last executing test programs: 7.680124933s ago: executing program 3 (id=3954): r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000240)={0x84, @loopback, 0x4e22, 0x3, 'lc\x00', 0x34, 0x80001, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e61, 0x3, 'lc\x00', 0x8, 0x20000, 0x77}, {@remote, 0x4e20, 0xac91d2bf000ec5eb, 0xcd}}, 0x44) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7}, 0x50) socket$inet_smc(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f0000000a00)={0x8, 0x9, 0x6, 0x1000, 0xa, 0x7e, 0x72, 0x7f1c}, 0x0, 0x0, &(0x7f0000000ac0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="18080000cbb60000000000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100b00000009500000000000000b7020000000080007b9af8ff00000000d60900001fffffff7baaf0ff00000000bf2720000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004604f0ff7600000018010000696c6c2500000000002020207b1af8b000000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000f06000000bf9800000000000056080000000000408500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000300), &(0x7f0000001080)=0x4) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="00f9c22ea7", 0x5}], 0x1}, 0x49cf75490397e68f) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8905, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) 7.495442057s ago: executing program 3 (id=3956): r0 = socket(0x2b, 0x1, 0x1) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x10, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x640080a0}, 0x20008004) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r3) (async, rerun: 32) r4 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {0x7}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) (async) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000001, @remote, 0x5}, 0x1c) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80180002"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000004c0)={0x0, 0x67, "e10d1dcf46463c62ceb9a7ceaff455f7339ef19c68395876937cc30ebe0ee0355115436fb6d1825cc75a2cc3643547f0c862479bee2bbfb85eaf12b148a4caae40b099836d46421c7a78156940c21622e45c167b8bb8ebeebf73ab8ec1e210bb9f0a05d7926f1b"}, &(0x7f0000000580)=0x6f) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async, rerun: 32) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r7, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000010000104000000003f00200000000000", @ANYRES32=r7, @ANYBLOB="2420040085ad0000380012800e00010069703665727370616e0000002400028004001200060010004e21000014000600fe8000000000000000000000000000bb"], 0x58}, 0x1, 0x0, 0x0, 0x4040014}, 0x20008848) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)=ANY=[@ANYBLOB="04010000", @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf25150000002000018014000200766c616e30000000000000000000000008000300020000002000018014000200776c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="2000018008000300000000001400020076657468305f6d6163767461700000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="5c0001801400020062617461647630000000000000000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f626f6e6400000008000100", @ANYRES32=0x0, @ANYBLOB="08bbd4b4", @ANYRES32=0x0, @ANYBLOB="280001801400020076657468305f766972745f776966690008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB], 0x104}, 0x1, 0x0, 0x0, 0x40805}, 0x4001) (async) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) (async, rerun: 32) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r9, 0x3c2d6000) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003000000000000dffeffee10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async, rerun: 32) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) (async, rerun: 64) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) (async, rerun: 64) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000400)=ANY=[@ANYRES32], 0x42) (async) getsockopt$inet_tcp_int(r9, 0x6, 0x1, &(0x7f0000000380), &(0x7f00000005c0)=0x4) 7.042996072s ago: executing program 2 (id=3959): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='net_prio.prioidx\x00', 0xb00000000065808, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000006"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r1, 0x5aeda000) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x44c8, 0x4) sendto$inet6(r4, &(0x7f0000000300)="60000000001433400000000000000000000000000000000100000000000000000000000000000001", 0x28, 