last executing test programs: 3m7.228183631s ago: executing program 3 (id=560): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000c000000080026000816"], 0x40}}, 0x0) 3m7.120012788s ago: executing program 3 (id=564): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a80000000030006000000001400070000000000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a80000000030006000000001400070000000000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x25dfdbfc, {0x23}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x8000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x50, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xcb, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x25, &(0x7f00000006c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000080), &(0x7f0000000700), 0x8, 0xb0, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000900)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x4, {0x0, 0x0, 0x74, r9, {0x0, 0xfff2}, {0xafabc05531515610, 0xfff3}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x4, {0x0, 0x0, 0x74, r9, {0x0, 0xfff2}, {0xafabc05531515610, 0xfff3}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000b00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xc0, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8002}, 0x54b27a0e7ad66fc5) 3m6.533594901s ago: executing program 3 (id=571): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x2, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af8ff0000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000015010200e9ffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000a40)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={r4, 0x38, "2578bac7061f3447a08504a2446c491a23182dafbb473aafa54eb3ed48ca035bdffd91df4210d2f7aa12cbbe0f09339f6cb8fbb3fba27bbc"}, &(0x7f0000000180)=0x40) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0xbe, &(0x7f0000000d80)=ANY=[@ANYBLOB="0180c20000000180c20000000800450000b0006400000011907800000000e0000001000017c1009c905801000000000000000b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b265e5992c2bbd22f0ca038289c45b30eca75c40096a9c60c3cce00000000000000000000000000000000000000000000006a9f3a451dd7eb4523c02c2a4a00f81073727f3ac9f91e284b975a328f865412904b133eebafc6eb170fb00621144ab13a642475fc21552dce5cda9c"], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f0000000e40)=[{0x6}]}, 0x10) getsockopt$sock_buf(r8, 0x1, 0x1a, &(0x7f0000001100)=""/4096, &(0x7f0000002100)=0x1000) r9 = socket(0x200000000000011, 0x2, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r10, 0x6, 0x20, &(0x7f0000000600)={@in={{0x2, 0x4e24, @multicast2}}, 0x3, 0x0, 0x17, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) connect$inet(r10, &(0x7f00000005c0)={0x2, 0x4001, @remote}, 0x10) r11 = socket$inet_udp(0x2, 0x2, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) getsockname$packet(r13, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r14, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64", @ANYBLOB="2fe39fe1dde6498d3d5f74fe8e981b7d46b7d415fcf84ef99e6b41aaa3a82b66030bff8b886cc89a0e43c072540e617faa1b44d2a12725d4d0b1c6b178a1a1c29fcfe4ac92f27185b628ee89c11eccd3a88c1415ed06c7df6adc9e864f5e2124c6a9eca2d3acfb174964167537e7597d5a61b57ee5335066d512c0d5a67bb6311aecc481e52523148d5e9189561f550ea10e1dd1fff824248442ffda225fae05123942396f13d1470245ccdd9aa667862f370619dbd16b3adb8bc1bf19b00e14c3a8b575b3ec8917275cfb990ab1f1434e5ea38c482d957f900ce75f9820b11fe9fcec5143ca8ab16ccd43babe", @ANYRES32=r5], 0x3c}}, 0x20000000) setsockopt$inet_mreqn(r11, 0x0, 0x23, &(0x7f00000003c0)={@multicast2, @empty, r14}, 0xc) sendmsg$nl_route(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x22b96}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x40}}, 0x2400c000) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3c00002f7c99001000dd920000007400", @ANYRES32=r15, @ANYBLOB="00000000031601001c0012800b00010062726964676500000c00028005002b000b000000"], 0x3c}}, 0x48000) 3m5.470956764s ago: executing program 3 (id=582): ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f0000000000)) r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f00000000c0)=0x80) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000211}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe8, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x6f, 0xa9, @random="1ab5b54a67449abf2c4b702e841d5a86c21baa056c82d8dd1329effcb5baa4109f9d6f57beffa13bfc10dbfbbaa33e6e16d9753718342d165dd1e3ad8fdaa8519cf45ab570c9c1b65f6440468089f1f5817867edbb60deda5d68a045b313d8c7fe20c6635ae5e511cc421c"}]}, 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x24004083) (async, rerun: 32) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (rerun: 32) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f0000000340)={0x3, 0x100000000}) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000003c0)={0x468, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40000}]}, @TIPC_NLA_LINK={0x194, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc4f9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3b232c95}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59b2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x517}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x26b}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xcc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff0b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x140, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x80, @remote, 0x2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @remote, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf1f1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6ba7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x29e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5372700a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x468}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4000040) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f00000008c0)="7b9259ac97d98bcb7a3244347c40047d40b85cd38918f8898b2bcd7f426da32d97894d6f5b8e703b13ed383a941b3651f825ee7884c3713b70a803fa0bf1fbe831fccc7e983f41605d8769dc758d5710fc8638c5b96e18d443da23e40833dbe79106ad6ea650fd0a30234fc387114bc7c416294cc7be137217b7a4e38497d1f4430474df8844c37787b8d477e63174d78b7165f6837de08f9846ac36ec8bc59f") sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, 0x1411, 0x100, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r1) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r4, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x50, r5, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004408d}, 0xc090) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x5}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x64}, 0x1, 0x0, 0x0, 0x404c081}, 0x0) (async) write$bt_hci(r0, &(0x7f0000000d40)={0x1, @create_logical_link={{0x438, 0x21}, {0xc9, {0x2, 0xe, 0x3, 0x2, 0x6000, 0x9}, {0x4, 0x4, 0xc02b, 0xfffffff7, 0x10, 0x9}}}}, 0x25) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000d80), r0) (async) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000e00)={0x0, @isdn={0x22, 0xfe, 0x80, 0x6, 0x2}, @hci={0x1f, 0x0, 0x2}, @vsock={0x28, 0x0, 0x0, @my=0x0}, 0x6, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000dc0)='nr0\x00', 0x2, 0x80000000, 0x2}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ec0), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f0000001140)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001100)={&(0x7f0000000f00)={0x1c4, r8, 0x800, 0x70bd27, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xb}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffbd3}, {0x6, 0x11, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x401}, {0x6, 0x11, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x401}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xb1b}, {0x6, 0x11, 0x7}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x10}, 0x8070) (async) sendmsg$nl_crypto(r0, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f00000011c0)=@upd={0xe8, 0x12, 0x100, 0x70bd28, 0x25dfdbfc, {{'morus640\x00'}, '\x00', '\x00', 0x2000, 0x2c00}, [{0x8, 0x1, 0x9}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000010}, 0x40001) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000001340)={0x3, [0x9, 0x101, 0x2]}, 0xa) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000001380)={0x6, [0x9, 0xfff, 0xa, 0x9, 0xa60, 0x8]}, &(0x7f00000013c0)=0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000001400), r1) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000001480), r7) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r9, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x1c, r10, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x880) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000015c0)={@empty, 0x0}, &(0x7f0000001600)=0x14) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000001700)={&(0x7f0000001580), 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x64, r6, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x64}}, 0x20004014) (async) sendmsg$nl_route(r0, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)=@ipv6_getanyicast={0x14, 0x3e, 0x4, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24004810}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f0000001840)={0xa, 0x4e21, 0x1, @private0, 0x10}, 0x1c, &(0x7f0000002b00)=[{&(0x7f0000001880)="1ff02dd8c133433804b0b1314c1befb062324f4404ac4246ed5a6272bbc99dfad24952d64b0bbee88e53064a2277a81b76d2adbc276f2127fa5393d9e44bafe541d2f08c65a22557025c025fde87964115c2842399c7c0551df28d2d81b83b9b1fd50be388e8756d95253b2c8ecc58b1829c162bb439c00f29edd3777121d549bd239ee2d867447ab2973dbebfb2da7c9da32d8490bc01b5c96adfc85f8546faac69", 0xa2}, {&(0x7f0000001940)="3139679f008c806d0a019341a2d9e19d73cf3c2c5af4cbd849ac65dcb133b4dc3e8be745cc935096725d996d42581d377f98b7cdab8eccefba22fae2746bb2bbdc8e4d58273d3f3e80215911a644894e4ca5b15975c9efaa71b4a2c3b1eaeb959029777649e6a0cf537835b315cd4a0991b7a3b7670391d8798e4e2bbe665e19bd93a081a9d3bd97186c4222bad5614b6ed2662b869f962294300e09f5a426d7c123700e3738392e373681f237f5db84239ed780c4b33f550eb810ac26d0fcd7e69bedb5a8ead65e16d417dda670f7ddc4561f8cc9d48504909fb2a630920c12f41fb0fae41ba03ba8c7", 0xea}, {&(0x7f0000001a40)="1436d95bc311bd8cb32b1e00b8695dc8aec71e7fb9af6b43bdc68bf795884f8a404c0e1dcba59502c48fa496bff6366d74a14d3f3e8c8658be3c11f96e8b045218633d016248c65b8144ba60e4bf33a843192c1a7ee54a37686d76f3548ed15e440b87f0cffc5f0e454930cf77d9ae4fb8825ca0a4865d6ff46bd10473514520247db00878fba9f05a4e5cdbbfbc8341c69c31d999825fb7ec292c78e75550f278dd", 0xa2}, {&(0x7f0000001b00)="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", 0x1000}], 0x4, &(0x7f0000002b40)=[@rthdr={{0x48, 0x29, 0x39, {0x87, 0x6, 0x0, 0x6, 0x0, [@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1]}}}], 0x48}}, {{&(0x7f0000002bc0)={0xa, 0x4e21, 0x3, @remote}, 0x1c, &(0x7f0000002d80)=[{&(0x7f0000002c00)="c00381d9f0b7bfb309ac66fc562cb59fd55272bbdfd552045e1af71c4398ae3e46db1cc6ee6105c508aa0482c20de523d37b979f04c4", 0x36}, {&(0x7f0000002c40)="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", 0xfb}, {&(0x7f0000002d40)="83ff354afc360d27ff038b71427ef6c05083c9a97d4f733b5dd35dfc9315065e2e6f01", 0x23}], 0x3}}, {{&(0x7f0000002dc0)={0xa, 0x4e22, 0x5, @loopback, 0xf}, 0x1c, &(0x7f0000002f80)=[{&(0x7f0000002e00)="424e7c233c3389599f53780b5616c9abc61f9be8939c97f438278230695d8e179dafd47b31ecda0af1acf17af5ba0ac953b29e3214915997176f372e739f87bf83c86820fc333af6a29fd97ba16526e4ff30960e9e1e19b13f1ebaca5fc491b39da396c195af08430ed55e1bc040e2a57ce742b88fb88492fe92e87a771a15658a03b42b30eaefa6c8a04207e763", 0x8e}, {&(0x7f0000002ec0)="9db409e5400a51d4edd2bfa77cfc2661db791f121d2481c09d0dda020cf362653fade2311394432a6c37f65348f89533255224558a416fd267b01b5a5ac37273bb215e8fb951b35a900d8e4cdefe3b541044be563e2574441134a9fb615437ec4ad4ba67dbd5fd759e479cc312684f67d32ee3ba8940cf62f55c87986f178c7ca453422ce6380c1bac389cded2ad69af8b8423e44246d92e807af0c0eaa9abb8c905c58ec81e2fb3b50e", 0xaa}], 0x2}}], 0x3, 0x20000000) 3m3.607977745s ago: executing program 3 (id=603): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) write(r0, &(0x7f0000000900)="1963dc88fa62d790a5af124ab6813046714d11cc7ca7cd3db7a4f399641e14c4b857737279aa8ed36d115f42f667f03eccb084d1b76cc2fa20340dd5e78bb34540bbb1a1a908f3e57a18e693d850134f9642e5200a5956e6fca623f7170c87581131fb26ff48a468f33cd38de0cc6690a6b72ded10c20f524967684432475163030827914d5c70c10bc54fbd8ccab0ae4b463864d269d85963ca", 0x9a) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e23, @multicast1}, 0x10) (async) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000540)={0x1, &(0x7f0000000580)=[{0x6, 0xfa, 0x0, 0xe0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000005c0)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000005c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000600)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de250000000000000000", 0x40}, {&(0x7f0000000700)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2", 0x81}], 0x2}}], 0x1, 0x2090) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c9, &(0x7f0000000800)) sendto$inet(r0, &(0x7f00000007c0)="17", 0x59a, 0x10008095, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000025daa0fd8515ea888f17261128c0000000000950000163d000000eecc1e8dfe4294f2bc071b6bbdad36bb3192bb34c1029f9b4890181ad3b3fcf2b8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd00000000000003ff00000800090002"], 0x34}}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a18000000060a03000000000000000000050000050400058030000000160a010200000000000000000a0000000000000000001c31000000000900edff73797a31000000000400038020000000020a050000000000000000000a0000090c00043c7e44e72b259b29400000000000000001440000000e0a03000000000000000000020000020900020073797a320000000008000440000000000900010073797a3100000000090002d0f75ff364eb92b5000400038014000000140a0102000000000000000003000007140000001100010000000000000000000700000a"], 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x24028080}, 0x0) (async) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x24028080}, 0x0) 3m2.219060046s ago: executing program 3 (id=618): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x27, 0x1, 0x70bd2c, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000004c0)={{0x2, 0x4e22, @local}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x0, {0x2, 0x4e21, @broadcast}, 'gre0\x00'}) sendmsg$netlink(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)={0x14, 0x20, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) poll(&(0x7f0000000240)=[{r3, 0x2080}, {r1, 0xa000}, {r1, 0x9314}, {r1, 0x2060}, {r1, 0xc}, {r0, 0x2405}, {r1, 0x400}], 0x7, 0x6848) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0040800000766f5559cf184c069a5fb2617a00", @ANYRES32=r2, @ANYRES8=r2], 0x3c}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x4000000000006, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x0, 0x32}, 0xa, @in6=@empty, 0x6, 0x4, 0x2}]}]}, 0xfc}}, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000b40)=@nat={'nat\x00', 0x670, 0x5, 0x3b0, 0x178, 0x0, 0xfeffffff, 0x178, 0xa8, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0xffffffff, 'geneve1\x00', 'geneve0\x00', {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x7ffffffe, {0x12, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @port=0x4e24, @gre_key=0x6}}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x0, 0x7}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x5, 0x5, 0x4, 0x4, 0x1], 0x6, 0x1}, {0x3, [0x1, 0x0, 0x0, 0xc, 0x2, 0x5], 0x4, 0x1}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0xd00, {0x0, @loopback, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {0xff}, 0x84, 0x2}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010001fff03000000fdfffeff00000000", @ANYRES32=0x0, @ANYBLOB="0000000040cc0300380012800b00010067656e657665000028000280140007000000000000000000000000000000000105000c00ffffffff050009000100000008000a00", @ANYRES32=r2], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m47.148309171s ago: executing program 32 (id=618): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x27, 0x1, 0x70bd2c, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000004c0)={{0x2, 0x4e22, @local}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x0, {0x2, 0x4e21, @broadcast}, 'gre0\x00'}) sendmsg$netlink(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)={0x14, 0x20, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) poll(&(0x7f0000000240)=[{r3, 0x2080}, {r1, 0xa000}, {r1, 0x9314}, {r1, 0x2060}, {r1, 0xc}, {r0, 0x2405}, {r1, 0x400}], 0x7, 0x6848) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0040800000766f5559cf184c069a5fb2617a00", @ANYRES32=r2, @ANYRES8=r2], 0x3c}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x4000000000006, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x0, 0x32}, 0xa, @in6=@empty, 0x6, 0x4, 0x2}]}]}, 0xfc}}, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000b40)=@nat={'nat\x00', 0x670, 0x5, 0x3b0, 0x178, 0x0, 0xfeffffff, 0x178, 0xa8, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0xffffffff, 'geneve1\x00', 'geneve0\x00', {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x7ffffffe, {0x12, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @port=0x4e24, @gre_key=0x6}}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x0, 0x7}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x5, 0x5, 0x4, 0x4, 0x1], 0x6, 0x1}, {0x3, [0x1, 0x0, 0x0, 0xc, 0x2, 0x5], 0x4, 0x1}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0xd00, {0x0, @loopback, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {0xff}, 0x84, 0x2}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010001fff03000000fdfffeff00000000", @ANYRES32=0x0, @ANYBLOB="0000000040cc0300380012800b00010067656e657665000028000280140007000000000000000000000000000000000105000c00ffffffff050009000100000008000a00", @ANYRES32=r2], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m47.119672588s ago: executing program 2 (id=782): r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0x5, 0x1], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x78) 2m46.93283927s ago: executing program 2 (id=785): syz_emit_ethernet(0x2b7, &(0x7f0000000840)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x6, 0x6, "4173a4", 0x281, 0x11, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, {[@dstopts={0x3c, 0x3b, '\x00', [@hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x8001}, @calipso={0x7, 0x30, {0x2, 0xa, 0xeb, 0x2, [0x9, 0x3, 0x9, 0x1000, 0x8001]}}, @hao={0xc9, 0x10, @mcast2}, @generic={0x5, 0xac, "e321e26974c6d6a14cd9c7b6d15ad4660d42b64a595ef120e499c9a403d41d50d9a1575dc76bbfb3ddefc07a7fad7344f5b397b94216e62ad5f2d549ee57de93a0ab5c0f5f5ac4bcee975b87850578ee2d81e08dff6e23f24a79cdbb24783e8001d297b5893e445ddd6210a1098f987a7d6c141bce7d43e0c401720951c6ad215b3ceaf32df9c5957af29b8db878b98c8512d3640c87cac4b8de0863d839064e1b44a56b1fdb80c2c71419c7"}, @hao={0xc9, 0x10, @loopback}, @generic={0xc, 0xbd, "53f55e61092ee30fbb31aadf659be0ff923ea274cc53d28c77ad31383aa89f450c1bcfdbb2e210a1434d369c0b413209d205f7c622d750d717185f84c82a3462c96c44c62c46a3d238c5d58244ea91887ec11fa8bb4db30c818d68c3af54152ddcc6d98ac280f40091c04d2b72ac23c5ceae350d3e904987f404016be31744256dd8adf86a4dd0626ca3c0699a081075563ad61de878ec238473848ce8789c4af1004e32719222c92f189da256875c00cc8af7f0142a61964d9148ac60"}]}], {0x4e23, 0x4e20, 0x99, 0x0, @gue={{0x1, 0x0, 0x0, 0xb, 0x0, @void}, "de93b4f9d795fd172b310a1b67e7c39a6a3effdd2fd59961fa61f644f0e172ffcfc050986b589a2abec99384d997b8bccc37a93413a8e0f580a9c726c042bad0ee03ed5a45c272856152b0e2902cbb9cc1fdc05f19939cb55bc29847051ea363f00e56fdcd6ca707c5713f4fc741f297a6e58b75043578ccc5eaa166f3fca72fc80b43c02cd680f134ff7f93b3"}}}}}}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, 0x0, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x1, 0x7, 0x40, 0x42}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000200)="1a425f3770b268af205c2096cf3a0b353c28019586fa75f943c682a9b3c128851c1c2fe1350a5b994766bce1e24b59d3262ec578e70cb8295b3cee57fb4c161429a2bff8fbf5647da75032c187832a049fea981c7b864465de6bce7661e604adc7fca93f6062578fb4719a710f8870b4586c893ae3d978e64922e14638584262c24a8af7b6ee9678504342", 0x3, r2, 0x4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)="5d46542b3090ce5ceca970bf8abf170549531f3309044e8b5176033b03b6ffb6877fc1bf93944e8918f7671993d5b56494717c96f1a910bc20b312c4ac1319c04da6b26ab882b4086cb2ac1545cef2003c2f29885496d182cc00eb08067822dfbfa896a37248b990eeeec77445d6f8da", &(0x7f0000000bc0), 0x1003, r2}, 0x38) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4e8, 0x2a8, 0xc0, 0xc0, 0x1c0, 0x368, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, &(0x7f0000000000), {[{{@ip={@empty, @multicast1, 0xff000000, 0xffffffff, 'ip6gre0\x00', 'veth0\x00', {0x7f6bb577d431d033}, {0xff}, 0x1d, 0x1, 0x9}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xf, "7a98"}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x1000, 0x9e2}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x6]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x5, 0x1, 0x1, 0x2, 0x468a385a90f94c47], 0x2, 0x3}, {0x2, [0x0, 0x6, 0x4, 0x1, 0x3, 0xc], 0x3}}}}, {{@ip={@private=0xa010101, @multicast1, 0xff, 0xff000000, 'dummy0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x84, 0x1, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd6cd6c4386ce44a}}, @common=@icmp={{0x28}, {0x10, "df90"}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xff}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010101, @broadcast, 0xffffff00, 0xffffffff, '\x00', 'team0\x00', {0xff}, {}, 0x16}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xb, 0x1, 0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 2m46.755755976s ago: executing program 2 (id=786): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe8800f9ff00000000000000000000016401010000000000000000000000000000017fff4e230025000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ff010000000000000000000000000001000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000fbffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)={0xe0, 0x10, 0x50b, 0x0, 0x0, "", [@nested={0xd0, 0x65, 0x0, 0x1, [@nested={0xc9, 0x106, 0x0, 0x1, [@nested={0x4, 0x9b}, @generic="eb9484373fa3c0893ae271f439e104e5725845d1f6137768155359f09fc17d8846c8a0533b1607a7bccde025d0084c27673cfbd05e7ab6cefbc3109f65c892b45c18b85a0ceec5ee8d9506518c8505a560a3814f4b133534c3aa30b5f23993634f4d29fa775b15027220", @nested={0x4, 0x5c}, @nested={0x4, 0x1f}, @generic="4e5c586de77cb7cdf6ebad1cf0aa483e52660a7b1881e48b617fe9c790647acae533a61f2feda27bf4084125a24053aa3d4625bb5ca851079f1568cd7add3a08181bdf5dc5c5ec9d65c1c27f8e93b9"]}]}]}, 0xe0}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000980)={'gre0\x00', &(0x7f00000009c0)={'ip_vti0\x00', 0x0, 0x1, 0x10, 0x8, 0x800, {{0x14, 0x4, 0x1, 0x0, 0x50, 0x68, 0x0, 0x4, 0x4, 0x0, @multicast1, @rand_addr=0x64010101, {[@noop, @generic={0x89, 0x6, "2cf08e1e"}, @timestamp_prespec={0x44, 0x1c, 0x95, 0x3, 0x4, [{@broadcast}, {@local, 0x7}, {@broadcast, 0x8}]}, @timestamp={0x44, 0xc, 0xea, 0x0, 0x2, [0x4, 0x7]}, @lsrr={0x83, 0xb, 0xb2, [@dev={0xac, 0x14, 0x14, 0x25}, @multicast1]}, @noop]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@delchain={0x24, 0x5f, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0x5, 0xb}, {0x0, 0x3}}}, 0x24}}, 0x2000008c) write$ppp(0xffffffffffffffff, &(0x7f0000000b00), 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x6, 0xf, &(0x7f0000000c00)=ANY=[@ANYBLOB="7a0af8ff000000007a0af0ff000000007a0ae8ff000000007a0ae0ff000000007a0ad8ff000000007a0ad0ff000000007a0ac8ff000000007a0ac0ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000c0ffffff85000000cf000000b70000000200000095"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000cc0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000d40)="b9e20300600d0600fb9e34f086f8", 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000200)=0x10000, 0x3) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000dc0), 0xe8001, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000e00)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r6, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r6, 0x400454cd, 0x301) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'hsr0\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, 0x0, 0x48040) sendto$packet(r5, &(0x7f0000000e80)="330320000a00140000007ef52f555f2a0c0900000000000000f786dd3baa4b1f0f858c4632f47042195e", 0x2a, 0x40088d1, &(0x7f0000000ec0)={0x11, 0x0, r7, 0x1, 0x62, 0x6, @broadcast}, 0x14) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f00)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000f40)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000f80), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000000fc0)) sendmsg$nl_route_sched(r2, &(0x7f0000001000)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001080)={&(0x7f00000010c0)=@newchain={0x2a0, 0x64, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xffff, 0xb}, {0xffff, 0xc}, {0xffe0, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x7}}, @filter_kind_options=@f_bpf={{0x8}, {0x26c, 0x2, [@TCA_BPF_ACT={0x260, 0x1, [@m_xt={0x25c, 0x14, 0x0, 0x0, {{0x7}, {0x1e0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xb6, 0x6, {0x4, 'filter\x00', 0xd5, 0x6, "460d0f90ebe2f2928eaf8e6035ab50e759d13c620a91e630be1504ea7d86f4cf609cbd3ee3e526504760438480ee3a43eedbf0247fe34200c65484f0ca35fc9d132270c7a32873f7e5fc5da84024d20ed98a82a6c51d9a6d4eb6d489606cf61f081a28d97da754206152a76c97809b3fe3a2376527e14d108145b4fb111eb507fa032d26982dbe806defb7e6"}}, @TCA_IPT_TARG={0x123, 0x6, {0x2, 'raw\x00', 0x2, 0x2, "78d056b5ada16f0d47dd42bf7f4b2a3f3308dc00bde967f50f12c24d446b20ad816359765bd6775b3124ebb318737cce46a6ca29ac5419bf0728c95ee796401cc0154ac165a855cfae20a701a25bcf689ec13d06dd81ae4a89fa8a77594688a58e463246e90d8473453d1e11c3c6774a659dfee86103385140a8d2473240fda2ee034c1786ac0299c492814857b6b4df0653bc32d1060a20afc6fc3a06589096e92da69bcbf66f10f47e1d3dc6a71c44ce54d94f3530cbffce643b6be507e044996e925b945d4949f4d159e156bcf1b71f0daacf067aba5e17dfd8a97d4e156406bc70ab79a2967d9063e901e913487881a44775e52d360d20"}}]}, {0x55, 0x6, "09c0ae791b6eeda632ea916e21ed4661aa7caee6b9d2bf7b5c1720be11b2dc5d2f3b4943ef097870cabc9b7761b876ec5b2196ec542fa32e191e8729f245faa51c5990208779fc971388e8a48bf3bcf1e6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FD={0x8, 0x6, r9}]}}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x20044000}, 0x4011) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2m43.516097785s ago: executing program 2 (id=793): r0 = socket$inet6(0xa, 0x1, 0x101) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x3e}, 0x4e23, 0x8, 0x4e23, 0xba9, 0xa, 0x90, 0x0, 0x0, r1, 0xffffffffffffffff}, {0x38fa, 0x5, 0x7fffffffffffffff, 0xf6e2, 0x5, 0x44, 0x3, 0x3}, {0x0, 0x6, 0x3, 0x9}, 0x4, 0x6e6bc0, 0x1, 0x0, 0x0, 0x2}, {{@in=@multicast1, 0x4d6}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x3505, 0x5, 0x1, 0x6, 0x6, 0xc2c, 0x80000001}}, 0xe8) socket$inet_icmp(0x2, 0x2, 0x1) (async) r2 