last executing test programs: 1m39.672403935s ago: executing program 4 (id=6360): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021740000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000004800038044000080080003400000000238000b80200001800a00010071756f7461000000100002800c000140000000000000000014"], 0xf8}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd70100400001c0200000006000800000000000800090002"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1m39.458086639s ago: executing program 4 (id=6364): syz_emit_ethernet(0x68, &(0x7f0000005a40)={@multicast, @random="6076b5cad4f6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x32, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a3579e", 0x0, 0x2b, 0x0, @mcast1, @remote, [], "6be2"}}}}}}}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802ef9"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="f4ffffff00"}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f000000bf00)={0x0, 0x0, &(0x7f000000bec0)={&(0x7f00000001c0)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0xffff, 0xa}, {0x1, 0x3}}}, 0x24}}, 0x40080) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f000701ddffffff00000000037c00001800378013000300717472283414d6bb"], 0x2c}}, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000180)={0x4, &(0x7f0000000200)=[{}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}]}) 1m38.383694252s ago: executing program 4 (id=6373): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='^8,*(\x00', 0x8000, &(0x7f0000000040)={@_ha_fsid={[0x7f, 0x4]}, {0x5, 0xf, 0x65, 0xfb84}}, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xfffffffe}) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000140)=0x0) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000280)={r0, &(0x7f0000000180)='^8,*(\x00', 0x32a40, &(0x7f00000001c0)={@_ha_fsid={[0x4, 0x2]}, {0x3, 0x1, 0xd, 0x3}}, 0x8001, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x6}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_DOWN(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x94) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f0000000400)=0xfff) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000090}, 0x8840) (async) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000580)={0x0, 0x7}) (async) getsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000001580)={@broadcast, @dev, @local}, &(0x7f00000015c0)=0xc) (async) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000001600)={r0}, 0x8) ioctl$OCFS2_IOC_UNRESVSP64(r6, 0x4030582b, &(0x7f0000001640)={0x2, 0x0, 0x4, 0x7, 0x3e, 0x9}) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001680), 0x80800, 0x0) ioctl$EXT4_IOC_GETFSUUID(r7, 0x8008662c, &(0x7f00000016c0)) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r8, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x3c, 0xe, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$XFS_IOC_FSCOUNTS(r8, 0x80205871, &(0x7f0000001800)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000001840)={0x0, 'veth0_virt_wifi\x00', {}, 0x3fa8}) (async) ioctl$SIOCX25GSUBSCRIP(r6, 0x89e0, &(0x7f0000001880)={'macsec0\x00', 0x80000000, 0x8000}) (async) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000019c0)={0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001a00)=@o_path={&(0x7f0000001980)='./file0\x00', r9, 0x4000, r6}, 0x18) r10 = accept4$x25(r2, &(0x7f0000001a40), &(0x7f0000001a80)=0x12, 0x800) ioctl$SIOCX25SFACILITIES(r10, 0x89e3, &(0x7f0000001ac0)={0x39, 0xa, 0x8, 0x9, 0x6}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001b00)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000001b40)={r11, 0x1, 0x6, @remote}, 0x10) (async) pwritev(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000001b80)="95325339370c47ae3684cf70e9bfa7e479e71066106d8c639c136f3333ba156f7a7764684d970a5c3b4528f766b48d0245ee9b5fb5025880d88bf830e1830a22bf9aa4f9ecc7d18fb9df3690bba2bc106569996f2da327156a45e62cf9eac7eca6d20a4357dba3cebe54310e7e9d0d", 0x6f}, {&(0x7f0000001c00)="4a20ce76e92c3a5421f5d0466a1e3492bde9a4607dad445c4ff561447b92263566f6d3eded6e99790229f578563270efd93a197989427fc51d950427f23ae52bd6de5e65c8de3c87df16c6ca820a9f3d75613bdef9ab1823e836970e38083761f858fcf87ef6d49af6730ac3c8daed3485d58dc985e5ceedd9f31c07", 0x7c}, {&(0x7f0000001c80)="21d5bf810f96aa7e0fe6e928429a6521e2715f72e2a00d747e1676", 0x1b}, {&(0x7f0000001cc0)="7461ed0ced4761847b1151e1cadb07f30c025ffb6f462a255cc1ce3eec0dd7009e11a8603f5f37aa4c90f0f36b268752ae58d7c00ec4fe4b1e1d9c7c4c777edec127c4539eebc800e5a2dcf5a20c6e789af769ecececd9ee6a", 0x59}, {&(0x7f0000001d40)="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", 0x1000}], 0x5, 0x1, 0x80) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000002dc0)=@req={0x80000000, 0x7fff, 0x4, 0x3ff}, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000002e00)={0x0, 0x81, 0x4, 0xe, 0x8, 0xfff4, 0xff, 0x4404, {0x0, @in6={{0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf}}, 0x4, 0x6, 0xfffffffc, 0x6, 0x1}}, &(0x7f0000002ec0)=0xb0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000002f00)={r12, 0x8001, 0x3}, &(0x7f0000002f40)=0x8) 1m38.344903309s ago: executing program 4 (id=6376): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) (async, rerun: 32) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) bind$inet(r1, 0x0, 0x0) (async) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x113, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}, 0x1c}}, 0x4000) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000006a]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) 1m38.012869121s ago: executing program 4 (id=6378): r0 = socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x50}}, 0x0) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$kcm(0x29, 0x5, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) (async) r6 = socket(0xa, 0x1, 0x0) close(r6) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x8, 0x0, &(0x7f0000003c00)) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) (async) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef413000000e3bd6efb440009000e000a400d000000ba80000054eb", 0x2e}], 0x1}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x40, 0x700, 0x7, 0x2df05997, {{0x10, 0x4, 0x2, 0x6, 0x40, 0x66, 0x4, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x40}, @remote, {[@ssrr={0x89, 0x2b, 0xac, [@multicast1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102]}]}}}}}) (async) r8 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'team_slave_0\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x2d, 0x11, 0x4, {0x8, @tcp_ip4_spec={@remote, @broadcast, 0x4e21, 0x4e22, 0x4}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, 0x3, 0x0, [0x40, 0x56c]}, @udp_ip6_spec={@mcast1, @private0, 0x4e20, 0x4e23, 0x4}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x0, 0x2, [0x1c00]}, 0xb01, 0x7}}}) (async) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000200)=@xdp={0x2c, 0x2, r7, 0x3f}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000280)="5a7d3a017bb2950a4b785614e6fcebfe15a86b03cf1cbd62cad52806b5208c8a09ddeda7111b9e20fe09b5cb6321ce2b992340dd4861a0ff86bf16855cd56ffec6bd3ca8c9edbe73dfed851b37efdb7c511cffaadada1ea8f6f1b4dfcc0d85ba55f9c9238a9d8992bac5134552faaa8e19f9da0ced5359503991dada760ac548b7fe2c7cdeaf35ef7b0f54ee625f4e431d2888abf618e298f14c748d627b1cd8bb3d27bed173dddfe1d711a0aa5766bbb90b1ba5b76854fd1f70466e5bed7fb09c4985866d35f3a4621a985bda202723e98c32380c64b72e6b9853dcbfc8e1b0372a4ec988e41fc957b9942b11f7", 0xee}, {&(0x7f0000000380)="3ae8e34eb6291da75e5ef607a4fb5046101b866eb6b664f66b63bb00424713648ebde451fe7889904847a704d46940389074598d53ef436bbfb80dc3113a82cf38e0248e9e0512d2be0692df3143478aed7777a8327d7245b5d18c84df63f52de1d7e8bb4f10f5f2084c4c5c647afb9cfdbc44a1dbf72ef199b85f5fb5a14c658ae320334bc122b0d6ec6e7c342fb92f39e7e9a8f12f019aa93f2bc927ea122b1307444d0ab71386d884e437bbb955c4d60ff741cefdcb4fc8cc538cbf379cf01768c3b50b6daa9f9adf54534cc4", 0xce}, {&(0x7f0000000480)="e7b672f351e51d7fba4316f560e08b8cf319d990e5", 0x15}], 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="28000000000000000e0100000700000066b9945fa087c0c2349811b032b4eccaaf60ba0000000000a0000000000000000100000002000000ee97c128d6fe84225bb5453925a62f2e00ee3813af3a2a20742c01f4f0d7990bdcda35b82eafec0cde9497f5521f29146ccd7a59d226e6436d6f15d5f658a26d04005c1e28d1fd4b24d4e1df02d7e59614ca8168d2aa340e2be1ae2a0fcdbe7367e2529a51595b6e481c334848628fa308008b615e3ec1041aa06d80eb3fab295331f43bd16cbf2c66a24f904b60c900"], 0xc8}, 0x4040000) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x1038, 0x30, 0x1, 0x0, 0x0, {}, [{0x1024, 0x1, [@m_bpf={0x1020, 0x1, 0x0, 0x0, {{0x8}, {0xff8, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xff4, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x1038}}, 0x0) (async) recvmsg(r2, &(0x7f0000000d40)={&(0x7f0000000640)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000c80)=[{&(0x7f00000006c0)=""/195, 0xc3}, {&(0x7f00000007c0)=""/210, 0xd2}, {&(0x7f00000008c0)=""/243, 0xf3}, {&(0x7f00000009c0)=""/168, 0xa8}, {&(0x7f0000000a80)=""/18, 0x12}, {&(0x7f0000000ac0)=""/149, 0x95}, {&(0x7f0000000b80)=""/243, 0xf3}], 0x7, &(0x7f0000000d00)=""/39, 0x27}, 0x0) 1m37.767905027s ago: executing program 4 (id=6380): r0 = socket(0x11, 0xa, 0x10000) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000000), 0x4) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c001680"], 0x30}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) 1m31.330562078s ago: executing program 1 (id=6440): socket$key(0xf, 0x3, 0x2) (async) r0 = socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0x330, &(0x7f0000000840)={@empty, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0x3, 0x6, "23da1f", 0x2f6, 0x11, 0x75b2c9e86fcf42b9, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x3b, 0x0, 0x40, 0x1, 0x0, 0x9, 0x68}, @routing={0x0, 0x6, 0x0, 0x3, 0x0, [@private0, @loopback, @loopback]}, @dstopts={0x6, 0x11, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @hao={0xc9, 0x10, @mcast1}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xc992}, @generic={0x68, 0x13, "a03aceb02c8951af7346d430fa541617205dad"}, @pad1, @calipso={0x7, 0x30, {0x0, 0xa, 0x2, 0x3, [0xa9, 0xffffffffffffff01, 0x7, 0x0, 0x8]}}]}, @fragment={0x3b, 0x0, 0x2, 0x1, 0x0, 0x17, 0x64}, @fragment={0x87, 0x0, 0xab, 0x1, 0x0, 0x9, 0x64}, @srh={0x16, 0x10, 0x4, 0x8, 0x1f, 0x8, 0x8, [@private1, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0]}, @dstopts={0x2e, 0x24, '\x00', [@jumbo, @generic={0x39, 0xef, "8408f95424c95e0a0ffc0a16ffd59abf87452028c65572b907a91ebe09d23c446d91a0984eb17e36bfdf56721f0a23fe5ee67932304e20bbb4189c51b3e20a2b59abd00793f196400504609855dbf5e8e1d41a782cc5b4d5b34be4a5666dcc4ebf7fbc5ae6305bd6ab6e4955985a607e13136df925fc4ce31db352464ad1299b40c4a15b34838da4c24e9e9df539aa172d6983ee75348681048ba5aad4244a7ac2a1c0817d73c0b86968bdf0e20b74cb52cd828e7cc5650ba8cce5b4334ca4b6b5b526cca5ba2096f11ecf5ab9ad6b483d3d86931fee342f1c878a9e5a577e3abc35f11813df9d62f7a7aba9f98579"}, @calipso={0x7, 0x10, {0x0, 0x2, 0x8, 0x2, [0x1000]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xe}, @hao={0xc9, 0x10, @remote}]}, @fragment={0x8, 0x0, 0x4, 0x0, 0x0, 0x18, 0x65}], {0x4e20, 0x4e20, 0x4e, 0x0, @wg=@data={0x4, 0x6, 0x100, "6552e45881a411c252713d0feeb8b0dd7a98377cf0186b6c526dc84be69438df90629b863c47bb13c319abf07292eb6939952e2e409d"}}}}}}}, 0x0) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f00050000000300050072174405"], 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x48, 0x30, 0xffff, 0x3, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c080}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008110000b7030000020000008500000017"], 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008110000b7030000020000008500000017"], 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600070100000000ff03000003"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) close(r0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') openat$cgroup(r3, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x0) (async) listen(r4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3c, 0x0) (async) splice(r4, 0x0, r5, 0x0, 0xf3c, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000400), &(0x7f0000000480)=0x4) (async) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000400), &(0x7f0000000480)=0x4) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'pcbc(fcrypt-generic)\x00'}}}, 0xe0}}, 0x0) sendmsg$nl_crypto(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) (async) sendmsg$nl_crypto(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0203000908000000000100000000000003000f0000000e0002004e23e000000900000000000059ab075e7aa4c700000200010000000000000000020000000001bffe98db0d6c535466fb569ab50a50977a273805c64e575d95538175321136ba07a0486d04ba8a7c52e8ba2953c8c504b843b2d10ae3f1300029fada6f4474dd9b3fe808fe52cd44b5646c96c90d8243f0d8daa00a4eb758e230822f65c051eb4cf0eb6c834686d6d2c989"], 0x40}}, 0x0) (async) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0203000908000000000100000000000003000f0000000e0002004e23e000000900000000000059ab075e7aa4c700000200010000000000000000020000000001bffe98db0d6c535466fb569ab50a50977a273805c64e575d95538175321136ba07a0486d04ba8a7c52e8ba2953c8c504b843b2d10ae3f1300029fada6f4474dd9b3fe808fe52cd44b5646c96c90d8243f0d8daa00a4eb758e230822f65c051eb4cf0eb6c834686d6d2c989"], 0x40}}, 0x0) 1m31.131698413s ago: executing program 1 (id=6442): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x4c8200, &(0x7f0000000080)={@_ha_fsid={[0x101, 0xf9a]}, {0x2, 0x4, 0x9}}, 0x7, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x3}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000001c0)=0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYRES16], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x11, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1m31.025395936s ago: executing program 1 (id=6445): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xc0}}, 0x14) (async) r5 = openat$cgroup_ro(r3, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/144, 0x90}], 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async, rerun: 32) r6 = accept$alg(r2, 0x0, 0x0) (rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000100001002fbd00"/20, @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006e657464657673696d300000000000000c0016800800018004000c80"], 0x40}}, 0x24040800) (async, rerun: 32) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) setsockopt$inet_int(r8, 0x0, 0xc, 0x0, 0x0) (async) sendmmsg$alg(r6, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8", 0x17}]}], 0x1, 0x4814) (async) recvmmsg(r6, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000340)=""/21, 0x15}], 0x2}, 0x3}], 0x2, 0x2001, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x0, 0x0) (async) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1, 0xfffffffd, 0x0) 1m30.751918839s ago: executing program 1 (id=6449): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000045000900000000000000000003000000080002"], 0x1c}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 1m30.694342316s ago: executing program 1 (id=6452): sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x7b, 0xfffffffa, 0x20, @loopback, @remote, 0x7800, 0x700, 0xd, 0x5}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x0, 0x1, 0x0, &(0x7f000000a500)) (async) getsockopt$bt_hci(r3, 0x0, 0x1, 0x0, &(0x7f000000a500)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r4, 0x25, 0x0, @void}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, r8, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x62}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x39a}]]}, 0x38}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r6) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r6) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000001f80)={&(0x7f0000000ec0)={0x1090, 0x0, 0x100, 0x70bd28, 0x5de0, {}, [@ETHTOOL_A_EEE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x1008, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x2}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x1090}, 0x1, 0x0, 0x0, 0x2040811}, 0x40) r9 = accept$packet(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x14) setsockopt$packet_drop_memb(r9, 0x107, 0x2, &(0x7f00000002c0)={r0, 0x1, 0x6, @local}, 0x10) socket$inet(0x2, 0x4000000805, 0x0) (async) r10 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r10, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x18}}], 0x2, 0x0) 1m30.544173757s ago: executing program 1 (id=6453): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x9690220f77f9bec3, 0x70bd2c, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000) (async) r2 = socket(0x22, 0x2, 0x4) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40000003) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000010000104ffffffff0300000000000000", @ANYRESHEX=r2, @ANYBLOB="00000000bcb5f31a1c001280110001006272696467655f736c6176650000000004de0480140003006261746164765f736c6176655f310000"], 0x50}, 0x1, 0x0, 0x0, 0x20044010}, 0x4050) (async) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000000)=0x10000, 0x4) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000000)={@remote, r8}, 0x14) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x74, r8, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0xfff1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2001c015}, 0x4008054) (async) close(0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000000000203000000020000000000000700000000000000000000000d02000000000051"], 0x0, 0x40}, 0x20) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x5, 0xcf) 1m22.593407177s ago: executing program 32 (id=6380): r0 = socket(0x11, 0xa, 0x10000) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000000), 0x4) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c001680"], 0x30}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) 1m15.537261498s ago: executing program 33 (id=6453): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x9690220f77f9bec3, 0x70bd2c, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000) (async) r2 = socket(0x22, 0x2, 0x4) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40000003) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000010000104ffffffff0300000000000000", @ANYRESHEX=r2, @ANYBLOB="00000000bcb5f31a1c001280110001006272696467655f736c6176650000000004de0480140003006261746164765f736c6176655f310000"], 0x50}, 0x1, 0x0, 0x0, 0x20044010}, 0x4050) (async) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000000)=0x10000, 0x4) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000000)={@remote, r8}, 0x14) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x74, r8, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0xfff1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2001c015}, 0x4008054) (async) close(0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000000000203000000020000000000000700000000000000000000000d02000000000051"], 0x0, 0x40}, 0x20) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x5, 0xcf) 58.78179156s ago: executing program 5 (id=6855): r0 = socket$inet(0x2, 0x80000, 0x5) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={r3, 0x2, 0x10}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r3, 0x9}, &(0x7f0000000100)=0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@ipv4_delroute={0x24, 0x19, 0x1, 0x70bd25, 0x25dfdbff, {0x2, 0x20, 0x80, 0xcc, 0xfd, 0x2, 0xc8, 0x6, 0x400}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) 58.479497783s ago: executing program 5 (id=6858): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002700090025bd7000ffd3008001000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xfffffff2, 0x80, 0x7, 0x10, 0x5, 0x3, 0xfffffffa, 0x3, 0x100, 0x7, 0x9, 0x1f, 0x1f, 0x5, 0x3ff, 0x3}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008881}, 0x0) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r2, @ANYRES64=r1, @ANYRES64=r1, @ANYRES32=r3, @ANYRESHEX=r5, @ANYRES32=r4, @ANYRESDEC=r4, @ANYRESDEC=r4, @ANYRES64=r1], 0x44}}, 0x40800) (async, rerun: 32) socket$pppoe(0x18, 0x1, 0x0) (rerun: 32) 57.98294191s ago: executing program 5 (id=6863): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xd62, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000080)) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f00000000c0)={r0, 0x0, 0x5, 0x1, 0xff, 0x2}) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x80705864, &(0x7f0000000100)) r2 = accept4(r1, &(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, &(0x7f0000000200)=0x80, 0x40000) recvmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/248, 0xf8}, {&(0x7f0000000340)=""/115, 0x73}], 0x2, &(0x7f0000000400)=""/142, 0x8e}, 0x21) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_EXCHANGE_RANGE(r2, 0x40285881, &(0x7f0000000500)={r3, 0x0, 0x2, 0x800, 0x7fffffff, 0x8}) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f00000005c0)={'broute\x00', 0x0, 0x0, 0x0, [0xffffffff, 0x1, 0x7430, 0x401, 0x0, 0x6], 0x1, &(0x7f0000000580)=[{}, {}], 0x0, [{}]}, 0x88) getpeername$l2tp(r2, &(0x7f0000000680)={0x2, 0x0, @remote}, &(0x7f00000006c0)=0x10) sendmmsg$inet(r1, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)="6e9fdee2ca8cd7acb7f897961313f6618b9dcc3f8be33b23c7806b2d42183eca7fc85206fa318947b5ce7eb73a5d4be55cd70c50d4fc2ca0615846128471de1876e81de5b7e78e9af4532d807ce9d1aca5e23e864079eba2a07990952600f825f984b162af2a158f3ba865b826fd0cbdaec04344b823f58f9aeb12", 0x7b}, {&(0x7f0000000780)="fcaa05ec0f5fe9d0129017cf4a5aee37f0343e475b5b0382202cc80c24ed7c25742d0532e0d9714580e6e780", 0x2c}], 0x2}}, {{&(0x7f0000000800)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000840)="cb5470d6059942f9e697f9cf25be9be5de22fe7b39f33c35168f2e4fd0349acb3d19f1eefd2eb42c843810c3ee0ab21cf161f74651369eb75ff932023101f595da88d98fac6264704fa625977fc3df2e684cd364825f26b340781e7a7e7370cd73fe858f5e0bce20afdaa5a61ec367138edb1f9d8d37a4806591dda66685de1c8e708a144366", 0x86}, {&(0x7f0000000900)="704e7968bb2f93264f743df5ca60d0b6b511fa413afc47c1d3a1122860c3686ff61a96094bb6d83cc884512f42941b470a681047d92d96be439b2271606bd430ed7cf62cc32871123c4848edddd35a207cd25b65e7957e270918e74d3975c5a4fdb76770d845700bb2dadb1bc0f81122e2589111eb939d511b8887cd6ff3d516b9d7d7ae7c9fcdcb916bc9a67835e512127eaa7da22816ddcdeb723a9ebacb779d8581f2a674886f0c9745972ec36b64fdcaabe02ade8340825e0c86278d15b8dd6bcf0b1665b64d49", 0xc9}], 0x2}}, {{&(0x7f0000000a40)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000a80)="895e6e358d21b38bc3edd0a269e5f0c22c971e7ee72ba0f555d88f355b70ea06675f6e18906eb8a489e188cedfb1a9490cc2bb42e8fa31a7d7380d7338533f9c2f36f0ac95a8439a428cbeb139d1935ad4ca029ec62c02f353323d5e89b6e31a54064fd0", 0x64}, {&(0x7f0000000b00)="167994b0c61558e4d11c8e817f486cbca82c1a1d58850a3bf6841b60bed6fab811070b6c50b91416fa10dbc48c2f77fb061ee85907e969da960baa00d59f715ac04df8e7cdba504bc34e2746368db3388e3aaf67729a8e95f0f78d16ce938895cee3240fc24ded830515bd20b081f916cffabeb249ffca61059581c54aca0f9cdda97eb09261efa31eb4eedb277f4382a00970d4b2a29c300abd", 0x9a}, {&(0x7f0000000bc0)="2c4b19d085a9b765ccbb8cf56305986172c23843ba13be043d352209b31b954d3313b0d90618c799e877624cfdadb1a5b648cdb1d68c1289c4748c31239c6f1da7", 0x41}, {&(0x7f0000000c40)="cc6fb8d05366bb8c6f93b84fd249e8bbb9bd0a3121064591e064280e6ce6dcdd99f95001c69c45be3af293877579fa2cf31ffb35a531e7555b30d1e7cc33362df6a682d88719318b6bc2112a1fa6b16d23014ca64d00d5ea9b2304255098e7f220b5f2a5bec1a5a21b5dda4269bbb964295e3fc1fa510f8e5e7199a7a261e3250b30dc2a9b0ca1d138407bf4a1eda811a03e8af658cb148d1efc0a5926479d1386622e8b8e6fd514e0709c8543dc327f353b909c25fe40bfa63bbb4b1b545a3c78e11e50527068c27686c7f276115e2c4e2f265a8ee2985a", 0xd8}], 0x4, &(0x7f0000000d80)=[@ip_ttl={{0x14, 0x0, 0x2, 0xde}}], 0x18}}], 0x3, 0x48) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x3c, 0xf, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000480) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000fc0), r1) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x44, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x48090}, 0x800) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001100)={'pimreg0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000011c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x28, r6, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x46}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24040080}, 0x40800) recvfrom$l2tp(r0, &(0x7f00000012c0)=""/244, 0xf4, 0x10000, &(0x7f00000013c0)={0x2, 0x0, @broadcast}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000001400), r2) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x82030, r2, 0x6237f000) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000001440)={0x1, 0xf}, 0x8) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x28, r6, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x54}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc810}, 0x800) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000001700)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000016c0)={&(0x7f00000015c0)={0xf0, 0x1, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x80000001}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x14, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x10001}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x84, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x20000001) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001740), &(0x7f0000001780)=0xc) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x20, r6, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x819, 0x52}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004090}, 0x4000000) 57.771800152s ago: executing program 5 (id=6867): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x800}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}}, 0x0) r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 57.599024173s ago: executing program 5 (id=6871): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0xff}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r1], 