0x2200f780, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000001980)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x88, 0x1403, 0x4, 0x6, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_batadv\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dvmrp0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc6d81db04e4b0f74}, 0x40) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r8}, &(0x7f00000007c0), &(0x7f0000000640)=r7}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r8, &(0x7f0000000300), 0x0}, 0x20) r9 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r9, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) bind$llc(r1, &(0x7f0000001780)={0x1a, 0xfffe, 0x4, 0x8, 0x9, 0x6, @local}, 0x10) write$cgroup_devices(r0, &(0x7f00000010c0)=ANY=[@ANYBLOB="63202a3a2a2072008b577cd06d3ece2d433940c1a7e933b2a057b1e01c498ab31bb30941989f86735ba592ac8c829beff348f2f32bae7ce2cc6e2d8876e970a2c515331489f003f380"], 0x8) sendmsg$netlink(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="5384"], 0xdd12}], 0x1, 0x0, 0x0, 0x800}, 0x20040890) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r10, 0x84, 0x4, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd25, 0x25dfdbfc, {0xa, 0x0, 0x14, 0xff, 0xff, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x80) 6.579119031s ago: executing program 2 (id=3963): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x40, 0x20, 0x8, 0x3d, {{0x44, 0x4, 0x1, 0x8, 0x110, 0x68, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@rr={0x7, 0x23, 0xcd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010101, @local, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x17}]}, @timestamp={0x44, 0x28, 0x2b, 0x0, 0x7, [0x8, 0x9, 0xc, 0x2, 0x8cc3, 0x7, 0x200, 0x5, 0x4]}, @cipso={0x86, 0x24, 0x1, [{0x2, 0x12, "7186578f786f7196f84e2998010daee2"}, {0x0, 0x2}, {0x0, 0x6, "cb3941a6"}, {0x6, 0x4, "601a"}]}, @timestamp_prespec={0x44, 0x24, 0x19, 0x3, 0x8, [{@local, 0x40}, {@broadcast, 0x5}, {@local, 0x8}, {@remote, 0x8}]}, @timestamp={0x44, 0x10, 0x6, 0x0, 0x7, [0x3, 0x200, 0x3]}, @lsrr={0x83, 0x2b, 0x3b, [@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @local, @empty, @multicast2, @broadcast, @multicast1, @rand_addr=0x64010100, @local]}, @lsrr={0x83, 0xb, 0xa8, [@dev={0xac, 0x14, 0x14, 0x14}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x1c, 0xc9, 0x3, 0x0, [{@private=0xa010102, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@multicast1, 0x6}]}, @ra={0x94, 0x4}]}}}}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000007000000000000000000850000002700000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r3, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a400000010000104080000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c6176650000000058000580050019a103000000050005000000000005000c000700000005000700a100000005000a00ffa1000005000800ffa10000040018000500060001000000060002000100000005001e00000000000500010003000000140003006272696467655f736c6176655f30"], 0xa4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB="8025000041000701fefffffffeffffff017c0000040042800c00018006000600800a00005a250280bc1b1480b6130d"], 0x2580}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e23}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20028001}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x49, 0x8, 0x22, @loopback, @mcast2, 0x8000, 0x7800, 0x6, 0x3}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x40, 0x20, 0x8, 0x3d, {{0x44, 0x4, 0x1, 0x8, 0x110, 0x68, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@rr={0x7, 0x23, 0xcd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010101, @local, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x17}]}, @timestamp={0x44, 0x28, 0x2b, 0x0, 0x7, [0x8, 0x9, 0xc, 0x2, 0x8cc3, 0x7, 0x200, 0x5, 0x4]}, @cipso={0x86, 0x24, 0x1, [{0x2, 0x12, "7186578f786f7196f84e2998010daee2"}, {0x0, 0x2}, {0x0, 0x6, "cb3941a6"}, {0x6, 0x4, "601a"}]}, @timestamp_prespec={0x44, 0x24, 0x19, 0x3, 0x8, [{@local, 0x40}, {@broadcast, 0x5}, {@local, 0x8}, {@remote, 0x8}]}, @timestamp={0x44, 0x10, 0x6, 0x0, 0x7, [0x3, 0x200, 0x3]}, @lsrr={0x83, 0x2b, 0x3b, [@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @local, @empty, @multicast2, @broadcast, @multicast1, @rand_addr=0x64010100, @local]}, @lsrr={0x83, 0xb, 0xa8, [@dev={0xac, 0x14, 0x14, 0x14}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x1c, 0xc9, 0x3, 0x0, [{@private=0xa010102, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@multicast1, 