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@private0, @in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x4e23, 0x0, 0x4e24, 0x8, 0x2, 0x0, 0x60, 0x87, r1, r3}, {0x0, 0x1, 0xe0000, 0xf5c, 0x6, 0x5, 0x80, 0xc1b}, {0x5, 0xffff, 0xffffffffffffffff, 0x7fffffffffffffff}, 0x0, 0x6e6bb8, 0x1, 0x0, 0x3, 0x1}, {{@in6=@private2, 0x8, 0x2b}, 0x2, @in=@private=0xa010102, 0x3501, 0x0, 0x1, 0x4, 0x3, 0x9, 0xb}}, 0xe8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@arena={0x21, 0x0, 0x0, 0x2c, 0x60000, 0x1, 0xffffffff, '\x00', r1, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@arena={0x21, 0x0, 0x0, 0x2c, 0x60000, 0x1, 0xffffffff, '\x00', r1, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', r1, 0xffffffffffffffff, 0x5, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xa, &(0x7f0000000380)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @tail_call], &(0x7f0000000400)='GPL\x00', 0x3, 0x38, &(0x7f0000000440)=""/56, 0x41100, 0x20, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x7, 0x3, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000640)=[r6, 0x1, r7], &(0x7f0000000680)=[{0x0, 0x3, 0x3, 0x1}, {0x3, 0x1, 0xa, 0xb}, {0x4, 0x5, 0x8, 0x2}], 0x10, 0xfff}, 0x94) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000780)=0xe859, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)=@ipv4_newnexthop={0x48, 0x68, 0x200, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x1, 0x0, 0x33}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x4}}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xf800}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x5d30}]}, @NHA_FDB={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0x80) (async) sendmsg$nl_route(r8, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)=@ipv4_newnexthop={0x48, 0x68, 0x200, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x1, 0x0, 0x33}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x4}}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xf800}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x5d30}]}, @NHA_FDB={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0x80) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000900)={'bond_slave_1\x00', 0x200}) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$nci(r10, &(0x7f0000000980)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x0, 0x3, 0x8, 0x9, {0x1, 0x1}}, 0x5) (async) write$nci(r10, &(0x7f0000000980)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x0, 0x3, 0x8, 0x9, {0x1, 0x1}}, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000009c0)={'wlan1\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r11, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x40, r12, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x1000, 0x23}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x3, 0x9]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r6, 0x8010661b, &(0x7f0000000b80)) (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r6, 0x8010661b, &(0x7f0000000b80)) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f0000000bc0)) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r14 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r14, 0x0, 0x10, &(0x7f0000000c00)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@private2}, 0x0, @in=@loopback}}, &(0x7f0000000d00)=0xe8) write(r11, &(0x7f0000000d40)="f30a0ea37439240dc6f7f9d863963e8cc6d3f1756085a77d7e9791c93995c1cd521bd0ba09b7ea263e00fc11b69fb5593ee335222f5fe551304cceb79a3e201198216bbf534bbcf6fb361110cb5dc3eb708c26190b3be97c8045", 0x5a) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0xdb557f009f8bf544}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)=@gettfilter={0x34, 0x2e, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x6, 0x2}, {0xc, 0xffff}, {0xfff1, 0x9}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x400}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x80) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0xdb557f009f8bf544}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)=@gettfilter={0x34, 0x2e, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x6, 0x2}, {0xc, 0xffff}, {0xfff1, 0x9}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x400}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x80) 2m42.989549552s ago: executing program 2 (id=799): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/136, 0x88}, {&(0x7f0000000400)=""/4094, 0xffe}, {&(0x7f0000001400)=""/114, 0x72}], 0x3}, 0x1}, {{0x0, 0x0, 0x0}, 0x7c64}], 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newchain={0x84, 0x64, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x10}, {0xfff1, 0xffff}, {0xb, 0xffe8}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_flow={{0x9}, {0x4c, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xb, 0xb}}, @TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8000000, 0x10000000, 0x1ff, 0xfffffffc, 0x81, {0x81, 0x0, 0x8, 0x3ff, 0x4, 0x5}, {0x28, 0x2, 0x4, 0x4000, 0x5, 0x4}, 0x2, 0x6, 0x80000001}}]}]}}]}, 0x84}}, 0x4000) 2m42.775608038s ago: executing program 2 (id=801): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000015c0)={'veth0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x1e, 0x4, &(0x7f00000016c0)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x2f}]}, &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000130005000100"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYRES32=r2, @ANYBLOB="140001800800010000000100050003"], 0x2c}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001540)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x50}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000400)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}}]}, &(0x7f0000000480)='GPL\x00', 0x3, 0x408, &(0x7f00000004c0)=""/4087}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0x7}}, 0x14}}, 0x4000880) 2m27.630755975s ago: executing program 33 (id=801): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000015c0)={'veth0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x1e, 0x4, &(0x7f00000016c0)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x2f}]}, &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000130005000100"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYRES32=r2, @ANYBLOB="140001800800010000000100050003"], 0x2c}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001540)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x50}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000400)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}}]}, &(0x7f0000000480)='GPL\x00', 0x3, 0x408, &(0x7f00000004c0)=""/4087}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0x7}}, 0x14}}, 0x4000880) 15.555139677s ago: executing program 1 (id=1752): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x70b526, 0x25dfdbff, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x7ffffffe}]}, 0x20}, 0x1, 0x0, 0x0, 0x804c090}, 0x20041040) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x40, r7, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339162471f400"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_SEQ={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40840}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x2, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', 0x0}) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) close(0x4) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x7, 0xd}, {}, {0x8, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800"], 0x64}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c8000000420001000200000000000000030100004242000050000100aabbccddeee1aabbccddeee20806600000000014064020010db800000000000000000000000120010db800000000000000000000000204d20050000000000000000050021000000000000000040002005c00030058000b005400080020010db8000000000000000000000099000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffff"], 0xc8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100000000f7ff0000000000000a20000000000a01030000000000000000010000020900010073797a310000000034000000030a01020000000000000000010000000900030073797a310000000008000a40000000040900010073797a31000000002c000000050a0102000000000000000001002000090003"], 0xa8}}, 0x8000) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000354000000120a01010000000000000000020000000900010073797a30000000000900020073797a3000000000080003400000000320000480060001"], 0xa4}}, 0x20000000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040007}, 0x4000050) 4.013921062s ago: executing program 5 (id=1818): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xf, 0x0, &(0x7f0000001f40)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028008000800810000000500100016000000"], 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)=ANY=[@ANYBLOB="2400c100", @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdf251b000000070021006262000008009a0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8840) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001800)={&(0x7f0000002000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0400253d7000fedbdf25260000000c009900800000002400f30001000b001a00ffff0800f003040004dc1f080021fb06006c9b06007251121d34a830587bffa414fd665412a686d400307f61a03b4cc308678d4fdd33464729e9fc20dfaa39affd8b3b98063b6b5d864aa15f483be3343dd68c9735f8e2cdd20c4753e1e1b546b1b45bfe0aef38a73ce286c94b7c561aad6abbe373"], 0x58}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(camellia)\x00'}, 0x58) r5 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000003c0)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r5, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/1, 0xd}, {&(0x7f0000001600)=""/5, 0x5}], 0x2, 0x0, 0xfffffde0}, 0x9}], 0x2, 0x40000142, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x0, 0xc, &(0x7f0000001940)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0xa, 0x4, &(0x7f0000001ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x5, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0xe, 0x0, &(0x7f0000001cc0)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000001d00)={0x8000001, 0x6}, 0x8) ioctl$OCFS2_IOC_UNRESVSP(r1, 0x40305829, &(0x7f0000001e00)={0x1, 0x2, 0x9, 0x4, 0x31c, 0x9}) close(r8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x6, 0xc, &(0x7f0000001e00)=ANY=[], &(0x7f0000001e40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001e80)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000001f00)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) listen(0xffffffffffffffff, 0x0) 3.800017455s ago: executing program 6 (id=1819): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000004c0)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000500)="12000000110000001400800000ff7f0000000000000100", 0x17) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2713, 0x0, &(0x7f0000000080)) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf2, 0xf2, 0x4, [@typedef={0x3}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xe, 0x3}, {0xc}, {0xb, 0x4}, {0x8, 0x5}]}, @func={0xe, 0x0, 0x0, 0xc, 0x4}, @enum={0x6, 0x3, 0x0, 0x6, 0x4, [{0xb, 0x4}, {0xb, 0xc0}, {0x8, 0x3}]}, @typedef={0x9, 0x0, 0x0, 0x8, 0x4}, @volatile={0x9, 0x0, 0x0, 0x9, 0x4}, @datasec={0x4, 0x2, 0x0, 0xf, 0x3, [{0x1, 0xffffff01, 0x8001}, {0x3, 0x80, 0x1}], '\x00\x00\x00'}, @datasec={0x4, 0x5, 0x0, 0xf, 0x3, [{0x3, 0xa6, 0x4}, {0x5, 0x1bf, 0xfff}, {0x2, 0x40, 0x434}, {0x3, 0x4, 0x485e}, {0x4, 0x4, 0x7}], "1e8864"}]}, {0x0, [0x0, 0x30]}}, &(0x7f0000000200)=""/238, 0x110, 0xee, 0x0, 0xfffffff7, 0x10000, @value=r3}, 0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x1, 0x70bc2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2f26c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x5}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8091}, 0x40) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000076000907020002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0c000d800500030004000000"], 0x24}, 0x1, 0x5502000000000000}, 0x4000) 3.23715349s ago: executing program 0 (id=1821): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000700)={'syzkaller0\x00', @multicast}) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000740)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000007c0)="0503e5fdd3fc14f9fd004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000800)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000002c0)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x15, 0x0, &(0x7f0000000300)) (async) r7 = socket(0x1c, 0x1, 0x0) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000100)="77690addcfbe1fbf66ec", 0xa}], 0x1, 0x1) close(r9) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r10, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) splice(r8, 0x0, r9, 0x0, 0x10500, 0x0) (async, rerun: 32) connect$netlink(r7, &(0x7f0000000140)=@unspec, 0xc) (async, rerun: 32) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r11, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000400)={0x34, 0x15, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000810}, 0x40) (async) socket$inet_udp(0x2, 0x2, 0x0) 3.184317874s ago: executing program 6 (id=1822): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2.999691068s ago: executing program 6 (id=1823): r0 = socket(0xa, 0x3, 0x3a) socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2a, &(0x7f0000004d40)) sendmmsg$inet6(r0, &(0x7f0000004ac0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x10000, @empty, 0xaafb}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000000c0)="3a717fa424f95068619ac9d51110cfe0f1aa5fb6d0ebb84b59908f5a83ed667d4553650680b5bd8104ca7c762568bb2d24fad8f33c0e03a8d91a4a933dc34db49d9ae800c014c98067f1038f797d18f67aa1d67d4d4f97d9f667c4dda35f10c41a1224ea58ef5bf12ebeda91756ed97685dd971ddf34b3ee9dcbe6d8e01b58d81da8ee3942a34b1db740b9013d5eb73614e3964df9404f4340b1952763da98ed3168585a0c25ea36b8b5e10974116f5e07fb3e575cdd5d7c", 0xb8}, {&(0x7f0000000180)="04465aef87b1ec74c8f7dc609985c850703291cf5fc4a971c5d5fc618567be7887439cdccbd6a14958c7394c4410383de75c4ea21ee450b6437ee42b1fed4cc87bf3d0e49ee6dd2760f1f738611ab64b07ef00ee238efc", 0x57}, {&(0x7f0000000200)="d6687010fd523ef6bab0205abe6193fa772c8d5bba5d9ced9e10c9402a6183552be387af0470e9a986432dd1ef20a00597db607935c1f86ddd04afc46e5ac2cdd2436ba9d74e58f0b9a811bf6e0fdb98fa7cc5257d0a84780058c22d2420ad61bcfd89cd9094e09cd11199dc201cdaa3e31eb3da6b8be038955136cec0659b42710d3132ef5ef9c2e528b2dc7b9d3cdf9310e8ec", 0x94}], 0x3, &(0x7f0000005400)=ANY=[@ANYBLOB="24000000000000002900000032000000ff020000000000000000000000000001", @ANYRES32, @ANYBLOB="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"], 0x298}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000680)="718e6f911fec9c11638e91e5083c92845a35b02dcf4dd912922243c4b89849a6cf705693b95c008acdab96fa9fba8f8f00f9fb8123c864e90229a8c7d5421dea14f5722db6cd39ff2fcbb5c2", 0x4c}, {&(0x7f0000000700)="a7a2364e5a251ec447c4406df6581071723f44190a82a850feca72e25a88c1e0efdad7aad3f8a52a440d9add7bda05faf2a7967b4d167d0a744273dd8b1ea809e9da13485c0857e7047bb5a103", 0x4d}, {&(0x7f0000000780)="44c1eed202bc1a33412ae70e6a3ecdc713e6bfbf87fa6656b91c7fab9b9e46de10260474279fe44449d3d33ea02a31b2e635a57fa2e99301920eba99a3659401287c0033f35024b4d083d0d75e851009709788a866c31523ecaf9c8e7f3f40ab74b307b0b43de7575270ab35ac32987d0df9d2f62f2bb9a8ba364455e12bdd91475be7a78eac6e636c3e33856203baed93ad89b9ae92eff0b59e26953d869789b48ec99d82cb12991baa28dab4b94a655369eb6b4d0a5921ecf819562c30817bffdfd0add9061391392accfb7c726e4a002c01ecdb2eec5921f1e1f3e80fac37fab3c6a93d682142b8ab6362ee66d5baf6", 0xf1}, {&(0x7f0000000880)="96aa9a0f994b72dc20ec6ac129be4d6507d0586c5bbee82536c0af65fc751f8da519e5ac", 0x24}], 0x4, &(0x7f0000000900)=[@dstopts_2292={{0xd8, 0x29, 0x4, {0x0, 0x17, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0x6d}, @ra={0x5, 0x2, 0x5}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7, 0x0, [0x6, 0x8000000000000000, 0xcf9, 0x34, 0x4]}}, @generic={0x6, 0x62, "2215b017015a3b7e3ad5bf9ded0f0f2011c66c579d49bfcd6e449820142a356b37da83bfffcc09f0c0b1c75ec946336215a40ab7165a458cc619d1fa7046b9d970c4953820ce2b5597d7e2d87d8a39a66b847b89fe5e68c205d5348ffe7c26df2623"}]}}}], 0xd8}}, {{&(0x7f0000000a00)={0xa, 0x4e24, 0x4ee, @loopback, 0x200}, 0x1c, &(0x7f0000000f80)=[{&(0x7f0000000a40)="cc0a44e1542b", 0x6}, {&(0x7f0000000a80)="c0ceeb141cda64e49a3e650135564b3a1164600da78a2695a0319b2bdf7e463121a4408f2a0f4d69e376ccb41970e8f93377c12fd0a5153d576c66b045f03f4dd58adda39bc2c044ff330111cc0427274fd7625068968054912b212a8ff83e5ec72f5268c859d1739b415f33264c9124400ef62ea3166811e4986614c7194725b8989f5e", 0x84}, {&(0x7f0000000b40)="65acf6e8efb72b8ced646f7a3e40d6a211b31f8106fa02", 0x17}, {&(0x7f0000000b80)="ea45cb14644eea3cbbab5a1d84dd1361583a70c48c5b574fc5409836559af100792081afad2d102ce170cbe55266a96290a9d808a843e261a2c9d16a2a3cfa0961bddc1eaaea894b6556e2d0946e024fc2a32a31279528e4144e61c4622a2c53ca01923113df9fe8b56cbc08e58296d829ba5661263485d19257bb2d65d7c739f1340de6ad9eb7cfcafe97a751ec91324ea62c6b58fba78ad457bf9d281d1ff3e63d6a6d38c757f502d0c89facc6fa447779013a455dd0de4aa5de32b86fe9500d24c75838efedb0501347604fa8a35a3d4fdf0ee13e7dcd6d00485a3e902e0ec50ba39fb628c8deb7637d4e1afb2b6be1e64ba189a9", 0xf6}, {&(0x7f0000000c80)="37ce6ed691883c6d7b0967ad64527d3cab12d367854c248cb0e18254be65626177b91e7ab10549d073567280b8d63eb8f1bc997dfe0c8ce9a29fb4d00f5025ddf8712520d0a17e222d97e817c955a8cef9661b29f8aa3fa282d20754152264ce2456afd9852fb417216c706589aacceecb64bc0aeef04524c572d8eaec4f647dee8c8a343a196dba0237e09bcda00a4c1b551a9627dd9d6e81328a0c8dc5db2c38904bbc0e01aba4d23bd2a38872cf575b335240c75957e89585377305d29cd756fb00d03086c92f8b95dc9e29f70e434bda357ef2814eb11acc527ece8f1f4c", 0xe0}, {&(0x7f0000000d80)="a781c9489bcc79ef5c4b22f39a2119b84238c4a5cff4db49b4f380354568a96d8e68d1b54885810e62cea83bf5f204d396fde0609ebee3a0e802f67d9f673a0a11c54d7c77f5783b53c75aa7c1959d06b09ef1133fff166cda929d6fa5cdb8d5e1a3b6a52c48f2bdcc36bb460eccaf9cb10d3511f9606d6e8b297c7429d4f469f9eaee95856d9636553e51de102942da8dece787", 0x94}, {&(0x7f0000000e80)="7596d82a320e0825babe5dc44ece046267cb6c861db920967c6c1b24597ac7981612ed8708945fe1826608b08386edbc1024fa8965ff793f0d452c7282be017af1359d5a1de32344b239b418eec838d1eb04d6f74b59be42d6612cabe33a6214100ce982050e07553488ac482f4abfc76b32adf3e1d324bd427f4eee8466161c8fd5b24690e7c88ab2b4208acb57035a7ad195c8a709efdc97deacb61fe39ecc95a37054d2231cd2d10c0e988b77e97c66d5299c7edd3a852d3a4aa28c03c71bd2dda7b9203ba85cef460f7b4567f0eaf5bba1b356c948bc8b9236b8fa", 0xdd}], 0x7, &(0x7f0000001000)=[@hopopts_2292={{0xa8, 0x29, 0x36, {0x4, 0x11, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @calipso={0x7, 0x28, {0x2, 0x8, 0xff, 0xe, [0x842c, 0x7fffffff, 0xffff, 0x2]}}, @pad1, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x0, 0x10, 0x8, 0x6, [0x3, 0x0, 0x0, 0x3, 0x0, 0x8000000000000001, 0xffffffffffffff81, 0x18ce9344]}}, @pad1]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x83}}}, @rthdr={{0x78, 0x29, 0x39, {0x3d, 0xc, 0x1, 0x9, 0x0, [@remote, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2]}}}, @hopopts={{0xa0, 0x29, 0x36, {0x5e, 0x10, '\x00', [@ra={0x5, 0x2, 0xf801}, @ra={0x5, 0x2, 0x9}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x7, 0x70, "a3af1dc95a47205a46b9213cc28670bea244b250626248f3d0f85b7da576b710b1d4f94f12a15e189f03226f07b321fec3277bea9d2fc3d8e21f01e4a45520451d064b26ed4ed131a2339a669556405664a73344760bd091624bcf927060fbcbb50b26c581a5e2543dcb2674d718e65e"}]}}}, @rthdrdstopts={{0x108, 0x29, 0x37, {0x70, 0x1e, '\x00', [@pad1, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0x8}, @hao={0xc9, 0x10, @empty}, @pad1, @enc_lim={0x4, 0x1, 0xd}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x9, 0xb1, "5539e2913d8f6bd562c2803682ececa6f0b8fb15e9dc3650be0acba9cb887912e2e6c75fa8c095eb838f1632647c931089a9039994400667b60d0f3d60a998ddc4c4d0c532e8ebf2a1dcd4f17ff802f2f2b33ff250d2fc1f4f778c3385d010eb2ee8e4f96e41c78ede74191c1547190a6c37d067d70834c45956dd467769a3e4c47aeb700f3107932b0a7b29fda5871c0cfd5e105a4c873158e760f0e4f3df0d8a798d9179aae2dbbd31415a63d4f7ccd5"}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}], 0x2f8}}, {{&(0x7f0000001300)={0xa, 0x4e24, 0x80000001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c, &(0x7f0000002580)=[{&(0x7f0000001340)="3d23a2cd781d99d1df46032bb5313b9edbb370726ae96c38878556a08730cb967d", 0x21}, {&(0x7f0000001380)="245eef665978153f2137745c9f9a961d64", 0x11}, {&(0x7f00000013c0)="ba85ee5f72e04574cdfe2d11521d91c94a0ae8b033916209c86300cc7729050719d35fdc520bc111c619138d1880141d6b709038a9e69035a80dc94d5547d028e32921086b72dfd29b568084c4bfb6c83bc653bfe942aefa57f0b61dd10670080c77527acfd36edb58f0766bfd1ed224d5bfb9da7703cb2f6ae4c35b85dfbf86aa9d5c4f1f605f55252713d28925a1b157c6390ec3159fbdcee11ef436e8a1fb977eb93e3aff68d133afce3c31529a5f75f3aac53740c0a511aa6b837b027b56c92bb6c0c4b5fb0f07f76536616ee3e1691e044efe579874403e0846239862b6d82b6cf17a8662ded2761a06c8aa40d0e0bacacdab57c22ee24c124372202aa4727f3d96e5048cb128c50e6e364b9dc83b672485ab252ab9833fb774fba8da2e5450c2dcb299bc9d786afa290b5cbd98c5beb3411f2ba695fa65c98cc13f6fa02012377429905aa65e13321e60e350d0b0cb318bbac0abc264d9e5eb59278237febdb23f66d9faaa1040ccec6e90103cb1d700cc8db1b9353a01b00b5780aee957393b4deb00accec8fe25c9c33bedcfc40a47f52de324301b570ffec42b0276a2d6be3b00b6c9deb01eb31b1385602e2f1d4eca2968e84dcba1f195ca0fc7b37c8a3ac3cfa378900de8b3a048d459589d41955aa58930e78017296dca8c785e0b66c38b6b0b55f7849a8b8f777b80c3a6bc1e4bff0500f0704b20fce186db812a438fc29a8070101cbf515dae18155d0c21a29479550960a756735b52548c40e1ec36b9463d4667dc260c2f919579ba74587c770dee389851e9dc64137795441e1b5e3a71ebc22414cd77eeebb0a6c818355159ac9eedf940f531975c3dc50a569f2ba46cff3478c092ea3809ebf1cc42e66ee6d1c8e2c30d110d43167497290f11b453d84ec3804e4e8fc98c6c9e1959e772e5347b3554db914b7a119363d0f9e513b2670db6c0879bdcd4be7bf33d3cf696a77dafb120ce663c8521848e6ca681971e9d9844413d410deeb49d349c733665b1c79ad3e275d044387f085b03f6fa91b4ba04de550e93eab2926b3ed024447487a00ac824d8a38fc1781977184160fb594b68d634a03e88514f7ce65174d508c6025a2581ba8843cd60296edf88c2e26649746410580c8cd4c93636f55fe53b3510dfb287a6e46c30c8f44c51e5e14af7fe70cc0a0e6cefa50f534875ffe9e909923319a4702610ea0e1654194856cc365e384f15bf4f6367e2f90500727a25d7ca97b9b8b77706e6e0e419451d04c321808d665b2e083a18a0d40d5ce8c352d37e7fe3bde617da5008fb0dbf2b905b9b758e2194680db0ab5e6164149b2b71cd7312cf1a996d8636fb40b3f2fbef36fd81785ac1609b53aa1632c13f44a64e24cf57cd7e43ee4d646f62868bd6ae8350b273689be09b9a07736dd7200e3defbf98df35f9ad1e92afde94e1e0a6e380753d6ae978438cbea247d847a735902a25c234b5a2d592d45261173062dcaf99d86a7beb336a6e288ca1b9820c201e1d87ef7a5ce428817956604294415c2370a64066d637223274e4ac49b7f20e042c4afcfe613d562f69d12cebd572b88fab838903443564c283be022473603aeaea468b6799f66c32abb6bb6e3ae7eda9336b1511fe95dec4a7977b599e8e9e9a7bd00fb826b8440b6d4d9035192b7846fdc4be40a3f88a5d05c600afc326f47dea07396388628999a40ce9246bbbb3c7cfdecda88b8fad84a58f21ed0df5d969d507c5633c68d36ede6a1fad5cd151f8f9267393d81bcdd2b7d9d10d7ce0724893b7cbe8c8432d2c16ab9bd73dd10521ef57cc4f9fbc9589f3502ad1d11ed73d8bfe25ef8ab8df7f12e027d545ed28cdaec8bd0676f3e3e38188f095b3a399416160723d5d6004aea6a894fdbd7806b1d3d78ccecf6b7812340bc29e13b986d0ab11b0098aaedab1f3ecfd2461f953095d78b2d332017cde81b84d123c4948c055aeddaf85ffbea78fe3e87003fc231c5133bbef78f102f80675edf2649acd28de444ac799a57a4bf4708cc7ab846fe8927941dcc3342433b07da1d9aa1815614f90f7d7e4131f9a4714dc55c80b7cc1b44840897947b2ed018606ef25de36d89e9a7586604307b36a85733b322bf99c8b55952cbe6a710d877f3e2c0a4494a3cc78a55750be33a823c0d5decca871cee40946ed7c3151ddd8750d00ebd9fc77ef626a9b69392a1bbfef91dec4cd0d0e3a0c777fb1eb53332a2812e815899477f27e208a85b9e23148f0ea77208a521c9113d4dbd83efb9eb61a156c1dcbb6f6706bb7c1c87d890ac112a0a37fba9d0646e97b9a82ce3b99543bc544cb97897e2e1fad687608935031e2cf7e7519f9e199bf29c8e3ef6de733319d6a7c241a41a341ad17d4a0737c4f67b88133c1bd3ecf1fab20febbd7ef2fa1b944bab9899c338f78a21a19648e04dc68764c62a7c1e5d9933b0d49d5a3594a3850b502f666073fafd97fe5795da4bdf541d612876a43b3ac731c3f08af4be6df12c9d1c6756d9a0ebbe40375de5b18b45757838a92688ab8484fdb1c396e236f9904c1255bd61e6dce4f06cbf5eac19979bc9fa0cc55bc0bf52b16bdd0abe1dc9fd39d36e3160070b4e88459329d4ad56fb966828d9d6511f8a5528c990b19fe665792d2e5d45dfb9d1f056a124a52f1533d23eda54d3dba567e5d067d5bebe471c257f728056bd80652614e4d797b100a32f4653746eb25235b59ec14d8227783210e5a5a420cfd8729e79d138fc82e5ae383d6ed1930107d824cb2a8871106cb3bba91694f802936cfd86ccbdb2cc51a3d0ec2e614e563aba396f8e54652efa5c09423fd6fc289193accf0648641bb3c4cd91f489ac22f27cb82de80d291af5adba43b66af8e7b4519968afd1fd7ae8a9638ba58efae77d1f00936265cfcf15e706de5da225f629d5b6e76644d4b7837a48082d9a316a7e61601f3cc7cf0b0be57f2773e67ca426b3932ca28551f1d0fcacd3ac138ab2c2f1e5992e0b1dc76e0b34e0a4e0642bd62b6d9faaf5ae0f8cb0ec961b6ef1a4b77ce70e342875752dd2c399bdc08b7d8248fa979c66ceccaa83ecf6532357ceb89f1a59479758c642594c66b57b56675aadd3d8b3505c399980d732aec6d16e8d5c52585542da5344c2699794759d0f1d9fa0c5673bb27b58685d9c1d752cb1aab040b71c006a17190b2c68cf106c24dd9b437e62ac816d064beb976bcbd998b6c08a8b3249524ab3761661ac38948d904c73fff2ee78b13e31b99e20a865aaf7901f085b99ed81b69441fd4ede7685091eb54973b03c4723dc1182ecab3b69b70e63111cfae869b2e3a9be78a1953f027cb8f5f9789723187d1df5cbbf2133e5fab41e2150e3431e6e09043a75c476711329438edf86634ce633ee072d9be8b0c3ed31268d3c979fc8d342537d55ce89b7d9966cd0420d00e7dcd06f09913ad043b4d7924a8488c9d4675b27b32a530d30d4bd832c34bfb1d8c165408bdc75f1bfd6ad7964f042af12be059ff4968b307db3037cfa61ff87270133fc684132670360189b25fa09977dd7d02c6432bd26c0d5258eb3c16aba48417fed3dc2ce6a932a04cbf4c3f9af2721913b8c9ba21b553a6bb43ecc47e8fbb375333f399c65c5079e7863fed564f9dad02318aaf917f526dbb61e663f359770706e9d24a13f427e43ade8ef26a33d2e5159e8d3dcfd63dd795981169c2e7085ae3814c497abbaaaa0f322939cd0d2b0c450b4a6d5857f5363f01edbdbfc81f9ae83256d418571b69bb94e9eac5a43b491903d23c5ce77bb4375fb34c011e7d100dc84d7c43ff9c7166e3bdb5df2801f40b6dbbdc7fe6370575ce43c557566b8037eb275fd44f2c9f2c890f392baf6c97645a4b7a2916f5f71a317647cf38bb8c96491995e08178be72bf27f9fd25ab0bf0477d5d38b619b0c7f69f2948d84742af37422eb4c312a1cbce77a03c3f6bef6eb43a52d7c4e7bdd55182e6d8a7669d0581ceb18fe7dad9fae9e92110a529347fac03e573c069a7eda3aef573dc285f8555fda55a958ac42ec10357f3a52004f80dac2023c72c0e0e02f55e5629ec48a2d23718a9d87ef1fc2bbcbda1234e231d6dca264d42faa9d8f7bd3c1ce8a60d17cb66f9e659487befddd9092603e7f487d09aa76604acb3a4bf595c2786bc6913ccb96eac43188d84e5e64e7b3cba649a271c3da40e8efc09ef55ef3db0075eb0fe80f93b2b28191b830375ab37e7ae2894328e7107e4648d25ef43078fee4c0a3e19d68767e9075feefbf0445c6de0c36ba502305e1bdf8b76dff7077af2b2fc895b2b62740392d5703e2bc78f4ef9bee2dd7301c20fead48f1973bec956bff82b7b996ed42ebf542455acd70387bf9c4fea81b86b1712a8a108e29381b968fb03c02a55a9c1f35a4d43486d50592a25c880cf1167e8e2af6bd8aefb78bc1ed7d53992ca566878cd5b418f51c94200006b8c59cefd7e3a35e9ef3b4c5c5ba257100790839ebce13018e5148cba96a83fa17af77839c703ddd641cc629e0beede5a1aad9c8ee8e69233b1c38ffa6cd207a00a8945ea1bae26954fa83683969de6e77096f94eb99e2e322822fc68bc4c6afa6bd9513061681a0841c33dcbd2d0e17f694be68d709ff9770fb5e742d8074fdc7a76bd031c2067133afd0fc16d7ba911e8e801cccf81c2492cbe1f096ffe1fb765db12997a786118359582331086e4e541b2c22e623b74e3c844232a60ba1a43a6a5af63cb49f0ca6c25e5938f1e08b6e4ca03312a89d1d09a05083f8ca9b07961f9e16f5a89e9f9768c21b493096268f734932309b4b0270c15ee67672ad211271157b1143dca4f411937b7674881ce1c1c40a9d679231e0a00e17591da4f5bf57a51ed45a985df0d58f0b4191cfd3d47d58d02fdf6c5e02e347282a203fb8a7b3d75c89cf7e8879208ed7c420ea53fb9b362c4db17d9e352f0cc84a7b30bb10dbdd8f3f89196eb6f450ba376d318d0f4523399ac5045f41267c725bf5aa07b26cf4f9240155f52d3373ca4acebd4094b26b9d691a1064d62b539c92607a2c54f8df790c9d9711839696e26671ffca0b1a0063bb295fc658ee1cd69e1381a1774b3b9a692ef606326d0d411776af8341a2d0c996b2b37ecbbb0825273528aaeb814291e10b600b1c7a280faf189330ba4c36de5022ff928243e1b6fad51eb40dbf8f7a20ede43c99bcade44265f564eab96e58570686220fc191cbf7603976c50d58857bb7f1a2b019e819ade8cdd0f854b2412e09ff6c8277aa94adf3ee57e0c583d76e5ad619e8f2aad2ea17ad8351d4594dd4069522a16e3d1307c4279329888b1e0fe1000c81f9f4d2726fec41241915b95d529a97bfffbffa24cb67593c86d8bfb9d892786c17406d2139db5ba29c25d3879d24810166331a877b38cde939010d484b73755f69839cf670dee135c48dbb02ff70b993a36d22b73d11a687903d167a3cd9e3e28cbaca039c2b784625a4029468c666f190e13ac18c74772aad83029bad23f71e9ca72efcd1c647397b9e1f8a0d3ff2d6fe7abeff9114199e7b65de75d64482fbda6712bf592372df29e2659de82c20c0ebef53eff41a3fdf35bf9b1ce6132ce45e1acacde7fb97b365407b2e18d4fb43109de0e438f053f0967ba7e9cca996d54482e3d5342a6dcb29f7c472a96d46db37d911459748c004674f7a81b0bb993444e9a3878fe11964fd931875a212f0bc90015de017559ba8d927ea13e5a08b6d4f0b018be49f3bc68567089f1636a55bb33f7a9d50f2831f89f8bfa2f615ada1903e073b61c", 