, {0x3, 0x3, 0x6, 0x4}, {0x8, 0x2, 0x10, 0xa}, {0x0, 0x1, 0xc, 0x8}, {0x0, 0x5, 0x5, 0x2}, {0x5, 0x5, 0x2, 0x1}, {0x3, 0x5, 0x3, 0xb}, {0x5, 0x2, 0xc, 0xc}], 0x10, 0x6}, 0x94) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000001640)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001600)={&(0x7f0000001500)={0x100, r10, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xb09, 0x18}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x373}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x98}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}], @key_params=[@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3467b815290b7514e42eeae8b2"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "c53614c12bf3805148b073b46038"}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xfffffffd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x100}}, 0x10) ioctl$int_out(r5, 0x5460, &(0x7f0000001680)) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000016c0)={0xd, 0x3, 0x3, 0x3, 0x7fffffff}) r12 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r12, &(0x7f0000001c40)={&(0x7f0000001700)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001780)=""/218, 0xda}, {&(0x7f0000001880)=""/155, 0x9b}, {&(0x7f0000001940)=""/253, 0xfd}, {&(0x7f0000001a40)=""/67, 0x43}, {&(0x7f0000001ac0)=""/238, 0xee}], 0x5}, 0x10100) getsockname$packet(r1, &(0x7f0000001c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001cc0)=0x14) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002080)={0x6, 0x25, &(0x7f0000001d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @ldst={0x3, 0x0, 0x2, 0x5, 0x9, 0xfffffffffffffff8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0xaf}, @call={0x85, 0x0, 0x0, 0x71}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001e40)='syzkaller\x00', 0x1, 0x8b, &(0x7f0000001e80)=""/139, 0x41000, 0xb, '\x00', r6, 0x25, r1, 0x8, &(0x7f0000001f40)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000001f80)={0x1, 0x10, 0x8, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001fc0)=[r1, r1, r1, r1, r1], &(0x7f0000002000)=[{0x0, 0x2, 0x0, 0x4}, {0x2, 0x4, 0x6, 0x5}, {0x4, 0x5, 0xa}, {0x2, 0x5, 0x8b}, {0x1, 0x2, 0xf, 0x5}, {0x4, 0x5, 0x8, 0xb}, {0x3, 0x4, 0x7, 0xa}], 0x10, 0x3}, 0x94) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000002140)={0x0, 0x16332f2f}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002280)={@cgroup=r1, 0x14, 0x1, 0x4, &(0x7f0000002180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000021c0)=[0x0], &(0x7f0000002200)=[0x0], &(0x7f0000002240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000022c0)={@fallback=r5, r13, 0x38, 0x0, r9, @void, @value=r1, @void, @void, r15}, 0x20) r16 = accept4$phonet_pipe(r1, &(0x7f0000002300), &(0x7f0000002340)=0x10, 0x800) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r16, 0xf507, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x2c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xb4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000409c}, 0x804) openat$cgroup_ro(r14, &(0x7f0000002480)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) 3.166887173s ago: executing program 0 (id=5713): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="01250020000000001c0012800b000100697036746e6c00000c00028008000100", @ANYRES32], 0x3c}, 0x9}, 0x0) write$tun(r1, &(0x7f0000000780)={@val={0x0, 0x86dd}, @val={0x2, 0x3, 0x5, 0x9, 0xa, 0x40}, @mpls={[], @ipv6=@generic={0x8, 0x6, "3739ed", 0x28, 0x89, 0xff, @local, @mcast2, {[], "59c0ac5a142dbdbec6b7f2b65327cfd00f8bd3acba38414fcc35f63d64902ea8bb580250f9fdb4ec"}}}}, 0x5e) 2.896968597s ago: executing program 5 (id=5715): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000200000000100000640001000006020202020202010182"], 0x57) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000080211000001080211000000080211000000200001000000010001"], 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2a, &(0x7f0000000040)) 2.731660707s ago: executing program 0 (id=5716): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) close(0x4) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x800) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0xa002a014, 0x3f000000}) 2.477838318s ago: executing program 0 (id=5717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="58000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080006400000000011000300686173683a69702c6d61726b"], 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, 0x0, 0x40c0080) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 2.398016508s ago: executing program 7 (id=5718): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xaa000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'pim6reg1\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="9f1ac09f155c1291fc8baa01adb9b575263c1a877ef8644bccc1143c6da61222f05eacf50665f3905cc2fd3e4e8100a13e7fcca4310085ea82993babea06255779d0dfa66f589f9511a2f87ee914c9e0894139310b5457cfe7ca3ae9dade5d7a11f0f2bbdec62e2df3daf9875c79c6763fdcb88306000000bd7c5c71ab8fffc299f6aea8ae05a727e64cbf8c3de5c36604fa3a7f43c2d51832aa29a52a9dd409823bc89a7cc268e91fff716052173384c4e76c9921c2accb039cbf2cfb99a47371db803c3dce71aa0555a2c0fdb6c8e812ac6974d7b3d749bbc7f90a00", 0xdd}, {&(0x7f00000012c0)="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", 0xf23}], 0x2, 0x0, 0x0, 0x80}], 0x1, 0xc8d1) (async) recvmmsg(r5, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x1, 0x2101, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x303}, "a0f3a80294cf58e1", "9d55fd4f13b813f2b6f897f600741d51", "2aa8d90a", "d16b00"}, 0x28) (async) recvmmsg(r3, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}, 0xb00}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001bc0)=""/4106, 0x100a}], 0x1}, 0x4}], 0x2, 0x40000350, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f0000000000)=@req={0x28, &(0x7f0000000040)={'batadv0\x00', @ifru_names='pimreg0\x00'}}) (async) r7 = socket$inet6(0xa, 0x2, 0x10) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000040)={r7}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) (async) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x8807, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1}}}}}}, 0x0) accept4(r9, 0x0, 0x0, 0x800) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES64=r8], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x48080) 2.397157138s ago: executing program 0 (id=5719): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000640)=ANY=[@ANYBLOB='c *:*'], 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x8, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)="5dff4fd88af6078485935e58bb5d308f2ffd0fc9fe291a52d9c74425bd93907e4362c8d5b92c85e5958d842738b344bd1af85a6d30fbff8afc03bf57decda6454b8c4e9200"/81, &(0x7f0000000740), 0x20075, r2}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)="5dff4fd88af6078485935e58bb5d308f2ffd0fc9fe291a52d9c74425bd93907e4362c8d5b92c85e5958d842738b344bd1af85a6d30fbff8afc03bf57decda6454b8c4e9200"/81, &(0x7f0000000740), 0x20075, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) (async) r6 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x52, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x52, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000020000000000000000000000867b43fe85c5ee0b642a7b8b23d7b74db6db334b9057f209b836d2659aa946e7e8e8c694098de2fdc2acb4083af28e930412578ecb63ce1327fde3a7790a683fec584a9c0c6dbf89843cda1184c76c0f87c3279f68797fc2b8d9453552250b0a6a68b3cfd55a84232426cacf6337b110df3647aba6f1de9223febd918dcbafd27685debe9b40fbcff13c9d89f2c715bba4bb012e6152a4420818693ffcc1d00433254c0e2eeda44286f8e7183226d6427f3da8c6fa70129e5e9de3432144f73d71a52f0c9275698a33c659d46c7f0cff2f278c542df1f98dba88b49d2516da1027a67f72793d4f5ada5f14705225e72830eccc0c607b8a0a70e69c2bc1490b9ab1f2c0802a4594d69b7ae024017cacb83bafc5f11066b8671c6e682b560725a8f78b91ca7923304b025f62703c5e44102285bd68cfe3cc4afa4d"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$kcm(0x29, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000019c0)=ANY=[@ANYBLOB="2006ced2265a3f8a44e097469f0f7f0ec1f0e5f077ad5baefeb8522d9622b88d1545cb9834c0d872ebb1c06b48d47be514c9818ba58cb47158717b93fe3b6da859234e45714df5e333f4cb85736eed5f8e1edfc3cff696ea294d09c25d1bb528c8396bd57c17336851c1c578362b0a820586d5c3e75b56aeba70ffe42c2948cd301b6048a60dba3e011ebed6867f4390731c1a148ece1ec41af65873cb5d5ee4d0", @ANYRESDEC=r10, @ANYRESOCT=r5], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r10, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$AUTOFS_IOC_CATATONIC(r9, 0x9362, 0x0) (async) ioctl$AUTOFS_IOC_CATATONIC(r9, 0x9362, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="38120000", @ANYRESDEC=r4, @ANYBLOB="000229bd3db6968045000300000000000000", @ANYRES32=r11, @ANYBLOB="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"], 0x1238}, 0x1, 0x0, 0x0, 0x40050}, 0x40c0) (async) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="38120000", @ANYRESDEC=r4, @ANYBLOB="000229bd3db6968045000300000000000000", @ANYRES32=r11, @ANYBLOB="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"], 0x1238}, 0x1, 0x0, 0x0, 0x40050}, 0x40c0) socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.174089599s ago: executing program 6 (id=5720): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000040000000000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="a3aa14a0275e18da206fa682ca81", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000000), 0x4) (async) ioctl$sock_proto_private(r1, 0x89e0, &(0x7f0000001080)) (async) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000180)=0x1, 0x4) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) (async) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x0, 0xffffffff, 0xffffffff, 0x148, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffffff], 'veth0_macvtap\x00', 'bridge0\x00', {}, {}, 0x3c}, 0x0, 0x128, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x13, 0x33}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x200, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0xffffffffffffffff}}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x3b}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x500) (async) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async) socket$kcm(0x29, 0x0, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a0001ff80000000000000000a00000000000000", @ANYBLOB="14"], 0x38}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0x9) (async) close(0x4) (async) sendmmsg$inet(r5, &(0x7f0000007cc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="6989e7cdfd3e272285c31d8f0421f4817fcdf38f454110ca21ddd1f4767db6244675ad70be122cce1c3c4ba6362d7b717d6b85c6847aed8785035174d8ead29378db60a4c47905c4537bbf57ac3f21ab8ebe8fc7dc98c91afdccb065e04ebf96c3a1088c12e909fa8a3a4336e01a6101a13a11e5e1cd37e0f6f5fb58f43b8eca588ac9da1446a890aadc3111d8224df8fa5df82c4d85f7a82396e0c65a3d7528127b1b2bbd3a543a34cd317e8e793276acbf78ad7fb44cd426cc6e912ee13cb5d81fca40bf0f438c1bf13df561ec09f9430436360247b2979997d009000000000000005122d7c2", 0x35}, {&(0x7f0000000300)="a24166a197bf00626ff47c09876cd7298cb8950d6a98ad6b2db097c2a9c2e3b4bccd41a5a4a46af3156c4fb57011248ac6e2e7180963fb31b903ba0fbdf8580d73", 0x41}], 0x2}}], 0x30, 0x20004014) 2.13457558s ago: executing program 7 (id=5721): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01031400e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d3"}]}], {0x14}}, 0x80}}, 0xc0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4020804}, 0x50) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) unshare(0x400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) sendmmsg$inet(r5, 0x0, 0x0, 0x46054) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x3, 0x0, {0x81, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008}}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r9 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r11, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000800)={0xa0000006}) close(0x3) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f00000003c0)=0xe8) sendmsg$nl_xfrm(r3, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=@newsa={0x2fc, 0x10, 0x400, 0x70bd2c, 0x25dfdbfb, {{@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0xf}, 0x4e22, 0x0, 0x4e22, 0x3, 0x2, 0xa0, 0x0, 0x3b, 0x0, r6}, {@in=@loopback, 0x4d5, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x8, 0x8, 0x5, 0x6, 0x6, 0x1, 0x3, 0x8}, {0x8, 0x7, 0x2, 0xfb9}, {0x6, 0x8c, 0x3}, 0x70bd26, 0x3500, 0x2, 0x1, 0x9, 0x20}, [@lifetime_val={0x24, 0x9, {0x81, 0x5, 0x3a1, 0x40}}, @coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @sa={0xe4, 0x6, {{@in=@local, @in=@multicast1, 0x4e24, 0x0, 0x4e21, 0x100, 0x2, 0x80, 0x80, 0x6, 0x0, r7}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d5, 0x2a}, @in=@remote, {0x8, 0x56d, 0x7, 0x5, 0x3ff, 0xffffffffffff8000, 0x100000001, 0x40}, {0x2, 0x239, 0x2, 0xa}, {0x3ac, 0x439, 0x7ff}, 0x70bd2d, 0x0, 0xa, 0x0, 0x20, 0xc1}}, @offload={0xc, 0x1c, {r12}}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e22, 0x0, 0xa, 0x30, 0xa0, 0x2f, 0x0, r13}, {@in6=@mcast2, 0x4d5, 0x33}, @in6=@private2, {0x6, 0x9, 0x2000, 0x1, 0x7, 0xc0000000, 0xc, 0x1}, {0x8001, 0x3c5d, 0x80000000, 0x1}, {0x2, 0x4b}, 0x70bd2a, 0x3504, 0x2, 0x0, 0x2, 0x51}}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x10}, 0x8c0) 2.092450027s ago: executing program 6 (id=5722): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x50, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffffffffff7f}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r4}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x50}}, 0x0) recvfrom$inet(r1, &(0x7f0000000480)=""/162, 0xa2, 0x4020, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0xa6e1aa3126f2f90f, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x8}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000044}, 0x5) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)={0x14, 0x2, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x30004890) socket$nl_generic(0x10, 0x3, 0x10) 2.055879508s ago: executing program 0 (id=5723): unshare(0x22020400) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040), 0x3) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) (async) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0x4}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0xf77d, 0x2, 0x1}, {0x9}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20051090}, 0x8000) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r12, 0x3b}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="d0", 0x5dc}], 0x1}, 0xc804) (async) sendmmsg$inet6(r1, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x401, @dev={0xfe, 0x80, '\x00', 0x21}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0xf}}], 0x1, 0x0) (async) r13 = socket$packet(0x11, 0x2, 0x300) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000800)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r14, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b906000000dbe9abc89b6f5bec", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r15 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$FICLONERANGE(r13, 0x4020940d, &(0x7f0000000340)={{r15}, 0x3, 0x1, 0x5}) (async) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r13, 0x8002f515, &(0x7f0000000040)) 2.054670971s ago: executing program 5 (id=5724): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x7f, 0x4, 0xfffff03c}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) 1.921414198s ago: executing program 6 (id=5725): syz_emit_ethernet(0x0, 0x0, 0x0) 1.92025617s ago: executing program 6 (id=5726): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000180)={0xfffd, 0x101, 0x100, 0x0, 0x4, 0x18, 0x36, "e75867a0aa45de1500", "39e8799918f836f17fc65c8b001f00"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000005c0)={"d7eb96d7c0d9556e128c458f13253c8f", 0x0, 0x0, {0x1, 0xfffffffe}, {0x10001, 0x2}, 0x1, [0x7, 0x2803, 0x34, 0x1, 0x43f, 0x0, 0xb5f2, 0x3, 0x2, 0x5, 0xffffffffffffffff, 0x3, 0x1a0000, 0x4, 0x6, 0xce]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000016c0)={{r0}, r3, 0x6, @unused=[0x80000000, 0x5, 0x1, 0x7], @name="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"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="200000001000100028bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fa0a450023080700dde286a68f49697aab29008665912ab0b23e0e932a7563e0e20ba9a4f4390645fdaa87cd9b9b8bfad2bdbd7fd2750cb7a0c13bdf9fad0821b603fed842960077133cdee5548124e379"], 0xfffffd95}, 0x1, 0x0, 0x0, 0x80}, 0x24000800) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="700000000205fb0c1c0fbd474be179d0099ee8ed76bd0570f1bcff79bdbcf8ed4d5b232167c186e3f358cfff000000000000000000"], 0x35) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'team_slave_0\x00', &(0x7f0000000040)=@ethtool_stats={0x37}}) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x108, 0x1f0, 0x0, 0x108, 0x2d8, 0xe0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)={0x14, 0x2, 0x6, 0x0, 0x7, 0x0, {0x5}, [@IPSET_ATTR_TYPENAME={0x0, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_TYPENAME={0x0, 0x3, 'hash:ip\x00'}]}, 0xfffffffffffffe93}, 0x1, 0x0, 0x0, 0x40845}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000000206010100000000000000000000000a050000000900020073797a310000000003000780050005000200000005000100060000000000040000000000"], 0x44}}, 0x40000010) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r11, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000400)=@ethtool_rxnfc={0x30, 0x12, 0x4, {0x2, @usr_ip4_spec={@multicast1, @private=0xa010102, 0xffff0001, 0xdd, 0x1, 0xa}, {0x0, @random="ac00faea4cbb", 0x1, 0x7, [0xa, 0x7]}, @usr_ip4_spec={@empty, @rand_addr=0x64010100, 0x2, 0x40}, {0x0, @broadcast, 0x5, 0x3d3, [0x4376, 0xa1c9]}, 0x2, 0x64bf}}}) r12 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r12, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="000000000000000000e4ece0ed39266bbcedcbe93899a923f2f4e83266917cb66ec1328ca6468c232137e13606fabae3b04dcc47ee4b96df7b5460b3128ef4940dbe", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000200000000000000000000003fd31340e92c4bb8"], 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)=ANY=[@ANYBLOB="050000000100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000bd2000000000000000000000f01881a1deb9fbff"], 0x48}, 0x300}, 0x20000844) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r10) sendmsg$NLBL_UNLABEL_C_STATICADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010226bd7000feffffff030026002900870073797374656d5f753a6f626a6563745f723a7573627474795f655f743a73300000ab00140006006361696630000000000000000000000014000200fc00000000000000000000000000000114000300ff0200000000000000000000000000010000000000d803a13d3b3eb7aa7dd039c7187d4b76b2f4989b27f6802a6fdd9043d209cee15e27"], 0x7c}, 0x8, 0x3000000000002, 0x0, 0x4000020}, 0x844) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000900)={0xc4, r9, 0x1, 