0x1000f) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x800) setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x158, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0xc131) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c8", 0xb) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r4, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001e00)=""/229, 0xe5}], 0x1}}], 0x1, 0x11, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, 0x0) 56.615042341s ago: executing program 5 (id=6886): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x20000000000000a, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002600010026bdf000fddbdf250500000054a612d463424358bb31ca5c9f47e6e59f1f1ddd9bc898604755e5374c728057344301937cbb2e1937429412576d0d537be2a58becef33c4048fd390b2740cf2e55864331c8416873d69b6d94ee022b59248fea775c2b0e6f9c984ea97a690cf760d80bfb613638f50b9ae3c98b75a4423c881a84ada444722703dd4a444c221c49b6157ab70a45c65bbfaed795e29f0a0df41dc97f6d17f12dfdb3fb31f076c05b000b0f3e2b00e47482705a8c0dd5b86923fc07507774b4dd57b6abf3e9610be17c1bc44b83e8d3725772a7b30148fdf"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0xe, 0x0, &(0x7f00000001c0)="ffffffff7f833e9762a536c801d7", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x28, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000004}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "8750bb", 0x28, 0x0, 0xff, @dev={0xfe, 0x80, '\x00', 0x23}, @empty, {[@dstopts={0x2, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @padn, @hao={0xc9, 0x10, @empty}]}]}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0x11, 0x20000000000000a, 0x300) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002600010026bdf000fddbdf250500000054a612d463424358bb31ca5c9f47e6e59f1f1ddd9bc898604755e5374c728057344301937cbb2e1937429412576d0d537be2a58becef33c4048fd390b2740cf2e55864331c8416873d69b6d94ee022b59248fea775c2b0e6f9c984ea97a690cf760d80bfb613638f50b9ae3c98b75a4423c881a84ada444722703dd4a444c221c49b6157ab70a45c65bbfaed795e29f0a0df41dc97f6d17f12dfdb3fb31f076c05b000b0f3e2b00e47482705a8c0dd5b86923fc07507774b4dd57b6abf3e9610be17c1bc44b83e8d3725772a7b30148fdf"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0xe, 0x0, &(0x7f00000001c0)="ffffffff7f833e9762a536c801d7", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x28, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000004}, 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "8750bb", 0x28, 0x0, 0xff, @dev={0xfe, 0x80, '\x00', 0x23}, @empty, {[@dstopts={0x2, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @padn, @hao={0xc9, 0x10, @empty}]}]}}}}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async) 41.581785598s ago: executing program 34 (id=6886): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x20000000000000a, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002600010026bdf000fddbdf250500000054a612d463424358bb31ca5c9f47e6e59f1f1ddd9bc898604755e5374c728057344301937cbb2e1937429412576d0d537be2a58becef33c4048fd390b2740cf2e55864331c8416873d69b6d94ee022b59248fea775c2b0e6f9c984ea97a690cf760d80bfb613638f50b9ae3c98b75a4423c881a84ada444722703dd4a444c221c49b6157ab70a45c65bbfaed795e29f0a0df41dc97f6d17f12dfdb3fb31f076c05b000b0f3e2b00e47482705a8c0dd5b86923fc07507774b4dd57b6abf3e9610be17c1bc44b83e8d3725772a7b30148fdf"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0xe, 0x0, &(0x7f00000001c0)="ffffffff7f833e9762a536c801d7", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x28, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000004}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "8750bb", 0x28, 0x0, 0xff, @dev={0xfe, 0x80, '\x00', 0x23}, @empty, {[@dstopts={0x2, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @padn, @hao={0xc9, 0x10, @empty}]}]}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0x11, 0x20000000000000a, 0x300) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002600010026bdf000fddbdf250500000054a612d463424358bb31ca5c9f47e6e59f1f1ddd9bc898604755e5374c728057344301937cbb2e1937429412576d0d537be2a58becef33c4048fd390b2740cf2e55864331c8416873d69b6d94ee022b59248fea775c2b0e6f9c984ea97a690cf760d80bfb613638f50b9ae3c98b75a4423c881a84ada444722703dd4a444c221c49b6157ab70a45c65bbfaed795e29f0a0df41dc97f6d17f12dfdb3fb31f076c05b000b0f3e2b00e47482705a8c0dd5b86923fc07507774b4dd57b6abf3e9610be17c1bc44b83e8d3725772a7b30148fdf"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0xe, 0x0, &(0x7f00000001c0)="ffffffff7f833e9762a536c801d7", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x28, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000004}, 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "8750bb", 0x28, 0x0, 0xff, @dev={0xfe, 0x80, '\x00', 0x23}, @empty, {[@dstopts={0x2, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @padn, @hao={0xc9, 0x10, @empty}]}]}}}}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async) 5.314079538s ago: executing program 7 (id=7560): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x400}, &(0x7f0000001100)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0xffffffffffffff8e}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x41) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="24040000", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fddbdf250200000008000100", @ANYRES32, @ANYRES32, @ANYBLOB="1c02028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040003000000080007000000000040000100240001006d625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ff01000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100008040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000900000038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040008000000080001"], 0x424}, 0x1, 0x0, 0x0, 0x408c0}, 0x40001) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="040044800800c800e00000027a01f380a2b4c1dbd4f221c0a1fd468ca63ae97de147e5bc2d0313377dc17591b491acf18312bee324decf810970090c77ec4ca173b12577aeb13c354245be77050365697b3b4707060c00045e46d612b09c487d7c9c94f778c0a015ecfa70d229085252956142772f9ff5a61a9b7fbc6712f8e64566b7ade87d293b81bd3cd1b2ad2852dc1dbb07d54f5544759f0eb23131b5780de6354f0714b2c5b86323969d0b4f5bd8c4489e0e7471c6a84feb9dead9d156d060a9373c7f80f4f1ec2a87efdeceec8d99c9664ee184f112929fe92da18f26929f98233f18dcbe0c638c040061800400058012fc33716331943112df1a6d89852782e376609e4a38717148d34e9d36191fe607748ad822c89800b204bd5831c55511fc4e85d09c44ef3be8ce710d034d394057d88e12db87eb032cd30fdcb489cd5ac92a44f96b6e463971c730796efaab04ce1b42faea757fc0a50c4feef468c80d7cac7db3bfd67140c04f88892b1d19a91ac5d2bef2af704fed3f92e84f78f98e97b8460000602ca31cc4edb57168863fe0e930a6030e47048c91da29a2c691894cd27b28480642302c6816b308d3eaceb9c1404c696e8a2deb97c278ca9d9b1ea4aa17255b400acdda233dde73b32098f837494e43a67bbb722f105f5ae23d8e4c9586ac0ff8c1c6c330601a9c007659ce63c0387d6692d791abdb14b8b66d6b30e5556865a6e97922f3fddcfd1a7e2cbf30b30479b4f7b824b49b1a8e5cd1ec171c8fd41bc3b14ced446eadedd90178f121d6e4d3ae3031231f39fcad0501455538f57fc305f449144d0e4f1f642ff19c53dea5322d30d680f6efdce4f7310225fa8e8a3035d925f51090e4fa74346825d16d400b9cea013e88ea47db2efbbbe73c3ae0059974efa840d4ee88ae1f85d6ba36caa8df64cbf4c1716de586b6fce1424c8bc3a0218953ea42dc7e83bda5a4319b59d7926fe04553fe79056a397ea85f6255d093a345aaf5f3d91cdce17cc9d38493e7eb952b132dc8f7953706ea7b7ff81e88a2a87f18730ca7f6f16f2c23b85f549a8b0cce6f8f0ec61fa8ba01aa114fbd63373ae3189338aa5f585a6d454733937712eb5a4cbd810c91bf5f19e0a508db8a57bdd8000000960203"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x44, 0x2, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_EXPECT_HELP_NAME={0xf, 0x6, 'sane-20000\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004050}, 0x4004808) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5.029404127s ago: executing program 3 (id=7566): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r1, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x54, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x5, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x20004000) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0xffff}, {}, {0x2, 0x6}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x2f, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x40054) 4.787417964s ago: executing program 7 (id=7570): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0f0000000400000004000000120000000000000071ad8d8d177fd219a123fd444f570a9ddd6cea1f7d638bc51ab37eaf21ad359737a6ece818968490b30c214fb429d77af7eb8cf5d6fdf43b2bbc8d4620041ca70132b7d3e3476cf78ac725482d238d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="260000f533fcb58e37d90e00", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001140)={0x18, 0x40, 0x107, 0x70bd26, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1c2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048081}, 0xc000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x20, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x7}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x114}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20008811) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r8 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r8, r7}) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r5, r4}) close(r6) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r11, 0x84, 0x65, &(0x7f0000001500)=[@in6={0xa, 0x4e22, 0xd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, @in6={0xa, 0x4e24, 0x80000001, @local, 0xd}, @in6={0xa, 0x4e24, 0x2809, @dev={0xfe, 0x80, '\x00', 0x14}, 0x200}], 0x54) r12 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r10, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x25}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xcd}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x898) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x38, 0x2100) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x4, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES64=r12, @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x4, '\x00', 0x0, @fallback=0x17}, 0x94) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000240)=r13, 0x4) r14 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) 4.710409665s ago: executing program 6 (id=7574): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$nci(r1, &(0x7f0000000040)=""/4096, 0x1000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x3c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000011c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001180), 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x2c, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x2}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x44, 0x3, 0x7, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xdc2}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5e5}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x768f5e2e0fa36d1c}, 0x40801) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000001440)={0x0, 0x120000000, 0x0, [0xe, 0x5, 0x4], [0x37, 0x5, 0x80, 0x6, 0x4, 0x8, 0x1b, 0x4, 0x9a3, 0x4, 0x4, 0x101, 0x4, 0xfffffffffffffff3, 0x0, 0x3ff, 0x6, 0x4, 0x9, 0x1, 0x3, 0xfffffffffffffc5d, 0x38, 0x3, 0x9, 0x7, 0x9, 0x3, 0x1, 0x7, 0xffffffff, 0x8, 0x7, 0x3, 0x100, 0x2, 0x7, 0x5, 0x10000, 0x7, 0x35, 0x4, 0x8000, 0x7d0, 0x8, 0x522bf800, 0x7fff, 0x8, 0x80000000, 0x101, 0x1, 0xb, 0x5, 0x9, 0x10000, 0x9, 0x29, 0x1471, 0x81, 0x6, 0x5, 0x8267, 0x2, 0x6, 0xfffffffffffffb9d, 0x8000000000000000, 0x1d, 0x9, 0x136, 0x63b, 0x60e3e57d, 0x5, 0x798, 0x97dd, 0x9, 0x7, 0xa, 0x50b, 0x200, 0x10000, 0x1000, 0x6, 0xfffffffffffffff8, 0x7, 0xd, 0x2d, 0x8, 0x4, 0x8, 0x99, 0x5, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2, 0x90, 0x8, 0x100000000, 0x9, 0x1, 0x8, 0x0, 0xfffffffffffffc2a, 0x5, 0x10, 0x5, 0x2, 0x6, 0x200, 0x7, 0x7fffffff, 0x3, 0x7f, 0x0, 0xb500000000000000, 0x2c3, 0x81, 0x10000, 0x1c, 0x1, 0x6, 0xffffffffffff8001]}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000001880)={0x0, "52d8ca4dd93904e9a8f030bdd34c3c49"}) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000002880)={0x8, 0x0, {0x2, @struct={0x7, 0x2}, r6, 0x3, 0x28, 0x6, 0x8, 0xb, 0x24, @usage=0x8, 0x52dc, 0x2, [0x0, 0x5, 0x5, 0x6, 0x0, 0x8]}, {0x8, @struct={0x5, 0xb6}, r7, 0x100000001, 0x9, 0x8, 0x0, 0x4, 0x409, @struct={0x5, 0x9}, 0x32, 0x1, [0x9174, 0x8000000000000000, 0x3, 0x2, 0x8, 0x7]}, {0x9, @struct={0x0, 0x10001}, 0x0, 0xffffffffffff17aa, 0x7, 0x8, 0x2c0000, 0x8, 0xa0, @struct={0x4}, 0x2, 0x4, [0x80, 0xfffffffffffffc00, 0x1, 0x0, 0xffffffffffffff5a, 0x6]}, {0x1, 0x2, 0x5}}) socketpair(0x9, 0x4, 0x7ff, &(0x7f0000002c80)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$CAIFSO_LINK_SELECT(r8, 0x116, 0x7f, &(0x7f0000002cc0)=0x4, 0x4) r10 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r10, 0x0, 0x480, &(0x7f0000002d00), &(0x7f0000002d40)=0x40) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000002dc0), r0) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000002e80)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x14, r11, 0x200, 0x70bd2d, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x40000) ioctl$PPPIOCSMRU(r8, 0x40047452, &(0x7f0000002ec0)=0xe1f6) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000002f40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000003040)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003000)={&(0x7f0000002f80)={0x48, r3, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x48}}, 0x8010) r13 = syz_genetlink_get_family_id$gtp(&(0x7f00000030c0), r9) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000003140)={'ip_vti0\x00', &(0x7f0000003100)={'gretap0\x00', 0x0, 0x7, 0x700, 0xee, 0xc88, {{0x6, 0x4, 0x3, 0x7, 0x18, 0x66, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @multicast1, {[@end]}}}}}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000003340)={{r5, &(0x7f0000003180)='-\x00', 0x400000, &(0x7f00000031c0)={@align=0x3, {0x7, 0x1ff, 0x47fc, 0x4}}, 0x1, &(0x7f0000003200), &(0x7f0000003240)=0x1}, {[0x8, 0x3, 0xfffffff7, 0x9]}, 0x5, 0x9f, &(0x7f0000003280)=""/159}) r16 = syz_open_procfs$namespace(0x0, &(0x7f00000033c0)='ns/user\x00') ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000003480)={'gretap0\x00', &(0x7f0000003400)={'sit0\x00', 0x0, 0x8, 0x80, 0x6482541c, 0x3, {{0x12, 0x4, 0x1, 0x6, 0x48, 0x66, 0x0, 0x40, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @rand_addr=0x64010101, {[@noop, @timestamp={0x44, 0x20, 0xe2, 0x0, 0x4, [0x4, 0x5, 0x7, 0x38, 0x9, 0x3, 0xae7]}, @ssrr={0x89, 0x13, 0x16, [@local, @dev={0xac, 0x14, 0x14, 0x28}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendmsg$GTP_CMD_DELPDP(r9, &(0x7f0000003580)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003540)={&(0x7f00000034c0)={0x50, r13, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_LINK={0x8, 0x1, r14}, @GTPA_NET_NS_FD={0x8, 0x7, r15}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_FAMILY={0x5, 0xd, 0x26}, @GTPA_NET_NS_FD={0x8, 0x7, r16}, @GTPA_LINK={0x8, 0x1, r17}]}, 0x50}}, 0x0) sendmmsg$inet6(r9, &(0x7f00000041c0)=[{{&(0x7f00000035c0)={0xa, 0x4e22, 0x81, @mcast2, 0xe06}, 0x1c, &(0x7f0000003980)=[{&(0x7f0000003600)}, {&(0x7f0000003640)="6c1faa369ad1b2c5ad7421ebdc64098a50b840288e6c6ace864b163daae28aecb200031dcd0ab0bc5e7fb459ba0075819183ac385f47098d12e417f4579b209a1718b5d1b290729c21d4eae44c60c9cface0a5514ee56a631fd833344966260c47dec9e436d3b78325c724c57b7ea0431e110f9c7bc9438484366478d2c62c596351b5deae85987d42c7490bf891d456e68c51008097e190076e4a73455eb4a22c8866c9d6bfa2bbccf15dffb5d11608edd606392a92faa53cecf14673bcd740a02281735aa575df3b44f19d2ffe", 0xce}, {&(0x7f0000003740)="2af60b2c4d3d30232643c9d56e8185f38900498646f49e7dc6f5dfc3a46681cc3f4e73114e0ade426f719aa2db0d8637d5ad513a4a0f6a890ff4fe1e57fda2d24f216223d879f5de870aa193c336dd719b585f37ae89fbc00bb3bea651cb122f3a1ebb57d54538170616d2637ceb55291f32e9de4cc670a274f4f430d072caea1b1412db2a85a05e9ef194080d32453b2c4196bbfc319eb25e5d9411485bb28714d6ac8b747145f51093b0af195a44df646e655d97ec0257ec798da7a5c1abde4448c21aacd40cc2c4cc44b86e3507b7108c0f137769", 0xd6}, {&(0x7f0000003840)="518fb08f3614a65fc6bc60b99f68b3a56a", 0x11}, {&(0x7f0000003880)="e47887b52fcd5e2d33e3bdf1dff2179b62fb2699a2d76738d473", 0x1a}, {&(0x7f00000038c0)="095677cdb30d83fbcbbede160eeb0f51f6831c51b5e4aacb8326cc88f308fb226c4cb2f20de7941bca1d5883b0d42191a9772d37ee800aa4af60e969c2d42a09a048f98a90544c382e07a391e34f793e2e0281e97828dc61feca522da670d95cedba900207893c32f44abb9c9b230a9a28661be4fa249f9782458afc9d443281f553c69edfe99452aee38df03215808acef9119782fe7b55cf0225cab7eac89b08779b350eb28b32", 0xa8}], 0x6, &(0x7f0000003a00)=[@dstopts={{0x98, 0x29, 0x37, {0x67, 0xf, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @calipso={0x7, 0x20, {0x1, 0x6, 0x3, 0x4, [0x4, 0x7, 0x8]}}, @calipso={0x7, 0x50, {0x2, 0x12, 0x9, 0xffff, [0x3, 0x100000000, 0x1000, 0x8, 0x41, 0x9, 0x2, 0x7ff, 0x81f]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}], 0xb0}}, {{&(0x7f0000003ac0)={0xa, 0x4e22, 0x6, @loopback, 0xd}, 0x1c, &(0x7f0000003f80)=[{&(0x7f0000003b00)="edce455c18fec09dc66805654e6dd710017dff55d6c8a507c5c7389ec88561ba4a57657c44d4b50a9242139c8307dc022925e845bef1aa6c66b820922012ce47d8af4443559ade0b95a53d0474a21bd0d2f1d1cc54f485ac38309f4c5169712e0bf775865d83cfba1f211d912fef091e56db8d7e8c218bc39d87415a43ad6448d146897afc7448d6dc7dcccb9c7ac30cf9757c1a72d6c773db6411a19b912af4d8a6f125d82ca893d241b125d7c8790e29f21cd7261c8de75e9757e3518a2492c91ccf71015e33d5c4891afeabdb3d67f9fcae4384a408a393af11577aefd30a959d92fd", 0xe4}, {&(0x7f0000003c00)="db063b6410d03285c3cc6e97f4ccc73d2fcfc433268c4b65dc0508d45be2313bfa4f38f1f223db419514bb2d728ffbbbb17cb980a0c74a9471b2d9e53729497645b0cf1eb06b7c93e4b61515439253bfc45c89c530ed39ec87cead4cb4cdb1f9a68fd305d2852ef96263a2cd9dc6056f009c3e1d6b3c62", 0x77}, {&(0x7f0000003c80)="8252bb3617c9b0b5d97999d7e1bdbd673afe191841d248f94d249e7ba818e68055a5e0ac3392641f8b41d25c4a36a07bc59145169798527105e3e7af979f63a37cbb06170f1bf9f4d0b7d8407a7bbe47878a7f150b42281ea03ac3bd5ac7f564f9f542a2de065682660ef3185f3db0c46ed40ba2d1", 0x75}, {&(0x7f0000003d00)="123a3e9997a3c904c7a91468838b778364d8d99753b4672191f11e4626ec24841fe1e74fb21ae225a76315cf55c840756aba0ac30a3ed5210297ec99a761", 0x3e}, {&(0x7f0000003d40)="8a88502666d9e6c052cf244715dd1b2e72c4968d976fe90336e4ec41846df1516a4a7e1fbcf2693378b5b1afd1f447f3dffdee6b", 0x34}, {&(0x7f0000003d80)="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", 0xfb}, {&(0x7f0000003e80)="89610027457deedea0b97a196b4854487c3fcfcbd346781ce598935a3444cffa28a15e1a8ee157381feee9426bb76d8525fe88ac0172f920cf5e979ee3beb21c521e2b0f4897ad92a7ee503dd7e092df79ee581d6715cbfd30cb2312a391dd8df5b11d5ccfec4ff63f6c151a46baadf0dcf3a7307f28c54d712da32cf4eaff6e10c1b4d72729d62dbeae6edaad13caacfa7375d224b5f692c12f1f971d9cd61d23d38894fe67183d19053ef28d6e58c04719fa87f92b0629ea37936c46efe6808f149893ccd48e17d85ea0f9021376be263cca83206737b4be8ce6c0666bd2986176", 0xe2}], 0x7, &(0x7f0000004000)=[@dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @dstopts={{0x40, 0x29, 0x37, {0x3b, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0xb}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x13}}]}}}, @hopopts={{0x88, 0x29, 0x36, {0x2f, 0xe, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x3, 0x7, [0x2, 0x0, 0x3, 0x5, 0x1, 0x5]}}, @generic={0x1, 0x34, "544e60add9f84edd6f28346d9842f6661221c8e11c027ba4868597e0c0f868a2d99ace4d2c4358cadae9df6c5a89ac2b9e97dd8c"}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x0, 0x4, 0x2, 0xff, 0x0, [@private2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x11, 0xe, 0x2, 0x5, 0x0, [@dev={0xfe, 0x80, '\x00', 0x17}, @dev={0xfe, 0x80, '\x00', 0x3d}, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote]}}}, @tclass={{0x14, 0x29, 0x43, 0xf}}], 0x1b8}}], 0x2, 0x0) 4.587433879s ago: executing program 3 (id=7575): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x20, 0x6, 0x2, 0x2, 0x8000, 0x1, 0xe4d6, '\x00', r1, r0, 0x4, 0x2, 0x804, 0x0, @value=r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, 0x0}, 0x1c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r4 = accept(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000003080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2404e0c4}], 0x1, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f0000000140), 0x0, 0x44) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x12a0, 0x1100, 0x18c, 0x203, 0x1100, 0x19030000, 0x11d0, 0x2e0, 0x2e0, 0x11d0, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x10d8, 0x1100, 0x0, {0x1000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0xfffffffc, {0x3}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x8d, 0x74c}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1300) 4.547478947s ago: executing program 3 (id=7576): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000600)="38008e7064086f9abdc8bd4978df", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x18, r2, 0x1, 0x7, 0x6, @remote}, 0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @remote}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 4.521457561s ago: executing program 2 (id=7577): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000200)={0xffffffffffffffff, 0xe, 0xe, 0x886}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x9, 0x4, 0x1, 0x5}, &(0x7f0000000600)=0x98) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000f00)={0x0, 0xea5, 0x30, 0x0, 0x80}, &(0x7f0000000f40)=0x18) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001280)={0x0, @in6={{0xa, 0x4e22, 0x5, @private0, 0x2c000000}}, 0xb76, 0x1, 0xb, 0x4, 0x2}, &(0x7f0000001340)=0x98) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000001380)={0x0, @in={{0x2, 0x4e21, @loopback}}, [0xd, 0xff, 0x80, 0x40, 0x180000000, 0x4, 0x7, 0x81, 0xc, 0x0, 0x0, 0x4, 0x6, 0x1, 0x1]}, &(0x7f0000001480)=0x100) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0x7d, &(0x7f0000000700)={r6, 0xfffff801, 0x11e2000, 0x62c, 0x100, 0x2, 0x2, 0x4, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x3, 0xfffffffb, 0x3, 0x1000, 0x1}}, &(0x7f00000007c0)=0xb0) sendmmsg$inet_sctp(r0, &(0x7f0000001e00)=[{&(0x7f0000000240)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f0000000500)=[{&(0x7f00000002c0)="25f1828feda03fd9b3c407e62c504501d261e21a92ef2c5e31b54dd0135cf783b4b7c8717b43cca5754fec6c879db2", 0x2f}, {&(0x7f0000000440)="2c4c3749e9e6ea9000f35a230eae04fadff309f35268e2d443019559fd78dca3841a18b5b03a70ab60aafb08ccd64b5e47e02b739b33e0b67e35ab2605d665afc623cd4916d3127a21a20f2b8263628aa5395f135ac6b91e90409e9b661eba28e0d6dcd2192a44ea5a8538286185a22b8a1daa81dbe02aa42206cb8db6003388e8de27806ecc6971fcdb9d4244e74e79dcb06181048c72b81eb30180d8ba5b7c7113c259ceed906a02cae06c10fc7b61b6855edc", 0xb4}], 0x2, &(0x7f0000000640)=[@sndrcv={0x30, 0x84, 0x1, {0x6, 0x7, 0x8, 0x5, 0x40, 0x5, 0x10, 0x200, r1}}], 0x30, 0x20004810}, {&(0x7f0000000680)=@in6={0xa, 0x4e22, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd}, 0x1c, &(0x7f0000000e40)=[{&(0x7f00000006c0)="7a522142d8982565f8961c701d481b014d84cdab221a77ad1e440690e87b1751eb7c0ad8ca8cb22c3121f769c8c29248fcdf5fd3254cecf15bc5480a59b36df8751b8d4dc2d70df4e921b978ea6c0c381f1d85f701b1c74704f1058d4baabb0dab3b2eb84b7c4fc954b738a4539569d77e48d5892e52e8dc1ecadae8b5a3d3afe1fde8abaa20d25e556e47c353b6141d9f9bd814a8a12afeea5a3d1537f4dfb2a0e074a153dbe9a9086da330eef9ef2d2993145c7905f7af778d5793a376a3a090bde2c8b338f0580a54c086f8fbd599e6451b710aadd70b2d", 0xd9}, {&(0x7f0000000840)="21933e22833e6eef1bfad38c1df26787bde7e42a51443205dc9bd97316d7f17759c60b87c9c787bfa6b1b5d538930f6466e1c88d2866bea9e08a54171a25e354ba062e05914d7727cf31c97ba7fd3810833be4f9262f7ea032c7058ed0b53b0f1f78fd03f35c895adbf2223750a2a6747df4e64daef4503873c8ae73a3b04486c1003f1fb341bf9422831529d1a92b65a1a671742c3b7ccd54b19a0af1348e15766cc0adc2d8ce0db290d78b08a9e885699184fe530404b438612105e73d4c6f43c1837d8f9b767657ec897877c60a9f973c80516abf9475222b9645257981668abce67f972c5df4c88a017311", 0xed}, {&(0x7f0000000940)="6fe500e2aa0a4d5de6eef117715ff85e3bd47266e029cde87c37ec8c9718f9b3320b8f01d8b91a9b7d0216c1418afbbd4be0ab1f03c8b5a2cfd4beaf8835bf958ab46de6f009955dcf2589937248fd9a613144ee5bc2ffae2b62ced67d483686e1d129d0f04af62fcb355e3854411ae01bfbc82145ffbbd478d37cfb65b520d6bc768d77ba9fa6438dfb73edd539c5ba9795ce609fd03728d0992ea609c02061cedc028ca380ede2af9a31336dd83a13e0b8f85cf137", 0xb6}, {&(0x7f0000000a00)="06decb2ce99e56d808b5bc8c21abf45a9e81335150b34138d68af919e151c68c45550b27a0b637db50faa39a149278271e348d6a7d54564a52492b8d9878dff271f5eafd5d1dd5fbf39464c86db58c47b166203eeb16c85a43", 0x59}, {&(0x7f0000000a80)="93b5f87db84c4685b8224c1550f21202b93e7589a635d6e6d52d31a811bd30e24d5b6d7667ab1e2ee4bae9b63b0dd4b217242fa7c684363de0c8620b2d55fda3d2d24996bf7e94e733cff59636ca2a337734095b036dfb835e35581920f4ad0e5e3912299fc17c2abbc9d7c70025196677059770524693d3562d799dc8fd563e415e4df543d0ab81e49e2c9b5f23f6c75e7917b225b048ccec15db68fde294da1ba8bc137815d831a6e8be4fc5b21e8c6fd7460d5f94ae8167f8beced50ca819167c87e67dd5d1d5f7c530361f2339ee6919c58e3ab9f9bb6b2777371a6fad", 0xdf}, {&(0x7f0000000b80)="b5fc3c48053795e2f6fcbbc776670965cc908c7ce61f8c729442bba1563d967b681c1f3c6fc92670805adf41e8e5e348ed599fbe3384d228660d99ce81ae792f9562131fad9df074c56d286328ef76c27d990dadd197b04a44a69cbba5000f0cedb9a8399564509738480c100008f12fb83787d6eff3e0910bca099dab53005fb041478f05147c116764a821cc6629fab7153f600206257814b8721f29e21b1ad46c2f02cec892ecb8", 0xa9}, {&(0x7f0000000c40)="ed60d49f2d727fd643f47f7fff5ddf4d7fb9c60ca57a81fc2e900373f6ad91cdd3ded14a74f272b06a1a4c8604b917e6f81e474450198a5afa64a13eb5345b4dc648c05a0982596aaa0b9bb25cc60480c3092592ea5ebde1c2badccdf6543aa7132ed23c584f2d70b6dd71a9c3aef417b8ad7b4fbfd26e58a8d0bee24a9df7772d78e98bd5069e528ebf7d68a956e4d85ac936aad433afaae5d43b0903b6083c699641f157b496a08a2af247be17", 0xae}, {&(0x7f0000000d00)="c16756b4ef8ef8aa2eb58545383a018312b69c539e20c878807b19f27bddedef94bde9ad7184cd5ca7162ca75bbc1ba0649176e957761e76da41aeb97922d80419c197711ec05e8fe7c10f2f50c647d241074ac19bf1653faf91f5f8e6830852c0331e35ecf013bd76c3741536280a80f6edd067a9e87d7f8cc65b8c16a13edc3118e37413b3eeda26e3234d04df314c7023dfb5a3601d2e50921adb7d31b28b08a60e504c5305ec8fa9c84ebbeafb4821833c45100e06adafcfb835f337ce812ed68e50d06506a15cc630f8886113a42884c15d1f671dd910c87cb120a9a09044f5707152dc70288584ae9fc97a1dc7c4", 