0x1000}, {&(0x7f00000023c0)="f555eceb5d9b8a46c21de08372befcd0343cd441c5e37bdf46d948fe8ba20ebbac9c7eb8e8c2b0a6eff06bfad93ede53b1ed803fa6de3aa655b2bf98ecd0929963aec2cac11fa127229398f770e2b3008f49aad211eb3996de0d130ef6b1f339edf1107c5ac9d6108b10536410a9abe1ac45b9483fe6e8dce2cf6ca9f876bd2b00f464dd064dee7fc8331ffe682e729060", 0x91}, {&(0x7f0000002480)="e23e1656b104d097779aaa03764cbdae96f2beab6fb8dc8f3f8382d4aa428a256e606f3891c2b874b0c237962cfa68107e2bb5ac610d113c106a626cd730ec06754d30aa4a9bf46adf85de05b1a55e41352230317d3a9057a4c8ff15a6cc55365301f97f68629823", 0x68}, {&(0x7f0000002500)="778c7ccc63818b71beeb345cb6304e8bce42d653fcec26ba2993e944de4785ff8d2cca12fdeb41e377dee925ff741e6b7b47a83a08df6f8324acc20409b09467a1b1e96653", 0x45}], 0x6, &(0x7f0000002880)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @dstopts={{0x28, 0x29, 0x37, {0x67, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0xf7}, @pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @rthdr={{0x98, 0x29, 0x39, {0x2, 0x10, 0x2, 0x1, 0x0, [@remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1, @loopback, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2b}, @local]}}}, @tclass={{0x14, 0x29, 0x43, 0x2}}], 0x118}}, {{&(0x7f00000029c0)={0xa, 0x4e20, 0xff, @remote}, 0x1c, &(0x7f0000004a80)=[{&(0x7f0000002a00)="4872533766da2d088b68c664cf06156acb5ce36949e1e4380605811781b4e5ffafac9d99f586690167a41be6d860496e9435d8d5279a43e6cb65a7caf809468c", 0x40}, {&(0x7f0000002a40)="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", 0x1000}, {&(0x7f0000003a40)="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", 0xf80}, {&(0x7f0000004a40)="e650d4d69bddfc84c0f8ebbc33a590c4257697549826cf53c2822509b6e78a44cb", 0x21}], 0x4}}], 0x5, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004d40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000004d80)={'wlan0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000004ec0)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000004fc0)={0x0, 0x0, &(0x7f0000005000)={&(0x7f0000005040)={0x3c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) 2.864505337s ago: executing program 5 (id=1824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xbc}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x8010) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000001000)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000f80)="27030200dc0f14000e0007000024c1020000ff3207c2fb7fe0406e52534b4f6b3d00000000000000892f3c35d5a8", 0x2e}], 0x1}, 0x0) 2.447806709s ago: executing program 0 (id=1825): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x8, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000800)={r0, 0x9, 0x2, 0x7}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={0x1, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f0000000b80)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0x2, 0x8, 0x2b, @empty, @rand_addr=' \x01\x00', 0x700, 0x700, 0x8, 0xd}}) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$RXRPC_SECURITY_KEY(r8, 0x110, 0x1, &(0x7f0000000c40)='wpan0\x00', 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x34, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0x5f}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @jmp={0x5, 0x0, 0xa, 0x4, 0x8, 0x8, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b00)='GPL\x00', 0x3, 0x8, &(0x7f0000000b40)=""/8, 0x41000, 0x50, '\x00', r7, 0x25, r8, 0x8, &(0x7f0000000c80)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000cc0)={0x3, 0x5, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000d00)=[{0x3, 0x1, 0x7, 0x1}, {0x3, 0x5, 0xb, 0x7}, {0x1, 0x5, 0xc, 0x3}, {0x4, 0x2, 0x4, 0x2}, {0x4, 0x3, 0xd, 0xb}, {0x3, 0x5, 0x1, 0x7}], 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x20, &(0x7f0000000600)=0x2, 0xf6) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x34, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5ac}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x34}}, 0x0) recvmmsg$unix(r0, &(0x7f00000035c0)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f00000000c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/91, 0x5b}, {&(0x7f0000001300)=""/4096, 0x1000}], 0x3, &(0x7f0000002340)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002380), 0x6e, &(0x7f0000002580)=[{&(0x7f0000002400)=""/214, 0xd6}, {&(0x7f0000002500)=""/106, 0x6a}], 0x2, &(0x7f00000025c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000002600)=""/110, 0x6e}, {&(0x7f0000002680)=""/31, 0x1f}], 0x2, &(0x7f0000002700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000002780)=@abs, 0x6e, &(0x7f0000002b80)=[{&(0x7f0000002800)=""/100, 0x64}, {&(0x7f0000002880)=""/46, 0x2e}, {&(0x7f00000028c0)=""/52, 0x34}, {&(0x7f0000002900)=""/62, 0x3e}, {&(0x7f0000002940)=""/152, 0x98}, {&(0x7f0000002a00)=""/62, 0x3e}, {&(0x7f0000002a40)=""/2, 0x2}, {&(0x7f0000002a80)=""/214, 0xd6}], 0x8, &(0x7f0000002c00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000002d00), 0x6e, &(0x7f0000003200)=[{&(0x7f0000002d80)=""/202, 0xca}, {&(0x7f0000002e80)=""/61, 0x3d}, {&(0x7f0000002ec0)=""/63, 0x3f}, {&(0x7f0000002f00)=""/4, 0x4}, {&(0x7f0000002f40)=""/243, 0xf3}, {&(0x7f0000003040)=""/178, 0xb2}, {&(0x7f0000003100)=""/27, 0x1b}, {&(0x7f0000003140)=""/29, 0x1d}, {&(0x7f0000003180)=""/107, 0x6b}], 0x9}}, {{&(0x7f00000032c0), 0x6e, &(0x7f0000003580)=[{&(0x7f0000003340)=""/204, 0xcc}, {&(0x7f0000003440)=""/41, 0x29}, {&(0x7f0000003480)=""/206, 0xce}], 0x3}}], 0x6, 0x1, &(0x7f0000003740)={0x0, 0x989680}) r11 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r11, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={0x0}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r11, 0x84, 0x76, &(0x7f00000003c0)={r13, 0x5}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f0000000400)={0x8063, 0x1, 0x202, 0x3, 0x2, 0x4, 0xc4c, 0x8, r13}, 0x20) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01020000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000003808000c4000000001080005400000000b"], 0x10c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffffb, {0x0, 0x0, 0x0, r15, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 1.949021058s ago: executing program 1 (id=1827): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x9, 0x8, 0x6, 0x1}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_emit_ethernet(0x9d, &(0x7f0000000200)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@x25={0x805, {0x2, 0x6c, 0xd4, "bc82e1319fc49f5cfd87543134b2c318e065c1044d2a9f5b58b3d0a6a58aeeb304598d1060078edd7c2e8ef0806045d88ce2ab4a9321ab69954c1eacfc285e315a45e5f0bd95ba1d3b090e413c88916d58ff53e89396c0798084a0289519c94b3750fedc7f1cf81b5049ef90465c318644b44e0b3227051a0c792361f623afeee7bfdbd51413e660da0bb8c3"}}}}, 0x0) 1.684040883s ago: executing program 4 (id=1828): socket$kcm(0xa, 0x922000000003, 0x11) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) (async) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r4, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0xffffeb76}], 0x1, 0x20000040, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000700)={0x1f, 0x0, @fixed}, 0xe) (async) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0xf, &(0x7f0000000740)=0x3, 0x4) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000c00)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000c40), 0x8, 0x10, &(0x7f0000000c80), 0x10}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000cc0)=r7, 0x4) (async, rerun: 32) getsockopt$sock_buf(r6, 0x1, 0x1a, 0x0, &(0x7f0000000d00)) (rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0008000007500500580040"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r9, 0x0, 0xd4, &(0x7f00000006c0)=0x4, 0x4) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x9}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0xe}}]}}]}, 0x48}}, 0xc840) (async, rerun: 64) r10 = socket$rds(0x15, 0x5, 0x0) (rerun: 64) connect$rds(r10, &(0x7f0000000480)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000680)={r13, r2}) sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010028bd7000fcdbdf251700100054000680140003002e2d73353a5f2d5d482ee5364c4323843c00040067636d286165732900e8feffff0000000000000000000000000000000000000014"], 0x68}, 0x1, 0x0, 0x0, 0x400c841}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x2}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x80000000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 1.470949462s ago: executing program 1 (id=1829): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001340)=ANY=[@ANYBLOB="5c0100001000010000000000fdfffffffe880000000000000000000000000001ff01000000000000000000000000000100000000000000000000000080ffffff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffff050000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000a00000008000000000000001c0017000000000000000000ffffffff0000000000000000040000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500210001"], 0x15c}}, 0x0) 1.29713238s ago: executing program 0 (id=1830): r0 = socket(0x28, 0x4, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='batadv_slave_0\x00', 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f00000002c0)=0x80000001, 0x4) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={0x2, 0xffffffffffffffff, 0x800}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000180)=0x4) r3 = socket$rxrpc(0x21, 0x2, 0x2) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001580)={0x6, 0xc, &(0x7f0000000380)=@raw=[@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000400)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000440)=""/4096, 0x41100, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001440)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001480)={0x4, 0xe, 0x4, 0xc8}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000014c0)=[0xffffffffffffffff], &(0x7f0000001500)=[{0x4, 0x3, 0x3, 0x7}, {0x4, 0x2, 0xd, 0x8}, {0x1, 0x5, 0x3, 0x7}, {0x0, 0x4, 0xf, 0x8}, {0x5, 0x4, 0x7, 0x1}, {0x2, 0x4, 0x8}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002800)={r4, 0x0, 0x1000, 0x7e, &(0x7f0000001640)="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", &(0x7f0000002640)=""/126, 0x58, 0x0, 0xec, 0x27, &(0x7f00000026c0)="9ae357ad0356e4ef8d8dbcd8cf12ff0c785818150c9109023747e49a26572d80ddfe4b76373bf8185090d35aa278617bae4fccad0ea8fdda35e64bf3ed0f24e225fbf07d9f921c1d7768b4898f5b8c78f5bfb853b961e4d3bf20e4f11447ecf1487259a2794ba44177504272a33b27f187ef0558cb45415f1cc6bdac2db3a4f93903739b036c0620b78d0f0237fc6efc4c9a4c083ab9c7138a2631bc5544269c870b2daf0b1ebd1c3cd6fa133b93a2a567daa482d305ff8460d91b6ee9c93b0345331419d391c69fbdb8b9e8113f5afaf9fb22840fc3504e2c06540fa6005e15474bcbbaafbb169bab5e6781", &(0x7f00000027c0)="f2f451da8a0ed8b1e60278de69e4ccc8b27637c11c71d1218c2134e225c7050430a8276e4e06e3", 0x1, 0x0, 0x5}, 0x50) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000040)='\x00e\xa9f\x9e\xbbT}\x15\x91H\x93sW\x94\b\xa2\xf0Es&\xc7\xf8\x8c\xc8\xb1&\x12\xebS\x98\xf3C]A\xf5$\x1e\xf5g|a\xc0\r\x00\x00', 0xff1e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4803}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 1.253336605s ago: executing program 5 (id=1831): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x44, r3, 0x1, 0x70bd26, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x4f}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x93}, 0x24044884) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$unix(0x1, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x44, r3, 0x1, 0x70bd26, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x4f}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x93}, 0x24044884) (async) 1.231586348s ago: executing program 1 (id=1832): r0 = socket$inet6(0xa, 0xa, 0x9) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000380)={0xa, 0xe22, 0x80, @mcast2, 0x1}, 0x1c) 1.188867361s ago: executing program 6 (id=1833): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a98000000060a010400000000000000000a0004050900010073797a31000000006c000480680001800a000100696e6e6572000000580002800800044000000017340005800c0001007061796c6f6164002400028008000340400000920800024000000000080004400000000008000140000000110800034000000002080002400000008408000140000000000900020073797a32"], 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "1d61"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r5, &(0x7f0000000100)="9400000042000100020000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400003c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e0c00030008000c0004000100", 0x94, 0x0, 0x0, 0x0) 1.028782646s ago: executing program 4 (id=1834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000102010800000000000000000a000000440002802c00018014000300fe8000000000000000000000000000bb14000400fc010000000000000008000000000000100002800500010006000000040003"], 0x58}}, 0x20000041) 941.457027ms ago: executing program 5 (id=1835): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x805}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000071117700000000008510000002000000850000005600000095000000000000009500a50500000000eefd02f7e4c7ef6bfd6b7e160d5a59898098d03978903a3ecb0443b5069f63b76ffe38996114079c34e953ab2fc1f800c7ff9cdad0b490700b4586082326cabc459587bf937e83c29ff4e4a47e30f1b31c886030af93d6bfa6aa21216810d61d6e970aa4c96e0f77e00ff165"], &(0x7f00000005c0)='GPL\x00', 0x5, 0x29e, &(0x7f0000000600)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) ioctl$XFS_IOC_ERROR_CLEARALL(r1, 0x40085875) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="89000000120081ae08060cdc030000017f03e3f7400100006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x4000800) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000000206010800000000000000000000000011000300686173683a69702c6d61726b00000000050001000700000005000500020000000900020073"], 0x58}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES64=r4, @ANYRESHEX=r3], 0x44}, 0x1, 0x0, 0x0, 0x26004880}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x64}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r5, 0x5236f000) 877.56346ms ago: executing program 6 (id=1836): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="12d1e500000039ff00"/28], 0x50) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000800)) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) (async) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) listen(0xffffffffffffffff, 0x8) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) (async) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000340), 0xffb2) (async) r5 = socket$kcm(0x21, 0x2, 0x2) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x4, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000001380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000013c0), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r6, 0x300f000, 0xe, 0x0, &(0x7f0000001480)="0069c2704ade28eddb0000200000", 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f00000005c0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) (async) sendmsg$kcm(r5, &(0x7f0000000700)={&(0x7f0000000740)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) close(0x3) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000380)=@gcm_256={{0x304}, "00e1ffffff00", "5985e81ad0d9585bc175cbecd3f55eb699e3ee0bc206f3ba527c85bde06fbf19", '\x00', '\x00\x00\x00\f\x00'}, 0x38) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.usage_all\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000440)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x4, &(0x7f0000000480)=@gcm_128={{0x304}, "cdbef90c18b633a0", "fa07b300928ad6359800", "7eb00b44", "d990001000"}, 0x28) (async) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000001540)={'broute\x00', 0x0, 0x0, 0x0, [0x5, 0x5, 0x7, 0x7, 0x81, 0x6], 0x4, &(0x7f00000014c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8) (async) close(r3) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018090000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, r3, 0x19, 0x0, @val=@netfilter={0x0, 0x0, 0x6}}, 0x20) 754.800592ms ago: executing program 0 (id=1837): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x1, 0x4) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r1, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'rose0\x00'}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x1000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f00000001c0)={0x2, 0xffffffffffffffff, 0x80800}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000240)={0x1, 0x4}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r2, 0x84, 0x81, &(0x7f00000002c0)={r3, 0xcb}, &(0x7f0000000300)=0x8) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000340)={0xffffffffffffffff}) connect$rds(r4, &(0x7f00000003c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r5 = socket$unix(0x1, 0x5, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r4) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x188, r6, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffffa, 0x36}}}}, [@NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x0, 0x4}, {0x1d, 0x7}, {0xed, 0x7}, {0x80, 0x1}, {0x6, 0x5}, {0x8, 0x5}, {0x7, 0x2}, {0x2, 0x32}, {0x4, 0x5}], "9a58f2514e924608"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x6, 0x7}, {0x6}, {0x0, 0x3}, {0x94}, {0xfe, 0x6}, {0x3f, 0x5}, {0x9, 0x7}, {0x9, 0x7}, {}, {0x4}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x7}, {0xfb, 0x7}, {0x6, 0x4}, {0x1, 0x3}, {0x6, 0x4}, {0x0, 0x4}, {0x8, 0x6}, {0x16, 0x1}], "630f43414fa6894a"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x3, 0x2}, {0x6, 0x2}, {0x8d, 0x1}, {0x3d, 0x1}, {0x3, 0x1}, {0x5, 0x7}, {0x3}, {0x8, 0x1}, {0x9, 0x7}, {0x9, 0x6}, {0x4, 0x2}, {0x0, 0x7}, {0x5, 0x1}, {0x88, 0x4}, {0xc2}, {0x6, 0x1}, {0x4, 0x4}, {0x0, 0x4}, {0x80, 0x5}, {0x7, 0x5}], "175af59a4a86e9f9"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0xa, 0x3}, {0xc9, 0x2}], "4f2eb551a470d37a"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x8b, 0x7}, {0xe5, 0x4}, {0x4, 0x5}, {0x4}, {0x6, 0x5}, {0x7, 0x6}, {0x7, 0x1}, {0xfe}, {0x7f, 0x5}, {0x3, 0x2}, {0x5, 0x4}, {0x6, 0x2}, {0x2, 0x6}, {0x8, 0x2}, {0x3, 0x2}, {0x0, 0x6}, {0xd, 0x3}], "d73df981af04b6af"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0xc}, {0x8, 0x6}, {0x1, 0x2}], "31f9307a36d2d721"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0xa, 0x5}, {0x8a, 0x1}, {0x4, 0x1}, {0xfc, 0x4}, {0x80, 0x7}, {0x8, 0x1}], "db010052cb043f3f"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0xe, 0x2}, {0x2, 0x6}, {0xf8, 0x3}, {0x8, 0x2}, {0x1, 0x7}, {0x3, 0x4}, {0x40, 0x1}, {0x7f, 0x5}, {0xa3}], "5df9de2a69959580"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x40, 0x4}, {0x7f, 0x2}, {0x6}, {0x5, 0x2}, {0x1, 0x2}, {0x5, 0x1}, {0x7, 0x2}, {0x10, 0x6}, {0x3, 0x7}, {0x5, 0x2}, {0x10, 0x7}, {0x0, 0x4}, {0x1}, {0x7f, 0x4}, {0x8, 0x5}, {0x3, 0x5}, {0x9, 0x2}, {0x66, 0x3}], "d5f38ec4b408c359"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x7, 0x6}, {0x49, 0x6}, {0xa, 0x7}, {0x2, 0x3}, {0x1, 0x4}, {0x4, 0x5}, {0x9, 0x2}, {0x1, 0x6}, {0x5, 0x6}, {0x0, 0x4}, {0x62}, {0x6, 0x6}], "52445edec2099522"}}]}, 0x188}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000006c0)={'veth1_to_batadv\x00', 0x0}) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000700)={0x7, 0x3, 0x3, 0xb, 0x0, 0x4, 0x2, 0x7, 0x6, 0xe0, 0x9, 0x6, 0x6, 0x2}, 0xe) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000740)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f00000009c0)={0x0, 0x2, 0x8000000000000001, 0x1}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000dc0)={{}, r9, 0x10, @inherit={0x50, &(0x7f0000000940)={0x1, 0x1, 0x1, 0x6, {0x20, 0x8001, 0x9, 0x8, 0x1}, [0x2]}}, @devid=r10}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r4, 0x10f, 0x84, &(0x7f0000001dc0), &(0x7f0000001e00)=0x4) recvmsg$unix(r4, &(0x7f0000002540)={&(0x7f0000001e40)=@abs, 0x6e, &(0x7f0000002380)=[{&(0x7f0000001ec0)=""/241, 0xf1}, {&(0x7f0000001fc0)=""/248, 0xf8}, {&(0x7f00000020c0)=""/198, 0xc6}, {&(0x7f00000021c0)=""/21, 0x15}, {&(0x7f0000002200)=""/14, 0xe}, {&(0x7f0000002240)=""/237, 0xed}, {&(0x7f0000002340)}], 0x7, &(0x7f0000002400)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x120}, 0x40000001) r17 = openat$tun(0xffffffffffffff9c, &(0x7f0000002580), 0x183c00, 0x0) ioctl$TUNSETIFF(r17, 0x400454ca, &(0x7f00000025c0)={'ip_vti0\x00', 0x1000}) sendmsg$nl_route_sched(r12, &(0x7f00000026c0)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)=@gettclass={0x24, 0x2a, 0x0, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xb, 0xfff2}, {0xfff2, 0xffe0}, {0x0, 0xb}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) sendmsg$NL80211_CMD_DEL_PMK(r13, &(0x7f00000027c0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x2c, r6, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1e25, 0x26}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}}, 0x810) r18 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002840), r16) sendmsg$TIPC_NL_NAME_TABLE_GET(r15, &(0x7f00000029c0)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002980)={&(0x7f0000002880)={0xd4, r18, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "8c0ab3f27725007043f0d5a7e4f5b19f73c47be83ae458be13ec"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "90ab55b75e9bfe620e57843111a18e6ad6a0f87d3a3842182171485f2a320814ef0ff4"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x89d}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffff7}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40101}, 0x4002000) ioctl$FS_IOC_SETVERSION(r14, 0x40087602, &(0x7f0000002a00)=0xf) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000002b00)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x38, r1, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xb0f4}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffe}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000804}, 0x4004011) ioctl$AUTOFS_IOC_CATATONIC(r13, 0x9362, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r11, &(0x7f0000002dc0)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002bc0)={0x18c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) 654.204183ms ago: executing program 4 (id=1838): getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f000100697076366865616465720000080002000000000007000300200000001400000011000100000000000000000000000a00"], 0xec}}, 0x811) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="fffffffffffffe000000000286dd6000000000082b40fe800000000000000000000000000001fe8000000000000000000000000000023b00040000000000"], 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x51}, 0x4048004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r4) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x30, r5, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0xf, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x8}]}, 0x30}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="ccd2f782d50d09ed960006", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fedbdf2518000000b8000280ac0005001781ccfbd6542842fbf319ee3b93050d2597ae2612d7f421fcefaf3e797474f11b7053719e42999dfb7fabaa6a8de9989a539cf3073eae029b910d2e8a282b325f6ddd96339426e228e367be52ddbf916c3a96292cba3e825f050c4e26ce7225fdde20a0336d811f0459754138cb748cb8e6d05d58213b2b77ba66a42cb59a6969df0a4c4b89c23d67ce330e25f78bb1e05b545cb8d4acf2fdcac0bd5df35b0e25b2d382b36e2fea0800020000800000"], 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) 601.503209ms ago: executing program 5 (id=1839): getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000100)={0x1, 0x8, 0x10, 0x8, 0xa}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={r2, 0x94, &(0x7f0000000640)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x3, @remote, 0x2}, @in6={0xa, 0x4e20, 0xfffffffb, @mcast1, 0x7}, @in6={0xa, 0x4e23, 0x1, @local, 0x7}]}, &(0x7f0000000280)=0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) close(r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@multicast1}}, &(0x7f0000000400)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=@getpolicy={0x164, 0x15, 0x808, 0x70bd29, 0x25dfdbfc, {{@in6=@mcast1, @in6=@empty, 0x4e22, 0x8, 0x4e20, 0x4, 0x1, 0xc0, 0x20, 0x3b, 0x0, r3}, 0x6e6bb8, 0x3}, [@iptfs_dont_frag={0x4}, @algo_crypt={0x10f, 0x2, {{'lrw(cast6)\x00'}, 0x638, "ed9f05c7c5efb00dd74a0d906685a435a0451e1b26e09b5a38231d43f5a53c62d40556889032f3c831e26d9a436afbd84651cf70f22718f79d592289712db73e942668ab8b19ac0e4032f8385451fb53a51bde6c75d68c45c2550386e94f538589b8329047cbceb4ba4d14d2ac584f3069f703aafb57673b3eee56e2ef1fd62f29361b70b2cd45626b4fe172b5e0fd9fb837260cc2f530cfd1562dc0972eeadd27101dc0bb8a293e0e5ddb78a1505d621bf6d13ebec084c15f93072fc465b4c357842d90b338c2"}}]}, 0x164}, 0x1, 0x0, 0x0, 0x4004000}, 0x4040081) 440.875535ms ago: executing program 4 (id=1840): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1f, 0xc, &(0x7f0000000980)=ANY=[], &(0x7f00000009c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000a00)={r3}, 0xc) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x9102}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d40)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x10, 0x1}, {0xa, 0xb}, {0x9, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8044) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', @broadcast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000500), 0x56) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x24dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xf, 0xb}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000b0}, 