0x6}]}, @ra={0x94, 0x4}]}}}}}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000007000000000000000000850000002700000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) recvmsg$can_j1939(r3, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x40) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a400000010000104080000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c6176650000000058000580050019a103000000050005000000000005000c000700000005000700a100000005000a00ffa1000005000800ffa10000040018000500060001000000060002000100000005001e00000000000500010003000000140003006272696467655f736c6176655f30"], 0xa4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB="8025000041000701fefffffffeffffff017c0000040042800c00018006000600800a00005a250280bc1b1480b6130d"], 0x2580}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bridge0\x00'}) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e23}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20028001}, 0x8000) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x49, 0x8, 0x22, @loopback, @mcast2, 0x8000, 0x7800, 0x6, 0x3}}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 6.080187914s ago: executing program 4 (id=3964): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)=@xdp={0x2c, 0x8, 0x0, 0x30}, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@newtaction={0x70, 0x30, 0xffff, 0x1, 0xfffff000, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0xffffffe1, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x7, 0x30000000, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x100007}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}}, 0x0) 5.958570328s ago: executing program 0 (id=3965): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x80000) ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000140)={0x6, 0x9}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4000000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="05150200fffe00021800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="f5c386706a2043b17b464b88ffc7f6f2e18a8ed6e6eb619d2956fa4307060000c224875cd3af9e9cd4653acfe5ad844fc35719f503eb55bae2c62cec7a288448dd8b34b5b085a6407dab16442cde67969fd53ef966d08b93ef2674f35ef6669b7af30f1bb53b15a06b76887c11a0c688f738665816055154eb1a7cf1efe07098c1c597bb34541b504ddfa482f3e0f3e4f237d0af61a69fd8b088805e7f87b5ede9b6f8c7585714b8b76fb0e40deb2e454fddc8b120b7097c740d35562d38"], 0x40}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 5.804161465s ago: executing program 1 (id=3966): r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000240)={0x84, @loopback, 0x4e22, 0x3, 'lc\x00', 0x34, 0x80001, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e61, 0x3, 'lc\x00', 0x8, 0x20000, 0x77}, {@remote, 0x4e20, 0xac91d2bf000ec5eb, 0xcd}}, 0x44) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7}, 0x50) socket$inet_smc(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f0000000a00)={0x8, 0x9, 0x6, 0x1000, 0xa, 0x7e, 0x72, 0x7f1c}, 0x0, 0x0, &(0x7f0000000ac0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="18080000cbb60000000000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100b00000009500000000000000b7020000000080007b9af8ff00000000d60900001fffffff7baaf0ff00000000bf2720000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004604f0ff7600000018010000696c6c2500000000002020207b1af8b000000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500ff1006000000bf9800000000000056080000000000408500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000300), &(0x7f0000001080)=0x4) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="00f9c22ea7", 0x5}], 0x1}, 0x49cf75490397e68f) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8905, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) 5.736005093s ago: executing program 4 (id=3967): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) pipe(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f0000000400000004000000120000"], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "1b8100", 0x18, 0x11, 0x0, @empty, @mcast2, {[], {0x4e25, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x5, 0x9}}}}}}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @icmp={{0xe, 0x4, 0x2, 0x27, 0x40, 0x66, 0x0, 0x81, 0x1, 0x0, @loopback, @broadcast, {[@ssrr={0x89, 0x7, 0x16, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0xc, 0x49, 0x1, 0x8, [{@local, 0x8c}]}, @ssrr={0x89, 0xb, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @end, @ra={0x94, 0x4, 