0x21, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fff, 0x20019}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x9c, 0xe, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @chsw_timing={0x68, 0x4, {0x6, 0xdb}}, @gcr_ga={0xbd, 0x6}, @fast_bss_trans={0x37, 0x85, {0x4, 0x2, "1cbb09e16e8885d10ec15ea1e64c1487", "23672263000a01003e0002006fa1ceaeac58ca27eaff0800", "ab694ac2aecbe0bf53d04eca1664c42986c927668f961df0122e001422bbca17", [{0x3, 0x23, "6ccb0f6bce481eb7ebe7021706b0fccb5baf2af434c3d879850a57a4b6706e5ce8b080"}, {0x1, 0xc, "ffbb316b67f86646f444268b"}]}}]}]}, 0xc4}}, 0x4014080) 1.852757173s ago: executing program 5 (id=5727): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r1, 0x0) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cad7000000000000100000028000180060001000a00000014000400fe8000000000000000000000000000bb08000600"], 0x3c}}, 0x0) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x14, r5, 0x7, 0x70bd2b}, 0x14}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 1.743714673s ago: executing program 0 (id=5728): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000100)="aa392c7253bad78aa0d414acf5867947882c2c7585564eb4e3706c84803bd3484dc64f3e87e4b46ac4d594f6140d99e850a63d424dd5e2175314046c6668707e81cc7272579edef5f2a62af25456f4df2b72e4febf0131eb5db7b59a4278d1afd22c63a0e2ea47e58aabfb321a1da98a5ab4802624453bba82ead016b377a9dd3b25258d5d76198a5f2269598b3e97", 0x8f) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000001000c0000000c00000005000000040000000000008505000000002e3e5f00030000000b34d71868a781af307dc8704df54095055033e9d1caca41b2d7549eea52b5b979e1c0eb21b1a8e37c049048e316371162e054cecccb8f25f1b1345c5e5a709d93c2123c6d5dc5a7bd5a62e94d678987cb80422a7f1c3b88a2ed02a6dc464e9f713d2ccc88f03bb11a962a"], 0x0, 0x29, 0x0, 0x1}, 0x28) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000940)={0x0, 0x7cb, 0xc168}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000d40)={r1, 0x8, 0x0, [0x3, 0xddf, 0xe44, 0xfffffffffffffff7, 0x401], [0x8, 0x200, 0xffff, 0x8ef8, 0xb9, 0x4, 0x5, 0x5, 0x5, 0x9, 0x1, 0x4, 0x7, 0x14d, 0x7fff, 0x4, 0x8000000000000001, 0x1e6, 0xcc07, 0xfffffffffffff801, 0x8, 0x8, 0x9, 0x3, 0x8, 0x2, 0x8, 0x1, 0x1, 0x2, 0x8001, 0x0, 0x8000, 0x3, 0x1, 0x2, 0x0, 0x10000, 0x6, 0x5, 0xf, 0x19, 0xe, 0x7, 0x660a, 0x4, 0x0, 0x7, 0x9, 0x4000000000000000, 0xe53, 0x14af3b0a, 0x2, 0xb184, 0x6, 0xfffffffffffffff7, 0x4, 0x6, 0x7fffffff, 0x67b2, 0x7fffffffffffffff, 0x401, 0x200, 0x4000, 0x1ff, 0x7, 0x6, 0x7fffffff, 0x15d, 0x8, 0x40, 0x7, 0x6, 0x6, 0x2, 0x2000000000, 0x100, 0x10, 0x0, 0x6, 0x3, 0x64f, 0xd, 0x7, 0x3ff, 0x700000000000, 0x1, 0x4e, 0xd, 0x200, 0x3ff, 0x8000000000000000, 0x6, 0x9, 0x5, 0x7, 0xb, 0x0, 0x3f, 0x9, 0x0, 0x9, 0x1000, 0x10000, 0x9, 0x2, 0x800, 0x3, 0x6, 0x6, 0x4, 0xfffffffffffffffa, 0x9, 0x6, 0x7, 0x9, 0x8000000000000000, 0xfffffffffffffff7, 0xfffffffffffffffc, 0x8, 0x9]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) socket$vsock_stream(0x28, 0x1, 0x28) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.kill\x00', 0x0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f0000000340)=0x54, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) r10 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r10, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r11 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r11, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) close(0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) write$nci(r4, &(0x7f00000008c0)=ANY=[@ANYBLOB="610504fc2d85c288090000766087a68308c593e10618080048c3e79e8b15d98bd05a12718249bf4605d29f23c3ef7f83f16e25cc2b88fcd79744216d9aa11536b4e595561e4d62121b56a940e9c1d0a71289026d0e4186439e385a1152e9"], 0x61) 1.673857742s ago: executing program 7 (id=5729): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x30}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd1, 0x0, 0x0) unshare(0x22020600) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x50}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x73, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1c, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r6}, 0x38) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x14, r7, 0x313, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) socket$kcm(0x21, 0x2, 0x2) (async) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x30}, 0x0) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) bind$rxrpc(r1, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd1, 0x0, 0x0) (async) unshare(0x22020600) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x50}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x73, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1c, 0x8, 0x40, 0x42, 0x1}, 0x50) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r6}, 0x38) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x14, r7, 0x313, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) (async) 1.589148961s ago: executing program 6 (id=5730): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x94, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x34ea}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x6}}]}, 0x94}, 0x1, 0x0, 0x0, 0x24000040}, 0x8000) socket$kcm(0x29, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getsa={0x34, 0x12, 0x1, 0x70bd2c, 0x25dfdbfd, {@in6=@remote, 0x4d4, 0x2, 0x33}, [@policy_type={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10004000}, 0x23011f5ab8d49506) socketpair(0x2, 0x1, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x82, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000640)={&(0x7f0000000540)=""/211, 0x1020000, 0x1000, 0x5f, 0x1}, 0x20) preadv(r2, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/22, 0x16}, {&(0x7f00000006c0)=""/66, 0x42}, {&(0x7f0000000740)=""/105, 0x69}], 0x3, 0x3, 0xbd2) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000800)=0x174e2124, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r7, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x38, 0x1, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x100000000}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c4}, 0x800) r8 = socket$inet(0x2, 0x80000, 0x8) getsockopt(r8, 0x8, 0xde3, &(0x7f0000000940)=""/234, &(0x7f0000000a40)=0xea) connect$rose(r5, &(0x7f0000000a80)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x5, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}, 0x40) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000b80)={@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'sit0\x00'}}, {&(0x7f0000000ac0)=""/100, 0x64}, &(0x7f0000000b40), 0x5d}, 0xa0) openat$nci(0xffffffffffffff9c, &(0x7f0000000c40), 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r4) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000f80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000d00)={0x20c, r9, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x200, 0xe}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "71ab80dd8715edbd2f4d2897fd8283a8f582f1cd4313ea2e"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "12593ed1ea71233c0181f82a47415c331905b6e8a4179981"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "251f48f18ce1be8a5885f7582cdddc1d6942483217f9a711"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9c166a55062a1f5f19214a18752038aaaa78696ed3fd08f2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2bbff570c57ac07abbbc15b7b0a05109e5c437c9e8972975"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "530456af45a2d551f251362b5de21a176b2985b730f4a41b"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0e93a483c5ed7471674c61ec52dc1c400da31279df852b70"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d814a76693b5d54e7a698669ae6b1f47695cafe801b51360"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000841) r10 = accept$inet(r8, &(0x7f0000000fc0)={0x2, 0x0, @multicast2}, &(0x7f0000001000)=0x10) bind$inet(r10, &(0x7f0000001040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001180)={{r11}, &(0x7f0000001100), &(0x7f0000001140)}, 0x20) splice(r2, &(0x7f00000011c0), r0, &(0x7f0000001200)=0x3, 0x8, 0x3) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001240)={'ip6gre0\x00', 0x0, 0x29, 0xb5, 0x4, 0x80000000, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x1, 0x20, 0x9, 0x6}}) socket$kcm(0x29, 0x5, 0x0) 943.326658ms ago: executing program 5 (id=5731): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x50, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {0xc}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x2, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)={'c', ' *:* ', 'rwm\x00'}, 0xa) sendmsg$inet(r4, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000100100000d00000001000000000000001800000000000000100100000d"], 0x30}, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000003c0)=0x491b, 0x4) sendmmsg$inet6(r5, &(0x7f0000004180)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004800) 808.790798ms ago: executing program 5 (id=5732): ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xe, 0x7}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) (async) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000020101010000000000000000020000050c0019800800020005000000180002801400018008000100640101e3070002"], 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="00000001000000000500210008b30000140003007465616d30000000000000000000000014002b80080003"], 0x50}, 0x1, 0x0, 0x0, 0x400c8a1}, 0x0) 0s ago: executing program 5 (id=5733): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="e9ba4b44a89546ef6f59125e8c47cf96cd3b1fd2b8b1b20d50a75b12cd9c50d661215cb51fcb966ed1ea561454741a2979ee04668cd607e663f8807f", 0x3c}, {&(0x7f0000000180)="18deaf49bbfec1ee78adf993f4c1dac7d1c9e8283c0610f722b16abbeeec1547af34957bb3539aff4cc47cb793ddf715903018bcf14453f1d290fe153710b17f207ff12b78f9a45daea7260964ef3e50283327628cdb09633262cec2f5acc56862a26328db675b66c2678dbd4fdef4c46414f02d85f98a053d01e3105f658c199fdd3a9bafa91fdaf0dace713b4ffc11", 0x90}, {&(0x7f00000000c0)="46a733128e61a6ce20ad8209b290fc0feb1097be4dd3f78143f4e8d64f950ba7e2d43e2d2a4b20abe99d1c31f4e65d59e2eb441dce57cb504021d59e4fbbc4d3108c3e90de747968a4a72901eb1b188937a547310a0f9f20547e77e0ca39ca5282aa2ee7295f19dc46344c5f66f848df", 0x70}], 0x3) (async) r2 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r2, 0x29, 0x1e, &(0x7f0000000040)=0x5, 0x4) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000430001002dbd7000ffdbdf2502f7ffff040001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x14004040) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket(0x10, 0x803, 0x0) (async) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x10000, 0x5, 0xfffffff8, 0x9, 0x51, 0xf5, 0x1, 0x9b}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x2c, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x7ffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}]}}]}]}]}}]}, 0x70}}, 0x20040054) (async) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="250c2cbd7000fcdbdf250b0000000c0005"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_MTU={0x8, 0x4, 0xff2}]}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): nk: 28 bytes leftover after parsing attributes in process `syz.1.4725'. [ 644.878107][T24780] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4725'. [ 645.051819][T24796] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 645.227966][ T8219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.313586][T24814] nbd: socks must be embedded in a SOCK_ITEM attr [ 645.321047][ T8908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.329878][ T2905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.338365][T24814] block nbd2: shutting down sockets [ 645.370251][T24818] netlink: 'syz.0.4735': attribute type 10 has an invalid length. [ 645.391225][ T10] IPVS: starting estimator thread 0... [ 645.414342][T24821] IPVS: set_ctl: invalid protocol: 47 172.30.0.2:20002 [ 645.492944][T24824] IPVS: using max 30 ests per chain, 72000 per kthread [ 645.958691][T24863] __nla_validate_parse: 2 callbacks suppressed [ 645.958711][T24863] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4746'. [ 645.987706][T24856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.051297][T24863] lo speed is unknown, defaulting to 1000 [ 646.124356][T24872] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.4748'. [ 646.186142][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.194816][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.266810][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.281598][T24888] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 646.500305][T24863] wg1 speed is unknown, defaulting to 1000 [ 646.528293][T24888] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4752'. [ 646.851381][T24922] sctp: [Deprecated]: syz.0.4758 (pid 24922) Use of int in max_burst socket option. [ 646.851381][T24922] Use struct sctp_assoc_value instead [ 646.873695][T24924] x_tables: duplicate underflow at hook 2 [ 647.124310][T24936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4762'. [ 647.266946][T24936] 8021q: adding VLAN 0 to HW filter on device bond6 [ 647.445199][T24952] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4765'. [ 647.493916][T24954] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4764'. [ 647.988946][T24984] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4773'. [ 648.070514][T24989] lo speed is unknown, defaulting to 1000 [ 648.331510][T24994] lo speed is unknown, defaulting to 1000 [ 648.453815][T24989] wg1 speed is unknown, defaulting to 1000 [ 648.669283][T25019] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4782'. [ 648.797158][T24994] wg1 speed is unknown, defaulting to 1000 [ 649.021784][T25046] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4789'. [ 649.035470][T25040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4788'. [ 649.394729][ T8219] net_ratelimit: 9 callbacks suppressed [ 649.394746][ T8219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.812673][T25080] erspan1: entered promiscuous mode [ 649.818319][T25080] erspan1: entered allmulticast mode [ 649.834820][T25082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.428654][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.463257][T25119] Cannot find map_set index 135 as target [ 650.562115][T25126] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 650.591335][T25126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.066516][ T3506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.076463][T25157] __nla_validate_parse: 2 callbacks suppressed [ 651.076479][T25157] netlink: 212916 bytes leftover after parsing attributes in process `syz.0.4818'. [ 651.077275][ T8908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.084181][T25153] tipc: Enabled bearer , priority 0 [ 651.113871][T25153] syzkaller0: entered promiscuous mode [ 651.120579][T25153] syzkaller0: entered allmulticast mode [ 651.134877][T25159] IPVS: sync thread started: state = MASTER, mcast_ifn = pim6reg, syncid = 2, id = 0 [ 651.176013][T25153] tipc: Resetting bearer [ 651.195257][T25152] tipc: Resetting bearer [ 651.221532][T25152] tipc: Disabling bearer [ 651.401062][T25168] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 651.470072][ T8219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.542644][T25183] lo speed is unknown, defaulting to 1000 [ 651.831248][T25196] mac80211_hwsim hwsim38 wlan1: entered promiscuous mode [ 651.853889][T25196] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode [ 651.864144][T25183] wg1 speed is unknown, defaulting to 1000 [ 652.260692][T25208] ip6gretap2: entered promiscuous mode [ 652.305800][T25208] ip6gretap2: entered allmulticast mode [ 652.345988][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.354346][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.606683][T25232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4838'. [ 652.736343][T25241] lo speed is unknown, defaulting to 1000 [ 652.865568][T25257] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4841'. [ 652.919864][T25257] geneve3: entered promiscuous mode [ 652.988441][T25266] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4843'. [ 653.002026][T19077] lec:lec_start_xmit: lec0:No lecd attached [ 653.130143][T25273] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4845'. [ 653.147285][T25272] netlink: 'syz.3.4846': attribute type 101 has an invalid length. [ 653.156715][T25272] netlink: 'syz.3.4846': attribute type 7 has an invalid length. [ 653.193719][T25279] netlink: 'syz.4.4845': attribute type 322 has an invalid length. [ 653.430634][T25241] wg1 speed is unknown, defaulting to 1000 [ 653.544612][T25296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4851'. [ 653.555813][T25296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4851'. [ 653.775515][T25310] ip6tnl0: Caught tx_queue_len zero misconfig [ 653.866522][T25314] lo speed is unknown, defaulting to 1000 [ 654.203337][T25327] netlink: 'syz.2.4859': attribute type 1 has an invalid length. [ 654.220710][T25327] netlink: 'syz.2.4859': attribute type 3 has an invalid length. [ 654.253373][T25327] netlink: 'syz.2.4859': attribute type 1 has an invalid length. [ 654.288804][T25327] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4859'. [ 654.316659][T25314] wg1 speed is unknown, defaulting to 1000 [ 654.356921][T25329] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4859'. [ 654.408965][T25333] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 654.595893][ T8218] net_ratelimit: 6 callbacks suppressed [ 654.595913][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.739410][T25352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 654.774291][T25348] can: request_module (can-proto-5) failed. [ 654.834842][T25356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4867'. [ 654.880872][T25314] lo speed is unknown, defaulting to 1000 [ 655.187991][T25314] wg1 speed is unknown, defaulting to 1000 [ 655.385808][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.448615][T25374] netlink: 'syz.4.4871': attribute type 2 has an invalid length. [ 655.470896][T25374] 9: entered promiscuous mode [ 655.556391][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.627913][ T8219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.118481][ T3506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.187693][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.425812][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.667864][ T8219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.749079][T25434] openvswitch: netlink: IP tunnel dst address not specified [ 656.904806][T25434] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 657.054822][T25451] syzkaller0: entered promiscuous mode [ 657.060827][T25451] syzkaller0: entered allmulticast mode [ 658.345729][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5340 ms [ 658.353809][ C0] lec:lec_tx_timeout: lec0 [ 659.444781][T25423] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 659.590781][T25474] __nla_validate_parse: 3 callbacks suppressed [ 659.590801][T25474] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4895'. [ 659.618874][T25477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4896'. [ 659.701274][T25486] No such timeout policy "syz1" [ 659.734203][T25491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4896'. [ 659.786812][ T8219] net_ratelimit: 6 callbacks suppressed [ 659.786829][ T8219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.819753][T25489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4901'. [ 659.877882][T25498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4902'. [ 659.897879][T25489] bridge7: port 1(ip6gretap1) entered blocking state [ 659.905549][T25489] bridge7: port 1(ip6gretap1) entered disabled state [ 659.930050][T25489] ip6gretap1: entered allmulticast mode [ 659.947666][T25489] ip6gretap1: entered promiscuous mode [ 660.038083][T25489] bridge7: port 2(veth3) entered blocking state [ 660.053220][T25489] bridge7: port 2(veth3) entered disabled state [ 660.063439][T25489] veth3: entered allmulticast mode [ 660.082725][T25489] veth3: entered promiscuous mode [ 660.106179][T25489] bridge7: port 2(veth3) entered blocking state [ 660.112968][T25489] bridge7: port 2(veth3) entered forwarding state [ 660.439590][T25532] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 660.547440][T25535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4913'. [ 660.563153][T25535] bridge_slave_0: left allmulticast mode [ 660.569058][T25535] bridge_slave_0: left promiscuous mode [ 660.574833][T25535] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.584771][T25535] bridge_slave_1: left allmulticast mode [ 660.585800][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.590589][T25535] bridge_slave_1: left promiscuous mode [ 660.604724][T25535] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.618107][T25535] bond0: (slave bond_slave_0): Releasing backup interface [ 660.629385][T25535] bond0: (slave bond_slave_1): Releasing backup interface [ 660.643730][T25535] team0: Port device team_slave_0 removed [ 660.654994][T25535] team0: Port device team_slave_1 removed [ 660.671096][T25535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 660.679835][T25535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 660.690409][T25535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 660.699402][T25535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 660.708537][T25535] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 660.731682][ T6805] bridge7: port 2(veth3) entered disabled state [ 660.826354][ T8219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.851056][T25539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 660.913985][T25539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 660.928202][T25538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.038434][T25545] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4917'. [ 661.048676][T25545] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4917'. [ 661.308856][ T8908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.396093][T25560] syzkaller0: entered promiscuous mode [ 661.401755][T25560] syzkaller0: entered allmulticast mode [ 661.411249][T25560] 0: reclassify loop, rule prio 0, protocol 700 [ 661.420208][T25560] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4922'. [ 661.539524][T25567] xt_hashlimit: max too large, truncated to 1048576 [ 661.551201][T25567] xt_CT: You must specify a L4 protocol and not use inversions on it [ 661.558547][T25571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4925'. [ 661.592464][T25567] lo speed is unknown, defaulting to 1000 [ 661.755996][T25576] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 661.762301][T25576] syzkaller1: linktype set to 778 [ 661.807308][T25569] lo speed is unknown, defaulting to 1000 [ 661.835158][T25567] wg1 speed is unknown, defaulting to 1000 [ 661.866591][ T8219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.122374][T25590] syzkaller0: entered promiscuous mode [ 662.129261][T25590] syzkaller0: entered allmulticast mode [ 662.142915][T25569] wg1 speed is unknown, defaulting to 1000 [ 662.586289][ T8908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.908098][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.579832][T25607] delete_channel: no stack [ 664.684586][T25617] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 664.774460][T25614] lo speed is unknown, defaulting to 1000 [ 664.782401][T25615] lo speed is unknown, defaulting to 1000 [ 664.843312][T25625] netlink: 'syz.4.4940': attribute type 1 has an invalid length. [ 664.888861][T25627] __nla_validate_parse: 1 callbacks suppressed [ 664.888881][T25627] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4941'. [ 664.904732][T25627] netlink: 19 bytes leftover after parsing attributes in process `syz.0.4941'. [ 664.914579][T25627] netlink: 19 bytes leftover after parsing attributes in process `syz.0.4941'. [ 665.000918][ T5881] net_ratelimit: 7 callbacks suppressed [ 665.000938][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.067074][T25614] wg1 speed is unknown, defaulting to 1000 [ 665.377868][T25615] wg1 speed is unknown, defaulting to 1000 [ 666.026337][ T8219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.291640][T25667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 666.346659][ T8908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.377302][T25672] netlink: 'syz.2.4952': attribute type 13 has an invalid length. [ 666.387850][T25672] gretap0: refused to change device tx_queue_len [ 666.394642][T25672] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 666.413110][T25672] IPVS: set_ctl: invalid protocol: 0 172.20.20.56:20003 [ 666.541710][T25679] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 666.551736][T25679] IPVS: ip_vs_add_dest(): server weight less than zero [ 666.595057][T25681] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4955'. [ 666.605486][T25681] netlink: 51 bytes leftover after parsing attributes in process `syz.2.4955'. [ 666.614950][T25681] netlink: 'syz.2.4955': attribute type 4 has an invalid length. [ 666.659930][T25681] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4955'. [ 666.801164][T24901] udevd[24901]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 667.068014][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.104821][T25693] netlink: 'syz.0.4957': attribute type 15 has an invalid length. [ 667.630767][ T2905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.107096][ T8219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.352046][ T6818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.658447][ T5141] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 668.689806][ T5141] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 668.700030][ T5141] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 668.718888][ T5141] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 668.734450][ T5141] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 668.760341][T25692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4957'. [ 668.791714][T25703] lo speed is unknown, defaulting to 1000 [ 668.936267][T25709] lo speed is unknown, defaulting to 1000 [ 668.944614][T25707] netlink: 'syz.3.4961': attribute type 39 has an invalid length. [ 668.964470][T25707] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4961'. [ 668.984701][T25707] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4961'. [ 669.007078][T25707] netlink: 'syz.3.4961': attribute type 5 has an invalid length. [ 669.028239][T25703] wg1 speed is unknown, defaulting to 1000 [ 669.037689][T25707] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4961'. [ 669.088719][T25707] vlan0: entered allmulticast mode [ 669.093893][T25707] bridge_slave_0: entered allmulticast mode [ 669.148585][ T8219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.415430][T25703] chnl_net:caif_netlink_parms(): no params data found [ 669.576757][T25709] wg1 speed is unknown, defaulting to 1000 [ 669.682247][T25703] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.689577][T25703] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.697324][T25703] bridge_slave_0: entered allmulticast mode [ 669.705363][T25703] bridge_slave_0: entered promiscuous mode [ 669.725730][T25703] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.733241][T25703] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.741208][T25703] bridge_slave_1: entered allmulticast mode [ 669.749119][T25703] bridge_slave_1: entered promiscuous mode [ 669.817070][T25703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.829886][T25703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.912131][T25703] team0: Port device team_slave_0 added [ 669.922326][T25703] team0: Port device team_slave_1 added [ 670.025107][T25703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.034694][T25703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.062635][T25703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.078527][T25703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.086250][T25703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.114556][T25703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.187249][ T8219] net_ratelimit: 2 callbacks suppressed [ 670.187297][ T8219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.199814][T25703] hsr_slave_0: entered promiscuous mode [ 670.210140][T25703] hsr_slave_1: entered promiscuous mode [ 670.218174][T25703] debugfs: 'hsr0' already exists in 'hsr' [ 670.224467][T25703] Cannot create hsr debugfs directory [ 670.421721][T25703] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 670.449215][T25703] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 670.471106][T25703] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 670.552000][T25703] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 670.661562][T25703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.684776][T25703] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.718855][ T2905] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.726457][ T2905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.740047][ T2905] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.747353][ T2905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.768049][T25760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4971'. [ 670.837309][ T5141] Bluetooth: hci1: command tx timeout [ 670.972938][T25768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4973'. [ 670.982667][T25768] lo: Caught tx_queue_len zero misconfig [ 671.022023][T25703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.229006][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.254128][T25703] veth0_vlan: entered promiscuous mode [ 671.266972][T25703] veth1_vlan: entered promiscuous mode [ 671.295015][T25703] veth0_macvtap: entered promiscuous mode [ 671.304525][T25703] veth1_macvtap: entered promiscuous mode [ 671.324589][T25703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.339075][T25703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.354251][ T8908] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.364731][ T8908] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.377764][ T8908] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.387814][ T8908] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.546494][ T6795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.270480][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.825861][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.906010][ T5141] Bluetooth: hci1: command tx timeout [ 673.307379][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.466568][ T6795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.477480][ T6795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.097691][T25777] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 674.165993][ T6805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.193031][ T6805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.241553][T25801] xt_CONNSECMARK: invalid mode: 253 [ 674.247876][T25800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4980'. [ 674.258124][ T6805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.268124][ T6805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.356250][ T8219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.464567][T25813] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 674.477820][T25813] bond0 (unregistering): Released all slaves [ 674.518264][T25811] netlink: 'syz.3.4983': attribute type 58 has an invalid length. [ 674.529016][T25811] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4983'. [ 674.587364][ T8224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.996432][ T5141] Bluetooth: hci1: command tx timeout [ 675.033096][T25827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4987'. [ 675.089785][T25824] lo speed is unknown, defaulting to 1000 [ 675.326474][T25824] wg1 speed is unknown, defaulting to 1000 [ 675.387014][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.855226][T25848] syzkaller0: entered promiscuous mode [ 675.862459][T25848] syzkaller0: entered allmulticast mode [ 675.935432][T25853] netlink: 'syz.3.4993': attribute type 4 has an invalid length. [ 675.977795][T25853] netlink: 'syz.3.4993': attribute type 4 has an invalid length. [ 676.025895][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 676.066199][T25853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 676.100783][T25853] netlink: 165 bytes leftover after parsing attributes in process `syz.3.4993'. [ 676.232801][ T8908] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.247279][ T8908] bridge_slave_0: left allmulticast mode [ 676.253260][ T8908] bridge_slave_0: left promiscuous mode [ 676.259473][ T8908] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.430898][ T8219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.458295][ T8908] dvmrp6 (unregistering): left allmulticast mode [ 676.587970][ T6818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.708813][ T8908] bond4 (unregistering): (slave bridge5): Releasing active interface [ 676.829698][ T8908] bond11 (unregistering): (slave bridge8): Releasing active interface [ 676.892076][ T8908] bond0 (unregistering): Released all slaves [ 676.904757][ T8908] bond1 (unregistering): Released all slaves [ 676.917766][ T8908] bond2 (unregistering): Released all slaves [ 676.932027][ T8908] bond3 (unregistering): Released all slaves [ 676.952538][ T8908] bond4 (unregistering): Released all slaves [ 676.966926][ T8908] bond5 (unregistering): Released all slaves [ 676.979750][ T8908] bond6 (unregistering): (slave bond7): Releasing backup interface [ 676.988799][ T8908] bond7 (unregistering): left promiscuous mode [ 676.994972][ T8908] bond7 (unregistering): left allmulticast mode [ 677.003636][ T8908] bond6 (unregistering): Released all slaves [ 677.018360][ T8908] bond7 (unregistering): Released all slaves [ 677.030978][ T8908] bond8 (unregistering): Released all slaves [ 677.043075][ T8908] bond9 (unregistering): Released all slaves [ 677.056910][ T8908] bond10 (unregistering): Released all slaves [ 677.066025][ T5141] Bluetooth: hci1: command tx timeout [ 677.084476][ T8908] bond11 (unregistering): Released all slaves [ 677.100193][T25865] syzkaller0: entered promiscuous mode [ 677.106496][T25865] syzkaller0: entered allmulticast mode [ 677.468740][ T8219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.510665][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.888988][ T8908] !: left promiscuous mode [ 678.981023][ T8908] tipc: Left network mode [ 679.179481][T25890] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 679.196867][T25888] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5003'. [ 679.205918][T25892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5004'. [ 679.217950][T25888] netlink: 'syz.5.5003': attribute type 13 has an invalid length. [ 679.225465][T25892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5004'. [ 679.235386][ T6818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.243993][ T6805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.251631][T25892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5004'. [ 679.264446][T25892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5004'. [ 679.336423][T25888] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.343947][T25888] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.403787][T25888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.417884][T25888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.557026][ T8219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.572928][ T3506] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.597884][ T3506] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.621067][ T3506] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.657169][ T3506] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.707921][T25903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5006'. [ 679.808872][T25903] siw: device registration error -23 [ 679.818648][T25903] netlink: 'syz.3.5006': attribute type 2 has an invalid length. [ 679.829029][T25903] netlink: 119 bytes leftover after parsing attributes in process `syz.3.5006'. [ 679.990860][ T8908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 680.007667][ T8908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 680.047007][ T8908] batman_adv: batadv0: Removing interface: ipvlan0 [ 680.136291][T25924] xt_nfacct: accounting object `syz0' does not exist [ 680.357643][ T8908] team_slave_1 (unregistering): left allmulticast mode [ 680.388385][ T8908] team0 (unregistering): Port device team_slave_1 removed [ 680.418181][ T8908] team_slave_0 (unregistering): left allmulticast mode [ 680.427779][ T8908] team0 (unregistering): Port device team_slave_0 removed [ 680.586168][ T8219] net_ratelimit: 1 callbacks suppressed [ 680.586188][ T8219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.104661][T25944] wg1 speed is unknown, defaulting to 1000 [ 681.167886][ T8908] IPVS: stop unused estimator thread 0... [ 681.387194][T25972] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5024'. [ 681.418595][T25970] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5024'. [ 681.540094][T25979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5026'. [ 681.542977][ T5830] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 681.576053][ T5830] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 681.608393][ T5830] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 681.626183][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.635020][ T5830] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 