0x0) sendmsg$kcm(r7, &(0x7f0000000640)={&(0x7f0000000680)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000740)="27030200591114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_int(r1, 0x10f, 0x0, 0x0, 0x0) r12 = socket(0x1f, 0x800, 0x0) sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) getsockname$packet(r12, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r13, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r12], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 371.521979ms ago: executing program 4 (id=1841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xbc}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x8010) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000001000)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000f80)="27030200dc0f14000e0007000024c1020000ff3207c2fb7fe0406e52534b4f6b3d00000000000000892f3c35d5a8", 0x2e}], 0x1}, 0x0) 369.02231ms ago: executing program 1 (id=1842): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001340)=ANY=[@ANYBLOB="5c0100001000010000000000fdfffffffe880000000000000000000000000001ff010000000000000000000000000001000000000000000000000000efffffff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffff050000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000a00000008000000000000001c0017000000000000000000ffffffff0000000000000000040000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500210001"], 0x15c}}, 0x0) 234.024061ms ago: executing program 5 (id=1843): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0xc0189436, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5f, 0x3}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000240)="1a00000002000000", 0x8) setsockopt(r4, 0x84, 0x80, &(0x7f0000000280)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r4, &(0x7f0000000300)="c3", 0x1, 0x40811, &(0x7f00000003c0)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) write(r4, &(0x7f0000000400)="b4db", 0x2) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @dev, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c00000010000000fcffffffffdb000400c6dd00", @ANYRES32=0x0, @ANYBLOB="000000000000000009000100"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000480)={0x0, 0xfffffffffffffe1d, &(0x7f00000004c0)={&(0x7f0000000540)=@newqdisc={0xcc, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2c, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0x672}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x80}, @TCA_HHF_EVICT_TIMEOUT={0x8}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x9}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x9}]}}, @TCA_EGRESS_BLOCK={0x0, 0xe, 0x3}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x7, 0x3, 0x2, 0xfffffffc, 0xff, 0x3}}, {0xa, 0x2, [0x9, 0xd, 0x9]}}, {{0x1c, 0x1, {0xfd, 0xff, 0x0, 0x9, 0x1, 0x7, 0x99, 0x6}}, {0x10, 0x2, [0x5, 0x0, 0x6, 0x6000, 0x6, 0xf2d8]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@getlink={0x4c, 0x12, 0x200, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, 0xa80, 0x1010}, [@IFLA_EVENT={0x8, 0x2c, 0x8}, @IFLA_MAP={0x24, 0xe, {0x0, 0x9, 0x8, 0xc2a6, 0xe, 0x80}}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r5, 0x1040, 0x22900}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x48}}, 0x4040000) 180.211439ms ago: executing program 0 (id=1844): r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000000380)={&(0x7f0000000000)=0x9, 0x9, &(0x7f0000000100)=[{}, {}, {}], &(0x7f0000000340)}) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000000000003a000000000000001800000000000000100100000e000000025f0dc3590000000e728a64edcffb8533aeac3b2933f4c10b5c4f"], 0x28}, 0x0) 179.23487ms ago: executing program 6 (id=1845): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r1, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x80) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000010}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x0, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffc}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8d08}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x4000) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000340)={0x0, 0x0, 0x7, 0x98f3, 0x4, 0x8000}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x29, 0x8, 0x7f, 0x4, 0x18, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast1, 0x7800, 0x8, 0x9e, 0xffffffff}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={@empty, @ipv4={'\x00', '\xff\xff', @local}, @private1, 0x2, 0x9, 0x0, 0x500, 0x7, 0x20200000, r3}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x174, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x108, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xec}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xedb6}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf847}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb61}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl(r0, 0x6, &(0x7f0000000740)="6ec2a0f75faf2e9406817ba57b6c74e7d2a77d2f4c25d721512bbdcb77d6c0c7e2e8dea337f751c598d477ae71caea80fb1b637e105ba7aa8470ec1ae191492d8d6b9f95371e01104f9c6abc3679cbeec2bf1657187ccbf814a217a1a4b81aeab5df4170f8ed7a07e563c30f34440ba69f99323148bddaae6f64ca20182bf72590215304d43d1fec0050a70aace3859ff638c05b7d21ae5b4a5afe5323806f131ed12f5147d84ac2693514b793") syz_genetlink_get_family_id$SEG6(&(0x7f0000000800), r0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000880)={0xffffffffffffffff}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xb4, r5, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xccb}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x3, 0x4, 0xff, 0x0]}, @NL80211_ATTR_FRAME={0x5f, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x4}, @device_b, @device_a, @random="e14746747406", {0x0, 0x5}}, 0x0, 0xfd, {0x0, 0x6, @default_ap_ssid}, @void, @val={0x2d, 0x1a, {0x8, 0x1, 0x1, 0x0, {0x7f, 0x5, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3}, 0x6, 0x8, 0x3}}, [{0xdd, 0x19, "f57db5e5bb6d0a9e310ca45742ad05666d5c8358360d910f3e"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x22, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1c0}, @device_b, @device_a, @random="0cb8b2f1d50e", {0x5, 0x3}, @value=@ver_80211n={0x0, 0x6, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x2a, @void}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r7, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, r8, 0x8, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, 0x140d, 0x200, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000000d00)) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x339ab19aa45e750e}, 0x20044000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000e40)={0x0, r0, 0x9, 0x7fff, 0x9, 0x8001}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r6) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x4c, r10, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x880}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000001080)={'syztnl2\x00', &(0x7f0000001000)={'syztnl0\x00', r3, 0x29, 0x18, 0x7, 0x100, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x20, 0x8000, 0xe}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000010c0)) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001140), r7) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r7, &(0x7f0000001280)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001240)={&(0x7f0000001180)={0x98, r11, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0x98}, 0x1, 0x0, 0x0, 0x2000000c}, 0x20000000) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x14, r5, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000d4}, 0x4040800) 96.515244ms ago: executing program 1 (id=1846): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a98000000060a010400000000000000000a0004050900010073797a31000000006c000480680001800a000100696e6e6572000000580002800800044000000017340005800c0001007061796c6f6164002400028008000340400000920800024000000000080004400000000008000140000000110800034000000002080002400000008408000140000000000900020073797a32"], 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "1d61"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r5, &(0x7f0000000100)="9400000042000100020000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400003c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e0c00030008000c0004000100", 0x94, 0x0, 0x0, 0x0) 70.957098ms ago: executing program 4 (id=1847): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3e, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x43, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x6e, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1200000004000000201200000000000902", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r3, &(0x7f00000005c0), &(0x7f0000000600)=@tcp6=r2}, 0x20) shutdown(r2, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)=""/4119, 0x1017}], 0x1}}], 0x1, 0x40000000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet(0x2, 0x3, 0xa) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000002ac0)={&(0x7f0000002b00)=ANY=[@ANYRESDEC=r6], 0x7c}, 0x1, 0x0, 0x0, 0x24810}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002c00)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000002d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(r5, 0x0, 0x200008d0) sendmsg$NFT_BATCH(r4, &(0x7f00000005c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001740)={&(0x7f0000000480)=ANY=[@ANYRES16, @ANYRES64=r1], 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000017c0)={'lo\x00', 0x0}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r9, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001880)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf25022051fe", @ANYRES32=r11, @ANYBLOB="86b52006007adb85"], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r12, 0x8916, &(0x7f00000018c0)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socket$inet6(0xa, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x39db77225c63fa4c) 0s ago: executing program 0 (id=1848): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="3900000013000b4700bb65e1c3e4ffff0100000040000000560000022500000019000a001000000007fd", 0x2a}], 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0), 0x0, 0x10, &(0x7f0000000c00), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r1, 0x1f00, 0x18, 0x19, &(0x7f0000000cc0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000d00)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000dc0)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000440)={0x40, 0x2, 0x1}, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x30, r3, 0x1c5a7adcb1c518b3, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xffffff4e, 0x803, 0x2}}}}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40002) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0x2}]}, {0x0, [0x0, 0x0, 0x2e, 0x30]}}, 0x0, 0x2a}, 0x28) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0xff85}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000580)={0x0, 0x2800, &(0x7f00000005c0)={&(0x7f0000000600)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112ba000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x4e) kernel console output (not intermixed with test programs): fter parsing attributes in process `syz.2.481'. [ 125.546210][ T7539] netlink: 'syz.0.486': attribute type 11 has an invalid length. [ 125.562334][ T7539] netlink: 'syz.0.486': attribute type 8 has an invalid length. [ 125.568338][ T7539] ip_tables: iptables: counters copy to user failed while replacing table [ 125.735886][ T7549] netlink: 'syz.4.490': attribute type 11 has an invalid length. [ 125.894303][ T7551] bridge0: port 3(bond0) entered blocking state [ 125.894520][ T7551] bridge0: port 3(bond0) entered disabled state [ 125.894834][ T7551] bond0: entered allmulticast mode [ 125.894852][ T7551] bond_slave_0: entered allmulticast mode [ 125.894887][ T7551] bond_slave_1: entered allmulticast mode [ 125.933293][ T7551] bond0: entered promiscuous mode [ 125.933317][ T7551] bond_slave_0: entered promiscuous mode [ 125.961416][ T7551] bond_slave_1: entered promiscuous mode [ 125.982028][ T7551] bridge0: port 3(bond0) entered blocking state [ 125.982170][ T7551] bridge0: port 3(bond0) entered forwarding state [ 126.435769][ T5632] Bluetooth: hci1: unexpected cc 0x2035 length: 2 > 1 [ 126.747577][ T7599] netlink: 'syz.1.502': attribute type 83 has an invalid length. [ 127.361877][ T7634] batman_adv: batadv0: Adding interface: gretap1 [ 127.361900][ T7634] batman_adv: batadv0: The MTU of interface gretap1 is too small (1424) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.361932][ T7634] batman_adv: batadv0: Interface activated: gretap1 [ 127.596682][ T7641] syzkaller0: entered promiscuous mode [ 127.596708][ T7641] syzkaller0: entered allmulticast mode [ 127.606550][ T7641] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 127.738089][ T7653] netlink: 'syz.1.512': attribute type 9 has an invalid length. [ 127.748485][ T7648] netlink: 'syz.2.513': attribute type 2 has an invalid length. [ 128.016686][ T7662] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 128.016800][ T7662] syzkaller1: linktype set to 823 [ 128.263915][ T7679] __nla_validate_parse: 10 callbacks suppressed [ 128.263940][ T7679] netlink: 44 bytes leftover after parsing attributes in process `syz.0.522'. [ 128.264191][ T7680] netlink: 44 bytes leftover after parsing attributes in process `syz.0.522'. [ 128.317958][ T7683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.521'. [ 128.378032][ T7686] netlink: 80 bytes leftover after parsing attributes in process `syz.0.523'. [ 128.759626][ T7710] netlink: 28 bytes leftover after parsing attributes in process `syz.2.531'. [ 128.759667][ T7710] netlink: 28 bytes leftover after parsing attributes in process `syz.2.531'. [ 128.803373][ T7712] syzkaller0: entered promiscuous mode [ 128.803400][ T7712] syzkaller0: entered allmulticast mode [ 128.898696][ T7716] netlink: 24 bytes leftover after parsing attributes in process `syz.2.534'. [ 128.900423][ T7716] netlink: 'syz.2.534': attribute type 1 has an invalid length. [ 128.922684][ T7675] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 129.159890][ T7727] netlink: 80 bytes leftover after parsing attributes in process `syz.1.537'. [ 129.207740][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.539'. [ 129.276003][ T7731] netlink: 48 bytes leftover after parsing attributes in process `syz.2.540'. [ 129.344942][ T7736] netlink: 'syz.1.541': attribute type 12 has an invalid length. [ 129.344965][ T7736] netlink: 'syz.1.541': attribute type 29 has an invalid length. [ 129.344985][ T7736] netlink: 'syz.1.541': attribute type 1 has an invalid length. [ 129.899869][ T7771] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 129.909019][ T7771] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 129.909435][ T7771] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 129.912527][ T7771] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 129.915185][ T7771] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 129.915541][ T7771] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 129.915879][ T7771] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 129.921467][ T7771] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 129.921904][ T7771] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 129.922227][ T7771] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 130.044238][ T7777] netlink: 'syz.1.555': attribute type 12 has an invalid length. [ 130.044263][ T7777] netlink: 'syz.1.555': attribute type 29 has an invalid length. [ 130.044281][ T7777] netlink: 'syz.1.555': attribute type 1 has an invalid length. [ 130.221414][ T5632] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.445114][ T7803] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 130.445133][ T7803] IPv6: NLM_F_CREATE should be set when creating new route [ 130.445165][ T7803] IPv6: NLM_F_CREATE should be set when creating new route [ 130.465948][ T7801] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 130.995447][ T7824] Bluetooth: hci0: unsupported parameter 5135 [ 130.995475][ T7824] Bluetooth: hci0: unsupported parameter 8192 [ 130.995488][ T7824] Bluetooth: hci0: unsupported parameter 5135 [ 130.995500][ T7824] Bluetooth: hci0: unsupported parameter 8192 [ 132.107015][ T7883] validate_nla: 4 callbacks suppressed [ 132.107038][ T7883] netlink: 'syz.4.584': attribute type 30 has an invalid length. [ 132.166863][ T7891] netlink: 'syz.4.584': attribute type 30 has an invalid length. [ 132.730838][ T7950] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 132.730860][ T7950] IPv6: NLM_F_CREATE should be set when creating new route [ 133.573288][ T8038] xt_NETMAP: bad rangesize 37. [ 133.593169][ T8038] netlink: 'syz.1.599': attribute type 1 has an invalid length. [ 133.593192][ T8038] __nla_validate_parse: 49 callbacks suppressed [ 133.593204][ T8038] netlink: 220 bytes leftover after parsing attributes in process `syz.1.599'. [ 134.052164][ T8047] netlink: 'syz.2.602': attribute type 4 has an invalid length. [ 134.103424][ T8047] netlink: 'syz.2.602': attribute type 4 has an invalid length. [ 134.670224][ T8073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.609'. [ 134.722743][ T8077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.609'. [ 134.779310][ T8078] netlink: 24 bytes leftover after parsing attributes in process `syz.3.603'. [ 134.779664][ T8078] netlink: 28 bytes leftover after parsing attributes in process `syz.3.603'. [ 135.001809][ T8090] xfrm1: entered allmulticast mode [ 135.186300][ T8096] batadv0: entered promiscuous mode [ 135.187291][ T8096] macsec1: entered promiscuous mode [ 135.189199][ T8096] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 135.217695][ T8096] batadv0: left promiscuous mode [ 135.303468][ T8102] netlink: 'syz.1.616': attribute type 1 has an invalid length. [ 135.444022][ T8102] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.462377][ T8102] netlink: 'syz.1.616': attribute type 2 has an invalid length. [ 135.474862][ T8108] xt_MASQUERADE: bad rangesize 2147483646 [ 135.574858][ T8105] bond1: (slave gretap2): making interface the new active one [ 135.578889][ T8105] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 135.669519][ T8118] sctp: [Deprecated]: syz.1.622 (pid 8118) Use of int in max_burst socket option deprecated. [ 135.669519][ T8118] Use struct sctp_assoc_value instead [ 135.776857][ T8122] sctp: [Deprecated]: syz.1.622 (pid 8122) Use of int in max_burst socket option deprecated. [ 135.776857][ T8122] Use struct sctp_assoc_value instead [ 135.891642][ T8127] net_ratelimit: 25 callbacks suppressed [ 135.891668][ T8127] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 136.171823][ T8144] netlink: 'syz.0.627': attribute type 5 has an invalid length. [ 136.171845][ T8144] netlink: 'syz.0.627': attribute type 9 has an invalid length. [ 136.171857][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.627'. [ 136.252814][ T8143] x_tables: duplicate underflow at hook 3 [ 136.463556][ T8155] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 136.464286][ T8155] IPv6: NLM_F_CREATE should be set when creating new route [ 136.464342][ T8155] IPv6: NLM_F_CREATE should be set when creating new route [ 136.464366][ T8155] IPv6: NLM_F_CREATE should be set when creating new route [ 136.495257][ T8157] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 136.710187][ T8168] xt_bpf: check failed: parse error [ 136.758790][ T8168] netlink: 96 bytes leftover after parsing attributes in process `syz.0.633'. [ 136.759126][ T8168] 8021q: VLANs not supported on sit0 [ 137.044408][ T8178] netlink: 28 bytes leftover after parsing attributes in process `syz.0.635'. [ 137.044439][ T8178] netlink: 28 bytes leftover after parsing attributes in process `syz.0.635'. [ 137.044455][ T8178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'. [ 137.110839][ T5632] Bluetooth: hci4: command tx timeout [ 137.236727][ T8191] openvswitch: netlink: Duplicate key (type 6). [ 137.279699][ T8191] mac80211_hwsim hwsim3 ÿ: renamed from wlan1 (while UP) [ 137.336913][ T8193] netlink: 'syz.0.640': attribute type 1 has an invalid length. [ 137.364888][ T8197] Bluetooth: MGMT ver 1.23 [ 137.501064][ C1] af_packet: tpacket_rcv: packet too big, clamped from 48 to 4294967272. macoff=96 [ 137.717856][ T94] IPVS: starting estimator thread 0... [ 137.810703][ T8212] IPVS: using max 25 ests per chain, 60000 per kthread [ 137.864579][ T8204] infiniband syz0: set active [ 137.864605][ T8204] infiniband syz0: added veth0_vlan [ 137.894843][ T8204] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 137.894885][ T8204] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 137.894921][ T8204] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 137.944633][ T8204] RDS/IB: syz0: added [ 137.944691][ T8204] smc: adding ib device syz0 with port count 1 [ 137.944710][ T8204] smc: ib device syz0 port 1 has no pnetid [ 138.655722][ T8250] netlink: 'syz.1.654': attribute type 13 has an invalid length. [ 138.864167][ T8257] xt_LOG: prefix is not null-terminated [ 139.561816][ T8283] tipc: Failed to remove unknown binding: 66,1,1/0:3803045501/3803045503 [ 139.923014][ T8294] gre1: entered promiscuous mode [ 139.923043][ T8294] gre1: entered allmulticast mode [ 140.150041][ T8301] __nla_validate_parse: 5 callbacks suppressed [ 140.150064][ T8301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.668'. [ 140.158940][ T8299] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 140.260068][ T8306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.670'. [ 140.408447][ T8315] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 140.896371][ T8324] netlink: 24 bytes leftover after parsing attributes in process `syz.2.676'. [ 141.059821][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.678'. [ 141.355699][ T8348] x_tables: unsorted underflow at hook 3 [ 141.357634][ T8348] ip6t_REJECT: ECHOREPLY is not supported [ 141.537563][ T8354] netlink: 28 bytes leftover after parsing attributes in process `syz.0.684'. [ 141.556315][ T8354] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.557392][ T8354] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.558931][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.686'. [ 141.627013][ T8361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.686'. [ 141.653720][ T5632] block nbd0: Receive control failed (result -107) [ 141.798683][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.690'. [ 141.904545][ T8382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.693'. [ 141.914766][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.693'. [ 141.942876][ T8388] netlink: 'syz.0.694': attribute type 1 has an invalid length. [ 141.985699][ T8388] bond3: entered promiscuous mode [ 141.986369][ T8388] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.006294][ T8388] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.006622][ T8388] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 142.006636][ T8388] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 142.029110][ T8388] bond3: (slave wireguard0): making interface the new active one [ 142.029145][ T8388] wireguard0: entered promiscuous mode [ 142.039856][ T8388] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 142.104609][ T8394] netlink: 'syz.0.694': attribute type 1 has an invalid length. [ 142.129206][ T8394] bond3: (slave wireguard1): The slave device specified does not support setting the MAC address [ 142.155566][ T8394] bond3: (slave wireguard1): Enslaving as a backup interface with an up link [ 142.778000][ T8415] netlink: 'syz.4.700': attribute type 1 has an invalid length. [ 142.971797][ T8415] bond2: entered promiscuous mode [ 142.973023][ T8415] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.467313][ T8445] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20002 [ 144.317779][ T8479] netlink: 'syz.1.721': attribute type 12 has an invalid length. [ 144.317805][ T8479] netlink: 'syz.1.721': attribute type 29 has an invalid length. [ 144.317822][ T8479] netlink: 'syz.1.721': attribute type 1 has an invalid length. [ 144.445678][ T8484] openvswitch: netlink: IPv4 frag type 132 is out of range max 2 [ 144.446034][ T8483] openvswitch: netlink: IPv4 frag type 132 is out of range max 2 [ 147.605602][ T8496] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 147.749038][ T8520] __nla_validate_parse: 8 callbacks suppressed [ 147.749062][ T8520] netlink: 80 bytes leftover after parsing attributes in process `syz.1.733'. [ 147.787611][ T8524] netlink: 'syz.4.734': attribute type 1 has an invalid length. [ 147.857821][ T8524] bond3: option mode: invalid value (9) [ 147.873571][ T8524] bond3 (unregistering): Released all slaves [ 147.875589][ T8530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.737'. [ 147.886545][ T8530] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 147.917729][ T8532] netlink: 'syz.4.734': attribute type 10 has an invalid length. [ 147.917754][ T8532] netlink: 40 bytes leftover after parsing attributes in process `syz.4.734'. [ 147.941964][ T8523] netlink: 'syz.0.735': attribute type 12 has an invalid length. [ 147.941990][ T8523] netlink: 'syz.0.735': attribute type 29 has an invalid length. [ 147.942003][ T8523] netlink: 148 bytes leftover after parsing attributes in process `syz.0.735'. [ 147.942022][ T8523] netlink: 'syz.0.735': attribute type 1 has an invalid length. [ 147.942034][ T8523] netlink: 47 bytes leftover after parsing attributes in process `syz.0.735'. [ 147.944180][ T8533] netlink: 1204 bytes leftover after parsing attributes in process `syz.1.737'. [ 147.996020][ T8527] bridge0: port 3(dummy0) entered disabled state [ 148.003922][ T8527] dummy0: left allmulticast mode [ 148.003968][ T8527] dummy0: left promiscuous mode [ 148.004211][ T8527] bridge0: port 3(dummy0) entered disabled state [ 148.033869][ T8542] netlink: 'syz.4.734': attribute type 1 has an invalid length. [ 148.046458][ T8543] netlink: 'syz.4.734': attribute type 10 has an invalid length. [ 148.046477][ T8543] netlink: 40 bytes leftover after parsing attributes in process `syz.4.734'. [ 148.068795][ T8532] dummy0: entered promiscuous mode [ 148.095225][ T8545] netlink: 112 bytes leftover after parsing attributes in process `syz.0.738'. [ 148.123684][ T8542] bond3: option mode: invalid value (9) [ 148.128000][ T8542] bond3 (unregistering): Released all slaves [ 148.166106][ T8541] dummy0: left promiscuous mode [ 148.170052][ T8543] dummy0: entered promiscuous mode [ 148.210856][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.210902][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.210928][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.210955][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.238329][ T8553] syzkaller0: entered promiscuous mode [ 148.238353][ T8553] syzkaller0: entered allmulticast mode [ 148.369033][ T8561] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 148.389451][ T8560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.741'. [ 148.617492][ T8571] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.745'. [ 148.709892][ T8576] netlink: 'syz.1.748': attribute type 12 has an invalid length. [ 148.709916][ T8576] netlink: 'syz.1.748': attribute type 29 has an invalid length. [ 148.709934][ T8576] netlink: 'syz.1.748': attribute type 1 has an invalid length. [ 148.770242][ T8578] pim6reg: entered allmulticast mode [ 149.017633][ T8599] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 149.095535][ T8596] veth3: entered promiscuous mode [ 149.575252][ T8622] tipc: Enabling of bearer rejected, failed to enable media [ 149.618204][ T8622] dummy0: left promiscuous mode [ 149.641748][ T8622] gre1: left promiscuous mode [ 149.642051][ T8622] bond2: left promiscuous mode [ 149.981092][ T5620] Bluetooth: hci4: command 0x0405 tx timeout [ 150.009766][ T8641] netlink: NAT attribute has 8 unknown bytes [ 150.009804][ T8641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.634831][ T8671] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 150.658039][ T5620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.669394][ T5620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.681858][ T5620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 150.685760][ T5620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.686507][ T5620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 150.888863][ T8686] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 150.888983][ T8686] syzkaller1: linktype set to 769 [ 151.700517][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025e5b400: rx timeout, send abort [ 151.702425][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888025e5b400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 151.725625][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025e5b000: rx timeout, send abort [ 151.725873][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888025e5b000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 151.931219][ T8694] xt_ecn: cannot match TCP bits for non-tcp packets [ 152.780984][ T5620] Bluetooth: hci5: command tx timeout [ 154.101627][ T8707] netlink: NAT attribute has 5 unknown bytes [ 154.101670][ T8707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.167929][ T8715] bond_slave_1: entered allmulticast mode [ 154.456992][ T8675] rxe_eth0 speed is unknown, defaulting to 1000 [ 154.860715][ T5620] Bluetooth: hci5: command tx timeout [ 155.449740][ T8766] validate_nla: 8 callbacks suppressed [ 155.449762][ T8766] netlink: 'syz.0.809': attribute type 12 has an invalid length. [ 155.449777][ T8766] netlink: 'syz.0.809': attribute type 29 has an invalid length. [ 155.449789][ T8766] __nla_validate_parse: 24 callbacks suppressed [ 155.449800][ T8766] netlink: 148 bytes leftover after parsing attributes in process `syz.0.809'. [ 155.449817][ T8766] netlink: 'syz.0.809': attribute type 1 has an invalid length. [ 155.449829][ T8766] netlink: 47 bytes leftover after parsing attributes in process `syz.0.809'. [ 155.573784][ T8771] netlink: 32 bytes leftover after parsing attributes in process `syz.0.811'. [ 156.033279][ T8786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.814'. [ 156.203578][ T8675] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.203700][ T8675] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.203870][ T8675] bridge_slave_0: entered allmulticast mode [ 156.206117][ T8675] bridge_slave_0: entered promiscuous mode [ 156.208767][ T8675] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.208876][ T8675] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.208999][ T8675] bridge_slave_1: entered allmulticast mode [ 156.212033][ T8675] bridge_slave_1: entered promiscuous mode [ 156.279577][ T8675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.292817][ T8793] netlink: 'syz.0.815': attribute type 2 has an invalid length. [ 156.308430][ T8675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.341690][ T8794] netlink: 'syz.0.815': attribute type 2 has an invalid length. [ 156.416527][ T8675] team0: Port device team_slave_0 added [ 156.429903][ T8675] team0: Port device team_slave_1 added [ 156.478303][ T8675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.478323][ T8675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.478345][ T8675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.528127][ T8675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.528146][ T8675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.528172][ T8675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.752233][ T8675] hsr_slave_0: entered promiscuous mode [ 156.753612][ T8675] hsr_slave_1: entered promiscuous mode [ 156.754600][ T8675] debugfs: 'hsr0' already exists in 'hsr' [ 156.754621][ T8675] Cannot create hsr debugfs directory [ 156.901012][ T8812] netlink: 58 bytes leftover after parsing attributes in process `syz.1.820'. [ 156.940794][ T5620] Bluetooth: hci5: command tx timeout [ 157.135387][ T8821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.824'. [ 157.203009][ T8675] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 157.222188][ T8675] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 157.224661][ T8675] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 157.247665][ T8675] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 157.248687][ T8675] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 157.270609][ T8675] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 157.273255][ T8675] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 157.295679][ T8675] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 157.540745][ T8675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.581615][ T8675] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.605110][ T6626] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.605233][ T6626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.629795][ T1010] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.629919][ T1010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.411871][ T8884] ip_tables: iptables: counters copy to user failed while replacing table [ 158.413306][ T8883] ip_tables: iptables: counters copy to user failed while replacing table [ 158.737614][ T8675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.020769][ T5620] Bluetooth: hci5: command tx timeout [ 159.336190][ T8919] dvmrp1: entered allmulticast mode [ 159.343579][ T8918] netlink: 'syz.4.845': attribute type 10 has an invalid length. [ 159.381828][ T8918] : Device veth0_macvtap failed to register rx_handler [ 159.432603][ T8675] veth0_vlan: entered promiscuous mode [ 159.436432][ T8924] netlink: 'syz.4.845': attribute type 10 has an invalid length. [ 159.452019][ T8924] : Device veth0_macvtap failed to register rx_handler [ 159.494316][ T8675] veth1_vlan: entered promiscuous mode [ 159.558314][ T8675] veth0_macvtap: entered promiscuous mode [ 159.575658][ T8675] veth1_macvtap: entered promiscuous mode [ 159.619186][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.850'. [ 159.630655][ T8675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.649540][ T8675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.712560][ T8936] batman_adv: batadv0: Adding interface: syzkaller0 [ 159.712581][ T8936] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (299) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.712611][ T8936] batman_adv: batadv0: Interface activated: syzkaller0 [ 159.852349][ T1010] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.852404][ T1010] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.852458][ T1010] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.852490][ T1010] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.933255][ T8942] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 159.947245][ T1010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.947266][ T1010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.036181][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.036206][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.645548][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.5.866'. [ 160.645589][ T8976] netlink: 48 bytes leftover after parsing attributes in process `syz.5.866'. [ 160.651680][ T8979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.692807][ T8976] geneve2: entered promiscuous mode [ 160.692833][ T8976] geneve2: entered allmulticast mode [ 160.989912][ T8994] sctp: [Deprecated]: syz.1.870 (pid 8994) Use of struct sctp_assoc_value in delayed_ack socket option. [ 160.989912][ T8994] Use struct sctp_sack_info instead [ 161.049211][ T8996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.871'. [ 161.110936][ T9003] netlink: 12 bytes leftover after parsing attributes in process `syz.5.874'. [ 161.118429][ T8999] netlink: 36 bytes leftover after parsing attributes in process `syz.1.872'. [ 161.629915][ T9031] IPv6: addrconf: prefix option has invalid lifetime [ 161.774289][ T9039] netlink: 'syz.1.885': attribute type 2 has an invalid length. [ 161.785601][ T9039] netlink: 'syz.1.885': attribute type 1 has an invalid length. [ 161.859224][ T9044] netlink: 'syz.0.887': attribute type 4 has an invalid length. [ 161.896562][ T9043] netlink: 'syz.0.887': attribute type 4 has an invalid length. [ 161.935887][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.888'. [ 161.955075][ T9050] netlink: 224 bytes leftover after parsing attributes in process `syz.4.888'. [ 161.957753][ T9043] netlink: 16 bytes leftover after parsing attributes in process `syz.0.887'. [ 161.957790][ T9043] netlink: 16 bytes leftover after parsing attributes in process `syz.0.887'. [ 161.994121][ T9050] netdevsim netdevsim4: Firmware load for './file0/file0/..' refused, path contains '..' component [ 162.327208][ T9073] netlink: 224 bytes leftover after parsing attributes in process `syz.4.891'. [ 162.390227][ T9077] netlink: 'syz.1.894': attribute type 12 has an invalid length. [ 162.390252][ T9077] netlink: 'syz.1.894': attribute type 29 has an invalid length. [ 162.390270][ T9077] netlink: 'syz.1.894': attribute type 1 has an invalid length. [ 162.695267][ T9082] batman_adv: batadv0: Adding interface: gretap1 [ 162.695288][ T9082] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.695317][ T9082] batman_adv: batadv0: Interface activated: gretap1 [ 162.901733][ T9089] netlink: 'syz.5.899': attribute type 83 has an invalid length. [ 162.957570][ T9091] netlink: 'syz.5.900': attribute type 12 has an invalid length. [ 162.957588][ T9091] netlink: 'syz.5.900': attribute type 29 has an invalid length. [ 163.119771][ T9095] bond3: entered promiscuous mode [ 163.119798][ T9095] bond3: entered allmulticast mode [ 164.115113][ T9152] batadv0: entered promiscuous mode [ 164.115290][ T9152] macsec1: entered promiscuous mode [ 164.117206][ T9152] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 164.118499][ T9152] batadv0: left promiscuous mode [ 166.539010][ T9119] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 166.806248][ T9169] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 166.943859][ T9177] __nla_validate_parse: 13 callbacks suppressed [ 166.943884][ T9177] netlink: 80 bytes leftover after parsing attributes in process `syz.0.931'. [ 167.130173][ T9183] tipc: Can't bind to reserved service type 2 [ 167.384977][ T9194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.939'. [ 167.749085][ T9210] tipc: Enabled bearer , priority 10 [ 167.756418][ T9210] netlink: 'syz.4.945': attribute type 11 has an invalid length. [ 167.758306][ T9211] netlink: 'syz.4.945': attribute type 11 has an invalid length. [ 167.769640][ T9209] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 167.779747][ T9209] netlink: 28 bytes leftover after parsing attributes in process `syz.0.946'. [ 167.815123][ T9213] netlink: 80 bytes leftover after parsing attributes in process `syz.5.944'. [ 168.041348][ T9218] Cannot find del_set index 4 as target [ 168.353186][ T9224] TCP: TCP_TX_DELAY enabled [ 168.407788][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.949'. [ 168.638351][ T9232] netlink: 28 bytes leftover after parsing attributes in process `syz.5.951'. [ 169.028944][ T9244] validate_nla: 6 callbacks suppressed [ 169.028968][ T9244] netlink: 'syz.4.957': attribute type 1 has an invalid length. [ 169.064882][ T9247] netlink: 'syz.5.956': attribute type 3 has an invalid length. [ 169.165999][ T9244] bond4: entered promiscuous mode [ 169.166495][ T9244] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.167691][ T9244] netlink: 'syz.4.957': attribute type 1 has an invalid length. [ 169.167976][ T9244] netlink: 'syz.4.957': attribute type 1 has an invalid length. [ 169.168241][ T9244] netlink: 'syz.4.957': attribute type 1 has an invalid length. [ 169.168569][ T9244] netlink: 'syz.4.957': attribute type 1 has an invalid length. [ 169.169112][ T9244] netlink: 'syz.4.957': attribute type 1 has an invalid length. [ 169.169450][ T9244] netlink: 'syz.4.957': attribute type 1 has an invalid length. [ 169.169863][ T9244] netlink: 'syz.4.957': attribute type 1 has an invalid length. [ 169.170111][ T9244] netlink: 'syz.4.957': attribute type 1 has an invalid length. [ 169.354789][ T9255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.958'. [ 169.354813][ T9255] netlink: 80 bytes leftover after parsing attributes in process `syz.0.958'. [ 169.354827][ T9255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.958'. [ 169.355137][ T9255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.958'. [ 170.194363][ T9275] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 170.334037][ T5632] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 170.336674][ T5632] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 170.337666][ T5632] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 170.339989][ T5632] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 170.384671][ T5632] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 170.781802][ T9292] dvmrp1: entered allmulticast mode [ 171.429122][ T9311] bond0: option miimon: invalid value (18446744071829782528) [ 171.429170][ T9311] bond0: option miimon: allowed values 0 - 2147483647 [ 171.572104][ T9325] Cannot find add_set index 34 as target [ 171.577324][ T9326] Cannot find add_set index 34 as target [ 171.646013][ T9320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.033525][ T9340] __nla_validate_parse: 196 callbacks suppressed [ 172.033548][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.985'. [ 172.255660][ T9343] vlan2: entered allmulticast mode [ 172.255683][ T9343] veth1_virt_wifi: entered allmulticast mode [ 172.341049][ T9276] rxe_eth0 speed is unknown, defaulting to 1000 [ 172.461232][ T5620] Bluetooth: hci6: command tx timeout [ 172.637673][ T9347] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.989'. [ 172.683057][ T9349] netlink: 12 bytes leftover after parsing attributes in process `syz.5.988'. [ 172.737267][ T9347] Bluetooth: hci0: load_link_keys: too big key_count value 5120 [ 172.758758][ T9349] netlink: 28 bytes leftover after parsing attributes in process `syz.5.988'. [ 173.270014][ T9374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.995'. [ 173.499418][ T9379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.996'. [ 173.850902][ T9387] syzkaller0: entered promiscuous mode [ 173.851139][ T9387] syzkaller0: entered allmulticast mode [ 173.941391][ T9395] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1001'. [ 174.098512][ T9399] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1004'. [ 174.125246][ T9390] netlink: 14 bytes leftover after parsing attributes in process `syz.0.999'. [ 174.145469][ T9401] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1004'. [ 174.266896][ T9406] openvswitch: netlink: EtherType 101 is less than min 600 [ 174.338991][ T9408] netlink: NAT attribute has 8 unknown bytes [ 174.339033][ T9408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.371146][ T9408] validate_nla: 57 callbacks suppressed [ 174.371170][ T9408] netlink: 'syz.4.1005': attribute type 2 has an invalid length. [ 174.541243][ T5620] Bluetooth: hci6: command tx timeout [ 175.678309][ T9276] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.680462][ T9276] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.695215][ T9276] bridge_slave_0: entered allmulticast mode [ 175.715004][ T9276] bridge_slave_0: entered promiscuous mode [ 175.853327][ T9456] netlink: 'syz.5.1016': attribute type 5 has an invalid length. [ 176.267317][ T9276] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.267878][ T9276] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.268210][ T9276] bridge_slave_1: entered allmulticast mode [ 176.277060][ T9276] bridge_slave_1: entered promiscuous mode [ 176.572519][ T9276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.601906][ T9276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.621853][ T5620] Bluetooth: hci6: command tx timeout [ 176.678521][ T9276] team0: Port device team_slave_0 added [ 176.687710][ T9276] team0: Port device team_slave_1 added [ 176.889186][ T9276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.889205][ T9276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.889228][ T9276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.937669][ T9276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.937687][ T9276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.937711][ T9276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.008626][ T9494] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 177.008673][ T9494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.157208][ T9276] hsr_slave_0: entered promiscuous mode [ 177.158604][ T9276] hsr_slave_1: entered promiscuous mode [ 177.172486][ T9276] debugfs: 'hsr0' already exists in 'hsr' [ 177.172512][ T9276] Cannot create hsr debugfs directory [ 177.260972][ T9498] ipt_REJECT: TCP_RESET invalid for non-tcp [ 178.079177][ T9520] syzkaller0: entered promiscuous mode [ 178.079202][ T9520] syzkaller0: entered allmulticast mode [ 178.097173][ T9520] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 178.378794][ T9526] __nla_validate_parse: 3 callbacks suppressed [ 178.378817][ T9526] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1032'. [ 178.413344][ T9526] netlink: 3784 bytes leftover after parsing attributes in process `syz.4.1032'. [ 178.419295][ T9526] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1032'. [ 178.481600][ T9510] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1027'. [ 178.701655][ T5620] Bluetooth: hci6: command tx timeout [ 178.874863][ T9276] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 178.909745][ T9276] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 178.923001][ T9276] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 179.017990][ T9276] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 179.019539][ T9536] tipc: Enabling of bearer rejected, failed to enable media [ 179.020371][ T9276] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 179.124972][ T9276] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 179.132323][ T9276] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 179.237463][ T9276] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 179.418109][ T9566] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1041'. [ 179.419530][ T9566] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1041'. [ 179.454379][ T9566] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1041'. [ 179.454602][ T9566] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1041'. [ 179.454835][ T9566] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1041'. [ 179.455051][ T9566] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1041'. [ 179.927183][ T9276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.991157][ T9276] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.023479][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.023596][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.079486][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.079595][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.845137][ T5619] hid-generic 0005:8A54:0005.0001: item fetching failed at offset 0/1 [ 180.846159][ T5619] hid-generic 0005:8A54:0005.0001: probe with driver hid-generic failed with error -22 [ 181.162619][ T9608] FAULT_INJECTION: forcing a failure. [ 181.162619][ T9608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.162652][ T9608] CPU: 0 UID: 0 PID: 9608 Comm: syz.5.1048 Not tainted syzkaller #0 PREEMPT(full) [ 181.162675][ T9608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 181.162687][ T9608] Call Trace: [ 181.162695][ T9608] [ 181.162704][ T9608] dump_stack_lvl+0xe8/0x150 [ 181.162737][ T9608] should_fail_ex+0x410/0x560 [ 181.162771][ T9608] _copy_from_user+0x2d/0xb0 [ 181.162801][ T9608] ___sys_sendmsg+0x1c6/0x360 [ 181.162821][ T9608] ? __lock_acquire+0x747/0x2de0 [ 181.162849][ T9608] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.162877][ T9608] ? kstrtouint+0x6e/0xe0 [ 181.162931][ T9608] ? __fget_files+0x2a/0x420 [ 181.162949][ T9608] ? __fget_files+0x3a2/0x420 [ 181.162980][ T9608] __sys_sendmmsg+0x273/0x4d0 [ 181.163007][ T9608] ? __pfx___sys_sendmmsg+0x10/0x10 [ 181.163038][ T9608] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 181.163077][ T9608] ? ksys_write+0x242/0x270 [ 181.163101][ T9608] ? __pfx_ksys_write+0x10/0x10 [ 181.163129][ T9608] __x64_sys_sendmmsg+0xa0/0xc0 [ 181.163152][ T9608] do_syscall_64+0x166/0x520 [ 181.163174][ T9608] ? trace_irq_disable+0x3b/0x140 [ 181.163200][ T9608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.163220][ T9608] ? clear_bhb_loop+0x70/0xc0 [ 181.163245][ T9608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.163264][ T9608] RIP: 0033:0x7f37d5d9e559 [ 181.163284][ T9608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.163299][ T9608] RSP: 002b:00007f37d6c50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 181.163322][ T9608] RAX: ffffffffffffffda RBX: 00007f37d6026090 RCX: 00007f37d5d9e559 [ 181.163336][ T9608] RDX: 0000000000000002 RSI: 0000200000000200 RDI: 0000000000000003 [ 181.163348][ T9608] RBP: 00007f37d6c50090 R08: 0000000000000000 R09: 0000000000000000 [ 181.163360][ T9608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.163371][ T9608] R13: 00007f37d6026128 R14: 00007f37d6026090 R15: 00007fff444d1968 [ 181.163404][ T9608] [ 181.735964][ T9598] infiniband syz1: set down [ 181.738100][ T9598] infiniband syz1: added ipvlan1 [ 181.759509][ T9598] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 181.765987][ T9598] infiniband syz1: Couldn't open port 1 [ 181.766287][ T9598] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 181.766317][ T9598] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 181.766355][ T9598] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 181.889414][ T9598] RDS/IB: syz1: added [ 181.889476][ T9598] smc: adding ib device syz1 with port count 1 [ 181.889497][ T9598] smc: ib device syz1 port 1 has no pnetid [ 181.993000][ T9629] netlink: 'syz.5.1053': attribute type 1 has an invalid length. [ 182.158755][ T9629] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.248946][ T9628] syzkaller0: entered promiscuous mode [ 182.249193][ T9628] syzkaller0: entered allmulticast mode [ 182.437464][ T9624] bond1: (slave veth0_to_bond): making interface the new active one [ 182.468683][ T9624] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 182.598082][ T9629] bond1: entered promiscuous mode [ 182.598107][ T9629] veth0_to_bond: entered promiscuous mode [ 182.598356][ T9629] bond1: entered allmulticast mode [ 182.598369][ T9629] veth0_to_bond: entered allmulticast mode [ 182.822791][ T9276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.938598][ T9276] veth0_vlan: entered promiscuous mode [ 183.978415][ T9276] veth1_vlan: entered promiscuous mode [ 184.052420][ T5620] Bluetooth: hci2: connection err: -111 [ 184.120433][ T9276] veth0_macvtap: entered promiscuous mode [ 184.142697][ T9276] veth1_macvtap: entered promiscuous mode [ 184.204617][ T9276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.264336][ T9276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.327435][ T1010] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.327943][ T1010] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.331408][ T94] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.341688][ T43] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.877966][ T6626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.877991][ T6626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.881011][ T9678] __nla_validate_parse: 28 callbacks suppressed [ 184.881032][ T9678] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1065'. [ 184.977921][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.977947][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.342176][ T9691] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1070'. [ 185.404300][ T9696] netlink: 576 bytes leftover after parsing attributes in process `syz.4.1068'. [ 185.510072][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1070'. [ 185.510362][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1070'. [ 185.536403][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1070'. [ 185.536686][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1070'. [ 185.537076][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1070'. [ 185.537349][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1070'. [ 185.537651][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1070'. [ 186.901143][ T9735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.935967][ T9735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.936669][ T9735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.941090][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.964626][ T9735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.964953][ T9735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.965308][ T9735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.015186][ T9735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.015581][ T9735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.015860][ T9735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.147853][ T9736] veth0: entered promiscuous mode [ 187.745133][ T9758] syzkaller0: entered promiscuous mode [ 187.745159][ T9758] syzkaller0: entered allmulticast mode [ 187.817912][ T9748] veth0: left promiscuous mode [ 188.847530][ T9796] netlink: 'syz.5.1101': attribute type 10 has an invalid length. [ 188.892862][ T9796] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 189.353193][ T9819] netlink: 'syz.5.1106': attribute type 10 has an invalid length. [ 190.327212][ T9850] __nla_validate_parse: 34 callbacks suppressed [ 190.327238][ T9850] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1114'. [ 