0x1}]}}, @address_reply={0x12, 0x0, 0x0, 0x90e}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) r7 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000000000)=0x400, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r9, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) write$cgroup_int(r8, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) sendfile(r8, r0, 0x0, 0x7d1d7457) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) 5.6217511s ago: executing program 2 (id=3968): socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000240), 0x4) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="0204270003000000000040001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee84400001efef948d0a3119fb8e74620180100000000000000c83a18ec683b5b583d8d74ba16a75be8f75389dd2d2461", 0x5d}], 0x1}, 0x0) pselect6(0x40, &(0x7f0000000080)={0xd, 0xfffffffffffffc01, 0x1, 0x8, 0x2, 0xbdda, 0xfffffffffffffffe, 0x2}, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r2) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000300)=ANY=[@ANYBLOB="00000000720e00a1a23d94e9c3b9ff30ea68d9a49573d88d54230ac84ab6170c5bd017c330a728ef8cb718b3c0afa4ba3d1101008c415f743e1846829c5562579b454610c6159b8a9eba116055a3429a0f85bb1fb85cf823", @ANYBLOB="010026bd7000fddbdf250200000014000100200100"/30], 0x28}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r3, 0xffffff25) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x6, 0x0) close(r6) write(r4, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r7, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r8, 0x0, 0x41, &(0x7f0000000ec0)=ANY=[@ANYBLOB="66696c74657200000041000000000000000000000000000000000000000000007802"], &(0x7f0000003000)=0x2a0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r9 = socket(0xa, 0x3, 0x85) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'gretap0\x00'}) 5.472436518s ago: executing program 3 (id=3969): getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x7ff, 0x3, 0x8002, 0x9, 0x2, 0xfffff6a4, 0x3, 0xfa, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={r0, 0x5, 0x80, 0xdc1f, 0x200, 0x800}, &(0x7f00000000c0)=0x14) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000100)='}^}#]\x00', 0x22000, &(0x7f0000000140)={@_ha_fsid={[0xfff, 0x8]}, {0x5, 0x7, 0x9, 0x1}}, 0x4, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x3}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000240)={r1, 0x7}, &(0x7f0000000280)=0x8) sendmsg$NFT_BATCH(r2, &(0x7f0000000e00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0x1cc, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0x1ac, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'dummy0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x694, 0x8, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x64c, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, {0x1c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x5b4, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x5a8, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x24c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x56, 0x1, "2e504bd52f395d3c557659c2cd2510ce604fb523f3a969407970b20b1ec82a7c98bcf2ac52164f4ea4ceeb5f3a9320136f6763a96b0b1b8063095ccb2586903ee69950538e7446a9ad52266eef1fa25cd86a"}, @NFTA_DATA_VALUE={0x24, 0x1, "cfdc302c65dba07dc330dea92c05f0a1f652295a80dda43f84207025d76996d6"}, @NFTA_DATA_VALUE={0x80, 0x1, "e90f1ce91973af54032d9190dbe604394e56fcd8c75e72a83d28eb280624fc792155957d9cba56c984392269207f81f7cd9400379bb5b4d4802dd7de1dd68df0b6da60cb12efff75b214fbab89a864292ea369bc236ec9d0379e8e17b3f6a5c352751d5ededaf2a9a000cee89b42bde5d6ed2e1e723d6eba2db344fb"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xa9, 0x1, "b3d81eb1008cbfcc85c77dd99dd920fff8f78149a2c828147ee82d09f43bba621aadd888c50fa1b472de08d8a20009ab3a431f0229ce25454a0d70c8eb73b5113d615f2dac1252e2144efedc128c8ec210b388cc948f4c2a0bf99afb8b74df1d6e6dd3d12ec432b2fff91baeb05b0b488fbf06f28fc574be5609c023bf33a92d727026477398e02e64491dc48dcc7467234bc0e8503997985fbb64c770cbef7827e89fb884"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc3c598773907ddce}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0x330, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xc6, 0x1, "2565e9509546933d64648c447199d9b407a02f54aed13a67e78fba79c5f6f33513aa5d26ebde1d1f51b6d11238cada7d5eac0af08864a2de10b482732bcf236d3e7b61fea5f77ffb9ed276309c544bc3f0e6926b013fcf51f23c112d607fe5171b2f749be673238a4e414c5774d87381ac277afb6dbad16408199ee943d1163bd7e4dbd5ed4734864ef5007fd2d5b5c57a38c5919ba2d10ee26a14d89a13dd932416b00606db2d7645f71ef998379a83af5b71f2025ae655f7e2d6976439dfbb2826"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x9a, 