681.643207][ T5830] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 681.723081][T25985] 8021q: VLANs not supported on ip6_vti0 [ 681.787152][ T8908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.900169][T25996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5030'. [ 682.014943][T26000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5031'. [ 682.031992][T26005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5030'. [ 682.036991][T25996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5030'. [ 682.158300][T26004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.184634][T26004] 8021q: adding VLAN 0 to HW filter on device team0 [ 682.303987][T26004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 682.458539][T25976] wg1 speed is unknown, defaulting to 1000 [ 682.666305][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.731254][T25976] chnl_net:caif_netlink_parms(): no params data found [ 682.784742][T26017] netlink: 'syz.5.5034': attribute type 32 has an invalid length. [ 682.793062][T26017] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5034'. [ 682.805156][T26017] netlink: 'syz.5.5034': attribute type 1 has an invalid length. [ 682.832878][T26017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5034'. [ 682.844045][T26017] netlink: 'syz.5.5034': attribute type 12 has an invalid length. [ 682.852710][T26017] netlink: 'syz.5.5034': attribute type 5 has an invalid length. [ 682.861210][T26017] netlink: 'syz.5.5034': attribute type 2 has an invalid length. [ 682.869560][T26017] netlink: 'syz.5.5034': attribute type 7 has an invalid length. [ 682.889955][T26017] netlink: 108 bytes leftover after parsing attributes in process `syz.5.5034'. [ 682.983673][T25976] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.007873][T25976] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.015164][T25976] bridge_slave_0: entered allmulticast mode [ 683.034419][T25976] bridge_slave_0: entered promiscuous mode [ 683.048434][T25976] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.065404][T25976] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.074099][T25976] bridge_slave_1: entered allmulticast mode [ 683.082706][T25976] bridge_slave_1: entered promiscuous mode [ 683.134398][T25976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.160332][T25976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.229938][T25976] team0: Port device team_slave_0 added [ 683.240020][T25976] team0: Port device team_slave_1 added [ 683.312581][T25976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.335780][T25976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.394573][T26045] netlink: 'syz.0.5040': attribute type 27 has an invalid length. [ 683.404557][T25976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.464891][T25976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.483611][T25976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.522714][T25976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.594382][T26030] wg1 speed is unknown, defaulting to 1000 [ 683.693301][T26055] netlink: 'syz.0.5042': attribute type 51 has an invalid length. [ 683.706099][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.738930][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.787957][ T5141] Bluetooth: hci6: command tx timeout [ 683.806916][T25976] hsr_slave_0: entered promiscuous mode [ 683.815130][T25976] hsr_slave_1: entered promiscuous mode [ 683.821673][T25976] debugfs: 'hsr0' already exists in 'hsr' [ 683.837165][T25976] Cannot create hsr debugfs directory [ 683.843268][T26046] wg1 speed is unknown, defaulting to 1000 [ 684.042830][T26067] ipt_REJECT: TCP_RESET invalid for non-tcp [ 684.179450][T26063] syzkaller0: entered promiscuous mode [ 684.184970][T26063] syzkaller0: entered allmulticast mode [ 684.453207][ T5830] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 684.466636][ T5830] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 684.493425][ T5830] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 684.512130][ T5830] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 684.521201][ T5830] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 684.750069][ T8219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.837711][ T9727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.986989][ T6795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.788365][ T8219] net_ratelimit: 1 callbacks suppressed [ 685.788386][ T8219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.867239][ T5141] Bluetooth: hci6: command tx timeout [ 686.198687][T26083] netlink: 'syz.5.5050': attribute type 2 has an invalid length. [ 686.275356][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 686.585938][ T5141] Bluetooth: hci7: command tx timeout [ 686.604043][T26087] syzkaller0: entered promiscuous mode [ 686.610581][T26087] syzkaller0: entered allmulticast mode [ 686.825944][ T8219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.546781][ T6807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.866280][ T8219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.947122][ T5141] Bluetooth: hci6: command tx timeout [ 688.255761][T26097] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 688.274509][T26077] wg1 speed is unknown, defaulting to 1000 [ 688.336174][T26102] netlink: 'syz.5.5055': attribute type 4 has an invalid length. [ 688.359081][T26102] netlink: 'syz.5.5055': attribute type 1 has an invalid length. [ 688.369782][T26102] __nla_validate_parse: 2 callbacks suppressed [ 688.369797][T26102] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5055'. [ 688.438564][T25976] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 688.495761][T25976] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 688.570127][T25976] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 688.602351][T25976] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 688.665757][ T5141] Bluetooth: hci7: command tx timeout [ 688.777541][T26102] wg1 speed is unknown, defaulting to 1000 [ 688.825782][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.834082][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.868960][T26077] chnl_net:caif_netlink_parms(): no params data found [ 688.906159][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.044066][T26133] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5060'. [ 689.195471][T26077] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.215431][T26077] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.233451][T26140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5062'. [ 689.245168][T26112] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 689.251998][T26077] bridge_slave_0: entered allmulticast mode [ 689.258566][T26112] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 689.269998][T26077] bridge_slave_0: entered promiscuous mode [ 689.282238][T26077] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.290160][T26077] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.297884][T26077] bridge_slave_1: entered allmulticast mode [ 689.327658][T26077] bridge_slave_1: entered promiscuous mode [ 689.387122][T26141] netlink: 'syz.3.5062': attribute type 13 has an invalid length. [ 689.406179][T26141] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5062'. [ 689.426700][T26112] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 689.435507][T26112] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 689.465764][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.558395][T26112] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 689.560434][T25976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.564860][T26112] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 689.605407][T26077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.625142][T26112] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 689.638237][T26112] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 689.655330][T26077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.713895][T25976] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.760583][ T6818] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.767841][ T6818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.881720][ T6805] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.888976][ T6805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.949045][ T8219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.990928][T26112] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 689.999758][T26077] team0: Port device team_slave_0 added [ 690.020586][T26112] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 690.039846][ T5141] Bluetooth: hci6: command tx timeout [ 690.104941][T26077] team0: Port device team_slave_1 added [ 690.111008][ T6818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.205497][T26112] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 690.225990][T26112] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 690.257789][T26077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.285935][T26077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 690.360082][T26077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.412354][T25976] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 690.443865][T25976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 690.480628][T26112] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 690.483365][T26077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.492379][T26112] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 690.493802][T26077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 690.556925][T26077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.777605][T26077] hsr_slave_0: entered promiscuous mode [ 690.792415][T26077] hsr_slave_1: entered promiscuous mode [ 690.817420][T26077] debugfs: 'hsr0' already exists in 'hsr' [ 690.826245][T26077] Cannot create hsr debugfs directory [ 690.833153][T26188] vlan0: entered promiscuous mode [ 690.864733][T26192] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.5070'. [ 690.876608][T26192] net_ratelimit: 2 callbacks suppressed [ 690.876628][T26192] netlink: Unknown conntrack attr (type=2304, max=9) [ 690.991164][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.291112][T25976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.340745][T26166] wg1 speed is unknown, defaulting to 1000 [ 691.396256][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5120 ms [ 691.404349][ C0] lec:lec_tx_timeout: lec0 [ 691.506306][T26217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5074'. [ 691.528999][T26221] netlink: 'syz.5.5075': attribute type 1 has an invalid length. [ 691.563076][T26217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.567967][T26221] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5075'. [ 691.644568][T26217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5074'. [ 691.717018][T26224] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 691.743967][T26224] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 691.855381][T26238] xt_connbytes: Forcing CT accounting to be enabled [ 691.869065][T26238] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 691.893272][T26217] bond0 (unregistering): (slave batadv1): Releasing backup interface [ 691.948134][T26217] bond0 (unregistering): Released all slaves [ 692.026438][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.164446][T26077] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 692.230114][T26077] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 692.275395][T26077] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 692.325473][T26077] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 692.343009][T26250] netlink: 10 bytes leftover after parsing attributes in process `syz.5.5079'. [ 692.443389][T26263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5081'. [ 692.574737][T25976] veth0_vlan: entered promiscuous mode [ 692.622382][T25976] veth1_vlan: entered promiscuous mode [ 692.668679][ T8908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.723956][T26077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.751930][T26255] wg1 speed is unknown, defaulting to 1000 [ 692.755919][T25976] veth0_macvtap: entered promiscuous mode [ 692.825223][T25976] veth1_macvtap: entered promiscuous mode [ 692.913173][T26077] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.930919][T25976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.969947][ T6818] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.977397][ T6818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.005206][ T6795] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.012407][ T6795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.067804][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.067835][T25976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.295173][ T3506] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.312027][ T3506] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.342933][ T3506] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.399664][ T3506] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.449692][T26077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 693.972758][T26321] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 694.030929][ T8912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.055399][ T8912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.108633][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.167801][T26077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.177279][ T6805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.187078][ T6805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.478317][T26355] openvswitch: netlink: nsh attr 1647 is out of range max 3 [ 694.724607][T26368] __nla_validate_parse: 1 callbacks suppressed [ 694.724627][T26368] netlink: 5120 bytes leftover after parsing attributes in process `syz.6.5097'. [ 694.789228][T26366] xt_hashlimit: size too large, truncated to 1048576 [ 694.803824][T26077] veth0_vlan: entered promiscuous mode [ 694.820603][T26077] veth1_vlan: entered promiscuous mode [ 694.854274][T26077] veth0_macvtap: entered promiscuous mode [ 694.872951][T26077] veth1_macvtap: entered promiscuous mode [ 694.901082][T26077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.924125][T26077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 695.015189][ T6817] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.049747][ T6817] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.077471][ T6817] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.102888][ T6817] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.147683][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.148787][T26385] syzkaller0: entered promiscuous mode [ 695.182047][T26385] syzkaller0: entered allmulticast mode [ 695.222313][T26386] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5100'. [ 695.233877][T26387] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5100'. [ 695.244438][ T8912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.282411][T26390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5102'. [ 695.333999][T26385] tipc: Started in network mode [ 695.342707][T26385] tipc: Node identity c6dc8d629398, cluster identity 4711 [ 695.355780][ T8225] IPVS: starting estimator thread 0... [ 695.396260][T26385] tipc: Enabled bearer , priority 0 [ 695.444571][T26384] tipc: Resetting bearer [ 695.466354][T26393] IPVS: using max 30 ests per chain, 72000 per kthread [ 695.528794][T26384] tipc: Disabling bearer [ 695.571586][T26378] wg1 speed is unknown, defaulting to 1000 [ 695.709016][ T8225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.737745][ T6817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.773245][ T6817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.782431][T26407] FAULT_INJECTION: forcing a failure. [ 695.782431][T26407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 695.846107][T26407] CPU: 1 UID: 0 PID: 26407 Comm: syz.3.5107 Not tainted syzkaller #0 PREEMPT(full) [ 695.846132][T26407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 695.846146][T26407] Call Trace: [ 695.846154][T26407] [ 695.846162][T26407] dump_stack_lvl+0xe8/0x150 [ 695.846190][T26407] should_fail_ex+0x412/0x560 [ 695.846216][T26407] _copy_from_user+0x2d/0xb0 [ 695.846241][T26407] ___sys_sendmsg+0x1c6/0x360 [ 695.846262][T26407] ? __lock_acquire+0x6b5/0x2cf0 [ 695.846289][T26407] ? __pfx____sys_sendmsg+0x10/0x10 [ 695.846347][T26407] ? __fget_files+0x2a/0x420 [ 695.846365][T26407] ? __fget_files+0x3a0/0x420 [ 695.846392][T26407] __x64_sys_sendmsg+0x1bd/0x2a0 [ 695.846416][T26407] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 695.846448][T26407] ? __pfx_ksys_write+0x10/0x10 [ 695.846482][T26407] do_syscall_64+0xe2/0xf80 [ 695.846510][T26407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.846526][T26407] ? trace_irq_disable+0x37/0x100 [ 695.846543][T26407] ? clear_bhb_loop+0x60/0xb0 [ 695.846563][T26407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.846583][T26407] RIP: 0033:0x7f64ac99aeb9 [ 695.846599][T26407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.846614][T26407] RSP: 002b:00007f64ad79e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 695.846633][T26407] RAX: ffffffffffffffda RBX: 00007f64acc15fa0 RCX: 00007f64ac99aeb9 [ 695.846646][T26407] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 695.846657][T26407] RBP: 00007f64ad79e090 R08: 0000000000000000 R09: 0000000000000000 [ 695.846668][T26407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.846679][T26407] R13: 00007f64acc16038 R14: 00007f64acc15fa0 R15: 00007fff12c89808 [ 695.846709][T26407] [ 696.172012][ T8908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.185471][ T8908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.194167][ T8218] net_ratelimit: 1 callbacks suppressed [ 696.194189][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.396774][T26428] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5112'. [ 696.572093][T26444] netlink: 'syz.0.5114': attribute type 1 has an invalid length. [ 696.584358][T26444] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5114'. [ 696.628645][T26397] wg1 speed is unknown, defaulting to 1000 [ 697.145537][T26459] netlink: 'syz.3.5119': attribute type 29 has an invalid length. [ 697.164518][T26459] netlink: 'syz.3.5119': attribute type 29 has an invalid length. [ 697.220557][T26461] netlink: 500 bytes leftover after parsing attributes in process `syz.3.5119'. [ 697.233075][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.256541][T26461] unsupported nla_type 58 [ 697.272686][T26459] netlink: 'syz.3.5119': attribute type 11 has an invalid length. [ 697.282242][T26459] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 697.289560][T26459] IPv6: NLM_F_CREATE should be set