0xf1}, {&(0x7f0000000e00)="0eeca96651fbb2411e26b622c340f6ed93fd9cd8200de8447adf2dbbfa2633e6416b751836a149c800d9913f1a8d1eb872db8f929ef1fb73d1", 0x39}], 0x9, &(0x7f0000000f80)=[@sndrcv={0x30, 0x84, 0x1, {0x5, 0x3, 0x208, 0x6, 0x7f, 0x3, 0x1, 0xff, r2}}, @init={0x18, 0x84, 0x0, {0xe911, 0x2, 0x3ff, 0xa}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0x17}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0xffff}}, @init={0x18, 0x84, 0x0, {0x3, 0x4, 0x3, 0x8}}], 0x98, 0x20000041}, {&(0x7f0000001040)=@in6={0xa, 0x4e23, 0x8, @local, 0x1b4}, 0x1c, &(0x7f0000001240)=[{&(0x7f0000001080)}, {&(0x7f00000010c0)="7a61827b4e7db10d6d70e8519ffef3cbbd867bc337e175a34a3d27ec57ce5af6efaf63421ff1077bc63ae4f4ff98461a03b37a4acad197399298db364ae60655991445d619ebe6bf78070928a5632557c5694f10079b5258aa178f097db0def3f7168c8d37d333427d92d50b0aebdc6e9d014eaeae0e1ed337cf0c2fd0912fbf7676c0abc5773ef0cd8f7eff7ea19224334d0745a938451af2e518cd2d9e5ed98b1f871dc9af29fc3b7338eef73ff688ceafc7d3aa57a8e20e3c88679c9ceeb912029db510ce48a207f74a1ab24c933c4ae4de77b63530ccee7de0477edec172e3e00ebde024de4e", 0xe8}, {&(0x7f00000011c0)="a2de95d19e448bca5d0cafdd07069c3cc536ed5d34b05bf5041130cfc941bcc955ca23783c05a8b2149629fae2c0f9798f5ff04b47d1a916248c869c5f9f925faa289cde68fc9c5f32fb54e43f4a4769ba834f69ab20a510407ac35af84c36", 0x5f}], 0x3, &(0x7f00000014c0)=[@init={0x18, 0x84, 0x0, {0x6, 0x1, 0x521, 0x800}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x8}}, @sndinfo={0x20, 0x84, 0x2, {0x7ff, 0xa, 0x7ff, 0x8, r3}}, @init={0x18, 0x84, 0x0, {0x70da, 0x9, 0x1, 0x2}}, @sndinfo={0x20, 0x84, 0x2, {0xfff, 0x1, 0x1000, 0x75, r4}}], 0x88, 0x8080}, {&(0x7f0000001580)=@in={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000001780)="c0ec2d2e2b1a96dd2914186a0d6caf7b65c64ddc4def1e8b35506f438ed9d702d5f3959375b31a6fcf35a65764e3a41e6b852bcd466de5101098b8f23eda6ffa39c424f99a7155390588f6d68c92300bb30846f9b666e48c4e573aa2dae9b5ca5a1d5d870e2b0c6acdef6f91ad26a4da0748c6b61b7e255b8402f5367813ba54a832c034ae", 0x85}, {&(0x7f00000019c0)="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", 0xfd}, {&(0x7f0000001ac0)="289ad232a4249ed06a83f9fabadcc90962ba0b213d35bb17581532fc9a9e48c4b57f8c56491667766fa6125fb6fdfd66b44eab9baaa58ece0416168d5e23813bdf367069af0a7dfed97d2517ebdccee4ef510171342567a205439214ce016aa96f210259ca7c8290736965acade96dcc9c3b9a9cb8b38031c334ef61f85c3de4f71b6533096f3d985e2bfcf804d2359adf9d1db7036e75bc8fd09f825278f6728572f64c9da877cf4515bc6ad36df65255875c", 0xb3}, {&(0x7f0000001b80)="9877ed8cc8e4ab6a89822a223499139f00e29320f4f1d5bb1da28fd559a4bb58ce107d85ffe2c78d798e3385d34d36203d86a5ba84e3ae2fc3a8df09b01d27e7908595592eaf1aa55ec0fb069dc43ec45e6f785d6e9225ee67934be08d100c131fd8958f7c936c0f16cf92599198b36e416f1f9f0fe8637e2b971cef22663fffe0c294cd2e218bc368ca5523df59c24f809616cacc320c847e063dd56ce97d695e253199b1d40a3edae222f5d5eb2509aec20e6889230dba1eda7f0e0155accdc7e6af98f811aa51cc88a49c61", 0xcd}, {&(0x7f0000001c80)="a109280de0f04d28", 0x8}, {&(0x7f0000001cc0)="1bc0e3db80df2ef29001641a4759f26cb001567949dfbc61b3aace97d894c95ed72007e2c52b8155e29ca30446e7ce0c31d03100b36c00b59ade5bcdeed3d208fa41fd425f7a337e6e7f7c30d5b8b5ba34ed4dd8e5f5944c2d0d265a18e5b6b0efa3abcf", 0x64}], 0x6, &(0x7f0000001dc0)=[@sndrcv={0x30, 0x84, 0x1, {0x9, 0x8001, 0x4, 0x6, 0x7, 0xf, 0xfffffff8, 0x4, r6}}], 0x30}], 0x4, 0xc881) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r7, 0x89ec, &(0x7f0000000340)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x19, &(0x7f0000001740)=ANY=[@ANYBLOB="180800000600000000000000000000008510"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1}, 0x94) ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000000180)={0x0, @in={0x2, 0x4e23, @multicast2}, @generic={0x1d, "251384031ca28cb19b4939081ec9"}, @isdn={0x22, 0x10, 0x9, 0x8, 0x81}, 0xe, 0x0, 0x0, 0x0, 0x9d25, &(0x7f0000000140)='veth1_macvtap\x00', 0x3, 0x8, 0x9}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="180000001a00fd5800006c610e2a00000a"], 0x18}, 0x1, 0x0, 0x0, 0x811}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000001840)=ANY=[@ANYBLOB="180000009a010000000000000500000018110000d5903d0fe25ee49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a80475a81b48eb04a23fd18dec90db36f40eebdcd557a2323c2f6312963b330c7b2b762675577d309b6e97d5c60c2e7909bd1126fd0d8067883f546b874a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b77b977da661a230b65c1782240b463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b4b1ab91d5cfa7b694fe192785f68592068", @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x1, 0x1], &(0x7f0000001700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0xb}, 0x94) 4.432434983s ago: executing program 0 (id=7578): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000240)="94", 0x1) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) 4.408847068s ago: executing program 0 (id=7579): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, 0x0) syz_emit_ethernet(0x244, &(0x7f00000009c0)={@broadcast, @remote, @val={@val={0x88a8, 0x5, 0x0, 0x2}, {0x8100, 0x2, 0x0, 0x1}}, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, "0d5515", 0x206, 0x2f, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[@routing={0x0, 0x2, 0x0, 0xf4, 0x0, [@local]}, @srh={0x0, 0x6, 0x4, 0x3, 0xf7, 0x30, 0xffff, [@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}]}, @srh={0x73, 0x2, 0x4, 0x1, 0x0, 0x8, 0x6, [@remote]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x6, 0x11a]}, {0x1}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], '\x00'}, {0x8, 0x88be, 0x3, {{0xd, 0x1, 0x7, 0x1, 0x1, 0x2, 0x2, 0x4}, 0x1, {0xfffffffe}}}, {0x8, 0x22eb, 0x3, {{0x1, 0x2, 0xa, 0x2, 0x0, 0x1, 0x2, 0x5a}, 0x2, {0x7, 0x2, 0x3, 0x5, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "1e35af1e23be8ca949ecc3e35f2b432e67ea54d9fbc3a0a828edb7ea026f21cfd787f8a484821011a6e0e79a88c5438b8e62271dfef316e4589039f55dee30103f311fa4858f0bdc0b35bd04ffd43b3071727c665980235357f6ad86917654ec53d1c0c749b6df7e3dc0e8d817da167bb333d188144a9feb456327487ec11078200380edb04f9fc7837693c0b93e3e5e91509144e5e16fb46bcd51d25d982c63025b4f2aaeefc7a8c503ccd91ab2b98b424b98bbd574fa6d55be4beba51c9d3ca5f6205bedfa935c5a4e15968b9ca1617bad76622966dce6da4e21835bdc46661f41b4a38dd65942be55e88672910da117dd9ed80b5052d06b531c05b9fc990d9a97d4a29d4b33dbe32736cab98e829b1f51ccd29c99bdc5a169f75379e3c6996b6eccdc21a2b50336f6506cc95b3809acffe760901b600e48dd644b9451e30dd97fffd2698f5f5d4cb6452a20639ee2d4048916d7"}}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, 0x0) sendmsg$xdp(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x2c, 0x3, 0x0, 0x3e}, 0x10, &(0x7f0000000800)=[{&(0x7f00000001c0)}, {&(0x7f0000000200)="17cec3c0c6da3472ee5701271a750313bc66", 0x12}, {&(0x7f0000000400)}, {&(0x7f0000000500)="7feeaf8962c97d03ea75fb0a510f948732040dc6dfa2da59ddaeff71994277b5f872e5256c4c8b49139c7af210c5db83f52d8b36c49bb41f60c82dd4dc78ae1248c4e51ca69f323061817445ddc5baa4c0139f4cdbb56eb616dad8057d46dab4f29a8465dbb66ae5d011e910ea25dbfafeca0e2f8dade2b85aff3f95f2113d5615a7cfdfd194adbe42047d58027091caffc0598471127aea0ff78f6afdc38f0627a732b7a376174c3cdf32f6575d16b261", 0xb1}, {&(0x7f00000005c0)="6e6013b5c108f9d3bc22c987ee038edfd7edb6316ab6d69b7b5f11f4fbfae50540a024c3e1c3c174f8d0a1dc531a5069f069a0cd35948f55ebb300d2d68a3d9524c914fcc594a6c3b35a2d3f5a92f288f372b851898ee103e3e6aee1e593ea9dbfec105979634133028c690ca6368a7a1d", 0x71}, {&(0x7f0000000640)="84d50eb96e38467581376e10020db379ed7a834da9bf5f3615070d36db14877ba4fb6dbcf86a1a75148df208479b12db9a6fd2091bd72a902f", 0x39}], 0x6, 0x0, 0x0, 0x200008c0}, 0x24004000) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x4008005}, 0x4000000) r3 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r4, 0x10c, 0x2, &(0x7f0000000140), 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) 3.866320503s ago: executing program 7 (id=7580): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x2c, 0x0, 0x329, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40010) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="5aee41dea43e63a3f7fb7f110000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 3.655821939s ago: executing program 6 (id=7581): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000000)=0x7) listen(r1, 0x8) (async) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$rose(r0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @default, @null]}, 0x40) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x409, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x100, 0xc47, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1200, 0x200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @rand_addr=0x64010101}]}}}]}, 0x3c}}, 0x0) 3.577534546s ago: executing program 2 (id=7582): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6_vti0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x0, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9, 0x6}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}]}}]}, 0x4c}}, 0x24044094) 3.527057105s ago: executing program 6 (id=7583): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14143705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000000), 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x22, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061114c000000000085000000090000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x48) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)={@loopback, @empty, 0x0, 0x7, [@dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, @local, @local, @broadcast, @broadcast, @multicast1]}, 0x2c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@delneigh={0x30, 0x1d, 0x10, 0x70bd25, 0x25dfdc03, {0x16, 0x0, 0x0, r4, 0x80, 0x2, 0x3}, [@NDA_CACHEINFO={0x14, 0x3, {0x1, 0xf6ac, 0x0, 0x3b15}}]}, 0x30}}, 0x80) 1.201651704s ago: executing program 0 (id=7584): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) clock_gettime(0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4048004) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) syz_genetlink_get_family_id$smc(0x0, r1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8850}, 0x0) (fail_nth: 1) recvmmsg(r1, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x20000020, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x2000c011) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x840) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0xe8c}, 0x10) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040080}, 0x20048044) socket$nl_route(0x10, 0x3, 0x0) 1.201295352s ago: executing program 6 (id=7585): r0 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r0, 0x3a, 0x1, 0x0, &(0x7f0000000080)=0xfffffffffffffdfe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xab}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x143145, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'wg0\x00', @random="6a73b3c41123"}) 1.156382301s ago: executing program 2 (id=7586): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x6c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_CARRIER={0x5, 0x21, 0xb7}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xd816}, @IFLA_WEIGHT={0x8, 0xf, 0x2006}]}, 0x6c}}, 0x0) 1.141773017s ago: executing program 3 (id=7587): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x4, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="8500000011000000350000000000020085000000230000009500073d000000003c8ea5932cf6fec5eade4bb02aa4f152b8bdfdf8ffffffffffeeff547930a8abf35fd3908aa4e150e020a1a45f8d6700ff00000000f669011b4504090bc057a5cdb706ceac9856bad67505a783d6f5d0542b83f636ab45c12311d14da9bf"], 0x0, 0x4}, 0x94) r2 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f0000000c80)=0xe3, 0x4) (async) connect$caif(r2, &(0x7f0000000cc0), 0x18) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000180)=r1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000206010000000000000000000000e5ff0f000300686173683a69702c6d6163000900020073797a32000000000c0007800800080000000000050001000700000005000400000000000500050002000000"], 0x54}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (rerun: 32) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) r6 = socket$kcm(0xa, 0x2, 0x0) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @empty, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x2, 0x2, 0x2}}, 0x44) (async) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4f23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r8, 0x0, 0x4040000) 823.040273ms ago: executing program 6 (id=7588): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x2, {{0xa, 0x4e23, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}, {{0xa, 0x4e21, 0x690, @local, 0x6}}}, 0x108) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xcc, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x49ba7f7c}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000000}, 0x400c1) socket$xdp(0x2c, 0x3, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000380)=0x409baef6b97ef4b8, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000380)=0x409baef6b97ef4b8, 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f00000003c0)={0x1, 0x5, 0xfff}) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f00000003c0)={0x1, 0x5, 0xfff}) socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000440)={'gretap0\x00', r6, 0x7, 0x700, 0x7fffffff, 0x400, {{0x24, 0x4, 0x0, 0xf, 0x90, 0x64, 0x0, 0x81, 0x6, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0xb}, {[@timestamp_addr={0x44, 0x24, 0xe, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x24}, 0xbf0}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9426}, {@multicast2, 0x5}, {@broadcast, 0x81}]}, @timestamp_prespec={0x44, 0x3c, 0x1e, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0x15}, 0x9}, {@multicast1}, {@empty, 0x1}, {@multicast2, 0x1d7}, {@empty, 0x3}, {@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x2}]}, @timestamp_addr={0x44, 0x1c, 0xdd, 0x1, 0x4, [{@multicast2, 0x4}, {@local, 0x400}, {@multicast2, 0x4}]}]}}}}}) close(r4) accept$inet6(r0, 0x0, &(0x7f0000000540)) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000580)={0x4, 0x7}, 0x4) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000600)=@generic={&(0x7f00000005c0)='./file0\x00'}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r8, 0x0, 0x73, 0x16, &(0x7f0000000640)="ec569bf36cd5021dc2f2f3373003120e1b3c0687de42d0454f10ed30acf6f0970c6fd89664dc19817acc2f786d49e9cb1d75b7600a6f6249d3fe915d8e099ea146bb78bcceb95ada1d350d5228b13cceaaf2052f9a069b882f4687a3dfa663e211e20254bb38e80688a265ac286dfa31526737", &(0x7f00000006c0)=""/22, 0xfb8c, 0x0, 0xd4, 0xe8, &(0x7f0000000700)="78d26e192e91ab609cd634cdce7580dd026a277c4899f7fd41c27a9c05ef2e3341256be6e88325d6ca5bb42c0dd9afb8395369a8b93e5e6906e34624477cc4eed2b50b7d5457446f5faea176d3165aa90e4130e7b07f215e0357932639fa8c5c84c56bfadb5012358b50418bd7410c79289bfd3aaf86f0e4726da92bdbf6390e5e96dbc25ec0e217f1e7a8f97c1b078095e6a300524a8cddd93de0adedea8082c470402d0d61aa25c17cf6ed41af011ad4c239adbeac8b3509ff2e4a5cefc0785ad9aa610737d1ce9894a6a94f3993e16d75a4d4", &(0x7f0000000800)="60240b327e4e1c912ea2a9cb789578552a5087a86264017f13945500f3ab955312a919de211572515192f1640c6dfacae69bc74d67d82b2e9af9acfb86b6c6299dc02ca1268ca1eca3c2db11e601ef318e87d8dce9843414f32a78c3df5da5e07e6bf31d1a3e2e14781c944dc251d1cc8f6e24e2097208e6e44da1b7a6d6ef25aa541fd4d63dc2a43877d70d5555287b4b8e1796df231919cc6fbfad6937072c0f17d8fcaaa357b70fc176695a4a73b2c6833dbe917a3a6d07a7189df60c84f079745ce22c929a194e0a2e5b4c91f857a998ed28d4b2f7c26a6ddac6db2d3566d7d8e1137fc1fc8d", 0x4, 0x0, 0x80}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r8, 0x0, 0x73, 0x16, &(0x7f0000000640)="ec569bf36cd5021dc2f2f3373003120e1b3c0687de42d0454f10ed30acf6f0970c6fd89664dc19817acc2f786d49e9cb1d75b7600a6f6249d3fe915d8e099ea146bb78bcceb95ada1d350d5228b13cceaaf2052f9a069b882f4687a3dfa663e211e20254bb38e80688a265ac286dfa31526737", &(0x7f00000006c0)=""/22, 0xfb8c, 0x0, 0xd4, 0xe8, &(0x7f0000000700)="78d26e192e91ab609cd634cdce7580dd026a277c4899f7fd41c27a9c05ef2e3341256be6e88325d6ca5bb42c0dd9afb8395369a8b93e5e6906e34624477cc4eed2b50b7d5457446f5faea176d3165aa90e4130e7b07f215e0357932639fa8c5c84c56bfadb5012358b50418bd7410c79289bfd3aaf86f0e4726da92bdbf6390e5e96dbc25ec0e217f1e7a8f97c1b078095e6a300524a8cddd93de0adedea8082c470402d0d61aa25c17cf6ed41af011ad4c239adbeac8b3509ff2e4a5cefc0785ad9aa610737d1ce9894a6a94f3993e16d75a4d4", &(0x7f0000000800)="60240b327e4e1c912ea2a9cb789578552a5087a86264017f13945500f3ab955312a919de211572515192f1640c6dfacae69bc74d67d82b2e9af9acfb86b6c6299dc02ca1268ca1eca3c2db11e601ef318e87d8dce9843414f32a78c3df5da5e07e6bf31d1a3e2e14781c944dc251d1cc8f6e24e2097208e6e44da1b7a6d6ef25aa541fd4d63dc2a43877d70d5555287b4b8e1796df231919cc6fbfad6937072c0f17d8fcaaa357b70fc176695a4a73b2c6833dbe917a3a6d07a7189df60c84f079745ce22c929a194e0a2e5b4c91f857a998ed28d4b2f7c26a6ddac6db2d3566d7d8e1137fc1fc8d", 0x4, 0x0, 0x80}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)=r8}, 0x20) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b80), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0xa, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf65, 0x0, 0x0, 0x0, 0x8}, [@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @jmp={0x5, 0x0, 0xa, 0x0, 0xa, 0x8, 0x8}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x62, &(0x7f0000000b00)=""/98, 0x41100, 0x67, '\x00', r6, 0x25, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x3, 0x0, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000c00)=[{0x5, 0x5, 0xe, 0xc}, {0x2, 0x5, 0xf, 0xa}, {0x2, 0x3, 0xf, 0x4}, {0x3, 0x3, 0x5, 0x2}, {0x4, 0x4, 0x8, 0x3}], 0x10, 0xfffffffc}, 0x94) (async) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0xa, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf65, 0x0, 0x0, 0x0, 0x8}, [@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @jmp={0x5, 0x0, 0xa, 0x0, 0xa, 0x8, 0x8}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x62, &(0x7f0000000b00)=""/98, 0x41100, 0x67, '\x00', r6, 0x25, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x3, 0x0, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000c00)=[{0x5, 0x5, 0xe, 0xc}, {0x2, 0x5, 0xf, 0xa}, {0x2, 0x3, 0xf, 0x4}, {0x3, 0x3, 0x5, 0x2}, {0x4, 0x4, 0x8, 0x3}], 0x10, 0xfffffffc}, 0x94) bind$inet(r5, &(0x7f0000000d40)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000d80)={'macvlan1\x00', @remote}) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000dc0)={0x0, 0x8, 0x10}, 0xc) (async) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000dc0)={0x0, 0x8, 0x10}, 0xc) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000e00)=0x400, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000ec0)={'syztnl0\x00', &(0x7f0000000e40)={'ip6tnl0\x00', r6, 0x4, 0x1, 0x0, 0x5, 0x0, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x10, 0x0, 0xfff}}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f40)={0x150, 0x1403, 0x100, 0x70bd26, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_batadv\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nicvf0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_virt_wifi\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'netdevsim0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x150}, 0x1, 0x0, 0x0, 0x24008000}, 0x40000) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f40)={0x150, 0x1403, 0x100, 0x70bd26, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_batadv\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nicvf0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_virt_wifi\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'netdevsim0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x150}, 0x1, 0x0, 0x0, 0x24008000}, 0x40000) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001140)) 735.81641ms ago: executing program 0 (id=7589): syz_emit_ethernet(0x42, &(0x7f0000000940)={@local, @random="2c09000000f8", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x7, 0x34, 0x6a, 0x0, 0xb, 0x1, 0x0, @loopback, @remote}, @parameter_prob={0xc, 0x0, 0x0, 0x9, 0x0, 0x0, {0x6, 0x4, 0x2, 0x0, 0x0, 0x7, 0x8, 0x6, 0x6c, 0x2, @empty, @loopback, {[@ssrr={0x89, 0x3, 0x6b}, @noop]}}}}}}}, 0x0) 731.398166ms ago: executing program 2 (id=7590): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x990, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x6}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0xfe}]}, 0x24}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r5, 0x400448e6, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r4, &(0x7f0000000880)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0xcf, 0x0}}, {{&(0x7f0000000180)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000100), 0x10}}], 0x2, 0x45) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) pipe(&(0x7f0000002740)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110a9000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) 608.278286ms ago: executing program 3 (id=7591): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x1c8, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x18c, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x17c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x16b, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10}}, 0x210}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r3], 0x24}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000c4000000c40000000700000000000000000000030000000003000000030000000000000004000000090000060400000005000000ff0f000000000000f9ffffff100000000180000005000000010000000d0000000600000010000000010000000800000007000000060000000500000000000000060000000f0000000000000e01000000010000000300000005000013050000000100000007000000020000000100000004000000090000000900000002000000030000000f00000002000000ff0000000700000000000000ff000000005f30305f5f006f8939702938d0e508079721a8e41c3ce0827d1083db2a8f9b5ad4085504a23f46641469e65fc9cf2b59766911d231e5ebcf2f0ee3d18df685b2dcbabf01c3872b4bdfe7f22f35ceaa6eef044811c3196a62ee285d6806f3e56f42e7a747d8493f817d12eaff12a6"], &(0x7f0000000100)=""/31, 0xe3, 0x1f, 0x1, 0xe8a, 0x10000, @value=r2}, 0x28) accept4$rose(r0, 0x0, 0x0, 0x80000) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x1c8, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x18c, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x17c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x16b, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10}}, 0x210}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r3], 0x24}}, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)=""/31, 0xe3, 0x1f, 0x1, 0xe8a, 0x10000, @value=r2}, 0x28) (async) accept4$rose(r0, 0x0, 0x0, 0x80000) (async) 523.707181ms ago: executing program 0 (id=7592): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x4004}, 0x810) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f1, &(0x7f00000017c0)={'tunl0\x00', &(0x7f0000001700)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xffff, 0x0, 0x0, 0x0, @rand_addr, @multicast1}}}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r4, 0x913e0000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, 0x0, 0x0) mmap(&(0x7f00004f1000/0x2000)=nil, 0x2000, 0x2000000, 0x11, r5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x9, '\x00', r3, r7, 0x5, 0x3, 0x1}, 0x50) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) setsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f0000000100)={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd7000000000001affffed180001801400020064756d6d7930"], 0x2c}}, 0x0) 456.330517ms ago: executing program 7 (id=7593): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r0], 0xa0}}, 0x40000) unshare(0x22020400) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="f1bf29177000fc80df2517"], 0x6b}, 0x1, 0x0, 0x0, 0x44000}, 0x240080a4) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="186a70000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r4, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv4_getroute={0x1c, 0x1a, 0x10, 0x70bd2b, 0x25dfdbfb, {0x2, 0x20, 0x14, 0x0, 0xfd, 0x0, 0xc8, 0xa, 0x2a00}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044084}, 0x80) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @private=0xa010102}, 0x0, 0x1, 0x4}}, 0x26) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="090000000015000103bd68ff00fffffff20a00000023c91e15a755de1c9335d369b9"], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'wg0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r3, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 426.920596ms ago: executing program 3 (id=7594): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20004080) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) 424.718382ms ago: executing program 2 (id=7595): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e22, 0x2000000, @private1}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x800, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r1}, @IFLA_GTP_FD1={0x8, 0x2, @udp6=r3}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r1}]}}}]}, 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) (async) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e22, 0x2000000, @private1}, 0x1c) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x800, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r1}, @IFLA_GTP_FD1={0x8, 0x2, @udp6=r3}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r1}]}}}]}, 0x48}}, 0x0) (async) 199.798179ms ago: executing program 6 (id=7596): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x900}, 0x8}, 0x94) 199.246403ms ago: executing program 2 (id=7597): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000006180)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000009000000000000000000000300000700"], 0x0, 0x51}, 0x28) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2400c841}, 