0x1, "98f57691ffebc6694e3900083fd708992cebb760b73d2383d0f77068d29ef7966044dc86a7caa9649bd591fe243c53e4a1556b845639605999a8765a3c403e08bea1f8bf356c0bea0995123f3afb85c42f248bf75f0f9b8460ecae6ef86ac7ba88cfaa048c87fb7ce21891e533798ffb223472df6649cc65a3f422c72f440587b5be96e675eca6eb60cde95ca49e0fd2339de43a7039"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x12, 0x1, "b4c362d72508283aa4c305f6782f"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x7a, 0x1, "f279368ff6f3bf1fac92fc0cdf4f924d80780d5bf04e160a063fbc199dcd9dbefe35bbcbd61af20f5fd04c6d06a772d298508b0431eebbd8d982b2e33e2cbad617bec0a7c345441934da9a8cf12ad98c979a0411039cfd3a9e9571845ec8c803756b53648390c8789c5102e8b5bbf8dd9ddf16bd2484"}, @NFTA_DATA_VALUE={0x24, 0x1, "e35c3b57e234c3b36a05fa112746c88cb990dbcb223fa10ef7e737aa235162db"}]}]}}}, {0x4c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8}]}}}]}]}, @NFT_MSG_DELTABLE={0x224, 0x2, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x75, 0x6, "cf373470f5acd2a190620cca1ba78f3a3aef07c2fdb24680905e9f5aa689f5bb82653555c5af1e96be4165e73e53a522ebaae4b862707acfa793a28c4e6a705b866ef39fc58defdc191143e8b34b785b718fbb68bd2705502d2e7b258dcabb2bd350883573f35c08731b9ef30a6b1d02b8"}, @NFTA_TABLE_USERDATA={0xf6, 0x6, "a290b187c369175abb276e69f5c5308c5abf13ffc03171a7d7cd9e32f22c384c64b2be9418449a59dcbf2de151ced3b625a204cf23272d449eed111f9b64ea3447135292cff27905d2154e270a3b733b212f8b4f8f8a0a93f632fe235ce6b7fba6be21088bdf140a0ffcc262a73be2dbc09b35ec2e25e6907218c2f30d7ccede502ebd3bef4ef826797851a31f69064f6017ee81d87558222309aa9084e88f6ec9245e58b3a8fa73109147ed38ef2b7d1087515e7a521cf2c862b5c8a346272bf2ae8f7bf14592623c8878817660a6359b7dad949bad3abdc88c1665715ede7ae14b00fec18dce2b3fb0bc763fd5e5c5f8f0"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x5e, 0x6, "3aec2343f2c7bb29d98ad460fb00ceb7b9a63f8b62e5955008ac740e75c41d8a3b7a4779901f6a443c8d8fd836e04721fd134437b4ce50a9456e39f0953f4fbb1edcfdf29e821f8543ef69b9d741d5d899d5c5bb15c12e45ef7f"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xaac}, 0x1, 0x0, 0x0, 0x24008000}, 0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000e40)={r0, 0xfffffe01}, &(0x7f0000000e80)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000ec0)={r3, 0x0, 0x45700, 0x8}, 0x10) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000200}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000001040)={r3, 0x7, 0x30}, &(0x7f0000001080)=0xc) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f00000010c0)={r1, 0xff}, 0x8) r4 = socket(0x0, 0x80000, 0x7fff) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001100)={'macsec0\x00', 0x2000}) write$cgroup_type(r2, &(0x7f0000001140), 0x9) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001180)={'raw\x00', 0x0, [0xc, 0x7a, 0xd4e, 0x4, 0x8]}, &(0x7f0000001200)=0x54) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x5c, r6, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x40, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x790f669}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fcee85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x330545ff}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c0967a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30e604ac}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x40001) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000013c0)={r0, 0xbe7d}, &(0x7f0000001400)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000001440)={0xfffc, 0x0, 0x0, 0x6, 0x5, 0x0, 0x9, 0x3, r7}, 0x20) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000001480)={r3, 0x8}, &(0x7f00000014c0)=0x8) getsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000001500), &(0x7f0000001540)=0x4) r8 = socket$kcm(0x29, 0x2, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000015c0)=0x0) sendmsg$nl_generic(r4, &(0x7f0000001880)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001840)={&(0x7f0000001600)={0x228, 0x38, 0x300, 0x70bd29, 0x25dfdbfe, {0x11}, [@typed={0x4, 0xea}, @nested={0x20, 0x131, 0x0, 0x1, [@typed={0x8, 0x69, 0x0, 0x0, @u32=0x3}, @typed={0x4, 0xf4}, @nested={0x4, 0xc4}, @typed={0x8, 0xee, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0x39}]}, @nested={0xa0, 0xa4, 0x0, 