190.585662][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1115'. [ 190.643593][ T9853] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1115'. [ 191.910582][ C1] net_ratelimit: 126 callbacks suppressed [ 191.910608][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.911259][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.142298][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.206880][ T9884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.476019][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1127'. [ 192.708188][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.141438][ T9920] syzkaller0: entered promiscuous mode [ 193.141463][ T9920] syzkaller0: entered allmulticast mode [ 193.169419][ T9920] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress) [ 193.183661][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.184422][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.344582][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.465172][ T9929] ip_tables: iptables: counters copy to user failed while replacing table [ 193.504382][ T9926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1136'. [ 193.512943][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1136'. [ 193.513427][ T9929] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1138'. [ 193.530421][ T9929] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1138'. [ 193.566341][ T9924] Bluetooth: hci0: unsupported parameter 5134 [ 193.566368][ T9924] Bluetooth: hci0: unsupported parameter 8192 [ 193.566382][ T9924] Bluetooth: hci0: unsupported parameter 5134 [ 193.566393][ T9924] Bluetooth: hci0: unsupported parameter 8192 [ 193.569410][ T9926] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.787313][ T9958] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1145'. [ 195.181659][ T9914] netlink: 'syz.1.1132': attribute type 1 has an invalid length. [ 195.278049][ T9914] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.453115][ T9916] bond2: (slave geneve3): making interface the new active one [ 195.458903][ T9916] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 195.518644][ T9916] syz.1.1132 (9916) used greatest stack depth: 19040 bytes left [ 197.000026][T10000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1155'. [ 197.046721][T10002] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1155'. [ 197.182766][ T25] net_ratelimit: 17 callbacks suppressed [ 197.182790][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.199269][T10005] syzkaller1: entered allmulticast mode [ 197.342537][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.438168][T10012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1159'. [ 197.509795][T10011] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1159'. [ 197.529996][T10018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.532943][T10011] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1159'. [ 197.556833][T10018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.557485][T10018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.562939][T10018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.563163][T10018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.563509][T10018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.563790][T10018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.571512][T10018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.759728][T10022] netlink: 'syz.5.1161': attribute type 12 has an invalid length. [ 197.759754][T10022] netlink: 'syz.5.1161': attribute type 29 has an invalid length. [ 197.759766][T10022] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1161'. [ 197.759783][T10022] netlink: 'syz.5.1161': attribute type 1 has an invalid length. [ 197.759795][T10022] netlink: 47 bytes leftover after parsing attributes in process `syz.5.1161'. [ 197.950042][T10027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1163'. [ 198.080818][T10031] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1164'. [ 198.763476][T10050] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1169'. [ 198.769534][T10054] netlink: 'syz.4.1170': attribute type 97 has an invalid length. [ 198.769562][T10054] netlink: 'syz.4.1170': attribute type 97 has an invalid length. [ 201.126807][T10104] 8021q: adding VLAN 0 to HW filter on device bond3 [ 201.128311][T10104] bridge0: port 3(bond3) entered blocking state [ 201.131020][T10104] bridge0: port 3(bond3) entered disabled state [ 201.131218][T10104] bond3: entered allmulticast mode [ 201.178782][T10104] bond3: entered promiscuous mode [ 201.194577][T10104] bridge0: port 3(bond3) entered blocking state [ 201.194711][T10104] bridge0: port 3(bond3) entered forwarding state [ 201.368210][T10124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.885134][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.885182][ T5627] Bluetooth: hci2: command 0x0406 tx timeout [ 201.885259][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 201.885286][ T5627] Bluetooth: hci1: command 0x0406 tx timeout [ 201.968774][ T6624] bridge0: port 3(bond3) entered disabled state [ 202.782075][ T5625] net_ratelimit: 123 callbacks suppressed [ 202.782099][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.006440][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.091029][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.541795][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.558850][ T5620] Bluetooth: hci4: ISO packet too small [ 203.565027][ T5620] Bluetooth: hci4: ISO packet too small [ 203.577765][T10091] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 203.577794][T10091] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 203.799211][T10091] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 203.799327][T10091] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 203.826167][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.849827][T10091] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 203.849854][T10091] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 203.888031][T10091] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 203.888060][T10091] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 203.933095][T10091] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 203.933121][T10091] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 204.041160][T10140] __nla_validate_parse: 72 callbacks suppressed [ 204.041183][T10140] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1191'. [ 204.046119][T10146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1194'. [ 204.117178][T10151] x_tables: duplicate underflow at hook 2 [ 204.150431][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.174176][T10154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.174406][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.348666][ T1010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.359880][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.871280][T10164] team0: Cannot enslave team device to itself [ 205.339619][T10091] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 205.339649][T10091] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 205.738789][T10204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1206'. [ 205.739016][T10204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1206'. [ 205.739192][T10204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1206'. [ 205.739382][T10204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1206'. [ 205.739590][T10204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1206'. [ 205.739900][T10204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1206'. [ 205.740104][T10204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1206'. [ 205.835177][T10091] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 205.835202][T10091] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 205.868505][T10204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1206'. [ 206.894512][T10234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.976317][T10234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.002211][T10234] bond0 (unregistering): Released all slaves [ 207.791131][ C1] net_ratelimit: 59 callbacks suppressed [ 207.791159][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.791350][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.791467][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.966729][T10273] netlink: 'syz.5.1219': attribute type 8 has an invalid length. [ 208.043375][T10241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.064455][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.303756][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.211725][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.213212][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.298891][T10301] lo: entered allmulticast mode [ 209.588063][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.655366][T10299] lo: left allmulticast mode [ 209.666467][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.842675][T10314] __nla_validate_parse: 66 callbacks suppressed [ 209.842701][T10314] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1229'. [ 209.850372][T10314] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1229'. [ 210.199450][T10320] tipc: Enabling of bearer rejected, already enabled [ 210.629249][T10333] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1235'. [ 210.801846][T10344] netlink: 'syz.4.1238': attribute type 5 has an invalid length. [ 211.742635][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1244'. [ 212.281052][T10381] 8021q: adding VLAN 0 to HW filter on device bond4 [ 212.409156][T10387] 8021q: adding VLAN 0 to HW filter on device bond5 [ 212.907634][T10416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1255'. [ 212.942483][ T190] net_ratelimit: 8 callbacks suppressed [ 212.942509][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.943304][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.038900][T10418] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.129738][T10421] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1259'. [ 213.363307][T10433] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1263'. [ 213.477794][T10439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1264'. [ 213.524114][ C0] vcan0: j1939_session_tx_dat: 0xffff88804e08b800: queue data error: -100 [ 213.661806][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.756861][T10454] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1268'. [ 213.779179][T10454] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1268'. [ 213.828774][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.012679][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.013552][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.021952][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.022903][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.121346][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.248760][T10495] __nla_validate_parse: 2 callbacks suppressed [ 215.248783][T10495] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1274'. [ 215.394447][T10495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1274'. [ 215.751436][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.553870][ T94] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.554995][ T94] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.555034][ T94] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.555069][ T94] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.479261][T10565] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1291'. [ 217.596950][T10567] netlink: 'syz.5.1292': attribute type 23 has an invalid length. [ 217.599441][T10565] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1291'. [ 217.600268][T10567] netlink: 'syz.5.1292': attribute type 23 has an invalid length. [ 217.657986][T10565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1291'. [ 217.824349][T10581] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1295'. [ 217.880757][T10565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1291'. [ 217.913590][ T31] audit: type=1107 audit(1792151613.260:2): pid=10591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='˜¡ Ÿý±»KZ$ù [ 217.913590][ T31] 8Nt +Lo÷‹9 [ 217.913590][ T31] `!ÑÂb Çm;Z?e¬U.ÎF²Irhí¤•Ù»x|_Ú`/_/V³B6 µ›E›œºsz¬ã¾oÿƒÝ…÷¹¨°ÛǬ Eeÿ7Z¬Óú_uÓ˾òð~)ÅâÔ³¡ ÜâÌ=¼~y$.4ÒúôIzß©öƒ}2†©G&—f%²Rå³Ý{½¸·Gó‰Zû'9 [ 217.913590][ T31] ï;Å' [ 218.150124][ T5729] net_ratelimit: 1081 callbacks suppressed [ 218.150152][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.153123][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.173164][T10595] pim6reg: entered allmulticast mode [ 218.173973][T10594] veth1_to_hsr: entered allmulticast mode [ 218.174694][T10596] pim6reg: left allmulticast mode [ 218.175343][T10596] veth1_to_hsr: left allmulticast mode [ 218.521620][T10612] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1302'. [ 218.542476][T10612] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.782136][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.884387][T10639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.884706][T10639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.885005][T10639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.888756][T10640] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1309'. [ 218.889212][T10639] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1309'. [ 218.891793][T10635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.949518][T10635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.150410][T10644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.198021][T10644] FAULT_INJECTION: forcing a failure. [ 219.198021][T10644] name failslab, interval 1, probability 0, space 0, times 0 [ 219.198057][T10644] CPU: 1 UID: 0 PID: 10644 Comm: syz.6.1312 Not tainted syzkaller #0 PREEMPT(full) [ 219.198078][T10644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 219.198090][T10644] Call Trace: [ 219.198099][T10644] [ 219.198108][T10644] dump_stack_lvl+0xe8/0x150 [ 219.198143][T10644] should_fail_ex+0x410/0x560 [ 219.198176][T10644] should_failslab+0xa8/0x100 [ 219.198205][T10644] __kmalloc_cache_noprof+0xa3/0x600 [ 219.198229][T10644] ? sctp_datamsg_from_user+0x88/0xef0 [ 219.198253][T10644] ? sctp_datamsg_from_user+0x88/0xef0 [ 219.198284][T10644] sctp_datamsg_from_user+0x88/0xef0 [ 219.198308][T10644] ? look_up_lock_class+0x57/0x110 [ 219.198331][T10644] ? register_lock_class+0x31/0x2e0 [ 219.198349][T10644] ? lock_acquire+0x115/0x350 [ 219.198377][T10644] ? __lock_acquire+0x747/0x2de0 [ 219.198405][T10644] sctp_sendmsg_to_asoc+0xfd4/0x19a0 [ 219.198447][T10644] ? do_raw_spin_lock+0x12b/0x2f0 [ 219.198477][T10644] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 219.198501][T10644] ? sctp_sendmsg+0xbb8/0x2d00 [ 219.198522][T10644] ? sctp_sendmsg_check_sflags+0x18a/0x330 [ 219.198547][T10644] sctp_sendmsg+0x1bb5/0x2d00 [ 219.198583][T10644] ? __pfx_sctp_sendmsg+0x10/0x10 [ 219.198629][T10644] ? aa_sock_msg_perm+0xf5/0x210 [ 219.198656][T10644] ? sock_rps_record_flow+0x19/0x350 [ 219.198687][T10644] ? inet_sendmsg+0x298/0x320 [ 219.198710][T10644] ? apparmor_socket_sendmsg+0x98/0x360 [ 219.198737][T10644] ? __pfx_inet_sendmsg+0x10/0x10 [ 219.198762][T10644] sock_sendmsg_nosec+0x10e/0x180 [ 219.198792][T10644] ____sys_sendmsg+0x54e/0x850 [ 219.198819][T10644] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.198861][T10644] ? import_iovec+0x73/0xa0 [ 219.198894][T10644] ___sys_sendmsg+0x2a5/0x360 [ 219.198914][T10644] ? __lock_acquire+0x747/0x2de0 [ 219.198940][T10644] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.198967][T10644] ? kstrtouint+0x6e/0xe0 [ 219.199020][T10644] ? __fget_files+0x2a/0x420 [ 219.199043][T10644] ? __fget_files+0x3a2/0x420 [ 219.199073][T10644] __sys_sendmmsg+0x273/0x4d0 [ 219.199101][T10644] ? __pfx___sys_sendmmsg+0x10/0x10 [ 219.199133][T10644] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 219.199173][T10644] ? ksys_write+0x242/0x270 [ 219.199196][T10644] ? __pfx_ksys_write+0x10/0x10 [ 219.199224][T10644] __x64_sys_sendmmsg+0xa0/0xc0 [ 219.199248][T10644] do_syscall_64+0x166/0x520 [ 219.199270][T10644] ? trace_irq_disable+0x3b/0x140 [ 219.199290][T10644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.199310][T10644] ? clear_bhb_loop+0x70/0xc0 [ 219.199334][T10644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.199353][T10644] RIP: 0033:0x7fae9d99e559 [ 219.199372][T10644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.199388][T10644] RSP: 002b:00007fae9e8c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 219.199410][T10644] RAX: ffffffffffffffda RBX: 00007fae9dc25fa0 RCX: 00007fae9d99e559 [ 219.199424][T10644] RDX: 0000000000000002 RSI: 0000200000000200 RDI: 0000000000000003 [ 219.199436][T10644] RBP: 00007fae9e8c3090 R08: 0000000000000000 R09: 0000000000000000 [ 219.199448][T10644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.199459][T10644] R13: 00007fae9dc26038 R14: 00007fae9dc25fa0 R15: 00007ffe3bd97008 [ 219.199493][T10644] [ 223.342308][ T5729] net_ratelimit: 67 callbacks suppressed [ 223.342334][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.343898][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.902421][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.063097][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.382540][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.383130][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.721310][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.345453][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.347579][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.424496][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.542622][ T190] net_ratelimit: 8 callbacks suppressed [ 228.542647][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.544356][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.581952][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.582658][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.981426][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.141493][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.623320][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.625278][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.662698][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.663479][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.742834][ T5729] net_ratelimit: 4 callbacks suppressed [ 233.742859][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.743625][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.301392][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.782622][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.784211][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.941966][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.822858][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.823612][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.061329][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.862476][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.941740][ T190] net_ratelimit: 5 callbacks suppressed [ 238.941764][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.944342][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.101588][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.982313][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.982902][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.207834][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.381417][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.704313][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.022245][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.022871][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.375585][T10683] FAULT_INJECTION: forcing a failure. [ 242.375585][T10683] name failslab, interval 1, probability 0, space 0, times 0 [ 242.375623][T10683] CPU: 1 UID: 0 PID: 10683 Comm: syz.0.1323 Not tainted syzkaller #0 PREEMPT(full) [ 242.375646][T10683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 242.375657][T10683] Call Trace: [ 242.375665][T10683] [ 242.375677][T10683] dump_stack_lvl+0xe8/0x150 [ 242.375712][T10683] should_fail_ex+0x410/0x560 [ 242.375743][T10683] ? __alloc_skb+0x1db/0x7a0 [ 242.375769][T10683] should_failslab+0xa8/0x100 [ 242.375797][T10683] ? __alloc_skb+0x1db/0x7a0 [ 242.375823][T10683] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 242.375845][T10683] ? __alloc_skb+0x18d/0x7a0 [ 242.375872][T10683] ? __alloc_skb+0x1db/0x7a0 [ 242.375906][T10683] __alloc_skb+0x1db/0x7a0 [ 242.375938][T10683] _sctp_make_chunk+0x59/0x290 [ 242.375970][T10683] sctp_make_datafrag_empty+0x12a/0x240 [ 242.375996][T10683] ? __kasan_kmalloc+0x93/0xb0 [ 242.376022][T10683] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 242.376049][T10683] ? sctp_datamsg_from_user+0x88/0xef0 [ 242.376072][T10683] ? sctp_datamsg_from_user+0x88/0xef0 [ 242.376095][T10683] ? sctp_auth_send_cid+0x69/0x250 [ 242.376126][T10683] sctp_datamsg_from_user+0x735/0xef0 [ 242.376173][T10683] sctp_sendmsg_to_asoc+0xfd4/0x19a0 [ 242.376213][T10683] ? __pfx___lock_sock+0x10/0x10 [ 242.376236][T10683] ? do_raw_spin_lock+0x12b/0x2f0 [ 242.376267][T10683] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 242.376292][T10683] ? sctp_sendmsg+0xbb8/0x2d00 [ 242.376313][T10683] ? sctp_sendmsg_check_sflags+0x18a/0x330 [ 242.376338][T10683] sctp_sendmsg+0x1bb5/0x2d00 [ 242.376382][T10683] ? __pfx_sctp_sendmsg+0x10/0x10 [ 242.376426][T10683] ? aa_sock_msg_perm+0xf5/0x210 [ 242.376453][T10683] ? sock_rps_record_flow+0x19/0x350 [ 242.376482][T10683] ? inet_sendmsg+0x298/0x320 [ 242.376506][T10683] ? apparmor_socket_sendmsg+0x98/0x360 [ 242.376533][T10683] ? __pfx_inet_sendmsg+0x10/0x10 [ 242.376557][T10683] sock_sendmsg_nosec+0x10e/0x180 [ 242.376586][T10683] ____sys_sendmsg+0x54e/0x850 [ 242.376614][T10683] ? __pfx_____sys_sendmsg+0x10/0x10 [ 242.376646][T10683] ? import_iovec+0x73/0xa0 [ 242.376678][T10683] ___sys_sendmsg+0x2a5/0x360 [ 242.376697][T10683] ? __lock_acquire+0x747/0x2de0 [ 242.376724][T10683] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.376751][T10683] ? kstrtouint+0x6e/0xe0 [ 242.376803][T10683] ? __fget_files+0x2a/0x420 [ 242.376820][T10683] ? __fget_files+0x3a2/0x420 [ 242.376850][T10683] __sys_sendmmsg+0x273/0x4d0 [ 242.376877][T10683] ? __pfx___sys_sendmmsg+0x10/0x10 [ 242.376908][T10683] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 242.376948][T10683] ? ksys_write+0x242/0x270 [ 242.376972][T10683] ? __pfx_ksys_write+0x10/0x10 [ 242.376999][T10683] __x64_sys_sendmmsg+0xa0/0xc0 [ 242.377023][T10683] do_syscall_64+0x166/0x520 [ 242.377045][T10683] ? trace_irq_disable+0x3b/0x140 [ 242.377066][T10683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.377086][T10683] ? clear_bhb_loop+0x70/0xc0 [ 242.377110][T10683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.377128][T10683] RIP: 0033:0x7f6ce8b9e559 [ 242.377147][T10683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.377163][T10683] RSP: 002b:00007f6ce9a66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 242.377185][T10683] RAX: ffffffffffffffda RBX: 00007f6ce8e26090 RCX: 00007f6ce8b9e559 [ 242.377199][T10683] RDX: 0000000000000002 RSI: 0000200000000200 RDI: 0000000000000003 [ 242.377211][T10683] RBP: 00007f6ce9a66090 R08: 0000000000000000 R09: 0000000000000000 [ 242.377223][T10683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.377235][T10683] R13: 00007f6ce8e26128 R14: 00007f6ce8e26090 R15: 00007ffef5bef888 [ 242.377267][T10683] [ 243.132032][T10699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.178517][T10699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.219827][T10703] __nla_validate_parse: 1 callbacks suppressed [ 243.219849][T10703] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1329'. [ 243.304812][ T43] IPVS: starting estimator thread 0... [ 243.309635][T10703] xt_l2tp: v2 doesn't support IP mode [ 243.361112][T10709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.401075][T10708] IPVS: using max 27 ests per chain, 64800 per kthread [ 243.449972][T10705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1329'. [ 243.482479][T10710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.505285][T10706] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1329'. [ 243.737099][T10718] x_tables: duplicate underflow at hook 1 [ 244.080257][T10734] net_ratelimit: 10 callbacks suppressed [ 244.080281][T10734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.125249][T10734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.125980][T10734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.126941][T10734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.127182][T10734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.127554][T10734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.127997][T10734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.128329][T10734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.128575][T10734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.130256][T10734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.405706][T10743] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 244.453681][T10743] bond6: (slave lo): Enslaving as an active interface with an up link [ 245.357030][T10776] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.620019][T10785] sctp: [Deprecated]: syz.5.1349 (pid 10785) Use of struct sctp_assoc_value in delayed_ack socket option. [ 245.620019][T10785] Use struct sctp_sack_info instead [ 245.799550][T10791] netlink: 'syz.5.1351': attribute type 2 has an invalid length. [ 245.921988][T10791] : entered promiscuous mode [ 246.173826][T10797] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 246.309965][T10803] netlink: 'syz.6.1355': attribute type 2 has an invalid length. [ 246.515533][T10813] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1357'. [ 246.546945][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1357'. [ 249.188811][ C1] syzkaller0 (unregistering): delete flow: hash 1731860422 index 0 [ 249.505049][ T50] net_ratelimit: 63 callbacks suppressed [ 249.505073][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.673698][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.673917][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.828520][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.829655][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.830083][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.114745][T10813] 8021q: adding VLAN 0 to HW filter on device bond1 [ 250.160680][T10834] netlink: 'syz.0.1360': attribute type 21 has an invalid length. [ 250.160707][T10834] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1360'. [ 250.160789][T10834] netlink: 'syz.0.1360': attribute type 5 has an invalid length. [ 250.160801][T10834] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1360'. [ 