when creating new route [ 697.296924][T26459] IPv6: NLM_F_CREATE should be set when creating new route [ 697.789429][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.976545][T26493] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5128'. [ 698.050904][T26463] wg1 speed is unknown, defaulting to 1000 [ 698.268353][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.447823][ T6818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.734092][T26539] netlink: 'syz.7.5140': attribute type 2 has an invalid length. [ 698.775509][T26536] netlink: 'syz.7.5140': attribute type 2 has an invalid length. [ 699.036377][T26557] netlink: 'syz.6.5144': attribute type 10 has an invalid length. [ 699.173937][T26557] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 699.209438][T26525] wg1 speed is unknown, defaulting to 1000 [ 699.266066][T26564] netlink: 'syz.3.5148': attribute type 1 has an invalid length. [ 699.307326][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.433907][T26566] 8021q: adding VLAN 0 to HW filter on device bond5 [ 699.452248][T26566] bond4: (slave bond5): making interface the new active one [ 699.488505][T26566] bond4: (slave bond5): Enslaving as an active interface with an up link [ 699.498097][T26573] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5151'. [ 699.528231][T26573] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5151'. [ 699.641994][T26575] netlink: 'syz.7.5152': attribute type 11 has an invalid length. [ 699.690737][T26575] mQIe5: entered promiscuous mode [ 699.733007][T26577] netlink: 'syz.0.5153': attribute type 33 has an invalid length. [ 699.735250][T26549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 699.765306][T26577] __nla_validate_parse: 1 callbacks suppressed [ 699.765322][T26577] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5153'. [ 699.784197][T26577] `: renamed from team0 (while UP) [ 699.958233][T26589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5157'. [ 700.175584][T26599] syzkaller1: entered promiscuous mode [ 700.181552][T26599] syzkaller1: entered allmulticast mode [ 700.347150][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.627255][T26645] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5170'. [ 700.647207][T26645] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5170'. [ 700.732270][T26656] sctp: [Deprecated]: syz.0.5173 (pid 26656) Use of int in max_burst socket option. [ 700.732270][T26656] Use struct sctp_assoc_value instead [ 700.988963][T26639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.062481][T26675] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5174'. [ 701.114382][T26670] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.122723][T26670] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.386098][ T8219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.414533][T26670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 701.435501][T26670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.577293][T26675] hsr_slave_0: left promiscuous mode [ 701.587388][T26675] hsr_slave_1: left promiscuous mode [ 701.605622][T26694] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5179'. [ 701.624930][T26716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5182'. [ 701.667831][T26626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.670149][T26694] tipc: Enabling of bearer rejected, failed to enable media [ 701.684491][T26718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5182'. [ 701.736186][T26630] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.758345][T26630] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.778441][T26709] syzkaller0: entered promiscuous mode [ 701.789690][T26709] syzkaller0: entered allmulticast mode [ 701.832170][T26630] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.866542][T26626] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.224652][T26739] netlink: 'syz.3.5188': attribute type 1 has an invalid length. [ 702.294760][T26744] netlink: 'syz.7.5190': attribute type 1 has an invalid length. [ 702.348839][T26739] sctp: [Deprecated]: syz.3.5188 (pid 26739) Use of struct sctp_assoc_value in delayed_ack socket option. [ 702.348839][T26739] Use struct sctp_sack_info instead [ 702.358047][T26742] bond6: (slave bridge4): making interface the new active one [ 702.375174][T26742] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 702.431514][ T8219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.572730][T26727] wg1 speed is unknown, defaulting to 1000 [ 702.576480][T26749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5191'. [ 703.327326][ T5141] block nbd2: Receive control failed (result -32) [ 703.466381][ T8219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.813734][T26784] netlink: 'syz.6.5203': attribute type 9 has an invalid length. [ 703.876146][T26783] netlink: 'syz.0.5202': attribute type 3 has an invalid length. [ 704.125501][T26800] xt_hashlimit: size too large, truncated to 1048576 [ 704.186926][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.287425][T26817] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5210'. [ 704.377217][T26823] syzkaller1: entered promiscuous mode [ 704.383467][T26823] syzkaller1: entered allmulticast mode [ 704.516295][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.778230][T26845] __nla_validate_parse: 3 callbacks suppressed [ 704.778248][T26845] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5219'. [ 704.803191][T26851] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5220'. [ 704.820531][T26851] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5220'. [ 704.878317][T26851] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5220'. [ 704.936114][T26851] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5220'. [ 704.971238][T26851] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5220'. [ 705.009145][T26851] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5220'. [ 705.040401][T26851] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5220'. [ 705.058606][T26869] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5218'. [ 705.075830][T26851] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5220'. [ 705.439673][T26884] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.447545][T26884] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.548469][ T8219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.557291][T26884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 705.571271][T26884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 705.714283][T26627] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.728720][T26627] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.750774][T26626] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.770920][T26626] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.847736][T26905] tipc: Enabling of bearer rejected, media not registered [ 705.968031][T26920] netlink: 'syz.3.5239': attribute type 21 has an invalid length. [ 705.977269][T26919] netlink: 'syz.3.5239': attribute type 21 has an invalid length. [ 705.986152][T26919] netlink: 'syz.3.5239': attribute type 4 has an invalid length. [ 705.993991][T26919] netlink: 'syz.3.5239': attribute type 3 has an invalid length. [ 706.006093][T26920] netlink: 'syz.3.5239': attribute type 4 has an invalid length. [ 706.023582][T26920] netlink: 'syz.3.5239': attribute type 3 has an invalid length. [ 706.428405][T26943] geneve2: entered promiscuous mode [ 706.446897][T26626] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.457596][T26626] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.467061][T26626] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.476548][T26626] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.586160][ T8219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.725742][T26940] wg1 speed is unknown, defaulting to 1000 [ 706.750338][T26626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.785362][T26953] Cannot find add_set index 2 as target [ 707.037023][T26963] atomic_op ffff888034ee6998 conn xmit_atomic 0000000000000000 [ 707.386965][T26627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.626047][ T8219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.048134][T27017] netlink: 'syz.3.5264': attribute type 4 has an invalid length. [ 708.298043][T27034] netlink: 'syz.5.5269': attribute type 1 has an invalid length. [ 708.311258][T27034] netlink: 'syz.5.5269': attribute type 3 has an invalid length. [ 708.668739][ T8219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.973593][T27055] bond4: option miimon: invalid value (18446744073709551607) [ 709.022437][T27055] bond4: option miimon: allowed values 0 - 2147483647 [ 709.043649][T27055] bond4 (unregistering): Released all slaves [ 709.129128][T27073] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.184852][T27045] wg1 speed is unknown, defaulting to 1000 [ 709.244519][T27073] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.323638][T27073] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.341670][T27077] syzkaller0: entered promiscuous mode [ 709.347397][T27077] syzkaller0: entered allmulticast mode [ 709.443561][T27073] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.553538][T26627] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.585227][T26627] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.617461][T26627] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.626835][T26627] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.706595][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.946258][T26630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.746046][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.786176][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.867203][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.507544][T26626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.826870][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.146819][T26630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.866170][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.906604][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.707049][T26639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.946099][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.991303][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.547183][T19077] lec:lec_start_xmit: lec0:No lecd attached [ 718.026326][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.267306][T26630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.275528][T26626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.066386][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.106085][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.746248][T26639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.156198][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.106247][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.185984][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.555758][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 722.563877][ C0] lec:lec_tx_timeout: lec0 [ 723.226527][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.306221][T26631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.026344][T26630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.266015][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.307357][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.948552][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.956771][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.346343][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.386509][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.426198][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.146303][T26631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.466129][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.786133][T26631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.506734][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.076178][T26627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.547985][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.586104][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.626834][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.186191][T26639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.666431][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.907411][T26639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.706449][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.746110][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.826418][T26639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.465960][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.474149][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.787332][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.826205][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.386492][T26626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.866590][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.026429][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.034569][T26626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.906748][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.945944][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.956405][T26639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.986021][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.026591][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.066128][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.146250][T26639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.786283][T26631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.106093][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.146477][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.706303][T26639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.713066][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 748.187035][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.227169][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.269272][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.906274][T26626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.306425][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.546285][T26626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.347220][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.746340][T26627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.385826][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5670 ms [ 753.386161][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.394112][ C0] lec:lec_tx_timeout: lec0 [ 754.106747][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.427200][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.467350][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.506219][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.666256][T26639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.306146][T26627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.546635][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.586432][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.594768][T26627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.626166][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.666641][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.706835][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.426541][T26627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.746541][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.069178][T26626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.786104][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.346517][T26639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.826588][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.869511][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.879725][T27084] __nla_validate_parse: 143 callbacks suppressed [ 765.879744][T27084] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5280'. [ 765.946734][T27096] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5284'. [ 765.971143][T27096] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5284'. [ 766.891969][T27133] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5295'. [ 766.914699][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.939491][T27138] netlink: 88 bytes leftover after parsing attributes in process `syz.5.5294'. [ 767.226452][T27150] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 767.461873][T27175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5301'. [ 767.514327][T27181] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5301'. [ 767.622314][T27177] wg1: entered promiscuous mode [ 767.633675][T27177] wg1: entered allmulticast mode [ 767.653309][ T8218] wg1 speed is unknown, defaulting to 1000 [ 767.659502][ T8218] syz0: Port: 1 Link ACTIVE [ 767.676651][T27173] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5304'. [ 767.823393][T27155] wg1 speed is unknown, defaulting to 1000 [ 767.879647][T27190] lo speed is unknown, defaulting to 1000 [ 767.885871][T27190] lo speed is unknown, defaulting to 1000 [ 767.915860][T27190] lo speed is unknown, defaulting to 1000 [ 767.948908][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.983696][T27190] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 768.183130][T27204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5310'. [ 768.189993][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.200432][T26639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.216380][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.244821][T27190] lo speed is unknown, defaulting to 1000 [ 768.255201][T27204] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5310'. [ 768.275534][T27190] lo speed is unknown, defaulting to 1000 [ 768.299941][T27190] lo speed is unknown, defaulting to 1000 [ 768.332694][T27190] lo speed is unknown, defaulting to 1000 [ 768.361954][T27190] lo speed is unknown, defaulting to 1000 [ 768.381622][T27211] netlink: 'syz.5.5313': attribute type 13 has an invalid length. [ 768.393046][T27190] lo speed is unknown, defaulting to 1000 [ 768.524972][T27190] lo speed is unknown, defaulting to 1000 [ 768.538670][T27190] lo speed is unknown, defaulting to 1000 [ 768.540275][T27217] syzkaller1: entered promiscuous mode [ 768.550850][T27217] syzkaller1: entered allmulticast mode [ 768.560104][T27190] lo speed is unknown, defaulting to 1000 [ 768.826289][T26627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.833269][T27221] vlan2: entered allmulticast mode [ 768.851452][T27221] team0: entered allmulticast mode [ 768.858823][T27221] team_slave_0: entered allmulticast mode [ 768.887191][T27221] team_slave_1: entered allmulticast mode [ 768.988951][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.032120][T27246] syzkaller0: entered promiscuous mode [ 769.049773][T27246] syzkaller0: entered allmulticast mode [ 769.268855][T27255] 8021q: adding VLAN 0 to HW filter on device bond2 [ 769.678486][T27272] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 769.796988][T27289] xt_CT: You must specify a L4 protocol and not use inversions on it [ 770.027412][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.106295][T26631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.118723][T27301] netlink: 'syz.6.5339': attribute type 1 has an invalid length. [ 770.204283][T27313] netlink: 'syz.6.5339': attribute type 1 has an invalid length. [ 770.241442][T27301] 8021q: adding VLAN 0 to HW filter on device bond3 [ 770.409989][ T31] audit: type=1800 audit(1770583823.011:11): pid=27325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5343" name=CB dev="tmpfs" ino=2430 res=0 errno=0 [ 771.076517][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.224558][T27366] x_tables: duplicate underflow at hook 3 [ 771.240015][T27366] IPVS: length: 204 != 24 [ 771.325527][T27372] netlink: 'syz.0.5357': attribute type 1 has an invalid length. [ 771.382213][T27372] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 771.393880][T27372] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 771.449763][T27374] bond0: (slave gretap3): making interface the new active one [ 771.460720][T27374] bond0: (slave gretap3): Enslaving as an active interface with an up link [ 771.493437][T27372] macvlan2: entered promiscuous mode [ 771.501259][T27372] macvlan2: entered allmulticast mode [ 771.509100][T27372] bond0: entered promiscuous mode [ 771.514439][T27372] gretap3: entered promiscuous mode [ 771.522933][T27372] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 771.573590][T27372] bond0: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap3 [ 771.622411][T27372] bond0: left promiscuous mode [ 771.649573][T27372] gretap3: left promiscuous mode [ 771.827298][T27392] netlink: 'syz.5.5363': attribute type 13 has an invalid length. [ 771.845518][T27398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 771.860031][T27399] __nla_validate_parse: 9 callbacks suppressed [ 771.860050][T27399] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5366'. [ 771.954978][T27406] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.5367'. [ 771.965859][T27406] netlink: Conntrack attr has 3 unknown bytes [ 772.021577][T27409] --map-set only usable from mangle table [ 772.108134][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.253082][T27410] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 772.287480][T27410] bond1 (unregistering): Released all slaves [ 772.477064][T27441] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 772.501925][T27443] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5378'. [ 772.514456][T27443] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5378'. [ 772.593964][T27419] wg1 speed is unknown, defaulting to 1000 [ 772.603128][T27419] lo speed is unknown, defaulting to 1000 [ 772.830656][T27459] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5381'. [ 773.146909][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.236243][T27478] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5386'. [ 773.279080][T27484] x_tables: duplicate underflow at hook 1 [ 773.300686][T27484] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5387'. [ 773.691940][T27505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5396'. [ 773.704229][T27506] x_tables: duplicate underflow at hook 2 [ 773.885643][T27518] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5398'. [ 773.907252][T27509] xt_hashlimit: size too large, truncated to 1048576 [ 773.948133][T26626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.956230][T27521] xt_hashlimit: overflow, try lower: 64/16140901064495857664 [ 774.117411][T27534] openvswitch: netlink: IP tunnel dst address not specified [ 774.186150][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.207584][T27531] bridge_slave_1: left allmulticast mode [ 774.236014][T27531] bridge_slave_1: left promiscuous mode [ 774.241844][T27531] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.335186][T27531] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 774.359209][T27532] : renamed from bond_slave_0 [ 774.364336][T27541] ip6t_srh: unknown srh match flags 4000 [ 774.373568][T27541] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5406'. [ 774.588194][T26631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.654841][T27546] sctp: [Deprecated]: syz.6.5408 (pid 27546) Use of int in max_burst socket option deprecated. [ 774.654841][T27546] Use struct sctp_assoc_value instead [ 774.691605][T27550] xt_nfacct: accounting object `syz0' does not exist [ 774.960294][T27563] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 774.977297][T27563] syzkaller1: linktype set to 778 [ 775.098419][T27585] tipc: Started in network mode [ 775.104530][T27585] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 775.113007][T27585] tipc: Enabled bearer , priority 0 [ 775.158352][T27585] batadv_slave_0: entered promiscuous mode [ 775.229451][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.238513][T26631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.251391][T27593] syzkaller0: entered promiscuous mode [ 775.259443][T27593] syzkaller0: entered allmulticast mode [ 775.324638][T27593] 0: reclassify loop, rule prio 0, protocol 700 [ 775.334623][T27584] batadv_slave_0: left promiscuous mode [ 775.674147][T27614] RDS: rds_bind could not find a transport for ::3200:0:0:0, load rds_tcp or rds_rdma? [ 775.797178][T27616] netlink: 'syz.0.5427': attribute type 1 has an invalid length. [ 775.866503][T26626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.899468][T27616] 8021q: adding VLAN 0 to HW filter on device bond3 [ 775.919003][T27599] wg1 speed is unknown, defaulting to 1000 [ 775.959416][T27599] lo speed is unknown, defaulting to 1000 [ 776.065219][T27616] bond3 (unregistering): Released all slaves [ 776.266024][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.386622][T27644] syz.3.5431: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 776.411974][T27644] CPU: 1 UID: 0 PID: 27644 Comm: syz.3.5431 Not tainted syzkaller #0 PREEMPT(full) [ 776.412005][T27644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 776.412018][T27644] Call Trace: [ 776.412027][T27644] [ 776.412037][T27644] dump_stack_lvl+0xe8/0x150 [ 776.412070][T27644] warn_alloc+0x249/0x340 [ 776.412094][T27644] ? stack_trace_save+0xa9/0x100 [ 776.412127][T27644] ? __pfx_warn_alloc+0x10/0x10 [ 776.412157][T27644] ? kasan_save_track+0x4f/0x80 [ 776.412174][T27644] ? kasan_save_track+0x3e/0x80 [ 776.412189][T27644] ? __kasan_kmalloc+0x93/0xb0 [ 776.412207][T27644] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 776.412226][T27644] ? xskq_create+0x56/0x170 [ 776.412250][T27644] ? xsk_setsockopt+0x54c/0x990 [ 776.412270][T27644] ? do_sock_setsockopt+0x17c/0x1b0 [ 776.412294][T27644] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 776.412317][T27644] ? do_syscall_64+0xe2/0xf80 [ 776.412348][T27644] __vmalloc_node_range_noprof+0x132/0x1730 [ 776.412406][T27644] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 776.412441][T27644] ? __kasan_kmalloc+0x93/0xb0 [ 776.412468][T27644] vmalloc_user_noprof+0xad/0xe0 [ 776.412489][T27644] ? xskq_create+0xbf/0x170 [ 776.412514][T27644] xskq_create+0xbf/0x170 [ 776.412538][T27644] xsk_init_queue+0xad/0x110 [ 776.412565][T27644] xsk_setsockopt+0x54c/0x990 [ 776.412592][T27644] ? __pfx_xsk_setsockopt+0x10/0x10 [ 776.412615][T27644] ? __pfx_aa_sk_perm+0x10/0x10 [ 776.412644][T27644] ? aa_sock_opt_perm+0xff/0x1a0 [ 776.412672][T27644] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 776.412693][T27644] ? __pfx_xsk_setsockopt+0x10/0x10 [ 776.412717][T27644] do_sock_setsockopt+0x17c/0x1b0 [ 776.412749][T27644] __x64_sys_setsockopt+0x13d/0x1b0 [ 776.412783][T27644] do_syscall_64+0xe2/0xf80 [ 776.412810][T27644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.412829][T27644] ? trace_irq_disable+0x37/0x100 [ 776.412848][T27644] ? clear_bhb_loop+0x60/0xb0 [ 776.412873][T27644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.412893][T27644] RIP: 0033:0x7f64ac99aeb9 [ 776.412912][T27644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.412929][T27644] RSP: 002b:00007f64aabf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 776.412952][T27644] RAX: ffffffffffffffda RBX: 00007f64acc16180 RCX: 00007f64ac99aeb9 [ 776.412966][T27644] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000e [ 776.412979][T27644] RBP: 00007f64aca08c1f R08: 0000000000000004 R09: 0000000000000000 [ 776.412992][T27644] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 776.413005][T27644] R13: 00007f64acc16218 R14: 00007f64acc16180 R15: 00007fff12c89808 [ 776.413041][T27644] [ 776.413094][T27644] Mem-Info: [ 776.691238][T27604] wg1 speed is unknown, defaulting to 1000 [ 776.691329][T27644] active_anon:14669 inactive_anon:0 isolated_anon:0 [ 776.691329][T27644] active_file:3540 inactive_file:40199 isolated_file:0 [ 776.691329][T27644] unevictable:768 dirty:204 writeback:0 [ 776.691329][T27644] slab_reclaimable:12839 slab_unreclaimable:140402 [ 776.691329][T27644] mapped:49216 shmem:5604 pagetables:1597 [ 776.691329][T27644] sec_pagetables:0 bounce:0 [ 776.691329][T27644] kernel_misc_reclaimable:0 [ 776.691329][T27644] free:1236138 free_pcp:11244 free_cma:0 [ 776.700428][T27604] lo speed is unknown, defaulting to 1000 [ 776.744492][T27644] Node 0 active_anon:58676kB inactive_anon:0kB active_file:14160kB inactive_file:160596kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:196864kB dirty:816kB writeback:0kB shmem:20880kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14528kB pagetables:6252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 776.785726][T27644] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 776.833084][T27644] Node 0 DMA free:15352kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 776.896005][T27644] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 776.924783][T27644] Node 0 DMA32 free:1044868kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:58376kB inactive_anon:0kB active_file:14160kB inactive_file:160596kB unevictable:1536kB writepending:816kB zspages:0kB present:3129332kB managed:2554036kB mlocked:0kB bounce:0kB free_pcp:21864kB local_pcp:12928kB free_cma:0kB [ 776.999063][T27644] lowmem_reserve[]: 0 0 1 1 1 [ 777.003850][T27644] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 777.084981][ T5881] tipc: Node number set to 10005162 [ 777.091411][T27644] lowmem_reserve[]: 0 0 0 0 0 [ 777.097464][T27644] Node 1 Normal free:3884204kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:23412kB local_pcp:9344kB free_cma:0kB [ 777.133134][T27644] lowmem_reserve[]: 0 0 0 0 0 [ 777.138526][T27644] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (UM) = 15352kB [ 777.154671][T27644] Node 0 DMA32: 2881*4kB (U) 6066*8kB (UM) 2995*16kB (UME) 346*32kB (UME) 263*64kB (UME) 509*128kB (UM) 394*256kB (UM) 303*512kB (UME) 224*1024kB (UE) 111*2048kB (UM) 32*4096kB (U) = 1044804kB [ 777.182331][T27644] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 777.194324][T27644] Node 1 Normal: 155*4kB (UE) 44*8kB (UME) 40*16kB (UME) 61*32kB (UME) 25*64kB (UME) 7*128kB (UME) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 2*2048kB (UE) 945*4096kB (M) = 3884204kB [ 777.215210][T27644] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 777.225368][T27644] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 777.235177][T27644] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 777.246038][T27644] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 777.256780][T27644] 49339 total pagecache pages [ 777.261590][T27644] 0 pages in swap cache [ 777.266272][T27644] Free swap = 124996kB [ 777.270640][T27644] Total swap = 124996kB [ 777.274961][T27644] 2097051 pages RAM [ 777.279003][T27644] 0 pages HighMem/MovableOnly [ 777.288836][T27644] 426644 pages reserved [ 777.293092][T27644] 0 pages cma reserved [ 777.306443][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.351284][T27661] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 777.396717][T27659] syzkaller0: entered promiscuous mode [ 777.402565][T27659] syzkaller0: entered allmulticast mode [ 777.426332][T27659] netlink: 'syz.0.5436': attribute type 3 has an invalid length. [ 777.528423][T27666] __nla_validate_parse: 8 callbacks suppressed [ 777.528444][T27666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5438'. [ 777.566456][T27670] netlink: 'syz.5.5439': attribute type 1 has an invalid length. [ 777.604266][T27670] netlink: 'syz.5.5439': attribute type 1 has an invalid length. [ 777.631999][T27670] netlink: 240 bytes leftover after parsing attributes in process `syz.5.5439'. [ 777.650438][T27673] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5440'. [ 777.769917][T27673] veth0_to_team: entered promiscuous mode [ 777.841618][T27673] veth0_to_team: left promiscuous mode [ 778.043223][T27688] tipc: Enabled bearer , priority 0 [ 778.073410][T27688] syzkaller0: entered promiscuous mode [ 778.088971][T27688] syzkaller0: entered allmulticast mode [ 778.186277][T27700] tipc: Resetting bearer [ 778.305905][T27688] tipc: Resetting bearer [ 778.406569][T27688] tipc: Disabling bearer [ 778.489023][T27710] netlink: 'syz.6.5448': attribute type 39 has an invalid length. [ 778.601354][T27713] xt_policy: too many policy elements [ 778.829412][T27707] wg1 speed is unknown, defaulting to 1000 [ 778.838510][T27707] lo speed is unknown, defaulting to 1000 [ 778.960882][T27736] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5456'. [ 779.066368][T26626] net_ratelimit: 3 callbacks suppressed [ 779.066384][T26626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.327233][T27749] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5457'. [ 779.386252][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.707892][T26626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.091829][T27775] netlink: 'syz.0.5464': attribute type 7 has an invalid length. [ 780.121240][T27775] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5464'. [ 780.158256][T27775] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5464'. [ 780.349247][T26631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.426285][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.486390][T27796] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5468'. [ 780.511153][T27797] lo: entered allmulticast mode [ 780.519479][T27796] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5468'. [ 780.592007][T27795] lo: left allmulticast mode [ 780.834374][T27781] syzkaller0: entered promiscuous mode [ 780.840027][T27781] syzkaller0: entered allmulticast mode [ 780.987190][T26627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.474944][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.432657][T19077] lec:lec_start_xmit: lec0:No lecd attached [ 782.506366][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.139321][T27821] netlink: 288 bytes leftover after parsing attributes in process `syz.7.5474'. [ 783.155791][T27805] wg1 speed is unknown, defaulting to 1000 [ 783.170459][T27805] lo speed is unknown, defaulting to 1000 [ 783.214568][T27824] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5476'. [ 783.291980][T27824] xfrm1: entered allmulticast mode [ 783.405194][T27830] syzkaller1: entered promiscuous mode [ 783.413430][T27830] syzkaller1: entered allmulticast mode [ 783.546911][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.692318][T27847] netlink: 'syz.5.5482': attribute type 2 has an invalid length. [ 783.708201][T27847] netlink: 'syz.5.5482': attribute type 1 has an invalid length. [ 783.725245][T27847] netlink: 108 bytes leftover after parsing attributes in process `syz.5.5482'. [ 783.936761][T27860] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5486'. [ 783.946990][T27860] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5486'. [ 783.970554][T27860] vlan2: entered promiscuous mode [ 783.975734][T27860] bond0: entered promiscuous mode [ 783.980791][T27860] bond_slave_0: entered promiscuous mode [ 784.005926][T27860] bond_slave_1: entered promiscuous mode [ 784.278737][T27875] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5490'. [ 784.288644][T27875] nbd: couldn't find a device at index 0 [ 784.368803][T27881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5492'. [ 784.378302][T27881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5492'. [ 784.449660][T27881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5492'. [ 784.450096][T27883] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5493'. [ 784.586379][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.695991][T27895] syzkaller0: entered promiscuous mode [ 784.701576][T27895] syzkaller0: entered allmulticast mode [ 784.829303][T26630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.938775][T27904] bridge_slave_1: left allmulticast mode [ 784.945291][T27904] bridge_slave_1: left promiscuous mode [ 784.953013][T27904] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.974926][T27904] bridge_slave_0: left allmulticast mode [ 784.981427][T27904] bridge_slave_0: left promiscuous mode [ 784.987973][T27904] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.387216][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.476177][T26639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.512205][T27907] wg1 speed is unknown, defaulting to 1000 [ 785.537757][T27907] lo speed is unknown, defaulting to 1000 [ 785.628108][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.291670][T27955] gretap1: entered promiscuous mode [ 786.543999][T27964] pimreg: entered allmulticast mode [ 786.598418][T27964] pimreg: left allmulticast mode [ 786.666165][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.746114][T26630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.204269][T28000] vlan0: left promiscuous mode [ 787.327402][T28002] nbd: device at index 64 is going down [ 787.411661][T27192] udevd[27192]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 787.455666][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 787.463916][ C0] lec:lec_tx_timeout: lec0 [ 787.466612][T27192] udevd[27192]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 787.646357][T27997] wg1 speed is unknown, defaulting to 1000 [ 787.654082][T27997] lo speed is unknown, defaulting to 1000 [ 787.710786][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.542898][T28021] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 788.708306][T26639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.750137][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.785875][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.797412][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.202243][T28043] tipc: Enabling of bearer rejected, failed to enable media [ 790.591303][T26627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.825941][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.835716][T28090] __nla_validate_parse: 15 callbacks suppressed [ 790.835735][T28090] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5548'. [ 790.836824][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.893132][T28103] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5548'. [ 791.203678][T28122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5550'. [ 791.226450][T26631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.244853][ T8908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.363222][T28128] netlink: 1216 bytes leftover after parsing attributes in process `syz.7.5552'. [ 791.374054][ T10] IPVS: starting estimator thread 0... [ 791.389586][T28128] netlink: 4436 bytes leftover after parsing attributes in process `syz.7.5552'. [ 791.424750][T28051] wg1 speed is unknown, defaulting to 1000 [ 791.440068][T28051] lo speed is unknown, defaulting to 1000 [ 791.467271][T28131] IPVS: using max 36 ests per chain, 86400 per kthread [ 791.611117][T28134] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 791.866060][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.874196][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.003670][T28100] wg1 speed is unknown, defaulting to 1000 [ 792.023288][T28146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5556'. [ 792.037776][T28100] lo speed is unknown, defaulting to 1000 [ 792.086961][T28146] xt_ecn: cannot match TCP bits for non-tcp packets [ 792.174810][T28151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5557'. [ 792.189402][T28146] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 792.222822][T28146] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.311502][T28151] 8021q: adding VLAN 0 to HW filter on device bond7 [ 792.318177][T28159] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5556'. [ 792.334343][T28154] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 792.345076][T28154] team0: Device macvlan0 is of different type [ 792.406855][T28146] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 792.423748][T28146] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.522007][T28146] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 792.552320][T28146] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.645213][T28146] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 792.665529][T28146] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.858856][ T8908] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 792.879062][ T8908] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.918338][T28172] syzkaller0: entered promiscuous mode [ 792.923993][T28172] syzkaller0: entered allmulticast mode [ 792.937882][T28172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5560'. [ 792.980785][T26631] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 792.998955][T26631] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.038478][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.047211][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.069595][T26631] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.078190][T26631] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.300354][T28195] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5567'. [ 793.377626][T28202] FAULT_INJECTION: forcing a failure. [ 793.377626][T28202] name failslab, interval 1, probability 0, space 0, times 0 [ 793.410486][T28202] CPU: 0 UID: 0 PID: 28202 Comm: syz.7.5569 Not tainted syzkaller #0 PREEMPT(full) [ 793.410513][T28202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 793.410524][T28202] Call Trace: [ 793.410531][T28202] [ 793.410540][T28202] dump_stack_lvl+0xe8/0x150 [ 793.410568][T28202] should_fail_ex+0x412/0x560 [ 793.410664][T28202] should_failslab+0xa8/0x100 [ 793.410708][T28202] __kmalloc_cache_noprof+0x83/0x6e0 [ 793.410727][T28202] ? wakeup_source_register+0x5b/0x380 [ 793.410756][T28202] wakeup_source_register+0x5b/0x380 [ 793.410783][T28202] ep_insert+0xf34/0x1a40 [ 793.410819][T28202] ? __pfx_ep_insert+0x10/0x10 [ 793.410851][T28202] ? bpf_lsm_capable+0x9/0x20 [ 793.410877][T28202] do_epoll_ctl+0x7f4/0xe80 [ 793.410907][T28202] __x64_sys_epoll_ctl+0x165/0x1b0 [ 793.410930][T28202] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 793.410963][T28202] do_syscall_64+0xe2/0xf80 [ 793.410985][T28202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.411002][T28202] ? trace_irq_disable+0x37/0x100 [ 793.411019][T28202] ? clear_bhb_loop+0x60/0xb0 [ 793.411041][T28202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.411058][T28202] RIP: 0033:0x7fee7ff9aeb9 [ 793.411074][T28202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 793.411090][T28202] RSP: 002b:00007fee80daf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 793.411108][T28202] RAX: ffffffffffffffda RBX: 00007fee80215fa0 RCX: 00007fee7ff9aeb9 [ 793.411120][T28202] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 793.411130][T28202] RBP: 00007fee80daf090 R08: 0000000000000000 R09: 0000000000000000 [ 793.411141][T28202] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 793.411152][T28202] R13: 00007fee80216038 R14: 00007fee80215fa0 R15: 00007ffd3c226268 [ 793.411192][T28202] [ 793.421651][T28203] tipc: Enabled bearer , priority 0 [ 793.697523][T28211] syzkaller0: entered promiscuous mode [ 793.737989][T28211] syzkaller0: entered allmulticast mode [ 793.786625][T28211] tipc: Resetting bearer [ 793.934917][T28233] netlink: 'syz.0.5576': attribute type 1 has an invalid length. [ 794.060045][T28199] tipc: Resetting bearer [ 794.112103][ T13] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x2d [ 794.127295][T28199] tipc: Disabling bearer [ 794.280621][T28258] netlink: 'syz.5.5582': attribute type 2 has an invalid length. [ 794.557409][T28269] syzkaller1: entered promiscuous mode [ 794.563611][T28269] syzkaller1: entered allmulticast mode [ 794.986325][ T5881] net_ratelimit: 6 callbacks suppressed [ 794.986348][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.025966][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.034733][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.346569][T26626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.355013][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.895042][T28234] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 796.918295][T26626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.988921][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.074831][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.139100][T28297] netlink: 'syz.0.5595': attribute type 1 has an invalid length. [ 797.757192][T28324] __nla_validate_parse: 8 callbacks suppressed [ 797.757222][T28324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5603'. [ 798.117483][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.366967][T28350] can: request_module (can-proto-0) failed. [ 798.554186][T28353] netlink: 'syz.6.5612': attribute type 1 has an invalid length. [ 798.573875][T28353] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5612'. [ 798.933626][T28383] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5620'. [ 798.992817][T28360] wg1 speed is unknown, defaulting to 1000 [ 799.010410][T28390] netlink: 'syz.3.5622': attribute type 10 has an invalid length. [ 799.017169][T28360] lo speed is unknown, defaulting to 1000 [ 799.028285][T28390] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5622'. [ 799.086325][T28390] team0: Device geneve0 is of different type [ 799.112121][T28390] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 799.267097][T28393] syzkaller0: entered promiscuous mode [ 799.272602][T28393] syzkaller0: entered allmulticast mode [ 799.314176][T28401] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5625'. [ 799.327277][T28401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5625'. [ 799.336943][T28401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5625'. [ 800.105747][ C1] net_ratelimit: 1 callbacks suppressed [ 800.105767][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.191023][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.222125][T28396] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 801.226778][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.228730][T28396] syzkaller1: linktype set to 778 [ 801.264817][T28398] 8021q: adding VLAN 0 to HW filter on device bond3 [ 801.276478][T28371] wg1 speed is unknown, defaulting to 1000 [ 801.303557][T28371] lo speed is unknown, defaulting to 1000 [ 801.478656][T28407] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5627'. [ 801.503642][T28407] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5627'. [ 801.531532][T28407] netlink: 'syz.7.5627': attribute type 1 has an invalid length. [ 801.819899][T28425] syzkaller0: entered promiscuous mode [ 801.826684][T28425] syzkaller0: entered allmulticast mode [ 801.937355][T28420] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 802.047962][T28435] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5632'. [ 802.110542][ T8908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.119315][T26626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.270967][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.746901][T26630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.757104][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.308938][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.888090][T28415] wg1 speed is unknown, defaulting to 1000 [ 803.989005][T28415] lo speed is unknown, defaulting to 1000 [ 804.183502][T28448] vlan2: entered promiscuous mode [ 804.196007][T28448] geneve1: entered promiscuous mode [ 804.215873][T28448] vlan2: entered allmulticast mode [ 804.221122][T28448] geneve1: entered allmulticast mode [ 804.346405][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.425538][T28458] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5637'. [ 804.440365][T28458] netlink: 'syz.3.5637': attribute type 7 has an invalid length. [ 804.448820][T28458] netlink: 'syz.3.5637': attribute type 8 has an invalid length. [ 804.457331][T28458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5637'. [ 804.468750][T28458] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5637'. [ 804.531259][T28458] netlink: 'syz.3.5637': attribute type 7 has an invalid length. [ 804.563261][T28458] netlink: 'syz.3.5637': attribute type 8 has an invalid length. [ 804.606112][T28458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5637'. [ 804.697664][T28472] bridge0: port 3(syz_tun) entered blocking state [ 804.739006][T28472] bridge0: port 3(syz_tun) entered disabled state [ 804.753386][T28474] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5643'. [ 804.768764][T28472] syz_tun: entered allmulticast mode [ 804.787825][T28472] syz_tun: entered promiscuous mode [ 804.999919][T28481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5646'. [ 805.134719][T28492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 805.179694][T28492] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5649'. [ 805.181114][T28494] FAULT_INJECTION: forcing a failure. [ 805.181114][T28494] name failslab, interval 1, probability 0, space 0, times 0 [ 805.225948][T28494] CPU: 1 UID: 0 PID: 28494 Comm: syz.0.5650 Not tainted syzkaller #0 PREEMPT(full) [ 805.225973][T28494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 805.225983][T28494] Call Trace: [ 805.225991][T28494] [ 805.225998][T28494] dump_stack_lvl+0xe8/0x150 [ 805.226025][T28494] should_fail_ex+0x412/0x560 [ 805.226052][T28494] should_failslab+0xa8/0x100 [ 805.226074][T28494] kmem_cache_alloc_noprof+0x87/0x6e0 [ 805.226098][T28494] ? __asan_memcpy+0x40/0x70 [ 805.226120][T28494] ? __kernfs_new_node+0xe9/0x8e0 [ 805.226148][T28494] __kernfs_new_node+0xe9/0x8e0 [ 805.226177][T28494] ? __pfx___kernfs_new_node+0x10/0x10 [ 805.226205][T28494] ? kernfs_root+0x1c/0x230 [ 805.226231][T28494] ? kernfs_root+0x1c/0x230 [ 805.226250][T28494] ? kernfs_root+0x1c/0x230 [ 805.226269][T28494] ? kernfs_root+0x1c/0x230 [ 805.226293][T28494] kernfs_new_node+0x102/0x210 [ 805.226322][T28494] kernfs_create_dir_ns+0x44/0x130 [ 805.226343][T28494] sysfs_create_dir_ns+0x12f/0x2a0 [ 805.226369][T28494] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 805.226391][T28494] ? do_raw_spin_unlock+0xf5/0x210 [ 805.226416][T28494] kobject_add_internal+0x62b/0xd00 [ 805.226442][T28494] kobject_add+0x163/0x240 [ 805.226465][T28494] ? __pfx_kobject_add+0x10/0x10 [ 805.226489][T28494] ? __pfx_kobject_add+0x10/0x10 [ 805.226510][T28494] ? kobject_init+0x83/0x1e0 [ 805.226534][T28494] ? get_device_parent+0x366/0x3a0 [ 805.226553][T28494] device_add+0x408/0xb70 [ 805.226601][T28494] ? device_initialize+0x24b/0x440 [ 805.226618][T28494] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 805.226639][T28494] wakeup_source_register+0x18a/0x380 [ 805.226665][T28494] ep_insert+0xf34/0x1a40 [ 805.226701][T28494] ? __pfx_ep_insert+0x10/0x10 [ 805.226734][T28494] ? bpf_lsm_capable+0x9/0x20 [ 805.226764][T28494] do_epoll_ctl+0x7f4/0xe80 [ 805.226790][T28494] __x64_sys_epoll_ctl+0x165/0x1b0 [ 805.226811][T28494] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 805.226843][T28494] do_syscall_64+0xe2/0xf80 [ 805.226865][T28494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.226881][T28494] ? trace_irq_disable+0x37/0x100 [ 805.226897][T28494] ? clear_bhb_loop+0x60/0xb0 [ 805.226916][T28494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.226932][T28494] RIP: 0033:0x7f5d2959aeb9 [ 805.226948][T28494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 805.226962][T28494] RSP: 002b:00007f5d277f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 805.226980][T28494] RAX: ffffffffffffffda RBX: 00007f5d29815fa0 RCX: 00007f5d2959aeb9 [ 805.226992][T28494] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 805.227001][T28494] RBP: 00007f5d277f6090 R08: 0000000000000000 R09: 0000000000000000 [ 805.227010][T28494] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000002 [ 805.227020][T28494] R13: 00007f5d29816038 R14: 00007f5d29815fa0 R15: 00007fffc78a2138 [ 805.227053][T28494] [ 805.227082][T28494] kobject: kobject_add_internal failed for wakeup12 (error: -12 parent: wakeup) [ 805.548034][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.766742][T28519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 805.794891][T28519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 805.873683][T28534] netlink: 'syz.5.5662': attribute type 1 has an invalid length. [ 806.208601][T28553] FAULT_INJECTION: forcing a failure. [ 806.208601][T28553] name failslab, interval 1, probability 0, space 0, times 0 [ 806.230631][T28553] CPU: 0 UID: 0 PID: 28553 Comm: syz.3.5669 Not tainted syzkaller #0 PREEMPT(full) [ 806.230658][T28553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 806.230668][T28553] Call Trace: [ 806.230676][T28553] [ 806.230684][T28553] dump_stack_lvl+0xe8/0x150 [ 806.230712][T28553] should_fail_ex+0x412/0x560 [ 806.230740][T28553] should_failslab+0xa8/0x100 [ 806.230762][T28553] kmem_cache_alloc_noprof+0x87/0x6e0 [ 806.230792][T28553] ? __asan_memcpy+0x40/0x70 [ 806.230814][T28553] ? __kernfs_new_node+0xe9/0x8e0 [ 806.230843][T28553] __kernfs_new_node+0xe9/0x8e0 [ 806.230874][T28553] ? __pfx___kernfs_new_node+0x10/0x10 [ 806.230898][T28553] ? kernfs_root+0x1c/0x230 [ 806.230928][T28553] ? kernfs_root+0x1c/0x230 [ 806.230950][T28553] ? kernfs_root+0x1c/0x230 [ 806.230969][T28553] ? kernfs_root+0x1c/0x230 [ 806.230997][T28553] kernfs_new_node+0x102/0x210 [ 806.231027][T28553] kernfs_create_dir_ns+0x44/0x130 [ 806.231049][T28553] sysfs_create_dir_ns+0x12f/0x2a0 [ 806.231075][T28553] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 806.231101][T28553] ? do_raw_spin_unlock+0xf5/0x210 [ 806.231126][T28553] kobject_add_internal+0x62b/0xd00 [ 806.231154][T28553] kobject_add+0x163/0x240 [ 806.231177][T28553] ? __pfx_kobject_add+0x10/0x10 [ 806.231204][T28553] ? __pfx_kobject_add+0x10/0x10 [ 806.231228][T28553] ? kobject_init+0x83/0x1e0 [ 806.231255][T28553] ? get_device_parent+0x366/0x3a0 [ 806.231277][T28553] device_add+0x408/0xb70 [ 806.231295][T28553] ? device_initialize+0x24b/0x440 [ 806.231314][T28553] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 806.231338][T28553] wakeup_source_register+0x18a/0x380 [ 806.231366][T28553] ep_insert+0xf34/0x1a40 [ 806.231399][T28553] ? __pfx_ep_insert+0x10/0x10 [ 806.231433][T28553] ? bpf_lsm_capable+0x9/0x20 [ 806.231462][T28553] do_epoll_ctl+0x7f4/0xe80 [ 806.231488][T28553] __x64_sys_epoll_ctl+0x165/0x1b0 [ 806.231511][T28553] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 806.231544][T28553] do_syscall_64+0xe2/0xf80 [ 806.231567][T28553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.231584][T28553] ? trace_irq_disable+0x37/0x100 [ 806.231601][T28553] ? clear_bhb_loop+0x60/0xb0 [ 806.231623][T28553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.231641][T28553] RIP: 0033:0x7f64ac99aeb9 [ 806.231657][T28553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 806.231672][T28553] RSP: 002b:00007f64ad79e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 806.231691][T28553] RAX: ffffffffffffffda RBX: 00007f64acc15fa0 RCX: 00007f64ac99aeb9 [ 806.231704][T28553] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 806.231715][T28553] RBP: 00007f64ad79e090 R08: 0000000000000000 R09: 0000000000000000 [ 806.231727][T28553] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000002 [ 806.231739][T28553] R13: 00007f64acc16038 R14: 00007f64acc15fa0 R15: 00007fff12c89808 [ 806.231772][T28553] [ 806.231874][T28553] kobject: kobject_add_internal failed for wakeup12 (error: -12 parent: wakeup) [ 806.299101][T28555] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 806.408738][T28562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5674'. [ 806.411041][T28555] syzkaller1: linktype set to 778 [ 806.588665][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.605426][T28558] 8021q: adding VLAN 0 to HW filter on device bond4 [ 806.622593][T28563] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 806.633032][T28563] bond4: (slave macvlan2): Enslaving as a backup interface with an up link [ 806.716591][T26631] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 806.815791][T26626] bond4: (slave macvlan2): link status up again after 0 ms [ 806.823478][T26626] bond4: (slave macvlan2): failed to get link speed/duplex [ 806.857145][T26626] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 806.949711][T28593] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5683'. [ 806.975434][T26631] bond4: (slave macvlan2): failed to get link speed/duplex [ 807.022908][T28598] FAULT_INJECTION: forcing a failure. [ 807.022908][T28598] name