0x54) recvmmsg(r2, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}], 0x1}, 0x3f}], 0x1, 0x60, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) (async, rerun: 32) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x100, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x86}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4c43}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8bf}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x888ae8e}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffb}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x80c0) (rerun: 32) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r2) 130.847654ms ago: executing program 7 (id=7598): r0 = socket(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES16=r0, @ANYBLOB="0000000000000000b703000001000000850000000c000000b70000000000000095"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x392}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000200), &(0x7f00000003c0)=r2}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f00000000c0)=0xc) close(0xffffffffffffffff) getsockopt(r0, 0x200000000114, 0xc, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f0000001780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe04, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0xfffffffffffffd00}, 0x48) 111.974275ms ago: executing program 0 (id=7599): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01052cbd7000fedbdf251d00000008001d000400000008001e00300b000008000100d3"], 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r6, 0x301, 0x70bd2b, 0x25dfdbfc, {{0x5}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0x78}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x20000010) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='memory.stat\x00', 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x6c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newtfilter={0x31c, 0x2c, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xc, 0xd}, {0xfff2, 0xd}, {0xfff1, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2e8, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0xb}}, @TCA_MATCHALL_ACT={0x2d4, 0x2, [@m_mpls={0x9c, 0x11, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x5e, 0x6, "b94f35654224bd1cb834a21f68d07c04ac76be15b4b9df593afb397a27348097250e0841c2863c53bee3e3500a5ff637ea2f8287ddc11c0d40d11aae0cd8fa902e6bba879d400bab359dcde4a0fff6fd0b5ad059ce62c229f979"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0x12c, 0x16, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x6d3, 0x1, 0xffffffffffffffff, 0x1ff, 0x2}}, @TCA_DEF_PARMS={0xfffffffffffffeb5, 0x2, {0x0, 0x7, 0x20000000, 0x40, 0x7807}}, @TCA_DEF_DATA={0x9, 0x3, '\xaa\xaa\xaa\xaa\xaa'}, @TCA_DEF_PARMS={0x18, 0x2, {0xe, 0xffffffcf, 0x0, 0x8, 0x80000001}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x9, 0x10000000, 0x3, 0x8}}, @TCA_DEF_DATA={0x7, 0x3, ':{\x00'}]}, {0x8c, 0x6, "bb50549f31d7f814c6b9d0d5cc0a04467f5aa83f18d813024d28b79f9a9a5b6b0cba6224cd75d7275697b541adbf45e1b21885c2901a89f81f6a64c10c19d5ffc07afdf7c606933d46c5688de11e5a92b8a80a17b3a8f4a590169505457c8c86dc2b40673dc0f79a3339d3ff54d622da5de027ce27b01e9ae9107fc42386449fceba4cf3efbdc72f"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ctinfo={0x64, 0xf, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x50e}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xb}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}]}, {0xd, 0x6, "7f838775f3a1c03911"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0xa4, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x7a, 0x6, "329754c8e2ebc19308c09320c097c2df2ca164c186da82f1402acc3b4750f71ae3661cbf310b879bc2366f19d75e266cc5c7315cab716fa852c1c8109e29c8967c89dde769cb16f647515ab0c3b3ce852235f1f67d585b44b4c1e842fa55c777b929288c3e3f00f24c00cced323d6b667b4df2143713"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff1, 0xffec}}]}}]}, 0x31c}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc05, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xb}, {0xe, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x34e, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180600027628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYBLOB="5bea4481"], 0x38}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r12, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x10, 0xa, 0x401, 0x0, 0x0, {0x1}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) 0s ago: executing program 7 (id=7600): r0 = socket$nl_route(0x10, 0x3, 0x0) shutdown(r0, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000980), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40004030}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044800}, 0x20008015) sendmsg$NFC_CMD_GET_SE(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r2, 0x53f63307afa5bb95, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x200000c1}, 0x880) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x88, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2205}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x5}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x7ff}]}}}]}, 0x88}, 0x1, 0xba01}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000140)={'team_slave_0\x00'}) kernel console output (not intermixed with test programs): h. [ 651.024856][T29159] Cannot create hsr debugfs directory [ 651.202778][T29192] veth0_to_bridge: left promiscuous mode [ 651.208653][T29230] netlink: 'syz.2.6444': attribute type 4 has an invalid length. [ 651.255458][T29159] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.276098][T29159] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.286796][T29159] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 32770 - 0 [ 651.366636][T29234] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 651.427553][T29159] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.443473][T29159] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.456585][T29159] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 32770 - 0 [ 651.533634][T29159] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.545187][T29159] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.559562][T29159] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 32770 - 0 [ 651.581805][T27350] Bluetooth: hci1: command tx timeout [ 651.644189][T29159] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.670783][T29159] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.695426][T29159] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 32770 - 0 [ 651.985135][T29159] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 651.998370][T29159] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 652.016340][T29159] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 652.029988][T29278] netlink: 'syz.2.6458': attribute type 5 has an invalid length. [ 652.041704][T29159] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 652.235915][T29159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.273774][T29159] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.288773][T11123] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.295972][T11123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.317918][T11123] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.325112][T11123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.438926][T29304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 652.469416][T29307] __nla_validate_parse: 10 callbacks suppressed [ 652.469435][T29307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6465'. [ 652.734202][T29159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.790016][T29159] veth0_vlan: entered promiscuous mode [ 652.808617][T29159] veth1_vlan: entered promiscuous mode [ 652.843468][T29320] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 652.909677][T29159] veth0_macvtap: entered promiscuous mode [ 652.935707][T29159] veth1_macvtap: entered promiscuous mode [ 652.964973][T29159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.995565][T29159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 653.054908][ T1136] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.087444][ T1136] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.130240][ T1136] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.139350][ T1136] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.243109][T11123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.262103][T11123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.336930][ T191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.347567][ T191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.524754][T29345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6481'. [ 653.545539][T29342] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 653.549971][T29345] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6481'. [ 653.661219][T27350] Bluetooth: hci1: command tx timeout [ 653.674286][T29354] netlink: 200 bytes leftover after parsing attributes in process `syz.0.6482'. [ 653.706297][T29354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6482'. [ 653.772417][T29359] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 653.821116][T29359] bond1 (unregistering): Released all slaves [ 653.941976][T29364] syzkaller1: entered promiscuous mode [ 653.947501][T29364] syzkaller1: entered allmulticast mode [ 654.437301][T29388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6491'. [ 654.452229][ T1002] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.452243][T29388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6491'. [ 654.452290][ T1002] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.482231][ T1002] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.499102][T26302] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.628307][T29393] netlink: 300 bytes leftover after parsing attributes in process `syz.0.6492'. [ 655.214021][T29407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6496'. [ 655.259478][T29409] validate_nla: 3 callbacks suppressed [ 655.259491][T29409] netlink: 'syz.2.6497': attribute type 1 has an invalid length. [ 655.288536][T29409] 8021q: adding VLAN 0 to HW filter on device bond1 [ 655.300063][T29409] block nbd0: not configured, cannot reconfigure [ 655.390015][T29412] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 655.464888][T29414] xt_cgroup: invalid path, errno=-2 [ 655.549401][T29414] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 655.556943][T14777] IPVS: starting estimator thread 0... [ 655.671694][T29417] IPVS: using max 31 ests per chain, 74400 per kthread [ 655.733538][T29426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6502'. [ 655.742823][T27350] Bluetooth: hci1: command tx timeout [ 657.682533][T29443] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6507'. [ 657.821179][T27350] Bluetooth: hci1: command tx timeout [ 657.830352][T29451] nft_compat: unsupported protocol 0 [ 658.097991][T29464] netlink: 'syz.3.6511': attribute type 10 has an invalid length. [ 658.110209][T29464] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.144371][T29464] bridge_slave_1: left allmulticast mode [ 658.158654][T29464] bridge_slave_1: left promiscuous mode [ 658.165647][T29464] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.196508][T29471] ieee802154 phy1 wpan1: encryption failed: -22 [ 658.207200][T29464] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 658.452930][T29478] syzkaller0: entered promiscuous mode [ 658.458477][T29478] syzkaller0: entered allmulticast mode [ 658.501774][T29478] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) ! [ 658.602616][T29490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6517'. [ 658.680048][T29490] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 658.707659][T29490] netlink: 184 bytes leftover after parsing attributes in process `syz.2.6517'. [ 658.811657][T29500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6519'. [ 658.842217][T29500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6519'. [ 658.878056][T29506] tipc: Failed to remove unknown binding: 66,1,1/0:2919287725/2919287727 [ 658.895777][T29506] tipc: Failed to remove unknown binding: 66,1,1/0:2919287725/2919287727 [ 658.903666][T29500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6519'. [ 658.934898][T29500] netlink: 'syz.0.6519': attribute type 21 has an invalid length. [ 659.058694][T29516] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6521'. [ 659.073090][T29518] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6522'. [ 659.088948][T29516] netlink: 'syz.2.6521': attribute type 7 has an invalid length. [ 659.122305][T29516] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6521'. [ 659.217216][T29527] netlink: 92 bytes leftover after parsing attributes in process `syz.3.6523'. [ 659.228012][T29527] netlink: 'syz.3.6523': attribute type 1 has an invalid length. [ 659.795141][T29564] netlink: 'syz.0.6533': attribute type 21 has an invalid length. [ 659.806229][T29568] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 659.892878][T29575] netlink: 'syz.0.6536': attribute type 7 has an invalid length. [ 659.939937][T29575] erspan0: entered promiscuous mode [ 659.950111][T29575] gretap0: entered promiscuous mode [ 659.966778][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 659.980415][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 659.991017][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 660.000101][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 660.012470][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 660.019788][T29581] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 660.200186][T29584] can: request_module (can-proto-0) failed. [ 660.216319][T29589] netlink: 'syz.3.6541': attribute type 33 has an invalid length. [ 660.305814][T29589] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 660.339108][T29589] bond1 (unregistering): Released all slaves [ 660.479991][T29594] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 660.633631][T29577] wg1 speed is unknown, defaulting to 1000 [ 661.075573][T29577] chnl_net:caif_netlink_parms(): no params data found [ 661.330074][T29577] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.400875][T29577] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.433551][T29577] bridge_slave_0: entered allmulticast mode [ 661.484525][T29577] bridge_slave_0: entered promiscuous mode [ 661.492470][T29577] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.503936][T29577] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.533595][T29577] bridge_slave_1: entered allmulticast mode [ 661.544589][T29577] bridge_slave_1: entered promiscuous mode [ 661.634768][T29577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.654402][T29577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.677671][T29655] veth1_to_hsr: entered allmulticast mode [ 661.728239][T29577] team0: Port device team_slave_0 added [ 661.754618][T29577] team0: Port device team_slave_1 added [ 661.800160][T29577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.820358][T29577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.876827][T29577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.904055][T29577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.922193][T29577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.963124][T29577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.063287][T27350] Bluetooth: hci0: command tx timeout [ 662.158101][T29577] hsr_slave_0: entered promiscuous mode [ 662.171895][T29577] hsr_slave_1: entered promiscuous mode [ 662.179431][T29577] debugfs: 'hsr0' already exists in 'hsr' [ 662.189677][T29577] Cannot create hsr debugfs directory [ 662.374976][T29692] netlink: zone id is out of range [ 662.397123][T29692] netlink: zone id is out of range [ 662.407407][T29692] netlink: zone id is out of range [ 662.416479][T29692] netlink: zone id is out of range [ 662.431479][T29692] netlink: zone id is out of range [ 662.441574][T29692] netlink: zone id is out of range [ 662.454316][T29692] netlink: zone id is out of range [ 662.459457][T29692] netlink: zone id is out of range [ 662.472385][T29692] netlink: zone id is out of range [ 662.500716][T29692] netlink: zone id is out of range [ 662.629081][T29709] netlink: 'syz.2.6570': attribute type 6 has an invalid length. [ 662.678963][ T59] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.679112][T29709] netlink: 'syz.2.6570': attribute type 6 has an invalid length. [ 662.688012][ T59] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.705707][T29709] __nla_validate_parse: 12 callbacks suppressed [ 662.705724][T29709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6570'. [ 662.730135][ T59] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.740030][ T59] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.754370][T29709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6570'. [ 662.758238][T29707] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6571'. [ 662.775901][T29713] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6571'. [ 662.782511][T29709] netlink: 'syz.2.6570': attribute type 6 has an invalid length. [ 662.805109][T29709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6570'. [ 662.835056][T29577] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 662.847963][T29577] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 662.865066][T29709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6570'. [ 662.877490][T29577] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 662.884872][T29709] netlink: 'syz.2.6570': attribute type 6 has an invalid length. [ 662.893876][T29709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6570'. [ 662.910425][T29577] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 662.928017][T29709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6570'. [ 662.939461][T29717] vlan2: entered promiscuous mode [ 662.945160][T29717] vlan2: entered allmulticast mode [ 662.946056][T29709] netlink: 'syz.2.6570': attribute type 6 has an invalid length. [ 662.950404][T29717] hsr_slave_1: entered allmulticast mode [ 662.965898][T29709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6570'. [ 662.974861][T29717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6573'. [ 662.987919][T29709] netlink: 'syz.2.6570': attribute type 6 has an invalid length. [ 663.000342][T29709] netlink: 'syz.2.6570': attribute type 6 has an invalid length. [ 663.026487][T29709] netlink: 'syz.2.6570': attribute type 6 has an invalid length. [ 663.043201][T29709] netlink: 'syz.2.6570': attribute type 6 has an invalid length. [ 663.074738][T29709] netlink: 'syz.2.6570': attribute type 6 has an invalid length. [ 663.150144][T29577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.202111][T29577] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.227425][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.234674][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.269583][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.276842][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.008843][T29577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.137195][T29760] +: renamed from syzkaller0 [ 664.142382][T27350] Bluetooth: hci0: command tx timeout [ 664.526484][T29577] veth0_vlan: entered promiscuous mode [ 664.550485][T29577] veth1_vlan: entered promiscuous mode [ 664.615189][T29577] veth0_macvtap: entered promiscuous mode [ 664.683415][T29577] veth1_macvtap: entered promiscuous mode [ 664.735903][T29577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.816152][T29577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.858198][ T1136] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.867759][ T1136] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.896455][ T1136] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.921011][ T1136] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.109678][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.147550][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.229982][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.328484][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.544962][T29822] xt_l2tp: v2 sid > 0xffff: 1114112 [ 665.804331][T29836] xt_hashlimit: invalid rate [ 665.810267][T29837] xt_hashlimit: invalid rate [ 666.221895][T27350] Bluetooth: hci0: command tx timeout [ 666.561673][T29891] syzkaller1: entered promiscuous mode [ 666.567386][T29891] syzkaller1: entered allmulticast mode [ 666.818212][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 666.832617][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 666.841603][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 666.850326][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 666.860091][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 666.952963][T29907] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.068988][T29907] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.196104][T29907] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.219937][T29914] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 667.282676][T29907] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.302544][T29904] wg1 speed is unknown, defaulting to 1000 [ 667.345185][ T5840] Bluetooth: hci1: command tx timeout [ 667.397976][T29915] geneve2: entered promiscuous mode [ 667.477830][T28455] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 40888 - 0 [ 667.492836][T28455] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 40888 - 0 [ 667.508918][T28455] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 40888 - 0 [ 667.556014][T28455] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 40888 - 0 [ 667.608091][T29919] bridge0: port 1(veth0_to_bridge) entered blocking state [ 667.615688][T29919] bridge0: port 1(veth0_to_bridge) entered disabled state [ 667.624195][T29919] veth0_to_bridge: entered allmulticast mode [ 667.633823][T29919] veth0_to_bridge: entered promiscuous mode [ 667.643961][T29919] bridge0: port 1(veth0_to_bridge) entered blocking state [ 667.651298][T29919] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 667.667377][ T1136] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.753887][ T1136] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.806949][T11123] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.864650][T28455] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.129817][T29946] sctp: [Deprecated]: syz.0.6638 (pid 29946) Use of int in max_burst socket option. [ 668.129817][T29946] Use struct sctp_assoc_value instead [ 668.138096][T29949] __nla_validate_parse: 138 callbacks suppressed [ 668.138117][T29949] netlink: 272 bytes leftover after parsing attributes in process `syz.2.6637'. [ 668.175113][T29904] chnl_net:caif_netlink_parms(): no params data found [ 668.190651][T29949] net_ratelimit: 51 callbacks suppressed [ 668.190670][T29949] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 668.205124][T29952] x_tables: duplicate underflow at hook 3 [ 668.301115][ T5840] Bluetooth: hci0: command tx timeout [ 668.458062][T29967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6643'. [ 668.465736][T29968] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6640'. [ 668.472540][T29904] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.483536][T29904] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.491052][T29904] bridge_slave_0: entered allmulticast mode [ 668.499185][T29904] bridge_slave_0: entered promiscuous mode [ 668.509445][T29904] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.517113][T29904] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.525007][T29904] bridge_slave_1: entered allmulticast mode [ 668.535420][T29969] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6643'. [ 668.546109][T29904] bridge_slave_1: entered promiscuous mode [ 668.617674][T29967] lo: Caught tx_queue_len zero misconfig [ 668.629763][T29904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.644728][T29971] syzkaller0: entered promiscuous mode [ 668.650258][T29971] syzkaller0: entered allmulticast mode [ 668.678526][T29904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.744779][T29974] validate_nla: 61 callbacks suppressed [ 668.744798][T29974] netlink: 'syz.0.6645': attribute type 2 has an invalid length. [ 668.809352][T29974] : entered promiscuous mode [ 668.832566][T29964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6641'. [ 668.898162][T29904] team0: Port device team_slave_0 added [ 668.911454][T29978] tipc: Started in network mode [ 668.916371][T29978] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 668.941879][ T5840] Bluetooth: hci6: command tx timeout [ 669.025924][T29978] tipc: Enabled bearer , priority 10 [ 669.059014][T29904] team0: Port device team_slave_1 added [ 669.118335][T29978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6646'. [ 669.188087][T29904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.214556][T29904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.268935][T29904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.313584][T29994] netlink: 120 bytes leftover after parsing attributes in process `syz.3.6650'. [ 669.332149][T29994] netlink: 'syz.3.6650': attribute type 1 has an invalid length. [ 669.340198][T29994] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6650'. [ 669.353416][T29904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.363216][T29904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.403237][T29904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.416275][T29968] wg1 speed is unknown, defaulting to 1000 [ 669.529937][T30004] digital: digital_start_poll: Unknown protocol [ 669.539091][T30004] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6653'. [ 669.557480][T30004] netlink: 320 bytes leftover after parsing attributes in process `syz.2.6653'. [ 669.607202][T29904] hsr_slave_0: entered promiscuous mode [ 669.615164][T29904] hsr_slave_1: entered promiscuous mode [ 669.622123][T29904] debugfs: 'hsr0' already exists in 'hsr' [ 669.627919][T29904] Cannot create hsr debugfs directory [ 669.841177][T30011] syzkaller0: entered promiscuous mode [ 669.847945][T30011] syzkaller0: entered allmulticast mode [ 670.001624][T16286] IPVS: starting estimator thread 0... [ 670.091503][T30018] IPVS: using max 37 ests per chain, 88800 per kthread [ 670.153567][T16286] tipc: Node number set to 4269801492 [ 670.182969][T30024] IPVS: set_ctl: invalid protocol: 98 10.1.1.1:20000 [ 670.316501][T30027] netlink: 'syz.0.6661': attribute type 3 has an invalid length. [ 670.398752][T29904] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 670.442630][T29904] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 670.462927][T29904] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 670.474991][T29904] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 670.530355][T30045] x_tables: duplicate underflow at hook 3 [ 670.569220][ T191] syzkaller0: tun_net_xmit 76 [ 670.575519][ T191] syzkaller0: tun_net_xmit 48 [ 670.591025][T16286] syzkaller0: tun_net_xmit 76 [ 670.625915][T30035] syzkaller0: create flow: hash 2497464123 index 1 [ 670.770935][T14777] syzkaller0: tun_net_xmit 76 [ 670.775790][T30034] syzkaller0: delete flow: hash 2497464123 index 1 [ 671.024343][ T5840] Bluetooth: hci6: command tx timeout [ 672.945317][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.101223][ T5840] Bluetooth: hci6: command tx timeout [ 673.152211][T30081] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 673.165641][T30081] bond0: (slave lo): Error: Device can not be enslaved while up [ 673.198975][T30114] vcan1: entered promiscuous mode [ 673.220755][T30114] vcan1: entered allmulticast mode [ 673.286840][T29904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.354203][T29904] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.408805][ T191] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.416040][ T191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.495507][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.502736][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.539264][T30132] __nla_validate_parse: 8 callbacks suppressed [ 673.539281][T30132] netlink: 204 bytes leftover after parsing attributes in process `syz.0.6685'. [ 673.577875][T30132] netlink: 204 bytes leftover after parsing attributes in process `syz.0.6685'. [ 673.610625][T30133] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6683'. [ 673.622035][T30133] netem: invalid attributes len -24 [ 673.627315][T30133] netem: change failed [ 673.644990][T30135] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6684'. [ 673.654259][T30136] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6684'. [ 673.664504][T30135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 673.699699][T30135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 673.861881][T30149] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6687'. [ 674.272237][T30171] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6694'. [ 674.304550][T30167] team0: Caught tx_queue_len zero misconfig [ 674.416853][T29904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.773147][ T5831] IPVS: starting estimator thread 0... [ 674.790720][T30199] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 674.864304][T30208] IPVS: using max 28 ests per chain, 67200 per kthread [ 674.960119][T29904] veth0_vlan: entered promiscuous mode [ 674.973865][T29904] veth1_vlan: entered promiscuous mode [ 675.110343][T29904] veth0_macvtap: entered promiscuous mode [ 675.149436][T29904] veth1_macvtap: entered promiscuous mode [ 675.181017][T27350] Bluetooth: hci6: command tx timeout [ 675.254429][T30227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6710'. [ 675.257304][T30225] bridge6: entered promiscuous mode [ 675.269668][T30225] bridge6: entered allmulticast mode [ 675.414514][T29904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.501179][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 675.545824][T29904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.698249][T30238] bond3: Removing last ns target with arp_interval on [ 675.793238][ T1136] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.810533][ T1136] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.849943][T30251] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6716'. [ 675.918075][T30249] bond4: option resend_igmp: invalid value (32767) [ 675.929349][T30249] bond4: option resend_igmp: allowed values 0 - 255 [ 675.941323][T30249] bond4 (unregistering): Released all slaves [ 675.966135][ T1136] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.997050][T30251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6716'. [ 676.076747][ T1136] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.154065][ T1002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.180278][ T1002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.209840][T30268] netlink: 'syz.0.6720': attribute type 21 has an invalid length. [ 676.240421][T30268] netlink: 'syz.0.6720': attribute type 21 has an invalid length. [ 676.348380][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.370404][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.844198][T30303] IPv6: NLM_F_CREATE should be specified when creating new route [ 676.937813][T30314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.948226][T30314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.987176][T30314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.048883][T30312] bridge1: entered promiscuous mode [ 677.060943][T30312] bridge1: entered allmulticast mode [ 677.068221][T30314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.077525][T30324] ipt_REJECT: ECHOREPLY no longer supported. [ 677.127187][T30314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.261738][T27350] Bluetooth: hci6: command 0x0405 tx timeout [ 677.333795][T30344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.460176][T30356] bond0: entered promiscuous mode [ 677.491204][T30356] batadv0: entered promiscuous mode [ 677.508148][T30356] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 677.520775][T30356] hsr2: entered promiscuous mode [ 677.525854][T30356] hsr2: entered allmulticast mode [ 677.535394][T30356] bond0: entered allmulticast mode [ 677.541259][T30356] batadv0: entered allmulticast mode [ 677.547312][T30356] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 677.567741][T30356] bond0: left promiscuous mode [ 677.579440][T30362] x_tables: duplicate underflow at hook 2 [ 677.586072][T30356] batadv0: left promiscuous mode [ 677.675224][T30366] x_tables: duplicate underflow at hook 2 [ 677.846706][T30377] netlink: 'syz.2.6755': attribute type 1 has an invalid length. [ 678.396753][T30419] netlink: 'syz.2.6769': attribute type 1 has an invalid length. [ 678.499455][T30429] Bluetooth: MGMT ver 1.23 [ 678.534176][T30428] mac80211_hwsim hwsim64 syzkaller0: entered promiscuous mode [ 678.562303][T30428] mac80211_hwsim hwsim64 syzkaller0: entered allmulticast mode [ 678.572764][T30430] __nla_validate_parse: 35 callbacks suppressed [ 678.572780][T30430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6771'. [ 678.666191][T30443] erspan0: entered promiscuous mode [ 678.916375][T30458] x_tables: duplicate underflow at hook 4 [ 679.118987][T30466] Bluetooth: MGMT ver 1.23 [ 679.326901][T30469] bond1: invalid ARP target 0.0.0.0 specified for addition [ 679.336733][T30469] bond1: option arp_ip_target: invalid value (0) [ 679.366812][T30469] bond1 (unregistering): Released all slaves [ 679.587189][T30491] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6787'. [ 679.620188][T30494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6788'. [ 679.862962][T30500] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 679.885965][T30500] bond1 (unregistering): Released all slaves [ 680.061649][T30481] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6786'. [ 680.158100][T30519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6796'. [ 680.168346][T30519] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6796'. [ 680.201962][T30519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6796'. [ 680.261520][T30519] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6796'. [ 680.346798][T30539] openvswitch: netlink: IPv4 tun info is not correct [ 680.579199][T30553] netlink: 'syz.5.6805': attribute type 29 has an invalid length. [ 680.600240][T30553] netlink: 'syz.5.6805': attribute type 29 has an invalid length. [ 680.638185][T30553] netlink: 'syz.5.6805': attribute type 32 has an invalid length. [ 680.659385][T30553] netlink: 500 bytes leftover after parsing attributes in process `syz.5.6805'. [ 680.679877][T30557] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6806'. [ 681.427883][T30583] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 681.632839][T30578] wg1 speed is unknown, defaulting to 1000 [ 681.677614][T30601] netlink: 'syz.2.6820': attribute type 1 has an invalid length. [ 681.688142][T30601] netlink: 'syz.2.6820': attribute type 4 has an invalid length. [ 682.057613][T30618] netlink: 'syz.2.6824': attribute type 12 has an invalid length. [ 682.074563][T30626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 682.544911][T14777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.635467][T30664] netlink: 'syz.0.6839': attribute type 1 has an invalid length. [ 682.855345][T30679] macvtap0: entered promiscuous mode [ 682.893896][T30679] veth0_macvtap: left promiscuous mode [ 683.183741][T14777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.221604][T30707] syzkaller0: entered promiscuous mode [ 683.277206][T30707] 0: reclassify loop, rule prio 0, protocol 800 [ 683.483131][T30721] mac80211_hwsim hwsim64 syzkaller0: left promiscuous mode [ 683.499251][T30721] mac80211_hwsim hwsim64 syzkaller0: left allmulticast mode [ 683.823436][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.832702][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.868775][T30737] netlink: 'syz.2.6857': attribute type 29 has an invalid length. [ 683.922892][T30716] wg1 speed is unknown, defaulting to 1000 [ 683.976714][T30743] netlink: 'syz.2.6857': attribute type 29 has an invalid length. [ 684.283757][T30760] netlink: 'syz.3.6862': attribute type 10 has an invalid length. [ 684.293137][T30760] __nla_validate_parse: 7 callbacks suppressed [ 684.293151][T30760] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6862'. [ 684.333844][T30761] netlink: 54 bytes leftover after parsing attributes in process `syz.2.6861'. [ 684.371516][T30761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6861'. [ 684.595629][T30778] netlink: 'syz.2.6869': attribute type 4 has an invalid length. [ 684.694761][T30783] netlink: zone id is out of range [ 684.706963][T30783] netlink: zone id is out of range [ 684.720115][T30783] netlink: zone id is out of range [ 685.007455][T30797] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6874'. [ 685.163929][T30802] C: renamed from lo (while UP) [ 685.479269][T30817] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6882'. [ 685.694194][T30829] netlink: 'syz.2.6885': attribute type 6 has an invalid length. [ 685.728849][T30837] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6884'. [ 685.751912][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.762478][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 685.847418][T30839] bridge_slave_0: left allmulticast mode [ 685.859255][T30839] bridge_slave_0: left promiscuous mode [ 685.893165][T30839] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.925453][T30839] bridge_slave_1: left allmulticast mode [ 685.933268][T30839] bridge_slave_1: left promiscuous mode [ 685.939071][T30839] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.944550][T30848] netlink: 'syz.0.6888': attribute type 1 has an invalid length. [ 686.012365][T30839] bond0: (slave bond_slave_0): Releasing backup interface [ 686.041341][T30839] bond0: (slave bond_slave_1): Releasing backup interface [ 686.055196][T30844] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 686.123767][T30839] team0: Port device team_slave_0 removed [ 686.152538][T30839] team0: Port device team_slave_1 removed [ 686.167269][T30839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.186159][T30839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.198171][T30839] net_ratelimit: 58 callbacks suppressed [ 686.198187][T30839] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 686.388930][T14777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.409069][T30864] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.6892'. [ 686.753028][T30884] macvlan0: entered promiscuous mode [ 686.809962][ T30] audit: type=1107 audit(1775314226.591:7): pid=30887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ÿ¤¼íçïˆ[+*îÅoïúÏ»EÝñI›®ø%üÁ}“ÆQ"…í¾‡ÞþL95¡‘ÝÄ' [ 686.871266][T30895] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 686.902552][T30897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.911131][T30897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.919548][T30897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.952726][T30897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.968972][T30897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.978297][T30897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.987467][T30897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.006197][T30897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6907'. [ 687.307998][T30918] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6915'. [ 687.588171][T30941] macvtap0: entered promiscuous mode [ 687.595622][T30941] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6921'. [ 687.632966][T30941] veth0_macvtap: left promiscuous mode [ 687.693958][T30941] macvtap0 (unregistering): left promiscuous mode [ 687.904837][T30962] validate_nla: 2 callbacks suppressed [ 687.904924][T30962] netlink: 'syz.0.6926': attribute type 1 has an invalid length. [ 688.574771][T30987] netlink: 'syz.3.6935': attribute type 3 has an invalid length. [ 688.585408][T30987] sctp: [Deprecated]: syz.3.6935 (pid 30987) Use of int in maxseg socket option. [ 688.585408][T30987] Use struct sctp_assoc_value instead [ 688.763698][T30993] syzkaller0: entered promiscuous mode [ 688.769379][T30993] syzkaller0: entered allmulticast mode [ 688.855239][T30993] bond2 (unregistering): Released all slaves [ 688.923714][T27811] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 688.972390][T27811] CPU: 1 UID: 0 PID: 27811 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 688.972417][T27811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 688.972429][T27811] Call Trace: [ 688.972437][T27811] [ 688.972445][T27811] dump_stack_lvl+0xe8/0x150 [ 688.972476][T27811] dump_header+0xd3/0x4c0 [ 688.972502][T27811] oom_kill_process+0x3ab/0x970 [ 688.972528][T27811] out_of_memory+0x106c/0x1410 [ 688.972548][T27811] ? percpu_ref_put+0x19/0x180 [ 688.972573][T27811] ? __pfx___mutex_lock+0x10/0x10 [ 688.972604][T27811] ? __pfx_out_of_memory+0x10/0x10 [ 688.972622][T27811] ? do_raw_spin_unlock+0xf5/0x210 [ 688.972653][T27811] try_charge_memcg+0xc53/0x1560 [ 688.972695][T27811] ? __pfx_try_charge_memcg+0x10/0x10 [ 688.972728][T27811] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 688.972756][T27811] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 688.972782][T27811] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 688.972806][T27811] __swap_cache_prepare_and_add+0xe8/0x760 [ 688.972849][T27811] ? page_rmappable_folio+0x9a/0x170 [ 688.972882][T27811] swap_cache_alloc_folio+0xf1/0x240 [ 688.972913][T27811] swap_cluster_readahead+0x53a/0x690 [ 688.972939][T27811] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 688.972971][T27811] ? get_vma_policy+0x27b/0x3c0 [ 688.972998][T27811] swapin_readahead+0x196/0xc50 [ 688.973029][T27811] ? __pfx_swapin_readahead+0x10/0x10 [ 688.973049][T27811] ? swap_table_get+0x1e/0x260 [ 688.973073][T27811] ? swap_table_get+0x1e/0x260 [ 688.973096][T27811] ? swap_table_get+0x1e/0x260 [ 688.973121][T27811] ? swap_table_get+0x216/0x260 [ 688.973148][T27811] ? swap_cache_get_folio+0x513/0x520 [ 688.973181][T27811] do_swap_page+0x56f/0x5a20 [ 688.973226][T27811] ? do_swap_page+0x127/0x5a20 [ 688.973250][T27811] ? __pfx_do_swap_page+0x10/0x10 [ 688.973273][T27811] ? __pte_offset_map+0x1ae/0x240 [ 688.973295][T27811] ? pte_offset_map_rw_nolock+0xea/0x160 [ 688.973317][T27811] handle_mm_fault+0x12d2/0x3310 [ 688.973359][T27811] ? handle_mm_fault+0xee/0x3310 [ 688.973398][T27811] ? __pfx_handle_mm_fault+0x10/0x10 [ 688.973427][T27811] ? lock_vma_under_rcu+0x45a/0x500 [ 688.973474][T27811] do_user_addr_fault+0xa73/0x1340 [ 688.973506][T27811] ? rcu_is_watching+0x15/0xb0 [ 688.973531][T27811] ? trace_page_fault_user+0x84/0x210 [ 688.973557][T27811] exc_page_fault+0x6a/0xc0 [ 688.973581][T27811] asm_exc_page_fault+0x26/0x30 [ 688.973598][T27811] RIP: 0033:0x7f657235d04e [ 688.973618][T27811] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 688.973633][T27811] RSP: 002b:00007fff3ad30f18 EFLAGS: 00010246 [ 688.973651][T27811] RAX: 0000000000000000 RBX: 0000555560732500 RCX: 00007f657235d04e [ 688.973664][T27811] RDX: 00007fff3ad30f70 RSI: 0000000000000000 RDI: 0000000000000000 [ 688.973676][T27811] RBP: 00007fff3ad30fdc R08: 0000000000000000 R09: 0000000000000000 [ 688.973687][T27811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 688.973699][T27811] R13: 00000000000927c0 R14: 00000000000a7f5b R15: 00007fff3ad31030 [ 688.973731][T27811] [ 688.973773][T27811] memory: usage 307200kB, limit 307200kB, failcnt 1122 [ 689.304999][T27811] memory+swap: usage 299876kB, limit 9007199254740988kB, failcnt 0 [ 689.313098][T27811] kmem: usage 299476kB, limit 9007199254740988kB, failcnt 0 [ 689.321719][T27811] Memory cgroup stats for /syz0: [ 689.321855][T27811] cache 4096 [ 689.332075][T27811] rss 0 [ 689.335757][T27811] rss_huge 0 [ 689.339136][T27811] shmem 0 [ 689.352386][T27811] mapped_file 0 [ 689.356293][T27811] dirty 0 [ 689.359244][T27811] writeback 0 [ 689.392904][T27811] workingset_refault_anon 50 [ 689.397548][T27811] workingset_refault_file 287 [ 689.433794][T27811] swap 221184 [ 689.437139][T27811] swapcached 536576 [ 689.454862][T27811] pgpgin 142959 [ 689.471169][T27811] pgpgout 142958 [ 689.474770][T27811] pgfault 256865 [ 689.478321][T27811] pgmajfault 44 [ 689.527387][T27811] inactive_anon 0 [ 689.543450][T27811] active_anon 0 [ 689.546959][T27811] inactive_file 0 [ 689.586347][T27811] active_file 4096 [ 689.590119][T27811] unevictable 0 [ 689.631510][T27811] hierarchical_memory_limit 314572800 [ 689.641500][T27811] hierarchical_memsw_limit 9223372036854771712 [ 689.681068][T27811] total_cache 4096 [ 689.684846][T27811] total_rss 0 [ 689.710638][T27811] total_rss_huge 0 [ 689.714408][T27811] total_shmem 0 [ 689.717870][T27811] total_mapped_file 0 [ 689.770882][T27811] total_dirty 0 [ 689.774401][T27811] total_writeback 0 [ 689.778212][T27811] total_workingset_refault_anon 50 [ 689.820511][T27811] total_workingset_refault_file 287 [ 689.840569][T27811] total_swap 221184 [ 689.851127][T27811] total_swapcached 536576 [ 689.862066][T27811] total_pgpgin 142962 [ 689.891103][T27811] total_pgpgout 142961 [ 689.895227][T27811] total_pgfault 256874 [ 689.899299][T27811] total_pgmajfault 44 [ 689.921129][T27811] total_inactive_anon 0 [ 689.925334][T27811] total_active_anon 0 [ 689.929328][T27811] total_inactive_file 0 [ 689.960658][T27811] total_active_file 4096 [ 689.981723][T27811] total_unevictable 0 [ 689.985767][T27811] anon_cost 0 [ 689.989066][T27811] file_cost 0 [ 690.020832][T27811] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.6926,pid=30955,uid=0 [ 690.069357][T27811] Memory cgroup out of memory: Killed process 30955 (syz.0.6926) total-vm:104468kB, anon-rss:1240kB, file-rss:23256kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 690.217495][T31031] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.563472][T31043] netlink: 'syz.6.6950': attribute type 4 has an invalid length. [ 690.871356][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5110 ms [ 690.879438][ C0] lec:lec_tx_timeout: lec0 [ 690.917766][T31048] netlink: 'syz.0.6951': attribute type 1 has an invalid length. [ 690.936955][T31048] vxlan0: entered promiscuous mode [ 691.162053][T31055] 8021q: VLANs not supported on vxcan1 [ 691.918223][T31076] net_ratelimit: 38 callbacks suppressed [ 691.918237][T31076] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 693.007836][T12478] lec:lec_start_xmit: lec0:No lecd attached [ 693.487911][T31038] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 693.683780][T31093] __nla_validate_parse: 4 callbacks suppressed [ 693.683799][T31093] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6964'. [ 693.833039][T31104] netlink: 'syz.2.6968': attribute type 1 has an invalid length. [ 693.844063][T31104] netlink: 'syz.2.6968': attribute type 2 has an invalid length. [ 693.977628][T31115] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.6971'. [ 694.036273][T31118] netlink: 'syz.2.6972': attribute type 3 has an invalid length. [ 694.069872][T31120] mac80211_hwsim hwsim70 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 694.097578][T31122] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6974'. [ 694.109176][T31122] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6974'. [ 694.167720][T31129] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6976'. [ 694.489191][T31154] IPVS: length: 239 != 24 [ 694.498962][T31154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6985'. [ 694.660303][T31163] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 694.683187][T31166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6989'. [ 694.714187][T31166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6989'. [ 694.849617][T31171] netlink: 'syz.0.6991': attribute type 4 has an invalid length. [ 695.068505][T31186] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.6997'. [ 695.082399][T31186] netdevsim netdevsim6: Direct firmware load for %›ŒÑ failed with error -2 [ 695.095037][T31186] netdevsim netdevsim6: Falling back to sysfs fallback for: %›ŒÑ [ 695.142411][T31189] syzkaller1: entered promiscuous mode [ 695.151092][T31189] syzkaller1: entered allmulticast mode [ 695.413471][T31188] xt_hashlimit: size too large, truncated to 1048576 [ 695.520086][T31211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7005'. [ 695.616450][T31214] syzkaller0: entered promiscuous mode [ 695.631660][T31214] syzkaller0: entered allmulticast mode [ 695.645951][T31214] IPv6: addrconf: prefix option has invalid lifetime [ 695.848044][T31225] netlink: 'syz.3.7011': attribute type 1 has an invalid length. [ 695.858675][T31226] netlink: 'syz.3.7011': attribute type 1 has an invalid length. [ 696.030966][T14777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.194919][T31241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 696.390378][T31245] netlink: 'syz.6.7016': attribute type 1 has an invalid length. [ 696.601530][T31256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 696.613746][T31256] netlink: 'syz.0.7017': attribute type 2 has an invalid length. [ 696.647968][T31256] !: entered promiscuous mode [ 696.683715][T31256] netlink: 'syz.0.7017': attribute type 2 has an invalid length. [ 696.703059][T31256] !: left promiscuous mode [ 696.801854][T31264] bond2: entered promiscuous mode [ 696.807079][T31264] bond2: entered allmulticast mode [ 696.813195][T31264] 8021q: adding VLAN 0 to HW filter on device bond2 [ 696.843580][T31267] syzkaller0: entered promiscuous mode [ 696.849214][T31267] syzkaller0: entered allmulticast mode [ 696.862306][T30624] wlan1: Trigger new scan to find an IBSS to join [ 696.905020][T31272] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 697.030259][T31279] netlink: 'syz.6.7027': attribute type 21 has an invalid length. [ 697.082125][T31279] bond2: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 697.094364][T31279] bond2 (unregistering): Released all slaves [ 697.246191][T31295] hsr0: entered promiscuous mode [ 697.252794][T31295] macvlan3: entered allmulticast mode [ 697.258359][T31295] hsr0: entered allmulticast mode [ 697.265476][T31295] hsr_slave_0: entered allmulticast mode [ 697.275088][T31295] hsr_slave_1: entered allmulticast mode [ 697.733253][T30619] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.755896][ T13] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.781439][ T13] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.806825][ T13] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.890113][T31328] geneve2: entered promiscuous mode [ 698.021225][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 698.029360][ C0] lec:lec_tx_timeout: lec0 [ 698.301221][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.344325][T31364] xt_cgroup: invalid path, errno=-2 [ 698.468104][T31379] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 698.521820][T31386] bond_slave_1: Caught tx_queue_len zero misconfig [ 699.115907][T31426] __nla_validate_parse: 45 callbacks suppressed [ 699.115925][T31426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7071'. [ 699.132406][T31426] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 699.178254][T31426] team1: entered promiscuous mode [ 699.231700][T31426] team1: entered allmulticast mode [ 699.336126][T31437] block nbd0: not configured, cannot reconfigure [ 699.356178][T31437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7075'. [ 699.436628][T31443] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004 [ 699.459414][T31445] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7076'. [ 699.468693][T31445] validate_nla: 3 callbacks suppressed [ 699.468709][T31445] netlink: 