0x1, [@generic="309115a11f48c2f0aa7cfa6c725e4c32df873c729bc88573f8e9f3c6884f596e8f76cc9d34ba87aee423a73e2b6cfa11f7a403ab754b14d822a72a71c6622cc130efd4c1820812bb859604f9cb9b3b107c58350142055cc5426dce82b1308417f680e6b901b508efe28ddcca48b0efe83f652b59517a091dc4ae97b5ca505784b4082b765e06d6e9650d418823ca010c3ac4bf16e8bcc641d5a05343"]}, @typed={0x4, 0x34}, @typed={0x8, 0x46, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x10d, 0x0, 0x0, @fd=r4}, @generic="d23d25f60d3885a176ed7759efab8f23ec8ecdd8e5c8faf51a7902d23f10a57a6e490f0e0f285fbf9f64ccc59b84a375106b84306cb3f4726c", @typed={0xe1, 0x31, 0x0, 0x0, @binary="ae00ea0d38e0c190ddea6e128f642bbeebb34385b77d311f47a16cceb476c2040437e5b4d38d3e960ee21dc5e925f057aed47c24d9da57d62bc5506c8f6701ef8da7b561e3d41b82877dca8c889fd3473282bcff789b4abeae663cfc6a6e04e8ffec3b036dcdfdc7daaf84c03b8591ece3123c96aeaf8c3731ca0927e5691df93af57d3721be3934dd6864cce82d9dbeee9d510409247094ac4f8a597052eeda019d4698aa2ac625f80109c9088370de7047601d47a0b99ca04d16a39f4ee64e01a041bda12bc1c8503ad928bdf2075f4abfca02a0378bad60dcd675a7"}, @typed={0x8, 0xca, 0x0, 0x0, @uid=r9}, @generic="313a8e05fb1661ba7bad7730980e59d263c6dee2"]}, 0x228}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000018c0)={r2, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001980)={{r2, 0xffffffffffffffff}, &(0x7f0000001900), &(0x7f0000001940)='%pB \x00'}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000001b40)={'vxcan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d00)={0x11, 0x16, &(0x7f00000019c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_fd={0x18, 0x6, 0x1, 0x0, r10}, @jmp={0x5, 0x0, 0x4, 0xb, 0x0, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x2c}, @map_fd={0x18, 0x9, 0x1, 0x0, r11}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001a80)='syzkaller\x00', 0xd, 0x71, &(0x7f0000001ac0)=""/113, 0x100, 0x47, '\x00', r12, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b80)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001bc0)={0x1, 0x6, 0x80, 0x8}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001c00)=[r2, r2], &(0x7f0000001c40)=[{0x4, 0x5, 0x4, 0x2}, {0x3, 0x4, 0x5, 0x1}, {0x0, 0x5, 0x6, 0x6}, {0x0, 0x2, 0x4, 0x3}, {0x3, 0x5, 0xc, 0x6}, {0x5, 0x3, 0xf, 0x5}, {0x3, 0x2, 0x3, 0x4}, {0x3, 0x1, 0x8, 0x3}, {0x5, 0x3, 0x0, 0x3}], 0x10, 0x4}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x20, 0x0, 0x8, 0x301, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x4000010) 5.283563615s ago: executing program 1 (id=3970): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) pipe(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f0000000400000004000000120000"], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "1b8100", 0x18, 0x11, 0x0, @empty, @mcast2, {[], {0x4e25, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x5, 0x9}}}}}}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @icmp={{0xe, 0x4, 0x2, 0x27, 0x40, 0x66, 0x0, 0x81, 0x1, 0x0, @loopback, @broadcast, {[@ssrr={0x89, 0x7, 0x16, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0xc, 0x49, 0x1, 0x8, [{@local, 0x8c}]}, @ssrr={0x89, 0xb, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @end, @ra={0x94, 0x4, 0x1}]}}, @address_reply={0x12, 0x0, 0x0, 0x90e}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) r7 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000000000)=0x400, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r9, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) write$cgroup_int(r8, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) sendfile(r8, r0, 0x0, 0x7d1d7457) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) 5.190555654s ago: executing program 0 (id=3971): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100033062cbd7000000000007f00000100000000000000000000000000000005000000000000000000000000000000050000fffd000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa0000000000000000000000000100000000000000030000000000000009000000000000000900000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a00000000000000010000000000000000000000000100000000000002000000230000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) 5.024683817s ago: executing program 3 (id=3972): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) close(r3) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) r8 = accept$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) ioctl$F2FS_IOC_DEFRAGMENT(r8, 0xc010f508, &(0x7f0000000340)={0x4, 