failslab, interval 1, probability 0, space 0, times 0 [ 807.036687][T28598] CPU: 0 UID: 0 PID: 28598 Comm: syz.7.5684 Not tainted syzkaller #0 PREEMPT(full) [ 807.036712][T28598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 807.036723][T28598] Call Trace: [ 807.036730][T28598] [ 807.036738][T28598] dump_stack_lvl+0xe8/0x150 [ 807.036764][T28598] should_fail_ex+0x412/0x560 [ 807.036790][T28598] should_failslab+0xa8/0x100 [ 807.036811][T28598] kmem_cache_alloc_noprof+0x87/0x6e0 [ 807.036836][T28598] ? __kernfs_new_node+0xe9/0x8e0 [ 807.036864][T28598] __kernfs_new_node+0xe9/0x8e0 [ 807.036886][T28598] ? up_write+0x1ab/0x410 [ 807.036909][T28598] ? __pfx___kernfs_new_node+0x10/0x10 [ 807.036932][T28598] ? kernfs_root+0x1c/0x230 [ 807.036961][T28598] ? kernfs_root+0x1c/0x230 [ 807.036984][T28598] ? kernfs_root+0x1c/0x230 [ 807.037011][T28598] kernfs_new_node+0x102/0x210 [ 807.037040][T28598] kernfs_create_link+0xa7/0x200 [ 807.037064][T28598] sysfs_do_create_link_sd+0x83/0x110 [ 807.037090][T28598] device_add_class_symlinks+0xb6/0x240 [ 807.037112][T28598] device_add+0x475/0xb70 [ 807.037129][T28598] ? device_initialize+0x24b/0x440 [ 807.037149][T28598] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 807.037173][T28598] wakeup_source_register+0x18a/0x380 [ 807.037202][T28598] ep_insert+0xf34/0x1a40 [ 807.037239][T28598] ? __pfx_ep_insert+0x10/0x10 [ 807.037273][T28598] ? bpf_lsm_capable+0x9/0x20 [ 807.037304][T28598] do_epoll_ctl+0x7f4/0xe80 [ 807.037333][T28598] __x64_sys_epoll_ctl+0x165/0x1b0 [ 807.037357][T28598] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 807.037390][T28598] do_syscall_64+0xe2/0xf80 [ 807.037412][T28598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.037437][T28598] ? trace_irq_disable+0x37/0x100 [ 807.037453][T28598] ? clear_bhb_loop+0x60/0xb0 [ 807.037474][T28598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.037492][T28598] RIP: 0033:0x7fee7ff9aeb9 [ 807.037509][T28598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 807.037524][T28598] RSP: 002b:00007fee80daf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 807.037544][T28598] RAX: ffffffffffffffda RBX: 00007fee80215fa0 RCX: 00007fee7ff9aeb9 [ 807.037557][T28598] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 807.037568][T28598] RBP: 00007fee80daf090 R08: 0000000000000000 R09: 0000000000000000 [ 807.037579][T28598] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000002 [ 807.037590][T28598] R13: 00007fee80216038 R14: 00007fee80215fa0 R15: 00007ffd3c226268 [ 807.037623][T28598] [ 807.332705][ T13] bond4: (slave macvlan2): failed to get link speed/duplex [ 807.349182][T28601] syzkaller0: entered promiscuous mode [ 807.354791][T28601] syzkaller0: entered allmulticast mode [ 807.487252][T28610] bond8: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 807.507580][T28610] bond8 (unregistering): Released all slaves [ 807.560208][T28608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5690'. [ 807.615778][T26639] bond4: (slave macvlan2): failed to get link speed/duplex [ 807.626346][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.737568][T28627] netlink: 'syz.6.5693': attribute type 1 has an invalid length. [ 808.305234][T28650] wg1 speed is unknown, defaulting to 1000 [ 808.313395][T28650] lo speed is unknown, defaulting to 1000 [ 808.456544][T28679] IPv6: NLM_F_CREATE should be specified when creating new route [ 808.730998][T28686] ip6tnl3: entered promiscuous mode [ 808.778759][ T5830] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 808.790740][ T5830] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 808.809842][ T5830] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 808.836211][ T5830] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 808.847870][ T5830] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 808.920226][T28693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 809.020951][T28693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 809.048838][T28693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 809.154434][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 809.234384][T17073] syz_tun (unregistering): left allmulticast mode [ 809.562059][ T8218] wg1 speed is unknown, defaulting to 1000 [ 809.571822][T28690] wg1 speed is unknown, defaulting to 1000 [ 809.580171][T28690] lo speed is unknown, defaulting to 1000 [ 809.963180][T28734] __nla_validate_parse: 4 callbacks suppressed [ 809.963201][T28734] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5726'. [ 810.080396][T28690] chnl_net:caif_netlink_parms(): no params data found [ 810.182713][T26630] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x2d [ 810.223153][T28690] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.230471][T28690] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.238096][T28690] bridge_slave_0: entered allmulticast mode [ 810.245291][T28690] bridge_slave_0: entered promiscuous mode [ 810.253363][T28690] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.260629][T28690] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.268381][T28690] bridge_slave_1: entered allmulticast mode [ 810.277167][T28690] bridge_slave_1: entered promiscuous mode [ 810.318987][T28690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.332633][T28690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 810.369486][T28690] team0: Port device team_slave_0 added [ 810.378285][T28690] team0: Port device team_slave_1 added [ 810.412081][T28690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 810.419246][T28690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 810.448047][T28690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 810.462007][T28690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 810.469485][T28690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 810.496071][T28690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 810.543360][T28690] hsr_slave_0: entered promiscuous mode [ 810.549946][T28690] hsr_slave_1: entered promiscuous mode [ 810.556823][T28690] debugfs: 'hsr0' already exists in 'hsr' [ 810.562656][T28690] Cannot create hsr debugfs directory [ 810.659440][T28690] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 810.669638][T28690] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.723206][T28690] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 810.734658][T28690] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.747125][ T8218] net_ratelimit: 26 callbacks suppressed [ 810.747141][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.775735][ T13] bond4: (slave macvlan2): failed to get link speed/duplex [ 810.817534][T28690] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 810.827762][T28690] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.884504][T28774] netlink: 'syz.5.5732': attribute type 2 has an invalid length. [ 810.885431][T28776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5732'. [ 810.901730][T28776] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 810.927948][ T5141] Bluetooth: hci8: command tx timeout [ 810.937115][T28690] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 810.947230][T28690] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.975800][T26626] bond4: (slave macvlan2): failed to get link speed/duplex [ 811.106900][T26626] bond4: (slave macvlan2): failed to get link speed/duplex [ 811.215743][ T13] bond4: (slave macvlan2): failed to get link speed/duplex [ 811.325749][T26626] bond4: (slave macvlan2): failed to get link speed/duplex [ 811.435760][T26626] bond4: (slave macvlan2): failed to get link speed/duplex [ 811.556589][ T13] bond4: (slave macvlan2): failed to get link speed/duplex [ 811.666351][ T13] bond4: (slave macvlan2): failed to get link speed/duplex [ 812.356242][ T32] INFO: task syz.4.4951:25667 blocked for more than 143 seconds. [ 812.363994][ T32] Not tainted syzkaller #0 [ 812.369126][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 812.377995][ T32] task:syz.4.4951 state:D stack:25312 pid:25667 tgid:25666 ppid:18914 task_flags:0x400140 flags:0x00080002 [ 812.390164][ T32] Call Trace: [ 812.393459][ T32] [ 812.396839][ T32] __schedule+0x14ea/0x5050 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 812.401562][ T32] ? preempt_schedule_notrace+0x57/0x90 [ 812.407250][ T32] ? __pfx___schedule+0x10/0x10 [ 812.412711][ T32] ? schedule+0x90/0x360 [ 812.417089][ T32] schedule+0x164/0x360 [ 812.421268][ T32] schedule_preempt_disabled+0x13/0x30 [ 812.427296][ T32] __mutex_lock+0x7fe/0x1300 [ 812.431927][ T32] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 812.437851][ T32] ? __mutex_lock+0x5ac/0x1300 [ 812.442649][ T32] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 812.448608][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 812.453671][ T32] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 812.459639][ T32] ? rcu_is_watching+0x15/0xb0 [ 812.464438][ T32] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 812.470776][ T32] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 812.477430][ T32] genl_family_rcv_msg_doit+0x22a/0x330 [ 812.483253][ T32] ? __asan_memcpy+0x40/0x70 [ 812.488309][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 812.494522][ T32] ? bpf_lsm_capable+0x9/0x20 [ 812.499331][ T32] ? security_capable+0x7e/0x2c0 [ 812.504303][ T32] genl_rcv_msg+0x61c/0x7a0 [ 812.514124][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 812.519888][ T32] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 812.526183][ T32] ? __pfx_ref_tracker_free+0x10/0x10 [ 812.531702][ T32] netlink_rcv_skb+0x232/0x4b0 [ 812.536629][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 812.541675][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 812.547650][ T32] ? genl_rcv+0x19/0x40 [ 812.551853][ T32] ? down_read+0x272/0x2e0 [ 812.556500][ T32] ? genl_rcv+0xd/0x40 [ 812.560824][ T32] genl_rcv+0x28/0x40 [ 812.564836][ T32] netlink_unicast+0x80f/0x9b0 [ 812.569766][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 812.575187][ T32] ? netlink_sendmsg+0x650/0xb40 [ 812.580570][ T32] ? skb_put+0x11b/0x210 [ 812.584836][ T32] netlink_sendmsg+0x813/0xb40 [ 812.590031][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.595440][ T32] ? aa_sock_msg_perm+0xf1/0x1b0 [ 812.600993][ T32] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 812.606718][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.612191][ T32] ____sys_sendmsg+0xa68/0xad0 [ 812.617079][ T32] ? __might_fault+0xaf/0x130 [ 812.621801][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 812.627327][ T32] ? import_iovec+0x73/0xa0 [ 812.675927][ T32] ___sys_sendmsg+0x2a5/0x360 [ 812.680839][ T32] ? __lock_acquire+0x6b5/0x2cf0 [ 812.701745][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 812.715801][ T32] ? futex_wake+0x4ac/0x580 [ 812.720401][ T32] ? __fget_files+0x2a/0x420 [ 812.725012][ T32] ? __fget_files+0x3a0/0x420 [ 812.738124][T28743] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 812.739961][ T32] __x64_sys_sendmsg+0x1bd/0x2a0 [ 812.795821][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 812.801454][ T32] ? rcu_is_watching+0x15/0xb0 [ 812.815730][ T32] do_syscall_64+0xe2/0xf80 [ 812.820360][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.835649][ T32] ? trace_irq_disable+0x37/0x100 [ 812.840728][ T32] ? clear_bhb_loop+0x60/0xb0 [ 812.845396][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.851928][ T32] RIP: 0033:0x7f76b6b9aeb9 [ 812.856430][ T32] RSP: 002b:00007f76b4df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 812.865074][ T32] RAX: ffffffffffffffda RBX: 00007f76b6e15fa0 RCX: 00007f76b6b9aeb9 [ 812.873794][ T32] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000003 [ 812.881904][ T32] RBP: 00007f76b6c08c1f R08: 0000000000000000 R09: 0000000000000000 [ 812.890038][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 812.898263][ T32] R13: 00007f76b6e16038 R14: 00007f76b6e15fa0 R15: 00007ffe5c4ff678 [ 812.906743][ T32] [ 812.909844][ T32] [ 812.909844][ T32] Showing all locks held in the system: [ 812.917985][ T32] 1 lock held by pool_workqueue_/3: [ 812.951081][ T32] #0: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 812.988909][ T5141] Bluetooth: hci8: command tx timeout [ 812.996148][ T32] 4 locks held by kworker/u8:1/13: [ 813.001293][ T32] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 813.066000][ T32] #1: ffffc90000127bc0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 813.135672][ T32] #2: ffff8880b86260d8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 813.144711][ T32] #3: ffffffff9a267380 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 813.215707][ T32] 4 locks held by kworker/1:0/24: [ 813.220796][ T32] 1 lock held by khungtaskd/32: [ 813.245689][ T32] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 813.285830][ T32] 2 locks held by getty/5577: [ 813.290568][ T32] #0: ffff88814cf980a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 813.335654][ T32] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 813.376318][ T32] 3 locks held by kworker/1:11/8218: [ 813.381848][ T32] #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 813.455664][ T32] #1: ffffc90004c7fbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 813.485885][ T32] #2: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 813.525714][ T32] 2 locks held by syz.1.4847/25282: [ 813.531067][ T32] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 813.558366][ T32] #1: ffffffff8e879428 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 813.569185][ T32] 2 locks held by syz.4.4951/25667: [ 813.574400][ T32] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 813.582935][ T32] #1: ffffffff8e879428 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 813.593530][ T32] 2 locks held by syz.2.4963/25715: [ 813.599303][ T32] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 813.607810][ T32] #1: ffffffff8e879428 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 813.618230][ T32] 4 locks held by syz-executor/28690: [ 813.623612][ T32] #0: ffff888098fc4ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 813.634786][ T32] #1: ffff888098fc40c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 813.644878][ T32] #2: ffffffff8fb38628 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 813.654989][ T32] #3: ffff888056302af8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5c0 [ 813.664390][ T32] 1 lock held by syz.0.5728/28742: [ 813.669528][ T32] #0: ffffffff8f9abf08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 813.678851][ T32] 1 lock held by syz.7.5729/28747: [ 813.683980][ T32] #0: ffffffff8f9abf08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 813.693438][ T32] 1 lock held by syz.5.5733/28779: [ 813.698976][ T32] #0: ffffffff8f9abf08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 813.708434][ T32] [ 813.710863][ T32] ============================================= [ 813.710863][ T32] [ 813.750766][ T32] NMI backtrace for cpu 0 [ 813.750787][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 813.750808][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 813.750819][ T32] Call Trace: [ 813.750826][ T32] [ 813.750836][ T32] dump_stack_lvl+0xe8/0x150 [ 813.750864][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 813.750884][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 813.750912][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 813.750934][ T32] sys_info+0x135/0x170 [ 813.750950][ T32] watchdog+0xf90/0xfe0 [ 813.750980][ T32] ? watchdog+0x209/0xfe0 [ 813.751006][ T32] kthread+0x726/0x8b0 [ 813.751029][ T32] ? __pfx_watchdog+0x10/0x10 [ 813.751047][ T32] ? __pfx_kthread+0x10/0x10 [ 813.751074][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 813.751094][ T32] ? __pfx_kthread+0x10/0x10 [ 813.751114][ T32] ret_from_fork+0x51b/0xa40 [ 813.751134][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 813.751156][ T32] ? __switch_to+0xc82/0x1410 [ 813.751183][ T32] ? __pfx_kthread+0x10/0x10 [ 813.751202][ T32] ret_from_fork_asm+0x1a/0x30 [ 813.751239][ T32] [ 813.751246][ T32] Sending NMI from CPU 0 to CPUs 1: [ 813.873760][ C1] NMI backtrace for cpu 1 [ 813.873778][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 813.873797][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 813.873806][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 813.873831][ C1] Code: 28 60 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 59 11 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 813.873845][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 813.873859][ C1] RAX: 00000000002a4cb3 RBX: ffffffff8199370d RCX: 0000000080000001 [ 813.873870][ C1] RDX: 0000000000000001 RSI: ffffffff8dcd0c10 RDI: ffffffff8c073a00 [ 813.873881][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 813.873892][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8fef4970 [ 813.873903][ C1] R13: 1ffff11003ad2b70 R14: 0000000000000001 R15: 0000000000000001 [ 813.873913][ C1] FS: 0000000000000000(0000) GS:ffff8881257ea000(0000) knlGS:0000000000000000 [ 813.873925][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 813.873935][ C1] CR2: 0000558f76e67f40 CR3: 000000000e346000 CR4: 00000000003526f0 [ 813.873950][ C1] Call Trace: [ 813.873959][ C1] [ 813.873965][ C1] default_idle+0x9/0x20 [ 813.873978][ C1] default_idle_call+0x72/0xb0 [ 813.873995][ C1] do_idle+0x1bd/0x500 [ 813.874014][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 813.874033][ C1] ? __pfx_do_idle+0x10/0x10 [ 813.874052][ C1] cpu_startup_entry+0x43/0x60 [ 813.874065][ C1] start_secondary+0x101/0x110 [ 813.874084][ C1] common_startup_64+0x13e/0x147 [ 813.874111][ C1] [ 814.056402][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 814.063303][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 814.072424][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 814.082484][ T32] Call Trace: [ 814.085761][ T32] [ 814.088687][ T32] vpanic+0x1e0/0x670 [ 814.092657][ T32] panic+0xc5/0xd0 [ 814.096365][ T32] ? __pfx_panic+0x10/0x10 [ 814.100807][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 814.106265][ T32] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 814.112419][ T32] watchdog+0xfda/0xfe0 [ 814.116570][ T32] ? watchdog+0x209/0xfe0 [ 814.120897][ T32] kthread+0x726/0x8b0 [ 814.124978][ T32] ? __pfx_watchdog+0x10/0x10 [ 814.129642][ T32] ? __pfx_kthread+0x10/0x10 [ 814.134228][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 814.139423][ T32] ? __pfx_kthread+0x10/0x10 [ 814.144011][ T32] ret_from_fork+0x51b/0xa40 [ 814.148594][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 814.153717][ T32] ? __switch_to+0xc82/0x1410 [ 814.158482][ T32] ? __pfx_kthread+0x10/0x10 [ 814.163068][ T32] ret_from_fork_asm+0x1a/0x30 [ 814.167931][ T32] [ 814.171430][ T32] Kernel Offset: disabled [ 814.175837][ T32] Rebooting in 86400 seconds..