250.285965][T10838] netlink: 328 bytes leftover after parsing attributes in process `syz.4.1361'. [ 250.593500][T10845] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 250.594721][T10845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1364'. [ 250.716350][T10853] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 250.717687][T10855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1364'. [ 250.866669][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.868392][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.920303][T10859] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1366'. [ 251.379007][T10867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1368'. [ 251.407930][T10865] netlink: 'syz.6.1367': attribute type 1 has an invalid length. [ 251.707379][T10869] bond2: (slave geneve2): making interface the new active one [ 251.710024][T10869] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 251.719623][ T6624] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 251.719674][ T6624] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 251.719708][ T6624] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 251.731756][ T6624] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 252.251456][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1378'. [ 252.417489][T10905] netlink: 'syz.5.1379': attribute type 32 has an invalid length. [ 252.417518][T10905] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1379'. [ 252.540053][T10908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1380'. [ 252.604808][T10905] bond0: option coupled_control: invalid value (128) [ 252.607556][T10905] bond0 (unregistering): Released all slaves [ 254.175620][T10961] netlink: 'syz.6.1394': attribute type 11 has an invalid length. [ 254.664827][T10971] ip6gre1: entered allmulticast mode [ 254.670382][ T6626] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 254.881884][T10983] ip_vti0: entered promiscuous mode [ 255.102904][ T5625] net_ratelimit: 17 callbacks suppressed [ 255.102929][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.103868][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.163954][T10991] batman_adv: batadv0: Interface deactivated: gretap1 [ 255.264334][T10991] batman_adv: batadv0: Removing interface: gretap1 [ 255.294255][T10994] netlink: 'syz.1.1404': attribute type 13 has an invalid length. [ 255.294279][T10994] __nla_validate_parse: 3 callbacks suppressed [ 255.294290][T10994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1404'. [ 255.326653][T10997] netlink: 'syz.5.1407': attribute type 1 has an invalid length. [ 255.351536][T10994] netlink: 'syz.1.1404': attribute type 13 has an invalid length. [ 255.351562][T10994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1404'. [ 255.354133][T11003] netlink: 'syz.6.1406': attribute type 3 has an invalid length. [ 255.529238][T10997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.864187][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1409'. [ 255.878348][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.081025][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.145417][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.146355][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.599290][T11039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.620226][T11039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.630343][T11039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.642677][T11039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.647915][T11042] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1415'. [ 256.899853][T11046] geneve0: entered allmulticast mode [ 257.637887][T11074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1428'. [ 257.908882][T11085] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1432'. [ 258.165473][T11093] tap0: tun_chr_ioctl cmd 1074025676 [ 258.165500][T11093] tap0: owner set to 0 [ 258.380649][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 258.582556][T11099] x_tables: unsorted entry at hook 1 [ 258.595958][T11099] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1436'. [ 258.726398][T11109] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1441'. [ 258.819727][T11110] ªªªªª»: renamed from dummy0 (while UP) [ 258.979190][T11117] Unknown options in mask 4 [ 259.071904][T11122] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 259.496020][T11132] FAULT_INJECTION: forcing a failure. [ 259.496020][T11132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.496055][T11132] CPU: 1 UID: 0 PID: 11132 Comm: syz.6.1444 Not tainted syzkaller #0 PREEMPT(full) [ 259.496078][T11132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 259.496089][T11132] Call Trace: [ 259.496098][T11132] [ 259.496106][T11132] dump_stack_lvl+0xe8/0x150 [ 259.496140][T11132] should_fail_ex+0x410/0x560 [ 259.496172][T11132] _copy_from_user+0x2d/0xb0 [ 259.496203][T11132] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 259.496234][T11132] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 259.496271][T11132] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 259.496290][T11132] ? security_capable+0x7e/0x2c0 [ 259.496321][T11132] ? capable+0x88/0xe0 [ 259.496352][T11132] ? alloc_pages_mpol+0x256/0x390 [ 259.496382][T11132] ip_generic_getfrag+0x149/0x2d0 [ 259.496413][T11132] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 259.496439][T11132] ? skb_page_frag_refill+0x119/0x460 [ 259.496471][T11132] __ip_append_data+0x2026/0x3cf0 [ 259.496520][T11132] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 259.496571][T11132] ? __pfx___ip_append_data+0x10/0x10 [ 259.496600][T11132] ? do_raw_spin_lock+0x12b/0x2f0 [ 259.496630][T11132] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 259.496661][T11132] ip_append_data+0x10d/0x190 [ 259.496691][T11132] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 259.496720][T11132] udp_sendmsg+0x4de/0x2140 [ 259.496755][T11132] ? aa_inet_msg_perm+0xb78/0x1010 [ 259.496794][T11132] ? __pfx_aa_inet_msg_perm+0x10/0x10 [ 259.496823][T11132] ? __pfx_udp_sendmsg+0x10/0x10 [ 259.496860][T11132] ? kstrtouint+0x6e/0xe0 [ 259.496901][T11132] ? current_check_autobind_udp_socket+0x20a/0x4c0 [ 259.496939][T11132] ? aa_sock_msg_perm+0xfc/0x210 [ 259.496966][T11132] ? sock_rps_record_flow+0x19/0x350 [ 259.496995][T11132] ? inet_sendmsg+0x23e/0x320 [ 259.497018][T11132] ? apparmor_socket_sendmsg+0x98/0x360 [ 259.497046][T11132] ? __pfx_inet_sendmsg+0x10/0x10 [ 259.497071][T11132] sock_sendmsg_nosec+0x10e/0x180 [ 259.497099][T11132] __sys_sendto+0x408/0x5a0 [ 259.497118][T11132] ? ksys_write+0x1e6/0x270 [ 259.497142][T11132] ? __pfx___sys_sendto+0x10/0x10 [ 259.497167][T11132] ? __mutex_unlock_slowpath+0x731/0x900 [ 259.497222][T11132] ? __pfx_ksys_write+0x10/0x10 [ 259.497253][T11132] __x64_sys_sendto+0xde/0x100 [ 259.497276][T11132] do_syscall_64+0x166/0x520 [ 259.497297][T11132] ? trace_irq_disable+0x3b/0x140 [ 259.497318][T11132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.497337][T11132] ? clear_bhb_loop+0x70/0xc0 [ 259.497362][T11132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.497381][T11132] RIP: 0033:0x7fae9d99e559 [ 259.497400][T11132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.497416][T11132] RSP: 002b:00007fae9e8c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 259.497439][T11132] RAX: ffffffffffffffda RBX: 00007fae9dc25fa0 RCX: 00007fae9d99e559 [ 259.497453][T11132] RDX: 000000000000fdbe RSI: 0000200000001840 RDI: 0000000000000006 [ 259.497465][T11132] RBP: 00007fae9e8c3090 R08: 0000000000000000 R09: 0000000011000a00 [ 259.497478][T11132] R10: 0000000004004084 R11: 0000000000000246 R12: 0000000000000001 [ 259.497490][T11132] R13: 00007fae9dc26038 R14: 00007fae9dc25fa0 R15: 00007ffe3bd97008 [ 259.497523][T11132] [ 260.143416][ T5827] net_ratelimit: 123 callbacks suppressed [ 260.143441][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.277884][T11150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.279746][T11150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.281935][T11150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.328925][T11155] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 260.341667][T11150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.343401][T11150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.375830][T11150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.376450][T11150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.378776][T11148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.542153][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.653598][T11206] netlink: 'syz.5.1462': attribute type 64 has an invalid length. [ 261.653622][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1462'. [ 262.332328][T11234] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1469'. [ 262.505763][T11225] syzkaller1: entered promiscuous mode [ 262.505791][T11225] syzkaller1: entered allmulticast mode [ 262.890196][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1473'. [ 263.667204][T11277] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1478'. [ 263.667416][T11260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1477'. [ 263.707482][T11262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1477'. [ 263.707858][T11260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1477'. [ 263.970049][T11289] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1480'. [ 264.495143][T11300] netlink: 'syz.0.1484': attribute type 3 has an invalid length. [ 264.495169][T11300] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1484'. [ 264.604245][T11302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1487'. [ 265.538343][T11328] sock: sock_timestamping_bind_phc: sock not bind to device [ 265.820674][ T190] net_ratelimit: 64 callbacks suppressed [ 265.820698][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.192538][T11346] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 266.216911][T11350] syz.4.1502: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 266.217207][T11350] CPU: 1 UID: 0 PID: 11350 Comm: syz.4.1502 Not tainted syzkaller #0 PREEMPT(full) [ 266.217231][T11350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 266.217244][T11350] Call Trace: [ 266.217252][T11350] [ 266.217262][T11350] dump_stack_lvl+0xe8/0x150 [ 266.217298][T11350] warn_alloc+0x24d/0x270 [ 266.217322][T11350] ? kasan_save_track+0x4f/0x80 [ 266.217346][T11350] ? kasan_save_track+0x3e/0x80 [ 266.217372][T11350] ? __pfx_warn_alloc+0x10/0x10 [ 266.217392][T11350] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 266.217427][T11350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.217473][T11350] __vmalloc_node_range_noprof+0x127/0x1540 [ 266.217523][T11350] ? rcu_is_watching+0x16/0xb0 [ 266.217557][T11350] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 266.217580][T11350] ? __kmalloc_cache_noprof+0x321/0x600 [ 266.217606][T11350] ? __kmalloc_cache_noprof+0x14d/0x600 [ 266.217630][T11350] ? xskq_create+0x56/0x220 [ 266.217658][T11350] xskq_create+0x148/0x220 [ 266.217683][T11350] ? xsk_init_queue+0x8a/0xe0 [ 266.217706][T11350] xsk_init_queue+0x8a/0xe0 [ 266.217731][T11350] xsk_setsockopt+0x52a/0x960 [ 266.217764][T11350] ? __pfx_xsk_setsockopt+0x10/0x10 [ 266.217794][T11350] ? __pfx_aa_sk_perm+0x10/0x10 [ 266.217834][T11350] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 266.217860][T11350] ? __pfx_xsk_setsockopt+0x10/0x10 [ 266.217892][T11350] do_sock_setsockopt+0x17c/0x1b0 [ 266.217918][T11350] __x64_sys_setsockopt+0x13d/0x1b0 [ 266.217946][T11350] do_syscall_64+0x166/0x520 [ 266.217968][T11350] ? trace_irq_disable+0x3b/0x140 [ 266.217990][T11350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.218010][T11350] ? clear_bhb_loop+0x70/0xc0 [ 266.218036][T11350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.218057][T11350] RIP: 0033:0x7fca6f79e559 [ 266.218078][T11350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.218095][T11350] RSP: 002b:00007fca70675028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 266.218117][T11350] RAX: ffffffffffffffda RBX: 00007fca6fa25fa0 RCX: 00007fca6f79e559 [ 266.218131][T11350] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 266.218144][T11350] RBP: 00007fca6f8358b0 R08: 0000000000000004 R09: 0000000000000000 [ 266.218156][T11350] R10: 0000200000002540 R11: 0000000000000246 R12: 0000000000000000 [ 266.218168][T11350] R13: 00007fca6fa26038 R14: 00007fca6fa25fa0 R15: 00007fffb0a556e8 [ 266.218213][T11350] [ 266.218234][T11350] Mem-Info: [ 266.218244][T11350] active_anon:9482 inactive_anon:6 isolated_anon:0 [ 266.218244][T11350] active_file:1 inactive_file:43437 isolated_file:0 [ 266.218244][T11350] unevictable:0 dirty:68 writeback:0 [ 266.218244][T11350] slab_reclaimable:11434 slab_unreclaimable:116742 [ 266.218244][T11350] mapped:39704 shmem:526 pagetables:1341 [ 266.218244][T11350] sec_pagetables:0 bounce:0 [ 266.218244][T11350] kernel_misc_reclaimable:0 [ 266.218244][T11350] free:1273270 free_pcp:9849 free_cma:0 [ 266.218293][T11350] Node 0 active_anon:37928kB inactive_anon:24kB active_file:4kB inactive_file:173560kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158816kB dirty:272kB writeback:0kB shmem:2104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14084kB pagetables:5252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 266.218349][T11350] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 266.218400][T11350] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 266.218455][T11350] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 266.218494][T11350] Node 0 DMA32 free:1133236kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:37928kB inactive_anon:24kB active_file:4kB inactive_file:173560kB unevictable:0kB writepending:272kB zspages:0kB present:3129332kB managed:2527504kB mlocked:0kB bounce:0kB free_pcp:39148kB local_pcp:18184kB free_cma:0kB [ 266.218550][T11350] lowmem_reserve[]: 0 0 0 0 0 [ 266.218585][T11350] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 266.218761][T11350] lowmem_reserve[]: 0 0 0 0 0 [ 266.218801][T11350] Node 1 Normal free:3944484kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 266.218857][T11350] lowmem_reserve[]: 0 0 0 0 0 [ 266.218895][T11350] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 266.219017][T11350] Node 0 DMA32: 659*4kB (UM) 957*8kB (UM) 685*16kB (UME) 501*32kB (UME) 101*64kB (UM) 74*128kB (UME) 25*256kB (UE) 27*512kB (UM) 9*1024kB (UM) 3*2048kB (ME) 255*4096kB (UM) = 1133284kB [ 266.219178][T11350] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 266.219290][T11350] Node 1 Normal: 3*4kB (UM) 1*8kB (M) 1*16kB (M) 2*32kB (UM) 9*64kB (UM) 3*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 3*2048kB (U) 960*4096kB (M) = 3944484kB [ 266.219452][T11350] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 266.219469][T11350] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 266.219485][T11350] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 266.219501][T11350] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 266.219518][T11350] 43960 total pagecache pages [ 266.219526][T11350] 0 pages in swap cache [ 266.219534][T11350] Free swap = 124996kB [ 266.219542][T11350] Total swap = 124996kB [ 266.219550][T11350] 2097051 pages RAM [ 266.219558][T11350] 0 pages HighMem/MovableOnly [ 266.219565][T11350] 433559 pages reserved [ 266.219573][T11350] 0 pages cma reserved [ 266.239464][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.300949][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 267.040908][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.216280][T11365] __nla_validate_parse: 4 callbacks suppressed [ 267.216306][T11365] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1504'. [ 267.865811][T11383] netlink: 'syz.4.1509': attribute type 1 has an invalid length. [ 267.865837][T11383] netlink: 'syz.4.1509': attribute type 1 has an invalid length. [ 267.917945][T11384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1509'. [ 267.942618][T11388] netlink: 'syz.6.1510': attribute type 4 has an invalid length. [ 268.041871][T11383] batadv_slave_1: entered promiscuous mode [ 268.047243][T11384] batadv_slave_1: left promiscuous mode [ 268.070103][T11383] batadv_slave_1: entered promiscuous mode [ 268.180831][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.184358][T11392] syzkaller0: entered promiscuous mode [ 268.184384][T11392] syzkaller0: entered allmulticast mode [ 268.445510][T11398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1514'. [ 268.448915][T11398] openvswitch: netlink: Flow actions attr not present in new flow. [ 268.689903][T11382] batadv_slave_1: left promiscuous mode [ 269.263392][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.264179][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.343093][T11422] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1521'. [ 269.485810][T11418] xt_esp: unknown flags DD [ 269.490229][T11418] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 269.505964][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.229029][T11441] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1526'. [ 270.906515][T11466] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1534'. [ 270.953994][T11466] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1534'. [ 271.304832][T11476] netlink: 'syz.4.1540': attribute type 10 has an invalid length. [ 271.304861][T11476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1540'. [ 271.364662][T11482] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1541'. [ 271.405731][T11472] net_ratelimit: 2 callbacks suppressed [ 271.405754][T11472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.527882][T11476] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1540'. [ 271.738743][T11493] syzkaller0: entered promiscuous mode [ 271.738771][T11493] syzkaller0: entered allmulticast mode [ 271.750372][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.989428][T11498] xt_CT: You must specify a L4 protocol and not use inversions on it [ 272.050482][T11501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.052732][T11501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.055003][T11501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.057314][T11501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.059640][T11501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.066187][T11501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.068090][T11501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.072299][T11501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.436931][T11517] __nla_validate_parse: 2 callbacks suppressed [ 272.436953][T11517] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1553'. [ 272.448625][T11513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1549'. [ 272.532220][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1551'. [ 272.966900][T11543] netlink: 'syz.1.1557': attribute type 13 has an invalid length. [ 273.268885][T11554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1559'. [ 274.072268][T11584] netlink: 'syz.4.1568': attribute type 33 has an invalid length. [ 274.165747][T11584] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 274.189239][T11584] bond7 (unregistering): Released all slaves [ 274.833478][T11618] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1577'. [ 275.118350][T11608] syzkaller1: entered promiscuous mode [ 275.118374][T11608] syzkaller1: entered allmulticast mode [ 275.173290][T11626] ip6erspan0: entered allmulticast mode [ 275.329647][T11630] veth5: entered allmulticast mode [ 275.392226][T11637] IPv6: NLM_F_CREATE should be specified when creating new route [ 275.857361][T11653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1585'. [ 275.857387][T11653] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1585'. [ 275.972049][T11653] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 275.972261][T11653] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 276.575938][T11674] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 276.598680][T11674] netlink: 'syz.5.1588': attribute type 33 has an invalid length. [ 276.643099][T11672] bridge0: entered allmulticast mode [ 276.652784][T11672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1587'. [ 276.652869][T11672] bridge_slave_1: left allmulticast mode [ 276.653291][T11672] bridge_slave_1: left promiscuous mode [ 276.656707][T11672] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.783113][T11672] bridge_slave_0: left allmulticast mode [ 276.783545][T11672] bridge_slave_0: left promiscuous mode [ 276.796906][T11672] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.927476][T11672] bridge0 (unregistering): left allmulticast mode [ 277.109858][ T190] net_ratelimit: 8 callbacks suppressed [ 277.109882][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.209039][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1594'. [ 277.276857][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1594'. [ 277.365964][T11702] netlink: 'syz.4.1593': attribute type 2 has an invalid length. [ 278.034877][T11719] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1598'. [ 278.040655][T11721] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1599'. [ 278.040694][T11721] netlink: 'syz.5.1599': attribute type 8 has an invalid length. [ 278.040706][T11721] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1599'. [ 278.122625][T11730] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1601'. [ 278.128421][T11716] netlink: 'syz.1.1598': attribute type 32 has an invalid length. [ 278.128447][T11716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1598'. [ 278.160395][T11733] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1599'. [ 278.161127][T11733] netlink: 'syz.5.1599': attribute type 8 has an invalid length. [ 278.161144][T11733] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1599'. [ 278.183351][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.385442][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.620119][T11716] bond7: Setting coupled_control to off (0) [ 278.643506][T11754] netlink: 'syz.0.1603': attribute type 5 has an invalid length. [ 278.810121][T11757] Bluetooth: MGMT ver 1.23 [ 278.820988][T11757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.821829][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.103613][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.230991][T11727] syzkaller1: entered promiscuous mode [ 279.233932][T11727] syzkaller1: entered allmulticast mode [ 279.271538][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.440229][T11764] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1607'. [ 279.464014][T11764] FAULT_INJECTION: forcing a failure. [ 279.464014][T11764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.464048][T11764] CPU: 1 UID: 0 PID: 11764 Comm: syz.5.1607 Not tainted syzkaller #0 PREEMPT(full) [ 279.464070][T11764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 279.464104][T11764] Call Trace: [ 279.464113][T11764] [ 279.464122][T11764] dump_stack_lvl+0xe8/0x150 [ 279.464156][T11764] should_fail_ex+0x410/0x560 [ 279.464188][T11764] _copy_from_user+0x2d/0xb0 [ 279.464223][T11764] ___sys_sendmsg+0x1c6/0x360 [ 279.464244][T11764] ? __lock_acquire+0x747/0x2de0 [ 279.464271][T11764] ? __pfx____sys_sendmsg+0x10/0x10 [ 279.464329][T11764] ? __fget_files+0x2a/0x420 [ 279.464347][T11764] ? __fget_files+0x3a2/0x420 [ 279.464376][T11764] __x64_sys_sendmsg+0x1b1/0x290 [ 279.464400][T11764] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 279.464443][T11764] do_syscall_64+0x166/0x520 [ 279.464465][T11764] ? trace_irq_disable+0x3b/0x140 [ 279.464486][T11764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.464506][T11764] ? clear_bhb_loop+0x70/0xc0 [ 279.464530][T11764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.464549][T11764] RIP: 0033:0x7f37d5d9e559 [ 279.464568][T11764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.464583][T11764] RSP: 002b:00007f37d6c71028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.464606][T11764] RAX: ffffffffffffffda RBX: 00007f37d6025fa0 RCX: 00007f37d5d9e559 [ 279.464621][T11764] RDX: 0000000004000050 RSI: 0000200000000100 RDI: 0000000000000003 [ 279.464633][T11764] RBP: 00007f37d6c71090 R08: 0000000000000000 R09: 0000000000000000 [ 279.464645][T11764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.464657][T11764] R13: 00007f37d6026038 R14: 00007f37d6025fa0 R15: 00007fff444d1968 [ 279.464689][T11764] [ 280.129555][T11783] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1611'. [ 280.164648][T11785] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1609'. [ 280.523355][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.421808][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.624779][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.662008][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 282.259503][T11858] bond6: entered promiscuous mode [ 282.259624][T11858] bond6: entered allmulticast mode [ 282.260158][T11858] 8021q: adding VLAN 0 to HW filter on device bond6 [ 282.436526][T11871] bond2: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 282.466917][T11871] bond2 (unregistering): Released all slaves [ 282.567715][T11855] netlink: 'syz.4.1627': attribute type 1 has an invalid length. [ 282.715943][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.350261][T11904] __nla_validate_parse: 5 callbacks suppressed [ 283.350285][T11904] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1633'. [ 283.389050][T11903] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1638'. [ 283.453166][T11903] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1638'. [ 283.779065][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.788150][T11918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1640'. [ 283.788176][T11918] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1640'. [ 283.935957][T11927] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1643'. [ 284.000183][T11918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1640'. [ 284.000210][T11918] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1640'. [ 284.462302][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.592382][T11944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.592645][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.623970][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1647'. [ 284.804640][ T2235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.887227][T11953] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1650'. [ 284.906943][T11953] netlink: 'syz.6.1650': attribute type 4 has an invalid length. [ 284.991390][T11949] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 286.353566][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.409565][T12028] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 287.459323][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.574655][T12007] syz.1.1662 (12007) used greatest stack depth: 17632 bytes left [ 287.776320][T12034] tipc: Enabled bearer , priority 11 [ 288.124249][T12059] netlink: 'syz.1.1676': attribute type 11 has an invalid length. [ 288.283956][T12071] netlink: 'syz.1.1676': attribute type 11 has an invalid length. [ 288.354695][T12059] tipc: Started in network mode [ 288.354725][T12059] tipc: Node identity ac14142f, cluster identity 4711 [ 288.393770][T12059] tipc: Enabled bearer , priority 10 [ 288.395269][T12063] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 288.407616][T12067] tipc: Enabling of bearer rejected, already enabled [ 288.416473][T12074] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 288.522417][ T5625] net_ratelimit: 1 callbacks suppressed [ 288.522440][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.697080][T12079] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 288.699705][T12079] team0: Device ipvlan2 is already an upper device of the team interface [ 288.703669][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.800222][T12090] __nla_validate_parse: 11 callbacks suppressed [ 288.800247][T12090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1679'. [ 288.885596][T12096] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1680'. [ 289.215554][ T6628] IPVS: starting estimator thread 0... [ 289.218764][T12101] IPVS: set_ctl: invalid protocol: 94 100.1.1.0:20001 [ 289.301434][T12102] IPVS: using max 29 ests per chain, 69600 per kthread [ 289.369197][T12107] netlink: 'syz.1.1683': attribute type 4 has an invalid length. [ 289.467194][T12100] bridge0: port 3(gretap0) entered blocking state [ 289.467444][T12110] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1683'. [ 289.468562][T12100] bridge0: port 3(gretap0) entered disabled state [ 289.468739][T12100] gretap0: entered allmulticast mode [ 289.532656][T12100] gretap0: entered promiscuous mode [ 289.558588][T12100] bridge0: port 3(gretap0) entered blocking state [ 289.558708][T12100] bridge0: port 3(gretap0) entered forwarding state [ 289.587577][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.602663][ T5619] tipc: Node number set to 2886997039 [ 290.544438][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.569230][T12137] netlink: 'syz.1.1690': attribute type 10 has an invalid length. [ 290.619753][T12137] team0: Port device ªªªªª» added [ 290.690253][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.822507][T12151] netlink: 'syz.6.1695': attribute type 1 has an invalid length. [ 290.874167][T12151] bond3: entered promiscuous mode [ 290.874592][T12151] 8021q: adding VLAN 0 to HW filter on device bond3 [ 290.957930][T12153] macvtap1: entered allmulticast mode [ 290.999468][T12151] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1695'. [ 291.093149][T12151] macvtap2: entered allmulticast mode [ 291.215041][T12151] bond3: (slave bridge1): making interface the new active one [ 291.215067][T12151] bridge1: entered promiscuous mode [ 291.250195][T12151] bridge1: left promiscuous mode [ 291.306519][T12177] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1700'. [ 291.685101][T12184] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1702'. [ 291.698985][T12189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1705'. [ 291.758525][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.245504][T12208] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1712'. [ 292.245533][T12208] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1712'. [ 292.245548][T12208] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1712'. [ 292.826918][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.447211][T12208] veth7: entered allmulticast mode [ 293.582914][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.928782][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.628642][T12265] netlink: 'syz.6.1721': attribute type 8 has an invalid length. [ 294.648582][T12255] syzkaller0: entered promiscuous mode [ 294.666065][T12255] syzkaller0: entered allmulticast mode [ 294.798333][ T31] audit: type=1804 audit(1792151690.140:3): pid=12267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1722" name="/newroot/350/cgroup.controllers" dev="tmpfs" ino=1795 res=1 errno=0 [ 294.807876][ T31] audit: type=1800 audit(1792151690.150:4): pid=12267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1722" name="cgroup.controllers" dev="tmpfs" ino=1795 res=0 errno=0 [ 294.947922][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.357631][T12284] FAULT_INJECTION: forcing a failure. [ 295.357631][T12284] name failslab, interval 1, probability 0, space 0, times 0 [ 295.357670][T12284] CPU: 0 UID: 0 PID: 12284 Comm: syz.6.1726 Not tainted syzkaller #0 PREEMPT(full) [ 295.357705][T12284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 295.357718][T12284] Call Trace: [ 295.357727][T12284] [ 295.357736][T12284] dump_stack_lvl+0xe8/0x150 [ 295.357771][T12284] should_fail_ex+0x410/0x560 [ 295.357802][T12284] ? __alloc_skb+0x1db/0x7a0 [ 295.357832][T12284] should_failslab+0xa8/0x100 [ 295.357862][T12284] ? __alloc_skb+0x1db/0x7a0 [ 295.357888][T12284] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 295.357910][T12284] ? __alloc_skb+0x18d/0x7a0 [ 295.357938][T12284] ? __alloc_skb+0x1db/0x7a0 [ 295.357971][T12284] __alloc_skb+0x1db/0x7a0 [ 295.358003][T12284] __ip_append_data+0x2aa9/0x3cf0 [ 295.358052][T12284] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 295.358102][T12284] ? __pfx___ip_append_data+0x10/0x10 [ 295.358131][T12284] ? do_raw_spin_lock+0x12b/0x2f0 [ 295.358163][T12284] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 295.358191][T12284] ip_append_data+0x10d/0x190 [ 295.358221][T12284] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 295.358250][T12284] udp_sendmsg+0x4de/0x2140 [ 295.358284][T12284] ? aa_inet_msg_perm+0xb78/0x1010 [ 295.358325][T12284] ? __pfx_aa_inet_msg_perm+0x10/0x10 [ 295.358351][T12284] ? __pfx_udp_sendmsg+0x10/0x10 [ 295.358388][T12284] ? kstrtouint+0x6e/0xe0 [ 295.358416][T12284] ? current_check_autobind_udp_socket+0x20a/0x4c0 [ 295.358454][T12284] ? aa_sock_msg_perm+0xfc/0x210 [ 295.358483][T12284] ? sock_rps_record_flow+0x19/0x350 [ 295.358512][T12284] ? inet_sendmsg+0x23e/0x320 [ 295.358533][T12284] ? apparmor_socket_sendmsg+0x98/0x360 [ 295.358560][T12284] ? __pfx_inet_sendmsg+0x10/0x10 [ 295.358584][T12284] sock_sendmsg_nosec+0x10e/0x180 [ 295.358614][T12284] __sys_sendto+0x408/0x5a0 [ 295.358633][T12284] ? ksys_write+0x1e6/0x270 [ 295.358656][T12284] ? __pfx___sys_sendto+0x10/0x10 [ 295.358682][T12284] ? __mutex_unlock_slowpath+0x731/0x900 [ 295.358747][T12284] ? __pfx_ksys_write+0x10/0x10 [ 295.358774][T12284] __x64_sys_sendto+0xde/0x100 [ 295.358796][T12284] do_syscall_64+0x166/0x520 [ 295.358816][T12284] ? trace_irq_disable+0x3b/0x140 [ 295.358834][T12284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.358850][T12284] ? clear_bhb_loop+0x70/0xc0 [ 295.358868][T12284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.358883][T12284] RIP: 0033:0x7fae9d99e559 [ 295.358902][T12284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.358919][T12284] RSP: 002b:00007fae9e8a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 295.358941][T12284] RAX: ffffffffffffffda RBX: 00007fae9dc26090 RCX: 00007fae9d99e559 [ 295.358955][T12284] RDX: 000000000000fdbe RSI: 0000200000001840 RDI: 0000000000000006 [ 295.358968][T12284] RBP: 00007fae9e8a2090 R08: 0000000000000000 R09: 0000000011000a00 [ 295.358981][T12284] R10: 0000000004004084 R11: 0000000000000246 R12: 0000000000000002 [ 295.358993][T12284] R13: 00007fae9dc26128 R14: 00007fae9dc26090 R15: 00007ffe3bd97008 [ 295.359024][T12284] [ 295.989788][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.623483][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.046627][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.318325][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.319807][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.342859][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.372081][T12290] __nla_validate_parse: 1 callbacks suppressed [ 299.372107][T12290] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1727'. [ 299.462674][T12296] netlink: 'syz.6.1729': attribute type 3 has an invalid length. [ 299.468616][T12297] netlink: 'syz.6.1729': attribute type 3 has an invalid length. [ 299.640270][T12302] netlink: 6024 bytes leftover after parsing attributes in process `syz.6.1729'. [ 299.640710][T12296] netlink: 6024 bytes leftover after parsing attributes in process `syz.6.1729'. [ 299.664040][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.739797][T12309] netlink: 'syz.1.1731': attribute type 1 has an invalid length. [ 299.758053][T12303] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1732'. [ 299.758083][T12303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1732'. [ 300.382168][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.684192][T12328] xt_hashlimit: overflow, try lower: 3/0 [ 300.912726][ T6632] IPVS: starting estimator thread 0... [ 301.001364][T12339] IPVS: using max 25 ests per chain, 60000 per kthread [ 301.054934][T12341] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1744'. [ 301.078286][T12317] netlink: 'syz.1.1738': attribute type 8 has an invalid length. [ 301.422685][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.149586][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.149985][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.329355][T12380] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1752'. [ 302.531264][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.393040][T12418] netlink: 'syz.4.1763': attribute type 21 has an invalid length. [ 303.393147][T12418] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1763'. [ 303.581474][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.586156][T12422] netlink: 'syz.5.1764': attribute type 10 has an invalid length. [ 303.586199][T12422] mac80211_hwsim hwsim13 wlan0: entered allmulticast mode [ 303.595619][T12423] netlink: 'syz.5.1764': attribute type 10 has an invalid length. [ 304.569907][T12452] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1771'. [ 304.622298][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.776846][T12452] 8021q: adding VLAN 0 to HW filter on device team1 [ 305.241802][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.661078][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.664468][ T94] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.686973][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.698334][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.857981][T12474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.858349][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.858556][T12474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.949413][T12472] netlink: Failed to add helper -22 [ 306.286330][T12487] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1779'. [ 306.626084][T12494] syzkaller0: entered promiscuous mode [ 306.626112][T12494] syzkaller0: entered allmulticast mode [ 307.030521][T12505] pim6reg: entered allmulticast mode [ 307.169581][T12518] netlink: 'syz.6.1784': attribute type 10 has an invalid length. [ 307.220336][T12518] team0: Port device dummy0 added [ 307.511913][T12519] sit1: entered promiscuous mode [ 307.512151][T12519] sit1: entered allmulticast mode [ 307.799733][T12534] netlink: 'syz.5.1787': attribute type 12 has an invalid length. [ 307.955316][T12534] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1787'. [ 307.955352][T12534] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1787'. [ 308.128180][T12534] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1787'. [ 308.163818][T12538] syzkaller0: left promiscuous mode [ 308.163842][T12538] syzkaller0: left allmulticast mode [ 308.177316][T12538] netlink: 'syz.6.1788': attribute type 2 has an invalid length. [ 308.494680][T12548] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1791'. [ 308.844297][T12551] syzkaller0: entered promiscuous mode [ 308.844322][T12551] syzkaller0: entered allmulticast mode [ 308.860046][T12554] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1794'. [ 309.803852][T12575] ip_vti0: entered promiscuous mode [ 309.878466][T12575] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1797'. [ 309.914392][ T190] net_ratelimit: 9 callbacks suppressed [ 309.914417][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.916443][T12577] openvswitch: netlink: IP tunnel dst address not specified [ 310.693263][T12594] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1802'. [ 310.971267][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.979511][T12598] netlink: 'syz.6.1804': attribute type 4 has an invalid length. [ 311.117571][T12604] syzkaller0: entered promiscuous mode [ 311.117601][T12604] syzkaller0: entered allmulticast mode [ 311.350033][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.790225][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.801323][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.807647][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.863290][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.914534][T12620] xt_addrtype: ipv6 does not support BROADCAST matching [ 311.981486][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.386198][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 312.391681][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.849683][T12662] Bluetooth: hci0: load_link_keys: too big key_count value 5120 [ 313.917538][T12662] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 314.071711][T12667] netlink: 'syz.6.1819': attribute type 3 has an invalid length. [ 314.367960][T12677] syzkaller0: entered promiscuous mode [ 314.367984][T12677] syzkaller0: entered allmulticast mode [ 315.008038][T12694] syzkaller0: entered promiscuous mode [ 315.008121][T12694] syzkaller0: entered allmulticast mode [ 315.262820][ T5625] net_ratelimit: 5 callbacks suppressed [ 315.262846][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.331829][T12380] Set syz1 is full, maxelem 65536 reached [ 315.463187][T12704] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1825'. [ 315.582017][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.306565][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.492116][T12734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1830'. [ 316.748235][T12748] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1835'. [ 316.954276][T12764] netlink: 'syz.4.1838': attribute type 15 has an invalid length. [ 317.042384][T12767] netlink: 'syz.4.1840': attribute type 1 has an invalid length. [ 317.341837][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.505174][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.506796][ T32] INFO: task syz.2.801:8746 blocked for more than 143 seconds. [ 317.506823][ ** replaying previous printk message ** [ 317.506823][ T32] Not tainted syzkaller #0 [ 317.506834][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 317.506844][ T32] task:syz.2.801 state:D stack:25256 pid:8746 tgid:8744 ppid:5617 task_flags:0x400140 flags:0x00080002 [ 317.506905][ T32] Call Trace: [ 317.506913][ T32] [ 317.506926][ T32] __schedule+0x17db/0x58f0 [ 317.506987][ T32] ? __pfx___schedule+0x10/0x10 [ 317.507019][ T32] ? schedule+0x90/0x2b0 [ 317.507042][ T32] schedule+0x164/0x2b0 [ 317.507065][ T32] schedule_preempt_disabled+0x13/0x30 [ 317.507085][ T32] __mutex_lock+0x7c1/0x1550 [ 317.507114][ T32] ? __mutex_lock+0x5d4/0x1550 [ 317.507142][ T32] ? nfsd_nl_listener_get_doit+0x104/0x610 [ 317.507181][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 317.507213][ T32] ? __nlmsg_put+0xef/0x1b0 [ 317.507240][ T32] ? genlmsg_put+0x137/0x2e0 [ 317.507267][ T32] nfsd_nl_listener_get_doit+0x104/0x610 [ 317.507296][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 317.507324][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 317.507362][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 317.507399][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 317.507455][ T32] genl_rcv_msg+0x614/0x7a0 [ 317.507491][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 317.507520][ T32] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 317.507565][ T32] netlink_rcv_skb+0x226/0x4a0 [ 317.507592][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 317.507623][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 317.507664][ T32] ? down_read+0x2be/0x330 [ 317.507692][ T32] genl_rcv+0x28/0x40 [ 317.507719][ T32] netlink_unicast+0x8ef/0xa80 [ 317.507762][ T32] netlink_sendmsg+0x813/0xb40 [ 317.507799][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.507835][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 317.507865][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.507890][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 317.507921][ T32] ____sys_sendmsg+0x54e/0x850 [ 317.507950][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 317.507983][ T32] ? import_iovec+0x73/0xa0 [ 317.508018][ T32] ___sys_sendmsg+0x2a5/0x360 [ 317.508039][ T32] ? __lock_acquire+0x747/0x2de0 [ 317.508087][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 317.508114][ T32] ? futex_wait+0x2a2/0x390 [ 317.508169][ T32] ? __fget_files+0x2a/0x420 [ 317.508197][ T32] ? __fget_files+0x3a2/0x420 [ 317.508229][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 317.508257][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 317.508303][ T32] do_syscall_64+0x166/0x520 [ 317.508325][ T32] ? trace_irq_disable+0x3b/0x140 [ 317.508346][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.508367][ T32] ? clear_bhb_loop+0x70/0xc0 [ 317.508392][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.508411][ T32] RIP: 0033:0x7f5d05b9e559 [ 317.508431][ T32] RSP: 002b:00007f5d069c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.508453][ T32] RAX: ffffffffffffffda RBX: 00007f5d05e25fa0 RCX: 00007f5d05b9e559 [ 317.508467][ T32] RDX: 0000000004000880 RSI: 0000200000000100 RDI: 0000000000000006 [ 317.508481][ T32] RBP: 00007f5d05c358b0 R08: 0000000000000000 R09: 0000000000000000 [ 317.508495][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.508507][ T32] R13: 00007f5d05e26038 R14: 00007f5d05e25fa0 R15: 00007fff31c2c9a8 [ 317.508543][ T32] [ 317.508571][ T32] [ 317.508571][ T32] Showing all locks held in the system: [ 317.508582][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 317.508596][ T32] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 317.508668][ T32] locks held by getty/5371: 2, on CPU#0: [ 317.508682][ T32] #0: ffff8880345d40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 317.508730][ T32] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 317.508786][ T32] locks held by syz-executor/5614: 4, last CPU#1: [ 317.508799][ T32] #0: ffffffff8fe36570 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480 [ 317.508854][ T32] #1: ffff888035c24cc0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 317.508902][ T32] #2: ffff88807c370f80 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 317.508953][ T32] #3: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 317.509010][ T32] locks held by syz-executor/5621: 4, last CPU#1: [ 317.509024][ T32] #0: ffffffff8fe36570 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480 [ 317.509076][ T32] #1: ffff888036d32800 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 317.509124][ T32] #2: ffff88807a5e1bc0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 317.509184][ T32] #3: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 317.509244][ T32] locks held by syz.3.618/8103: 2, on CPU#1: [ 317.509256][ T32] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 317.509308][ T32] #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 317.509357][ T32] locks held by syz.2.801/8746: 2, on CPU#0: [ 317.509371][ T32] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 317.509424][ T32] #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x104/0x610 [ 317.509482][ T32] locks held by syz.5.1843/12776: 1, on CPU#1: [ 317.509496][ T32] #0: ffff88807e689e20 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sctp_sendmsg+0xbb8/0x2d00 [ 317.509545][ T32] locks held by syz.5.1843/12782: 1, on CPU#0: [ 317.509559][ T32] #0: ffff88807e689e20 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sctp_sendmsg+0xbb8/0x2d00 [ 317.509606][ T32] locks held by syz.6.1845/12781: 3, last CPU#0: [ 317.509620][ T32] #0: ffff888076d3fb00 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 317.509678][ T32] #1: ffffffff912c48a8 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 317.509729][ T32] #2: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: nl80211_netlink_notify+0x75/0x860 [ 317.509785][ T32] locks held by syz.0.1848/12784: 1, last CPU#1: [ 317.509797][ T32] #0: ffff88807a5e4cc0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 317.509848][ T32] [ 317.509854][ T32] ============================================= [ 317.509854][ T32] [ 317.509863][ T32] NMI backtrace for cpu 0 [ 317.509877][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 317.509898][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 317.509909][ T32] Call Trace: [ 317.509918][ T32] [ 317.509926][ T32] dump_stack_lvl+0xe8/0x150 [ 317.509957][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 317.509986][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 317.510018][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 317.510050][ T32] sys_info+0x135/0x170 [ 317.510075][ T32] watchdog+0xfd7/0x1030 [ 317.510104][ T32] ? watchdog+0x1c7/0x1030 [ 317.510134][ T32] kthread+0x38b/0x480 [ 317.510155][ T32] ? __pfx_watchdog+0x10/0x10 [ 317.510183][ T32] ? __pfx_kthread+0x10/0x10 [ 317.510206][ T32] ret_from_fork+0x514/0xb70 [ 317.510229][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 317.510249][ T32] ? __switch_to+0xc89/0x1420 [ 317.510280][ T32] ? __pfx_kthread+0x10/0x10 [ 317.510302][ T32] ret_from_fork_asm+0x1a/0x30 [ 317.510340][ T32] [ 317.510348][ T32] Sending NMI from CPU 0 to CPUs 1: [ 317.510376][ C1] NMI backtrace for cpu 1 [ 317.510391][ C1] CPU: 1 UID: 0 PID: 5614 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 317.510417][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 317.510427][ C1] RIP: 0010:match_held_lock+0xdd/0x120 [ 317.510468][ C1] Code: 8b 4f 20 81 e1 ff 1f 00 00 48 c7 c2 d0 c4 3c 95 48 29 d0 48 c1 f8 03 49 0f af c6 bb 01 00 00 00 48 39 c1 74 02 31 db 89 d8 5b <41> 5e 41 5f e9 0a ff 02 00 cc b1 01 84 c9 0f 84 5e ff ff ff eb 98 [ 317.510485][ C1] RSP: 0018:ffffc90003ad7208 EFLAGS: 00000046 [ 317.510502][ C1] RAX: 0000000000000001 RBX: 0000000000000023 RCX: 8000000000000002 [ 317.510516][ C1] RDX: 0000000000000000 RSI: ffffffff8fd5c8e0 RDI: ffff8880352d6a88 [ 317.510528][ C1] RBP: ffff8880352d6a88 R08: ffff88801fc2e99b R09: 1ffff11003f85d33 [ 317.510550][ C1] R10: dffffc0000000000 R11: ffffed1003f85d34 R12: 0000000000000007 [ 317.510563][ C1] R13: 0000000000000007 R14: ffffffff8fd5c8e0 R15: ffff8880352d5dc0 [ 317.510576][ C1] FS: 000055557987c500(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 [ 317.510591][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.510604][ C1] CR2: 00007f6ce9955690 CR3: 0000000071b16000 CR4: 00000000003526f0 [ 317.510622][ C1] Call Trace: [ 317.510628][ C1] [ 317.510636][ C1] lock_release+0x10c/0x3c0 [ 317.510657][ C1] ? page_table_check_set+0x127/0x530 [ 317.510689][ C1] ? page_table_check_set+0x127/0x530 [ 317.510711][ C1] page_table_check_set+0x4c8/0x530 [ 317.510732][ C1] ? page_table_check_set+0x127/0x530 [ 317.510774][ C1] copy_pmd_range+0x4adc/0x5c10 [ 317.510804][ C1] ? anon_vma_clone+0x3f3/0x9f0 [ 317.510835][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 317.510855][ C1] ? lock_acquire+0x115/0x350 [ 317.510879][ C1] copy_page_range+0xc82/0x1290 [ 317.510909][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 317.510933][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 317.510956][ C1] dup_mmap+0xf17/0x1dc0 [ 317.510980][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 317.510998][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 317.511029][ C1] ? lock_acquire+0x115/0x350 [ 317.511053][ C1] copy_mm+0x115/0x480 [ 317.511076][ C1] copy_process+0x1e79/0x4400 [ 317.511098][ C1] ? __lock_acquire+0x747/0x2de0 [ 317.511121][ C1] ? copy_process+0xd16/0x4400 [ 317.511149][ C1] ? __pfx_copy_process+0x10/0x10 [ 317.511176][ C1] kernel_clone+0x2d7/0x940 [ 317.511202][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 317.511233][ C1] __x64_sys_clone+0x1b6/0x230 [ 317.511259][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 317.511291][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 317.511313][ C1] do_syscall_64+0x166/0x520 [ 317.511332][ C1] ? trace_irq_disable+0x3b/0x140 [ 317.511351][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.511370][ C1] ? clear_bhb_loop+0x70/0xc0 [ 317.511389][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.511407][ C1] RIP: 0033:0x7f46859c6fd2 [ 317.511422][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 317.511438][ C1] RSP: 002b:00007ffed89d6440 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 317.511456][ C1] RAX: ffffffffffffffda RBX: 00007ffed89d6440 RCX: 00007f46859c6fd2 [ 317.511469][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 317.511481][ C1] RBP: 00007ffed89d65cc R08: 0000000000000000 R09: 0000000000000001 [ 317.511493][ C1] R10: 000055557987c7d0 R11: 0000000000000246 R12: 0000000000000001 [ 317.511505][ C1] R13: 00000000000927c0 R14: 000000000004d745 R15: 00007ffed89d6620 [ 317.511525][ C1] [ 317.535468][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 318.615198][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 318.624316][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 318.634380][ T32] Call Trace: [ 318.637691][ T32] [ 318.640639][ T32] vpanic+0x56d/0xa60 [ 318.644737][ T32] ? __pfx___schedule+0x10/0x10 [ 318.649770][ T32] ? __pfx_vpanic+0x10/0x10 [ 318.654293][ T32] panic+0xc5/0xd0 [ 318.658033][ T32] ? __pfx_panic+0x10/0x10 [ 318.662467][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 318.667943][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 318.673334][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 318.679502][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 318.685772][ T32] watchdog+0x1030/0x1030 [ 318.690228][ T32] ? watchdog+0x1c7/0x1030 [ 318.694846][ T32] kthread+0x38b/0x480 [ 318.698922][ T32] ? __pfx_watchdog+0x10/0x10 [ 318.703599][ T32] ? __pfx_kthread+0x10/0x10 [ 318.708193][ T32] ret_from_fork+0x514/0xb70 [ 318.712838][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 318.717958][ T32] ? __switch_to+0xc89/0x1420 [ 318.722908][ T32] ? __pfx_kthread+0x10/0x10 [ 318.727525][ T32] ret_from_fork_asm+0x1a/0x30 [ 318.732326][ T32] [ 318.735667][ T32] Kernel Offset: disabled [ 318.739986][ T32] Rebooting in 86400 seconds..