0x100000001}) sendmmsg$alg(r7, &(0x7f0000003340)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0xc6c2ee60220dc2ef}], 0x1, 0x4044800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$XFS_IOC_GOINGDOWN(r9, 0x8004587d, &(0x7f0000000080)=0xffff) 4.876062491s ago: executing program 0 (id=3973): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000001c0)=[{0x1, 0x1, {0x2, 0x0, 0x1}, {0x2, 0x0, 0x3}, 0x1, 0x1}, {0x1, 0x4, {0x0, 0x0, 0x1}, {0x3, 0xf0, 0x2}, 0x0, 0xfd}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x74, r3, {0xffff, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0xc096}, 0x20000050) 4.350592444s ago: executing program 4 (id=3974): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newpolicy={0xb8, 0x13, 0x101, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x64010102, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}}, 0xb8}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r8, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f0000000700)={r5, &(0x7f0000000440)='\x00', 0x40402, &(0x7f0000000480)={@_ha_fsid={[0x1000, 0x5]}, {0xc, 0xf8d, 0x5, 0x8}}, 0x7, &(0x7f0000000500), &(0x7f0000000540)=0xb5}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)='%pI4 \x00'}, 0x20) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, r12, 0x6, '\x00', r9, r11, 0x2, 0x4, 0x3}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r11, &(0x7f0000000b80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x401}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x1}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xef2}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xa1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008010}, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0xa, &(0x7f0000000880)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000000140)='GPL\x00', 0x91, 0x47, &(0x7f0000000300)=""/71, 0x40f00, 0x10, '\x00', r9, 0x25, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x1, 0x3, 0x6, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r11, r13, r12], &(0x7f0000000880), 0x10, 0xffffff76}, 0x94) ioctl$EXT4_IOC_GETSTATE(r5, 0x40046629, &(0x7f0000000000)) 4.060393433s ago: executing program 0 (id=3975): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) (rerun: 32) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x14, r2, 0x5, 0x70bd2c, 0x3, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async) syz_80211_inject_frame(0x0, &(0x7f0000000080)=@mgmt_frame=@action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x4}, @device_a, @device_b, @random="d6878ecb479c", {0x0, 0x3}}, @addba_req={0x3, 0x0, {0xf6, {0x0, 0x0, 0x7, 0x6}, 0x10, {0x3, 0x3}}}}, 0x21) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x20000010) syz_80211_inject_frame(0x0, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void}, 0x2e) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) syz_80211_inject_frame(&(0x7f00000001c0)=@device_b, &(0x7f0000000740)=@data_frame={@msdu=@type11={{0x0, 0x2, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x8}, @device_b, @device_a, @broadcast, {0xe, 0x8}, @device_b, @value={0xb, 0x1, 0x1, 0x0, 0x6}, @value=@ver_80211n={0x0, 0x1, 0x2, 0x3, 0x0, 0x2, 0x0, 0x0, 0x1}}, @random="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"}, 0x53d) 3.995914336s ago: executing program 2 (id=3976): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r1, &(0x7f00000002c0)=ANY=[], 0x33) (async) sendfile(r1, r0, 0x0, 0x10000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 3.947876793s ago: executing program 1 (id=3977): r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000)=0x3, 0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f00000000c0)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000100)=0x28) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0xe10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xb, 0xc}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000280)={0x67446698, 0x0, 0x4, 0x0, 0x1, "4491569a36d39703d76b3fe849bc002fa3f8970253b0ae44c18e43d57655bcc784fa3d38c709d2d8c662e8aed6303c2f4230ef742673ba0703f7abd083254f1db4bd08a21abebb4346b88c85ca4a0e1c4fde2a58f5693710a782ce4d12b060f560b02b177a67ca35b4aa8ed248c1f4d6d3d1d42c8713494768091c887bf2bd0167506b84c685f2c148145b70814cfb243444a5446233772ee1b2d56fb8828a740eca59c3b317435802ef17b3fbfba2b085b26e5818970a4f3906f1b3f4fbd4e0085cd09d560b6fb39bd62cb74a5bd062a00d0ec3bd0409ede2f27679f492f8b55e148d73e5"}, 0xf5) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r2, 