'syz.6.7076': attribute type 18 has an invalid length. [ 699.483702][T31445] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7076'. [ 699.495054][T31445] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7076'. [ 699.510661][T31445] netlink: 'syz.6.7076': attribute type 18 has an invalid length. [ 699.518631][T31445] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7076'. [ 699.535118][T31449] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7076'. [ 699.548521][T31450] syzkaller0: entered promiscuous mode [ 699.558690][T31450] syzkaller0: entered allmulticast mode [ 699.571341][T31449] netlink: 'syz.6.7076': attribute type 18 has an invalid length. [ 699.579249][T31449] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7076'. [ 699.614735][T31449] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7076'. [ 699.630269][T31449] netlink: 'syz.6.7076': attribute type 18 has an invalid length. [ 699.642541][T31449] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7076'. [ 699.668810][T31457] hsr0: entered promiscuous mode [ 699.691632][T31457] macvlan2: entered allmulticast mode [ 699.702002][T31457] hsr0: entered allmulticast mode [ 699.707183][T31457] hsr_slave_0: entered allmulticast mode [ 699.715541][T31457] hsr_slave_1: entered allmulticast mode [ 699.832411][T30624] wlan1: Trigger new scan to find an IBSS to join [ 699.966808][T31473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.977390][T31473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.986701][T31473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.994855][T31475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.003005][T31473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.013438][T31475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.021610][T31473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.031685][T31477] openvswitch: netlink: Invalid VLAN frame [ 700.037697][T31473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.178812][T31482] syzkaller0: entered promiscuous mode [ 700.207132][T31482] syzkaller0: entered allmulticast mode [ 700.755116][T31515] netlink: 'syz.6.7096': attribute type 21 has an invalid length. [ 700.877671][T31521] team_slave_0: entered promiscuous mode [ 700.883904][T31521] team_slave_1: entered promiscuous mode [ 700.910029][T31521] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 700.954419][T31521] team0: Device macvlan2 is already an upper device of the team interface [ 700.966046][T27350] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 700.978242][T27350] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 700.988504][T27350] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 700.996714][T27350] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 701.006511][T31521] team_slave_0: left promiscuous mode [ 701.011991][T31521] team_slave_1: left promiscuous mode [ 701.027096][T27350] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 701.050051][T31524] netlink: 'syz.6.7101': attribute type 4 has an invalid length. [ 701.083594][T31536] mac80211_hwsim hwsim64 wlan1: Caught tx_queue_len zero misconfig [ 701.101181][T27350] Bluetooth: hci1: command tx timeout [ 701.362888][T31553] netlink: 'syz.2.7109': attribute type 7 has an invalid length. [ 701.643620][T31526] wg1 speed is unknown, defaulting to 1000 [ 702.029882][T31526] chnl_net:caif_netlink_parms(): no params data found [ 702.178098][T31526] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.186758][T31526] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.196861][T31526] bridge_slave_0: entered allmulticast mode [ 702.205497][T31526] bridge_slave_0: entered promiscuous mode [ 702.233171][T31526] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.240381][T31526] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.251658][T31526] bridge_slave_1: entered allmulticast mode [ 702.272073][T31526] bridge_slave_1: entered promiscuous mode [ 702.415712][T31601] ip6tnl0: Caught tx_queue_len zero misconfig [ 702.435741][T31526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.481029][T31526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.642879][T31526] team0: Port device team_slave_0 added [ 702.670257][T31526] team0: Port device team_slave_1 added [ 702.772892][T31621] syzkaller0: entered promiscuous mode [ 702.792232][T31621] syzkaller0: entered allmulticast mode [ 702.810487][T31526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.817468][T31526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.875514][T30624] wlan1: Trigger new scan to find an IBSS to join [ 702.913545][T31526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.933632][T31627] syzkaller1: entered promiscuous mode [ 702.957929][T31627] syzkaller1: entered allmulticast mode [ 702.966151][T31526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.981378][T31526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 703.071299][T31526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.100783][T27350] Bluetooth: hci7: command tx timeout [ 703.182045][T27350] Bluetooth: hci1: command tx timeout [ 703.389968][T31526] hsr_slave_0: entered promiscuous mode [ 703.408650][T31526] hsr_slave_1: entered promiscuous mode [ 703.416149][T31526] debugfs: 'hsr0' already exists in 'hsr' [ 703.437037][T31526] Cannot create hsr debugfs directory [ 703.847890][T30624] wlan1: Creating new IBSS network, BSSID 5a:60:bc:9e:fa:e7 [ 703.955951][T31526] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 703.982059][T31526] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 704.002616][T31526] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 704.028332][T31526] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 704.176464][T31526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.203826][T31526] 8021q: adding VLAN 0 to HW filter on device team0 [ 704.218207][T13060] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.225418][T13060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 704.278978][T30619] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.286153][T30619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 704.495637][T31692] netlink: 'syz.2.7146': attribute type 1 has an invalid length. [ 704.539182][T31698] __nla_validate_parse: 28 callbacks suppressed [ 704.539202][T31698] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7147'. [ 704.574544][T31702] netlink: 'syz.3.7149': attribute type 10 has an invalid length. [ 704.616906][T30624] wlan1: Selected IBSS BSSID 5a:60:bc:9e:fa:e7 based on configured SSID [ 704.641651][T31702] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 704.653022][T31698] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 704.794699][T31526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.934815][T31716] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.965005][T31716] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.012437][T31725] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7153'. [ 705.029560][T31725] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7153'. [ 705.043033][T31725] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7153'. [ 705.078357][T31716] net_ratelimit: 16 callbacks suppressed [ 705.078374][T31716] IPVS: sh: FWM 3 0x00000003 - no destination available [ 705.095849][T31716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7152'. [ 705.108411][T31722] sctp: [Deprecated]: syz.6.7153 (pid 31722) Use of int in maxseg socket option. [ 705.108411][T31722] Use struct sctp_assoc_value instead [ 705.211471][T27350] Bluetooth: hci7: command tx timeout [ 705.344395][T31735] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 705.404054][T31747] netlink: 'syz.3.7156': attribute type 11 has an invalid length. [ 705.429713][T31747] netlink: 228 bytes leftover after parsing attributes in process `syz.3.7156'. [ 705.469792][T31751] netlink: 'syz.2.7160': attribute type 142 has an invalid length. [ 705.482308][T31526] veth0_vlan: entered promiscuous mode [ 705.513649][T31750] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 705.525005][T31526] veth1_vlan: entered promiscuous mode [ 705.554095][T31755] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7162'. [ 705.568720][T31750] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7161'. [ 705.597635][T31755] netlink: 'syz.6.7162': attribute type 1 has an invalid length. [ 705.608341][T31755] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 705.638487][T31526] veth0_macvtap: entered promiscuous mode [ 705.699025][T31526] veth1_macvtap: entered promiscuous mode [ 705.759613][T31526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.786849][T31772] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7166'. [ 705.794063][T31526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 705.847966][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.861916][T31776] netlink: 'syz.2.7167': attribute type 13 has an invalid length. [ 705.869772][T31776] netlink: 'syz.2.7167': attribute type 58 has an invalid length. [ 705.878258][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.890295][T31776] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7167'. [ 705.917915][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.951534][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.156915][T30623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.171126][T30623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.300263][T13060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.331142][T13060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.439119][T31801] netlink: 'syz.0.7175': attribute type 2 has an invalid length. [ 706.537603][T31805] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 706.582290][T31812] netlink: 'syz.3.7176': attribute type 21 has an invalid length. [ 706.590864][T31812] netlink: 'syz.3.7176': attribute type 1 has an invalid length. [ 706.824422][T31829] netlink: 'syz.6.7180': attribute type 22 has an invalid length. [ 707.235233][T31847] gre0: entered promiscuous mode [ 707.262282][T27350] Bluetooth: hci7: command tx timeout [ 707.304957][T31847] team0: Device ipvlan1 failed to register rx_handler [ 707.758759][T31875] veth0_to_bond: entered allmulticast mode [ 707.797870][T31872] x_tables: unsorted entry at hook 2 [ 707.803883][T31873] x_tables: unsorted entry at hook 2 [ 708.017331][T31892] block nbd0: not configured, cannot reconfigure [ 708.594476][T31932] netlink: 'syz.6.7214': attribute type 11 has an invalid length. [ 708.717727][T31937] ip6t_srh: unknown srh invflags 4000 [ 709.058771][T31950] IPv6: Can't replace route, no match found [ 709.303928][T31957] openvswitch: netlink: Message has 1 unknown bytes. [ 709.343261][T27350] Bluetooth: hci7: command tx timeout [ 709.349653][T31957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 709.525466][T31980] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 709.593617][T31985] validate_nla: 7 callbacks suppressed [ 709.593637][T31985] netlink: 'syz.3.7230': attribute type 1 has an invalid length. [ 709.662281][T31985] __nla_validate_parse: 21 callbacks suppressed [ 709.662300][T31985] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7230'. [ 709.923121][T32007] netlink: 'syz.3.7237': attribute type 1 has an invalid length. [ 710.475944][T32028] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 710.533429][T32028] bond5 (unregistering): Released all slaves [ 710.540225][T32039] netlink: 'syz.7.7245': attribute type 1 has an invalid length. [ 710.567951][T32039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 710.593321][T32041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7246'. [ 710.642260][T32041] netlink: 'syz.2.7246': attribute type 1 has an invalid length. [ 711.062305][T32048] wg1 speed is unknown, defaulting to 1000 [ 711.359012][T32067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7256'. [ 711.535923][T32069] netlink: 'syz.6.7255': attribute type 11 has an invalid length. [ 711.564440][T32069] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7255'. [ 711.726570][T28623] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 711.889982][T28623] CPU: 1 UID: 0 PID: 28623 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 711.890009][T28623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 711.890019][T28623] Call Trace: [ 711.890026][T28623] [ 711.890035][T28623] dump_stack_lvl+0xe8/0x150 [ 711.890065][T28623] dump_header+0xd3/0x4c0 [ 711.890089][T28623] oom_kill_process+0x3ab/0x970 [ 711.890114][T28623] out_of_memory+0x106c/0x1410 [ 711.890133][T28623] ? percpu_ref_put+0x19/0x180 [ 711.890156][T28623] ? __pfx___mutex_lock+0x10/0x10 [ 711.890187][T28623] ? __pfx_out_of_memory+0x10/0x10 [ 711.890204][T28623] ? do_raw_spin_unlock+0xf5/0x210 [ 711.890232][T28623] try_charge_memcg+0xc53/0x1560 [ 711.890269][T28623] ? __pfx_try_charge_memcg+0x10/0x10 [ 711.890302][T28623] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 711.890329][T28623] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 711.890353][T28623] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 711.890376][T28623] __swap_cache_prepare_and_add+0xe8/0x760 [ 711.890407][T28623] ? page_rmappable_folio+0x9a/0x170 [ 711.890437][T28623] swap_cache_alloc_folio+0xf1/0x240 [ 711.890468][T28623] swap_cluster_readahead+0x369/0x690 [ 711.890497][T28623] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 711.890525][T28623] ? get_vma_policy+0x27b/0x3c0 [ 711.890551][T28623] swapin_readahead+0x196/0xc50 [ 711.890582][T28623] ? __pfx_swapin_readahead+0x10/0x10 [ 711.890602][T28623] ? swap_table_get+0x1e/0x260 [ 711.890622][T28623] ? swap_table_get+0x1e/0x260 [ 711.890644][T28623] ? swap_table_get+0x1e/0x260 [ 711.890669][T28623] ? swap_table_get+0x216/0x260 [ 711.890695][T28623] ? swap_cache_get_folio+0x513/0x520 [ 711.890724][T28623] do_swap_page+0x56f/0x5a20 [ 711.890778][T28623] ? do_swap_page+0x127/0x5a20 [ 711.890800][T28623] ? __pfx_do_swap_page+0x10/0x10 [ 711.890823][T28623] ? __pte_offset_map+0x1ae/0x240 [ 711.890843][T28623] ? pte_offset_map_rw_nolock+0xea/0x160 [ 711.890862][T28623] handle_mm_fault+0x12d2/0x3310 [ 711.890902][T28623] ? handle_mm_fault+0xee/0x3310 [ 711.890932][T28623] ? __pfx_handle_mm_fault+0x10/0x10 [ 711.890955][T28623] ? lock_vma_under_rcu+0x45a/0x500 [ 711.890999][T28623] do_user_addr_fault+0xa73/0x1340 [ 711.891028][T28623] ? rcu_is_watching+0x15/0xb0 [ 711.891054][T28623] ? trace_page_fault_user+0x84/0x210 [ 711.891079][T28623] exc_page_fault+0x6a/0xc0 [ 711.891100][T28623] asm_exc_page_fault+0x26/0x30 [ 711.891117][T28623] RIP: 0033:0x7ff1a1d5d04e [ 711.891134][T28623] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 711.891148][T28623] RSP: 002b:00007fff5bef3478 EFLAGS: 00010246 [ 711.891165][T28623] RAX: 0000000000000000 RBX: 000055556a447500 RCX: 00007ff1a1d5d04e [ 711.891178][T28623] RDX: 00007fff5bef34d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 711.891188][T28623] RBP: 00007fff5bef353c R08: 0000000000000000 R09: 0000000000000000 [ 711.891199][T28623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 711.891210][T28623] R13: 00000000000927c0 R14: 00000000000adaf0 R15: 00007fff5bef3590 [ 711.891240][T28623] [ 712.241609][T28623] memory: usage 307200kB, limit 307200kB, failcnt 579 [ 712.261972][T28623] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0 [ 712.271700][T28623] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 712.279019][T28623] Memory cgroup stats for /syz2: [ 712.279135][T28623] cache 0 [ 712.312991][T28623] rss 4096 [ 712.319809][T28623] rss_huge 0 [ 712.332183][T28623] shmem 0 [ 712.344599][T28623] mapped_file 0 [ 712.358372][T28623] dirty 0 [ 712.369912][T28623] writeback 0 [ 712.378053][T28623] workingset_refault_anon 27 [ 712.389218][T28623] workingset_refault_file 0 [ 712.402195][T28623] swap 212992 [ 712.410046][T28623] swapcached 331776 [ 712.420588][T28623] pgpgin 132660 [ 712.428601][T28623] pgpgout 132658 [ 712.436666][T28623] pgfault 268382 [ 712.445858][T28623] pgmajfault 28 [ 712.453002][T28623] inactive_anon 8192 [ 712.462536][T28623] active_anon 0 [ 712.469798][T28623] inactive_file 0 [ 712.480622][T28623] active_file 0 [ 712.488623][T28623] unevictable 0 [ 712.497760][T28623] hierarchical_memory_limit 314572800 [ 712.511919][T28623] hierarchical_memsw_limit 9223372036854771712 [ 712.552026][T32080] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7259'. [ 712.563352][T32087] netlink: 'syz.3.7261': attribute type 2 has an invalid length. [ 712.661014][T28623] total_cache 0 [ 712.664523][T28623] total_rss 4096 [ 712.749567][T28623] total_rss_huge 0 [ 712.840539][T28623] total_shmem 0 [ 712.844057][T28623] total_mapped_file 0 [ 712.848042][T28623] total_dirty 0 [ 712.868789][T32091] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7262'. [ 712.895470][T28623] total_writeback 0 [ 712.899329][T28623] total_workingset_refault_anon 27 [ 712.930955][T32091] netlink: 'syz.6.7262': attribute type 8 has an invalid length. [ 712.968350][T28623] total_workingset_refault_file 0 [ 713.018970][T28623] total_swap 212992 [ 713.091640][T28623] total_swapcached 331776 [ 713.096080][T28623] total_pgpgin 132660 [ 713.100068][T28623] total_pgpgout 132658 [ 713.204686][T28623] total_pgfault 268382 [ 713.258552][T28623] total_pgmajfault 28 [ 713.294550][T28623] total_inactive_anon 8192 [ 713.323758][T28623] total_active_anon 0 [ 713.370150][T28623] total_inactive_file 0 [ 713.432286][T28623] total_active_file 0 [ 713.436325][T28623] total_unevictable 0 [ 713.440312][T28623] anon_cost 0 [ 713.522801][T28623] file_cost 0 [ 713.566992][T28623] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.7246,pid=32034,uid=0 [ 713.616129][T28623] Memory cgroup out of memory: Killed process 32034 (syz.2.7246) total-vm:104468kB, anon-rss:1244kB, file-rss:23192kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 713.783934][T32127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7272'. [ 714.107782][T32145] netlink: 'syz.7.7280': attribute type 1 has an invalid length. [ 714.168205][T32147] netlink: 'syz.3.7276': attribute type 28 has an invalid length. [ 714.203811][T32147] netlink: 'syz.3.7276': attribute type 3 has an invalid length. [ 714.230869][T32147] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7276'. [ 714.269607][T32152] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7276'. [ 714.339984][T32148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 714.406359][T32160] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7283'. [ 714.473710][T32160] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 714.497876][T32160] team0: Port device batadv1 added [ 714.590831][T32168] netlink: 'syz.0.7286': attribute type 1 has an invalid length. [ 714.657642][T32166] gtp1: entered promiscuous mode [ 714.670729][T32166] gtp1: entered allmulticast mode [ 714.890254][T32188] __nla_validate_parse: 1 callbacks suppressed [ 714.890273][T32188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7287'. [ 714.911155][T32190] netlink: 'syz.6.7290': attribute type 2 has an invalid length. [ 714.927279][T32190] —þ: entered promiscuous mode [ 714.986007][T32196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7292'. [ 714.996306][T32196] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 715.197684][T32204] netlink: 576 bytes leftover after parsing attributes in process `syz.6.7294'. [ 715.643238][T32216] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7296'. [ 715.692249][T32216] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7296'. [ 715.812544][T32222] delete_channel: no stack [ 716.112130][T30619] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.134907][T30619] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.149898][T32232] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7303'. [ 716.402390][T32237] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 716.416780][T32171] syz.3.7287 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 716.460024][T32237] bond5 (unregistering): Released all slaves [ 716.476242][T32171] CPU: 1 UID: 0 PID: 32171 Comm: syz.3.7287 Not tainted syzkaller #0 PREEMPT(full) [ 716.476269][T32171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 716.476281][T32171] Call Trace: [ 716.476291][T32171] [ 716.476301][T32171] dump_stack_lvl+0xe8/0x150 [ 716.476341][T32171] dump_header+0xd3/0x4c0 [ 716.476369][T32171] oom_kill_process+0x3ab/0x970 [ 716.476399][T32171] out_of_memory+0x106c/0x1410 [ 716.476422][T32171] ? percpu_ref_put+0x19/0x180 [ 716.476450][T32171] ? __pfx___mutex_lock+0x10/0x10 [ 716.476487][T32171] ? __pfx_out_of_memory+0x10/0x10 [ 716.476507][T32171] ? do_raw_spin_unlock+0xf5/0x210 [ 716.476540][T32171] try_charge_memcg+0xc53/0x1560 [ 716.476587][T32171] ? __pfx_try_charge_memcg+0x10/0x10 [ 716.476624][T32171] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 716.476655][T32171] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 716.476685][T32171] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 716.476714][T32171] __swap_cache_prepare_and_add+0xe8/0x760 [ 716.476755][T32171] ? page_rmappable_folio+0x9a/0x170 [ 716.476799][T32171] swap_cache_alloc_folio+0xf1/0x240 [ 716.476836][T32171] swap_cluster_readahead+0x369/0x690 [ 716.476864][T32171] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 716.476899][T32171] ? get_vma_policy+0x27b/0x3c0 [ 716.476929][T32171] swapin_readahead+0x196/0xc50 [ 716.476963][T32171] ? __pfx_swapin_readahead+0x10/0x10 [ 716.476985][T32171] ? swap_table_get+0x1e/0x260 [ 716.477014][T32171] ? swap_table_get+0x1e/0x260 [ 716.477041][T32171] ? swap_table_get+0x1e/0x260 [ 716.477072][T32171] ? swap_table_get+0x216/0x260 [ 716.477104][T32171] ? swap_cache_get_folio+0x513/0x520 [ 716.477142][T32171] do_swap_page+0x56f/0x5a20 [ 716.477196][T32171] ? do_swap_page+0x127/0x5a20 [ 716.477225][T32171] ? __pfx_do_swap_page+0x10/0x10 [ 716.477252][T32171] ? __pte_offset_map+0x1ae/0x240 [ 716.477277][T32171] ? pte_offset_map_rw_nolock+0xea/0x160 [ 716.477301][T32171] handle_mm_fault+0x12d2/0x3310 [ 716.477350][T32171] ? handle_mm_fault+0xee/0x3310 [ 716.477391][T32171] ? __pfx_handle_mm_fault+0x10/0x10 [ 716.477421][T32171] ? lock_vma_under_rcu+0x45a/0x500 [ 716.477444][T32171] ? __pfx___sys_bpf+0x10/0x10 [ 716.477491][T32171] do_user_addr_fault+0xa73/0x1340 [ 716.477527][T32171] ? rcu_is_watching+0x15/0xb0 [ 716.477557][T32171] ? trace_page_fault_user+0x84/0x210 [ 716.477588][T32171] exc_page_fault+0x6a/0xc0 [ 716.477616][T32171] asm_exc_page_fault+0x26/0x30 [ 716.477637][T32171] RIP: 0033:0x7f966af9c82b [ 716.477658][T32171] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 [ 716.477676][T32171] RSP: 002b:00007f966be61028 EFLAGS: 00010217 [ 716.477695][T32171] RAX: 000000000000000c RBX: 00007f966b215fa0 RCX: ffffffffffffffe8 [ 716.477711][T32171] RDX: 0000000000000048 RSI: 0000200000000640 RDI: 0000000000000000 [ 716.477724][T32171] RBP: 00007f966b032c91 R08: 0000000000000000 R09: 0000000000000000 [ 716.477737][T32171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 716.477751][T32171] R13: 00007f966b216038 R14: 00007f966b215fa0 R15: 00007ffdd2c15858 [ 716.477793][T32171] [ 716.477828][T32171] memory: usage 307200kB, limit 307200kB, failcnt 535 [ 717.045366][T32171] memory+swap: usage 297528kB, limit 9007199254740988kB, failcnt 0 [ 717.046918][T32257] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 717.083852][T32171] kmem: usage 294624kB, limit 9007199254740988kB, failcnt 0 [ 717.129987][T32171] Memory cgroup stats for /syz3: [ 717.130144][T32171] cache 0 [ 717.160644][T32171] rss 36864 [ 717.167154][T32171] rss_huge 0 [ 717.187184][T32171] shmem 0 [ 717.190241][T32171] mapped_file 0 [ 717.206717][T32171] dirty 0 [ 717.214235][T32171] writeback 0 [ 717.222291][T32171] workingset_refault_anon 11 [ 717.247968][T32171] workingset_refault_file 2 [ 717.254535][T32263] netlink: 'syz.2.7312': attribute type 1 has an invalid length. [ 717.266046][T32264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7310'. [ 717.279030][T32171] swap 184320 [ 717.292783][T32171] swapcached 270336 [ 717.296780][T32263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 717.307640][T32171] pgpgin 182524 [ 717.317190][T32171] pgpgout 182514 [ 717.328919][T32171] pgfault 294242 [ 717.336299][T32171] pgmajfault 13 [ 717.343715][T32263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7312'. [ 717.354478][T32171] inactive_anon 0 [ 717.358142][T32171] active_anon 12288 [ 717.363548][T32263] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7312'. [ 717.381650][T32171] inactive_file 0 [ 717.385351][T32171] active_file 0 [ 717.388820][T32171] unevictable 0 [ 717.403040][T32266] veth3: entered allmulticast mode [ 717.420508][T32171] hierarchical_memory_limit 314572800 [ 717.425955][T32171] hierarchical_memsw_limit 9223372036854771712 [ 717.472147][T32171] total_cache 0 [ 717.480823][T32171] total_rss 36864 [ 717.484523][T32171] total_rss_huge 0 [ 717.508595][T32171] total_shmem 0 [ 717.531606][T32171] total_mapped_file 0 [ 717.535642][T32171] total_dirty 0 [ 717.561383][T32171] total_writeback 0 [ 717.579727][T32171] total_workingset_refault_anon 11 [ 717.599914][T32171] total_workingset_refault_file 2 [ 717.628258][T32171] total_swap 184320 [ 717.642169][T32171] total_swapcached 270336 [ 717.657630][T32171] total_pgpgin 182524 [ 717.681261][T32171] total_pgpgout 182514 [ 717.696961][T32171] total_pgfault 294243 [ 717.711119][T32171] total_pgmajfault 13 [ 717.729203][T32171] total_inactive_anon 0 [ 717.749858][T32171] total_active_anon 12288 [ 717.770759][T32171] total_inactive_file 0 [ 717.786144][T32171] total_active_file 0 [ 717.798354][T32171] total_unevictable 0 [ 717.815249][T32171] anon_cost 0 [ 717.835631][T32171] file_cost 0 [ 717.846752][T32171] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7287,pid=32170,uid=0 [ 717.890419][T32171] Memory cgroup out of memory: Killed process 32171 (syz.3.7287) total-vm:110892kB, anon-rss:1280kB, file-rss:31192kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 718.009876][T32291] netlink: 332 bytes leftover after parsing attributes in process `syz.6.7315'. [ 718.516127][T32323] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 718.530129][T32327] netlink: 'syz.6.7327': attribute type 10 has an invalid length. [ 718.533975][T32323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 718.656224][T32327] veth0_vlan: left promiscuous mode [ 718.678500][T32327] veth0_vlan: entered promiscuous mode [ 718.734916][T32327] team0: Device veth0_vlan failed to register rx_handler [ 718.782276][T14777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.864540][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.885432][T32349] netlink: 'syz.7.7332': attribute type 1 has an invalid length. [ 718.964784][T32349] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 719.051202][T32347] netlink: 'syz.0.7333': attribute type 1 has an invalid length. [ 719.154588][T32347] 8021q: adding VLAN 0 to HW filter on device bond5 [ 719.211567][T32362] syzkaller1: entered promiscuous mode [ 719.253952][T32362] syzkaller1: entered allmulticast mode [ 719.428149][T32373] netlink: 'syz.0.7338': attribute type 83 has an invalid length. [ 719.815360][T32384] tipc: Failed to remove unknown binding: 66,1,1/4269801492:1757648218/1757648220 [ 719.893381][T32392] sctp: [Deprecated]: syz.6.7343 (pid 32392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 719.893381][T32392] Use struct sctp_sack_info instead [ 719.911840][T20777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.157025][T32400] openvswitch: netlink: IP tunnel TTL not specified. [ 720.724212][T28623] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 720.888331][T32423] can: request_module (can-proto-0) failed. [ 720.892874][T28623] CPU: 1 UID: 0 PID: 28623 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 720.892900][T28623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 720.892912][T28623] Call Trace: [ 720.892919][T28623] [ 720.892927][T28623] dump_stack_lvl+0xe8/0x150 [ 720.892961][T28623] dump_header+0xd3/0x4c0 [ 720.892985][T28623] oom_kill_process+0x3ab/0x970 [ 720.893009][T28623] out_of_memory+0x106c/0x1410 [ 720.893028][T28623] ? percpu_ref_put+0x19/0x180 [ 720.893052][T28623] ? __pfx___mutex_lock+0x10/0x10 [ 720.893082][T28623] ? __pfx_out_of_memory+0x10/0x10 [ 720.893099][T28623] ? do_raw_spin_unlock+0xf5/0x210 [ 720.893127][T28623] try_charge_memcg+0xc53/0x1560 [ 720.893166][T28623] ? __pfx_try_charge_memcg+0x10/0x10 [ 720.893198][T28623] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 720.893224][T28623] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 720.893248][T28623] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 720.893272][T28623] __swap_cache_prepare_and_add+0xe8/0x760 [ 720.893304][T28623] ? page_rmappable_folio+0x9a/0x170 [ 720.893334][T28623] swap_cache_alloc_folio+0xf1/0x240 [ 720.893363][T28623] swap_cluster_readahead+0x369/0x690 [ 720.893387][T28623] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 720.893417][T28623] ? get_vma_policy+0x27b/0x3c0 [ 720.893442][T28623] swapin_readahead+0x196/0xc50 [ 720.893470][T28623] ? __pfx_swapin_readahead+0x10/0x10 [ 720.893489][T28623] ? swap_table_get+0x1e/0x260 [ 720.893519][T28623] ? swap_table_get+0x1e/0x260 [ 720.893541][T28623] ? swap_table_get+0x1e/0x260 [ 720.893565][T28623] ? swap_table_get+0x216/0x260 [ 720.893591][T28623] ? swap_cache_get_folio+0x513/0x520 [ 720.893622][T28623] do_swap_page+0x56f/0x5a20 [ 720.893667][T28623] ? do_swap_page+0x127/0x5a20 [ 720.893690][T28623] ? __pfx_do_swap_page+0x10/0x10 [ 720.893712][T28623] ? __pte_offset_map+0x1ae/0x240 [ 720.893733][T28623] ? pte_offset_map_rw_nolock+0xea/0x160 [ 720.893753][T28623] handle_mm_fault+0x12d2/0x3310 [ 720.893792][T28623] ? handle_mm_fault+0xee/0x3310 [ 720.893825][T28623] ? __pfx_handle_mm_fault+0x10/0x10 [ 720.893853][T28623] ? lock_vma_under_rcu+0x45a/0x500 [ 720.893897][T28623] do_user_addr_fault+0xa73/0x1340 [ 720.893926][T28623] ? rcu_is_watching+0x15/0xb0 [ 720.893950][T28623] ? trace_page_fault_user+0x84/0x210 [ 720.893974][T28623] exc_page_fault+0x6a/0xc0 [ 720.893997][T28623] asm_exc_page_fault+0x26/0x30 [ 720.894015][T28623] RIP: 0033:0x7ff1a1d5d04e [ 720.894032][T28623] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 720.894048][T28623] RSP: 002b:00007fff5bef3478 EFLAGS: 00010246 [ 720.894065][T28623] RAX: 0000000000000000 RBX: 000055556a447500 RCX: 00007ff1a1d5d04e [ 720.894077][T28623] RDX: 00007fff5bef34d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 720.894088][T28623] RBP: 00007fff5bef353c R08: 0000000000000000 R09: 0000000000000000 [ 720.894098][T28623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 720.894109][T28623] R13: 00000000000927c0 R14: 00000000000afa08 R15: 00007fff5bef3590 [ 720.894140][T28623] [ 720.894147][T28623] memory: usage 307200kB, limit 307200kB, failcnt 968 [ 721.229163][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.264363][T32434] __nla_validate_parse: 3 callbacks suppressed [ 721.264381][T32434] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7361'. [ 721.282703][T28623] memory+swap: usage 307420kB, limit 9007199254740988kB, failcnt 0 [ 721.291374][T28623] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 721.298951][T28623] Memory cgroup stats for /syz2: [ 721.373720][T28623] cache 0 [ 721.407633][T28623] rss 0 [ 721.423147][T28623] rss_huge 0 [ 721.426405][T28623] shmem 0 [ 721.473522][T28623] mapped_file 0 [ 721.477045][T28623] dirty 0 [ 721.536776][T28623] writeback 0 [ 721.559818][T28623] workingset_refault_anon 60 [ 721.629534][T28623] workingset_refault_file 256 [ 721.661482][T28623] swap 225280 [ 721.664822][T28623] swapcached 614400 [ 721.668630][T28623] pgpgin 133424 [ 721.684549][T32454] netlink: 840 bytes leftover after parsing attributes in process `syz.6.7367'. [ 721.703863][T28623] pgpgout 133424 [ 721.707463][T28623] pgfault 269715 [ 721.728868][T28623] pgmajfault 59 [ 721.746455][T28623] inactive_anon 0 [ 721.750140][T28623] active_anon 0 [ 721.766749][T28623] inactive_file 0 [ 721.770428][T28623] active_file 0 [ 721.790085][T32459] netlink: 96 bytes leftover after parsing attributes in process `syz.7.7368'. [ 721.804140][T28623] unevictable 0 [ 721.807660][T28623] hierarchical_memory_limit 314572800 [ 721.827251][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.866703][T28623] hierarchical_memsw_limit 9223372036854771712 [ 721.881575][T28623] total_cache 0 [ 721.885205][T28623] total_rss 0 [ 721.888515][T28623] total_rss_huge 0 [ 721.898732][T28623] total_shmem 0 [ 721.931942][T28623] total_mapped_file 0 [ 721.935978][T28623] total_dirty 0 [ 721.939465][T28623] total_writeback 0 [ 721.949490][T28623] total_workingset_refault_anon 60 [ 721.958664][T32462] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7369'. [ 721.964617][T28623] total_workingset_refault_file 256 [ 721.996713][T28623] total_swap 225280 [ 722.012482][T28623] total_swapcached 614400 [ 722.049529][T28623] total_pgpgin 133424 [ 722.063396][T32466] netlink: 'syz.6.7370': attribute type 21 has an invalid length. [ 722.077432][T28623] total_pgpgout 133424 [ 722.093371][T32466] netlink: 128 bytes leftover after parsing attributes in process `syz.6.7370'. [ 722.104777][T28623] total_pgfault 269715 [ 722.131654][T28623] total_pgmajfault 59 [ 722.132056][T32466] netlink: 3 bytes leftover after parsing attributes in process `syz.6.7370'. [ 722.135676][T28623] total_inactive_anon 0 [ 722.135688][T28623] total_active_anon 0 [ 722.214412][T28623] total_inactive_file 0 [ 722.218631][T28623] total_active_file 0 [ 722.275912][T28623] total_unevictable 0 [ 722.279950][T28623] anon_cost 0 [ 722.310109][T20779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.328778][T28623] file_cost 0 [ 722.343897][T28623] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.7328,pid=32329,uid=0 [ 722.412378][T32469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7372'. [ 722.442293][T28623] Memory cgroup out of memory: Killed process 32329 (syz.2.7328) total-vm:106656kB, anon-rss:1236kB, file-rss:27160kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 722.544681][T32477] macvlan2: entered promiscuous mode [ 722.581416][T32477] macvlan2: entered allmulticast mode [ 722.610000][T32477] bond6: (slave macvlan2): Opening slave failed [ 722.734413][T32496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7379'. [ 722.776308][T32501] netlink: 640 bytes leftover after parsing attributes in process `syz.6.7380'. [ 722.830754][T32501] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 722.863508][T14777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.258094][T32524] netlink: 'syz.6.7387': attribute type 2 has an invalid length. [ 723.272651][T32523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7388'. [ 723.282123][T32524] netlink: 'syz.6.7387': attribute type 2 has an invalid length. [ 723.341879][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.670834][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 723.982877][T32561] Bluetooth: MGMT ver 1.23 [ 724.164079][T32568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.199422][T32568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.215957][T32568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.514854][T32567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.524937][T32567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.546492][T20776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.604078][T32592] IPVS: length: 8 != 1152 [ 726.236022][T32720] netlink: 'syz.2.7448': attribute type 16 has an invalid length. [ 726.244911][T32720] netlink: 'syz.2.7448': attribute type 17 has an invalid length. [ 726.485118][T32731] __nla_validate_parse: 12 callbacks suppressed [ 726.485140][T32731] netlink: 768 bytes leftover after parsing attributes in process `syz.7.7450'. [ 726.824499][T32753] netlink: 'syz.3.7458': attribute type 4 has an invalid length. [ 727.309178][T32765] wg1 speed is unknown, defaulting to 1000 [ 727.672562][T20777] net_ratelimit: 194 callbacks suppressed [ 727.672583][T20777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.902760][T14780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.705827][T20777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.226751][T32720] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 729.388288][ T317] netlink: 'syz.6.7465': attribute type 2 has an invalid length. [ 729.412071][ T319] IPv6: NLM_F_CREATE should be specified when creating new route [ 729.474396][ T324] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 729.741137][ T339] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7472'. [ 729.751143][T20777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.817574][ T342] xt_cgroup: xt_cgroup: no path or classid specified [ 730.063229][ T336] tunl0: Caught tx_queue_len zero misconfig [ 730.175475][ T358] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7480'. [ 730.214104][ T358] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7480'. [ 730.221841][ T364] xt_cgroup: invalid path, errno=-2 [ 730.426758][ T372] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7484'. [ 730.498628][ T379] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7486'. [ 730.509738][ T379] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7486'. [ 730.531995][ T390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 730.688754][ T400] netlink: 'syz.7.7491': attribute type 1 has an invalid length. [ 730.692354][ T396] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7490'. [ 730.699314][ T400] netlink: 'syz.7.7491': attribute type 7 has an invalid length. [ 730.715824][ T400] netlink: 'syz.7.7491': attribute type 8 has an invalid length. [ 730.727337][ T400] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7491'. [ 730.805947][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.873368][ T408] netlink: 'syz.0.7494': attribute type 1 has an invalid length. [ 730.947569][T14780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.986924][ T408] 8021q: adding VLAN 0 to HW filter on device bond7 [ 731.029985][ T414] bond7: (slave gretap1): making interface the new active one [ 731.046557][ T414] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 731.092404][ T408] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 731.106831][ T408] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7494'. [ 731.586494][ T448] syzkaller0: entered promiscuous mode [ 731.595389][ T448] 0: reclassify loop, rule prio 0, protocol 800 [ 731.640806][ T453] PKCS7: Unknown OID: [4] (bad) [ 731.647141][ T453] PKCS7: Only support pkcs7_signedData type [ 731.669590][ T453] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7505'. [ 731.836234][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.904278][ T463] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7508'. [ 731.962336][ T466] netlink: 'syz.2.7509': attribute type 1 has an invalid length. [ 732.015492][ T469] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7511'. [ 732.032221][ T473] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7509'. [ 732.086047][ T466] 8021q: adding VLAN 0 to HW filter on device bond3 [ 732.158254][ T479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.169537][ T466] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7509'. [ 732.216959][ T479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.232782][ T482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7514'. [ 732.234600][ T476] bond3: (slave veth0_to_bond): making interface the new active one [ 732.276136][ T476] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 732.300248][ T466] netlink: 'syz.2.7509': attribute type 1 has an invalid length. [ 732.328804][ T466] netlink: 'syz.2.7509': attribute type 2 has an invalid length. [ 732.454661][ T485] syzkaller1: entered promiscuous mode [ 732.468774][ T485] syzkaller1: entered allmulticast mode [ 732.506660][T14780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.787825][ T510] net_ratelimit: 1 callbacks suppressed [ 732.787847][ T510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.800652][ T505] syzkaller0: entered promiscuous mode [ 732.807125][ T505] syzkaller0: entered allmulticast mode [ 732.826171][ T510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.863923][ T510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.873981][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.894428][ T510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.927100][ T510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.970828][ T510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.001069][ T510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.023192][ T510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.052755][ T508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.337970][ T528] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7527'. [ 733.349768][ T528] netlink: 'syz.6.7527': attribute type 21 has an invalid length. [ 733.421257][ T533] netlink: 'syz.0.7526': attribute type 5 has an invalid length. [ 733.429258][ T533] netlink: 140 bytes leftover after parsing attributes in process `syz.0.7526'. [ 733.904332][ T5828] Bluetooth: hci5: command 0x0406 tx timeout [ 735.284417][ T528] netlink: 156 bytes leftover after parsing attributes in process `syz.6.7527'. [ 735.559692][ T549] netlink: 232 bytes leftover after parsing attributes in process `syz.3.7531'. [ 735.874975][ T571] bond8: invalid ARP target 0.0.0.0 specified for addition [ 735.883411][ T571] bond8: option arp_ip_target: invalid value (0) [ 735.906127][ T571] bond8 (unregistering): Released all slaves [ 735.992837][ T581] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 736.000149][ T581] IPv6: NLM_F_CREATE should be set when creating new route [ 736.073971][ T576] bond4: Removing last arp target with arp_interval on [ 736.213628][ T594] netlink: 'syz.3.7545': attribute type 30 has an invalid length. [ 736.295916][ T594] bond2: option arp_missed_max: invalid value (0) [ 736.304298][ T594] bond2: option arp_missed_max: allowed values 1 - 255 [ 736.323524][ T594] bond2 (unregistering): Released all slaves [ 736.558753][ T610] netlink: 'syz.3.7548': attribute type 1 has an invalid length. [ 736.607826][ T610] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 736.670038][ T626] netlink: 'syz.2.7550': attribute type 10 has an invalid length. [ 736.692624][ T626] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.717141][ T626] bridge_slave_1: left allmulticast mode [ 736.726058][ T626] bridge_slave_1: left promiscuous mode [ 736.742999][ T626] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.797525][ T626] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 736.824906][ T632] dvmrp0: entered allmulticast mode [ 737.054515][ T650] netlink: 'syz.7.7560': attribute type 1 has an invalid length. [ 737.075783][ T650] __nla_validate_parse: 4 callbacks suppressed [ 737.075800][ T650] netlink: 88 bytes leftover after parsing attributes in process `syz.7.7560'. [ 737.081008][ T652] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7561'. [ 737.099667][ T650] netlink: 1 bytes leftover after parsing attributes in process `syz.7.7560'. [ 737.133475][ T659] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7560'. [ 737.141232][ T650] netlink: 'syz.7.7560': attribute type 1 has an invalid length. [ 737.142696][ T659] netlink: 'syz.7.7560': attribute type 7 has an invalid length. [ 737.150165][ T650] netlink: 634 bytes leftover after parsing attributes in process `syz.7.7560'. [ 737.221718][ T659] netlink: 'syz.7.7560': attribute type 8 has an invalid length. [ 737.229485][ T659] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7560'. [ 737.273210][ T667] netlink: 'syz.2.7567': attribute type 1 has an invalid length. [ 737.330923][ T667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7567'. [ 737.342283][ T662] netlink: 'syz.3.7566': attribute type 1 has an invalid length. [ 737.410426][ T673] bond5: (slave gretap2): making interface the new active one [ 737.444701][ T673] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 737.564540][ T680] syzkaller1: entered promiscuous mode [ 737.570057][ T680] syzkaller1: entered allmulticast mode [ 737.639495][ T694] xt_cgroup: invalid path, errno=-2 [ 737.835751][T30623] veth5: left allmulticast mode [ 737.862963][T30623] veth5: left promiscuous mode [ 737.875432][T30623] bridge9: port 2(veth5) entered disabled state [ 737.904833][T30623] veth3: left allmulticast mode [ 737.909758][T30623] veth3: left promiscuous mode [ 737.921825][ T712] syz.0.7579: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 737.927188][T30623] bridge9: port 1(veth3) entered disabled state [ 737.954484][ T712] CPU: 1 UID: 0 PID: 712 Comm: syz.0.7579 Not tainted syzkaller #0 PREEMPT(full) [ 737.954510][ T712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 737.954521][ T712] Call Trace: [ 737.954530][ T712] [ 737.954539][ T712] dump_stack_lvl+0xe8/0x150 [ 737.954580][ T712] warn_alloc+0x249/0x340 [ 737.954604][ T712] ? stack_trace_save+0xa9/0x100 [ 737.954627][ T712] ? __pfx_warn_alloc+0x10/0x10 [ 737.954653][ T712] ? kasan_save_track+0x4f/0x80 [ 737.954672][ T712] ? kasan_save_track+0x3e/0x80 [ 737.954690][ T712] ? __kasan_kmalloc+0x93/0xb0 [ 737.954711][ T712] ? __kmalloc_cache_noprof+0x31c/0x660 [ 737.954731][ T712] ? xskq_create+0x56/0x170 [ 737.954752][ T712] ? xsk_setsockopt+0x54c/0x990 [ 737.954772][ T712] ? do_sock_setsockopt+0x17c/0x1b0 [ 737.954795][ T712] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 737.954817][ T712] ? do_syscall_64+0x14d/0xf80 [ 737.954843][ T712] __vmalloc_node_range_noprof+0x132/0x1730 [ 737.954892][ T712] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 737.954922][ T712] ? __kasan_kmalloc+0x93/0xb0 [ 737.954950][ T712] vmalloc_user_noprof+0xad/0xe0 [ 737.954972][ T712] ? xskq_create+0xbf/0x170 [ 737.954995][ T712] xskq_create+0xbf/0x170 [ 737.955021][ T712] xsk_init_queue+0x8a/0xe0 [ 737.955045][ T712] xsk_setsockopt+0x54c/0x990 [ 737.955069][ T712] ? __pfx_xsk_setsockopt+0x10/0x10 [ 737.955090][ T712] ? __pfx_aa_sk_perm+0x10/0x10 [ 737.955122][ T712] ? aa_sock_opt_perm+0xff/0x1a0 [ 737.955157][ T712] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 737.955179][ T712] ? __pfx_xsk_setsockopt+0x10/0x10 [ 737.955200][ T712] do_sock_setsockopt+0x17c/0x1b0 [ 737.955230][ T712] __x64_sys_setsockopt+0x13d/0x1b0 [ 737.955259][ T712] do_syscall_64+0x14d/0xf80 [ 737.955282][ T712] ? trace_irq_disable+0x3b/0x150 [ 737.955299][ T712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.955318][ T712] ? clear_bhb_loop+0x40/0x90 [ 737.955342][ T712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.955362][ T712] RIP: 0033:0x7f657239c819 [ 737.955381][ T712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.955397][ T712] RSP: 002b:00007f65731e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 737.955419][ T712] RAX: ffffffffffffffda RBX: 00007f6572615fa0 RCX: 00007f657239c819 [ 737.955435][ T712] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 737.955447][ T712] RBP: 00007f6572432c91 R08: 0000000000000004 R09: 0000000000000000 [ 737.955457][ T712] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 737.955468][ T712] R13: 00007f6572616038 R14: 00007f6572615fa0 R15: 00007fff3ad30c38 [ 737.955497][ T712] [ 737.980549][ T712] Mem-Info: [ 738.003231][T30623] erspan0: left allmulticast mode [ 738.015769][ T712] active_anon:7298 inactive_anon:0 isolated_anon:0 [ 738.015769][ T712] active_file:3279 inactive_file:40204 isolated_file:0 [ 738.015769][ T712] unevictable:768 dirty:68 writeback:0 [ 738.015769][ T712] slab_reclaimable:14672 slab_unreclaimable:155855 [ 738.015769][ T712] mapped:45960 shmem:1373 pagetables:1697 [ 738.015769][ T712] sec_pagetables:0 bounce:0 [ 738.015769][ T712] kernel_misc_reclaimable:0 [ 738.015769][ T712] free:1208797 free_pcp:24181 free_cma:0 [ 738.015837][ T712] Node 0 active_anon:29192kB inactive_anon:0kB active_file:13116kB inactive_file:160612kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:48672kB dirty:268kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:20436kB pagetables:6664kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 738.023104][T30623] erspan0: left promiscuous mode [ 738.032771][ T712] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:135168kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 738.039156][T30623] bridge12: port 1(erspan0) entered disabled state [ 738.045386][ T712] Node 0 DMA free:11196kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:68kB local_pcp:48kB free_cma:0kB [ 738.375843][T20777] net_ratelimit: 10 callbacks suppressed [ 738.375858][T20777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.451953][ T712] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 738.457971][ T712] Node 0 DMA32 free:1224704kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28992kB inactive_anon:0kB active_file:13116kB inactive_file:160612kB unevictable:1536kB writepending:268kB zspages:0kB present:3129332kB managed:2552620kB mlocked:0kB bounce:0kB free_pcp:40872kB local_pcp:19892kB free_cma:0kB [ 738.497888][ T712] lowmem_reserve[]: 0 0 0 0 0 [ 738.505752][ T712] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 738.558980][ T712] lowmem_reserve[]: 0 0 0 0 0 [ 738.566481][ T712] Node 1 Normal free:3599288kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:55844kB local_pcp:27644kB free_cma:0kB [ 738.625657][T14777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.629600][ T719] sctp: [Deprecated]: syz.6.7581 (pid 719) Use of int in max_burst socket option. [ 738.629600][ T719] Use struct sctp_assoc_value instead [ 738.682279][ T712] lowmem_reserve[]: 0 0 0 0 0 [ 738.709427][ T712] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11196kB [ 738.731654][ T712] Node 0 DMA32: 5518*4kB (UM) 6352*8kB (UME) 3122*16kB (UME) 147*32kB (UME) 58*64kB (UME) 64*128kB (UME) 661*256kB (UME) 508*512kB (UME) 303*1024kB (UM) 169*2048kB (UM) 0*4096kB = 1225144kB [ 738.765637][ T724] netlink: 'syz.6.7583': attribute type 2 has an invalid length. [ 738.790073][ T712] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 738.874447][ T712] Node 1 Normal: 7*4kB (UM) 11*8kB (UM) 22*16kB (UM) 9*32kB (UM) 17*64kB (UM) 17*128kB (UM) 11*256kB (UM) 13*512kB (UM) 14*1024kB (UM) 8*2048kB (U) 868*4096kB (UM) = 3599540kB [ 738.907136][ T712] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 738.920294][ T712] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 738.966745][ T712] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 738.993976][ T712] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 739.005788][ T712] 44852 total pagecache pages [ 739.030559][ T712] 0 pages in swap cache [ 739.034831][ T712] Free swap = 124996kB [ 739.039185][ T712] Total swap = 124996kB [ 739.044949][ T712] 2097051 pages RAM [ 739.048881][ T712] 0 pages HighMem/MovableOnly [ 739.057229][ T712] 427062 pages reserved [ 739.065990][ T712] 0 pages cma reserved [ 739.105233][T30623] bond4 (unregistering): (slave gretap2): Releasing active interface [ 739.441908][T20777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.569142][T30623] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 740.485909][T20777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.495013][T30623] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 740.528914][T30623] bond0 (unregistering): Released all slaves [ 740.544093][T30623] bond1 (unregistering): Released all slaves [ 740.564770][T30623] bond2 (unregistering): Released all slaves [ 740.584827][T30623] bond3 (unregistering): Released all slaves [ 740.605319][T30623] bond4 (unregistering): Released all slaves [ 740.626065][T30623] bond5 (unregistering): Released all slaves [ 740.650953][T30623] bond6 (unregistering): Released all slaves [ 740.682123][T30623] bond7 (unregistering): Released all slaves [ 740.703906][T30623] bond8 (unregistering): Released all slaves [ 740.726585][T30623] bond9 (unregistering): Released all slaves [ 740.768960][T30623] bond10 (unregistering): Released all slaves [ 740.790850][T30623] bond11 (unregistering): Released all slaves [ 740.823713][T30623] bond12 (unregistering): Released all slaves [ 740.881398][T30623] bond13 (unregistering): (slave veth7): Releasing active interface [ 740.893932][T30623] bond13 (unregistering): (slave veth9): Releasing active interface [ 740.914420][T30623] bond13 (unregistering): Released all slaves [ 740.935175][T30623] bond14 (unregistering): Released all slaves [ 741.217833][ T735] FAULT_INJECTION: forcing a failure. [ 741.217833][ T735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 741.233548][ T735] CPU: 1 UID: 0 PID: 735 Comm: syz.0.7584 Not tainted syzkaller #0 PREEMPT(full) [ 741.233573][ T735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 741.233585][ T735] Call Trace: [ 741.233593][ T735] [ 741.233601][ T735] dump_stack_lvl+0xe8/0x150 [ 741.233632][ T735] should_fail_ex+0x412/0x560 [ 741.233664][ T735] _copy_from_user+0x2d/0xb0 [ 741.233685][ T735] ___sys_sendmsg+0x1c6/0x360 [ 741.233714][ T735] ? __pfx____sys_sendmsg+0x10/0x10 [ 741.233781][ T735] ? __fget_files+0x2a/0x420 [ 741.233797][ T735] ? __fget_files+0x3a0/0x420 [ 741.233823][ T735] __x64_sys_sendmsg+0x1bd/0x2a0 [ 741.233854][ T735] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 741.233885][ T735] ? __pfx_ksys_write+0x10/0x10 [ 741.233916][ T735] do_syscall_64+0x14d/0xf80 [ 741.233939][ T735] ? trace_irq_disable+0x3b/0x150 [ 741.233955][ T735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.233973][ T735] ? clear_bhb_loop+0x40/0x90 [ 741.233995][ T735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.234013][ T735] RIP: 0033:0x7f657239c819 [ 741.234029][ T735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.234041][ T735] RSP: 002b:00007f65731e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 741.234058][ T735] RAX: ffffffffffffffda RBX: 00007f6572615fa0 RCX: 00007f657239c819 [ 741.234069][ T735] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 741.234079][ T735] RBP: 00007f65731e8090 R08: 0000000000000000 R09: 0000000000000000 [ 741.234088][ T735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.234098][ T735] R13: 00007f6572616038 R14: 00007f6572615fa0 R15: 00007fff3ad30c38 [ 741.234124][ T735] [ 741.445157][ T738] 8021q: adding VLAN 0 to HW filter on device bond6 [ 741.463090][ T739] bond6: (slave gretap3): making interface the new active one [ 741.475167][ T739] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 741.484357][T30623] tipc: Disabling bearer [ 741.535943][ T747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7590'. [ 741.545140][T20777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.582934][T30623] tipc: Disabling bearer [ 741.588392][T30623] tipc: Disabling bearer [ 741.637693][T30623] tipc: Left network mode [ 741.655023][ T717] Set syz1 is full, maxelem 65536 reached [ 741.670692][T14780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.825366][ T764] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7592'. [ 741.894455][ T770] validate_nla: 1 callbacks suppressed [ 741.894475][ T770] netlink: 'syz.3.7594': attribute type 32 has an invalid length. [ 741.929476][ T770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7594'. [ 741.977389][ T770] bond2: option coupled_control: invalid value (192) [ 742.003529][ T770] bond2 (unregistering): Released all slaves [ 742.347715][ T795] netlink: 'syz.7.7600': attribute type 83 has an invalid length. [ 742.396322][ T796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 742.493767][ T802] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 742.528261][ T802] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 742.624115][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.662520][ T813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 742.700405][ T815] ip6tnl2: entered allmulticast mode [ 743.125236][T30623] hsr_slave_0: left promiscuous mode [ 743.132249][T30623] 1·: left promiscuous mode [ 743.139769][T30623] veth1_macvtap: left promiscuous mode [ 743.145697][T30623] veth0_macvtap: left promiscuous mode [ 743.663465][ T10] net_ratelimit: 1 callbacks suppressed [ 743.663480][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.710350][T30623] IPVS: stop unused estimator thread 0... [ 743.985595][T14777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.141765][ T5828] Bluetooth: hci3: command 0x041b tx timeout [ 744.631757][T27350] Bluetooth: hci1: command tx timeout [ 744.711603][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.741849][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.752129][T14777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.900908][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.380990][ T5893] page_pool_release_retry() stalled pool shutdown: id 150, 51 inflight 60 sec [ 746.782153][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.194900][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.203805][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 747.306374][T30624] bond12 (unregistering): (slave ip6gretap1): Releasing active interface [ 747.451088][T30624] bond5 (unregistering): (slave geneve4): Releasing active interface [ 747.465155][T30624] bond3 (unregistering): (slave geneve3): Releasing active interface [ 747.504097][T30624] bridge0 (unregistering): left allmulticast mode [ 747.754872][T30624] bond2 (unregistering): (slave bridge6): Releasing backup interface [ 747.763581][T30624] bridge6 (unregistering): left promiscuous mode [ 747.833624][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.894160][T30624] bond8 (unregistering): (slave bridge9): Releasing active interface [ 748.034573][T30624] bond11 (unregistering): (slave bridge12): Releasing backup interface [ 748.043580][T30624] bridge12 (unregistering): left promiscuous mode [ 748.050003][T30624] bridge12 (unregistering): left allmulticast mode [ 748.097704][T30624] bond0 (unregistering): Released all slaves [ 748.107713][T30624] bond1 (unregistering): Released all slaves [ 748.120362][T30624] bond2 (unregistering): Released all slaves [ 748.138154][T30624] bond3 (unregistering): Released all slaves [ 748.159330][T30624] bond4 (unregistering): (slave veth7): Releasing active interface [ 748.168552][T30624] bond4 (unregistering): Released all slaves [ 748.181291][T30624] bond5 (unregistering): Released all slaves [ 748.195337][T30624] bond6 (unregistering): Released all slaves [ 748.207671][T30624] bond7 (unregistering): Released all slaves [ 748.222513][T30624] bond8 (unregistering): Released all slaves [ 748.241844][T30624] bond9 (unregistering): Released all slaves [ 748.255012][T30624] bond10 (unregistering): Released all slaves [ 748.276174][T30624] bond11 (unregistering): Released all slaves [ 748.288356][T30624] bond12 (unregistering): Released all slaves [ 748.465318][T30624] tipc: Disabling bearer [ 748.482625][T30624] tipc: Left network mode [ 748.786984][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.883101][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.907469][T30624] hsr_slave_0: left promiscuous mode [ 748.919935][T30624] hsr_slave_1: left promiscuous mode [ 749.353779][T30624] IPVS: stop unused estimator thread 0... [ 749.901404][T20776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.946490][T20776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.821569][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.983404][T20776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.860617][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5660 ms [ 752.868668][ C0] lec:lec_tx_timeout: lec0 [ 753.021550][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.582347][T14780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.061578][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.863562][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.112341][T20776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.500860][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.142371][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.640402][T12478] lec:lec_start_xmit: lec0:No lecd attached [ 757.181903][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.902915][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.223793][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.262110][T20779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.511072][T27350] Bluetooth: hci4: command 0x0406 tx timeout [ 760.303122][T20779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.943548][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.341803][T20779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.830956][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5190 ms [ 761.839004][ C0] lec:lec_tx_timeout: lec0 [ 762.381133][T20776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.184069][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.422831][T20776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.982103][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.463222][T20776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.502332][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.542226][T20776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.025320][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.581534][T20776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.621276][T20779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.662550][T20776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.062028][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.703806][T20776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.067374][T28455] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 771.742543][T20779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.787091][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.795317][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.813590][T13060] bridge_slave_1: left promiscuous mode [ 772.819494][T13060] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.828524][T13060] bridge_slave_0: left allmulticast mode [ 772.834374][T13060] bridge_slave_0: left promiscuous mode [ 772.840063][T13060] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.976848][T13060] tipc: Disabling bearer [ 772.995490][T13060] bond6 (unregistering): (slave gretap1): Releasing active interface [ 773.019667][T13060] dvmrp0 (unregistering): left allmulticast mode [ 773.036155][T13060] bond7 (unregistering): (slave geneve3): Releasing active interface [ 773.101265][T14777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.431030][T13060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 773.439984][T13060] bond_slave_0: left allmulticast mode [ 773.447380][T13060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 773.457224][T13060] bond_slave_1: left allmulticast mode [ 773.463471][T13060] bond0 (unregistering): Released all slaves [ 773.476487][T13060] bond1 (unregistering): (slave lo): Releasing backup interface [ 773.485463][T13060] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 773.497022][T13060] bond1 (unregistering): Released all slaves [ 773.510365][T13060] bond2 (unregistering): Released all slaves [ 773.523087][T13060] bond3 (unregistering): Released all slaves [ 773.539440][T13060] bond4 (unregistering): Released all slaves [ 773.552795][T13060] bond5 (unregistering): Released all slaves [ 773.575386][T13060] bond6 (unregistering): Released all slaves [ 773.588768][T13060] bond7 (unregistering): Released all slaves [ 773.742353][T13060] tipc: Disabling bearer [ 773.748334][T13060] tipc: Disabling bearer [ 773.756429][T13060] tipc: Left network mode [ 773.829417][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.369399][T13060] pimreg3 (unregistering): left allmulticast mode [ 774.514509][T13060] team0 (unregistering): Port device team_slave_1 removed [ 774.528182][T13060] team0 (unregistering): Port device team_slave_0 removed [ 774.861194][T27350] Bluetooth: hci1: command 0x0406 tx timeout [ 774.867719][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.908678][T13060] IPVS: stop unused estimator thread 0... [ 775.901516][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.143319][T14777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.952795][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.992230][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.022461][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.182592][T14777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.061469][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.103006][T20776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.152321][T20776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.220694][T14780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.382909][T14777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.194276][T20776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.221575][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.261127][T20776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.269275][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.301268][T20776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.346750][T20776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.301542][T14777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.391880][T20779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.421539][T20779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.462322][T20776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.342258][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.502352][T20779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.988093][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.542313][T20779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.267169][T14777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.276463][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.581623][T20779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.621270][T20776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.662780][T20779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.304024][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.701689][T20779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.741394][T20776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.388092][T14777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.783936][T20776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.341264][T14777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.821072][T20776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.861936][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.902346][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.992769][T30624] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 802.223025][ T31] INFO: task syz.1.6453:29265 blocked for more than 143 seconds. [ 802.232266][ T31] Not tainted syzkaller #0 [ 802.237218][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 802.246681][ T31] task:syz.1.6453 state:D stack:25448 pid:29265 tgid:29263 ppid:27344 task_flags:0x400040 flags:0x00080002 [ 802.258888][ T31] Call Trace: [ 802.262991][ T31] [ 802.265945][ T31] __schedule+0x15dd/0x52d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 802.270748][ T31] ? __pfx___schedule+0x10/0x10 [ 802.276167][ T31] ? schedule+0x90/0x360 [ 802.280630][ T31] schedule+0x164/0x360 [ 802.284857][ T31] schedule_preempt_disabled+0x13/0x30 [ 802.290337][ T31] __mutex_lock+0x7fe/0x1300 [ 802.295967][ T31] ? __mutex_lock+0x5ac/0x1300 [ 802.303241][ T31] ? nfsd_nl_threads_get_doit+0x1c0/0x790 [ 802.309015][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 802.374317][ T31] ? __nlmsg_put+0xef/0x1b0 [ 802.378918][ T31] ? genlmsg_put+0x137/0x2e0 [ 802.430573][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.440896][ T31] nfsd_nl_threads_get_doit+0x1c0/0x790 [ 802.460508][ T31] ? kmem_cache_free+0x187/0x630 [ 802.465510][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 802.472101][ T31] ? dev_hard_start_xmit+0x802/0x870 [ 802.477425][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 802.483882][ T31] ? __asan_memcpy+0x40/0x70 [ 802.488512][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 802.495050][ T31] genl_rcv_msg+0x61c/0x7a0 [ 802.499600][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 802.506172][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 802.513447][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 802.518437][ T31] netlink_rcv_skb+0x232/0x4b0 [ 802.523620][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 802.528678][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 802.534643][ T31] ? down_read+0x272/0x2e0 [ 802.539267][ T31] ? genl_rcv+0xd/0x40 [ 802.551643][ T31] genl_rcv+0x28/0x40 [ 802.555681][ T31] netlink_unicast+0x80f/0x9b0 [ 802.560556][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 802.565872][ T31] ? netlink_sendmsg+0x650/0xb40 [ 802.571777][ T31] ? skb_put+0x11b/0x210 [ 802.576062][ T31] netlink_sendmsg+0x813/0xb40 [ 802.580964][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 802.586290][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 802.591723][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 802.597083][ T31] ____sys_sendmsg+0x972/0x9f0 [ 802.603492][ T31] ? futex_unqueue+0x211/0x240 [ 802.610269][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 802.615867][ T31] ? import_iovec+0x73/0xa0 [ 802.620394][ T31] ___sys_sendmsg+0x2a5/0x360 [ 802.625215][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 802.631420][ T31] ? futex_wait+0x29a/0x380 [ 802.635977][ T31] ? __fget_files+0x2a/0x420 [ 802.640944][ T31] ? __fget_files+0x3a0/0x420 [ 802.645654][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 802.651475][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 802.656972][ T31] ? rcu_is_watching+0x15/0xb0 [ 802.662941][ T31] do_syscall_64+0x14d/0xf80 [ 802.667561][ T31] ? trace_irq_disable+0x3b/0x150 [ 802.672660][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.678739][ T31] ? clear_bhb_loop+0x40/0x90 [ 802.683615][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.689520][ T31] RIP: 0033:0x7f287a19c819 [ 802.694513][ T31] RSP: 002b:00007f287afaa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 802.703807][ T31] RAX: ffffffffffffffda RBX: 00007f287a415fa0 RCX: 00007f287a19c819 [ 802.712948][ T31] RDX: 0000000024048000 RSI: 0000200000000000 RDI: 0000000000000006 [ 802.721832][ T31] RBP: 00007f287a232c91 R08: 0000000000000000 R09: 0000000000000000 [ 802.729829][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 802.737921][ T31] R13: 00007f287a416038 R14: 00007f287a415fa0 R15: 00007ffc46bb24a8 [ 802.745966][ T31] [ 802.751629][ T31] [ 802.751629][ T31] Showing all locks held in the system: [ 802.774723][ T31] 1 lock held by khungtaskd/31: [ 802.779622][ T31] #0: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 802.832739][ T31] 2 locks held by getty/5579: [ 802.837463][ T31] #0: ffff888032fad0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 802.882295][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 802.920707][ T31] 3 locks held by kworker/1:6/5893: [ 802.925955][ T31] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 802.951382][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.971565][ T31] #1: ffffc90003fe7c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 803.001265][ T31] #2: ffffffff8e7648f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 803.040570][ T31] 3 locks held by kworker/u8:3/28455: [ 803.045993][ T31] #0: ffff88813fe54148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 803.101094][ T31] #1: ffffc90005a8fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 803.150790][ T31] #2: ffff888065b80788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x4a0 [ 803.181011][ T31] 1 lock held by syz-executor/28623: [ 803.186350][ T31] 2 locks held by syz.4.6380/29011: [ 803.211091][ T31] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 803.247643][ T31] #1: ffffffff8ea86b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 803.261931][ T31] 5 locks held by syz-executor/29159: [ 803.267340][ T31] #0: ffff88808fad4ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 803.278207][ T31] #1: ffff88808fad40c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 803.289226][ T31] #2: ffffffff8fd5d528 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 803.299636][ T31] #3: ffff888027642b00 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570 [ 803.309540][ T31] #4: ffffffff8e7648f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 803.323456][ T31] 2 locks held by syz.1.6453/29265: [ 803.328670][ T31] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 803.337060][ T31] #1: ffffffff8ea86b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790 [ 803.347501][ T31] 3 locks held by syz-executor/29904: [ 803.355290][ T31] #0: ffff888043448ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 803.365703][ T31] #1: ffff8880434480c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 803.375509][ T31] #2: ffffffff8fd5d528 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 803.386687][ T31] 2 locks held by syz.5.6886/30831: [ 803.392136][ T31] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 803.400386][ T31] #1: ffffffff8ea86b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40 [ 803.411179][ T31] 3 locks held by syz-executor/31526: [ 803.416555][ T31] #0: ffff8880a4a50ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 803.428271][ T31] #1: ffff8880a4a500c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 803.438146][ T31] #2: ffffffff8fd5d528 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 803.449061][ T31] [ 803.455111][ T31] ============================================= [ 803.455111][ T31] [ 803.463739][ T31] NMI backtrace for cpu 0 [ 803.463758][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 803.463778][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 803.463789][ T31] Call Trace: [ 803.463796][ T31] [ 803.463805][ T31] dump_stack_lvl+0xe8/0x150 [ 803.463835][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 803.463853][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 803.463878][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 803.463898][ T31] sys_info+0x135/0x170 [ 803.463922][ T31] watchdog+0xfd9/0x1030 [ 803.463944][ T31] ? watchdog+0x21a/0x1030 [ 803.463974][ T31] kthread+0x388/0x470 [ 803.463992][ T31] ? __pfx_watchdog+0x10/0x10 [ 803.464007][ T31] ? __pfx_kthread+0x10/0x10 [ 803.464026][ T31] ret_from_fork+0x51e/0xb90 [ 803.464051][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 803.464072][ T31] ? __switch_to+0xc7d/0x1450 [ 803.464097][ T31] ? __pfx_kthread+0x10/0x10 [ 803.464116][ T31] ret_from_fork_asm+0x1a/0x30 [ 803.464155][ T31] [ 803.464163][ T31] Sending NMI from CPU 0 to CPUs 1: [ 803.580272][ C1] NMI backtrace for cpu 1 [ 803.580291][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 803.580308][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 803.580318][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 803.580342][ C1] Code: ce 6b 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 f2 19 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 803.580355][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 803.580370][ C1] RAX: 00000000002a525b RBX: ffffffff819a91fa RCX: 0000000080000001 [ 803.580381][ C1] RDX: 0000000000000001 RSI: ffffffff8defadf3 RDI: ffffffff8c27d100 [ 803.580391][ C1] RBP: ffffc90000197f10 R08: ffff8880b873399b R09: 1ffff110170e6733 [ 803.580402][ C1] R10: dffffc0000000000 R11: ffffed10170e6734 R12: 0000000000000001 [ 803.580412][ C1] R13: 1ffff11003b59000 R14: 0000000000000001 R15: 1ffff11003b59000 [ 803.580423][ C1] FS: 0000000000000000(0000) GS:ffff888125557000(0000) knlGS:0000000000000000 [ 803.580435][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 803.580449][ C1] CR2: 0000563ba5cb2ee8 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 803.580462][ C1] Call Trace: [ 803.580469][ C1] [ 803.580476][ C1] default_idle+0x9/0x20 [ 803.580495][ C1] default_idle_call+0x72/0xb0 [ 803.580516][ C1] do_idle+0x36a/0x5f0 [ 803.580538][ C1] ? __pfx_do_idle+0x10/0x10 [ 803.580562][ C1] cpu_startup_entry+0x43/0x60 [ 803.580580][ C1] start_secondary+0x101/0x110 [ 803.580598][ C1] common_startup_64+0x13e/0x147 [ 803.580622][ C1] [ 803.581799][T20776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.670784][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 803.670809][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 803.670830][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 803.670841][ T31] Call Trace: [ 803.670850][ T31] [ 803.670860][ T31] vpanic+0x56c/0xa60 [ 803.670888][ T31] ? __pfx___schedule+0x10/0x10 [ 803.670910][ T31] ? __pfx_vpanic+0x10/0x10 [ 803.670942][ T31] panic+0xc5/0xd0 [ 803.670965][ T31] ? __pfx_panic+0x10/0x10 [ 803.670988][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 803.671013][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 803.671036][ T31] watchdog+0x1023/0x1030 [ 803.671058][ T31] ? watchdog+0x21a/0x1030 [ 803.671082][ T31] kthread+0x388/0x470 [ 803.671100][ T31] ? __pfx_watchdog+0x10/0x10 [ 803.671115][ T31] ? __pfx_kthread+0x10/0x10 [ 803.671134][ T31] ret_from_fork+0x51e/0xb90 [ 803.671164][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 803.671185][ T31] ? __switch_to+0xc7d/0x1450 [ 803.671210][ T31] ? __pfx_kthread+0x10/0x10 [ 803.671235][ T31] ret_from_fork_asm+0x1a/0x30 [ 803.671274][ T31] [ 803.676269][ T31] Kernel Offset: disabled