0x218, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x80) bind$netlink(r4, &(0x7f00000004c0)={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0xc) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000500)=0x11010) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000680)={r5, &(0x7f00000005c0)="02ce0dbb8f84940b7efd657ee82366b7d4622cebdb33bb46d92811923817a67f92fedd9ba651b9128d72afb2a6b5f76c70f4311cfa0045bc306a4429fe6772993b6bb2d80f7b60a817d8b1d91d15d1a63970e7", &(0x7f0000000640)=@udp6=r3}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r7, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x20000000) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000800)={r3, 0xdc12, 0x4, "b518d054215d9571c18f53e8c58fffc2864c25535162cef58c0f23dff018d204f027c7fd7ed739205e501f20d800a80d9f4074eaec1537148851aa71ab7cc6a5b608b495cc"}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a40)=@o_path={&(0x7f0000000a00)='./file0\x00', 0x0, 0x8, r4}, 0x18) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, r5, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x9, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @generic={0x8, 0x6, 0xa, 0x2, 0x3}]}, &(0x7f0000000900)='syzkaller\x00', 0x2, 0x4a, &(0x7f0000000940)=""/74, 0x40f00, 0x41, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000009c0)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000b00)=[r8, r9, r5, r5, r5, r5, r5], &(0x7f0000000b40)=[{0x1, 0x4, 0x4, 0x5}, {0x0, 0x5, 0xe}, {0x4, 0x2, 0xb, 0x2}, {0x1, 0x4, 0xa, 0x5}, {0x4, 0x1, 0xf, 0x4}, {0x3, 0x3, 0x2, 0x4}], 0x10, 0x8}, 0x94) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r10, 0x6, 0x15, &(0x7f0000000c80)=0xfff, 0x4) getsockopt$PNPIPE_HANDLE(r9, 0x113, 0x3, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d80), r6) sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x60, r11, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3ff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000810}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet(r3, &(0x7f0000004c40)=[{{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000000ec0)="3bc09d402ad4c4ebf97dbea0f742", 0xe}, {&(0x7f0000000f00)="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", 0x1000}, {&(0x7f0000001f00)="4e7ff3390f080b2c7d6d74c9e919d4ecba5b4fef29cb2a9f79", 0x19}, {&(0x7f0000001f40)="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", 0x1000}, {&(0x7f0000002f40)="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", 0x1000}, {&(0x7f0000003f40)="8a0d5bd16dbe3007f0373c4960ed50976effed35f224b478dc3f202f84c271ed763f0401cedf1d44ee81813101e6d8d1a2c5b073c20669e16896d32197c9d5e7a88504e801b36a1c5bb96c627cdbd9d23668717b4f395241af97ad637ee39a6e25d84751a4f19368463e68b91ae2f09c43723e738bfcb93c4aa1824a7db2cb9186f647d512a614bf7dde6ec726a8503b8025a30bc62c0747019b9a037db8720ccf351e4c41caa1513b879da88e9d2647a26507f950b52450130b5081d9d386e532ccb5d318eeb2", 0xc7}], 0x6}}, {{&(0x7f00000040c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000004480)=[{&(0x7f0000004100)="f6c1605805eb14433de65da56a3c9e41f81ff537fbcc64406394e32131a945c7ca6da7f172d5a184a32de5db676c57e0ec42d5806292582b41e9de79f754322a0c5a457026bc9e0fa7fbdb808af75dc938630ec4df0c744563babfb492891002bd231a65f555f89e5e57e112c8bf5e0ba1bc784314df98d8ae5c2710be28e7944e4aee35336938a1e2818cb36cbb7b4b985b38ccfcb80a97db3c9e25c7d74948c8535a6037de39d42d2cdd6d323d194f7828f97cd4245895d4653a9e768e83795d9ccbc94eb5189c9c57fba0fdc1", 0xce}, {&(0x7f0000004200)="9591774fa9b6787f921037dee991e2e78500ac3ce1fa05611dd6f568bb4cae1b2ed5098b975aa96f792072cc8e5e6db2b2e40212a5b3f1c60087ea3bea04fe2c0811d6e153dd583e9ef1d66a5f788ef587422291363c64afafda44c060f924f5539eb813cc3d41328cf6948d486278c8f33391cd0e96ea9854a43871f466ae8097f00fab4c2059280ed683d06af8225fe487e6bcc1b97e3012124522a52edf90096793f3cbcca9339b3b411c5e86e918fc8de50244e68810ea", 0xb9}, {&(0x7f00000042c0)="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", 0xfd}, {&(0x7f00000043c0)="733e722bee7df0785b702772ee639ddc3039ccb0daaca69df8f78910bb833c08d4a6e15598603c13205e60b3d81000281ca2660f28debc735e3f1ff94b1316349513c57e4dc025dac716ee0f765186df60e3af04d1044a843b43d848bffd2735ffe2c812ebcde3ef737aed39540c130163174d28b085316ae3ca4b7184519b90c183c6fb9fdfd80c07352b3ec27cb7d59e96287a5e200d6048b6880c880200c63489b16ac5c2a4fc57fb24abf013", 0xae}], 0x4, &(0x7f00000044c0)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0xa8, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0xad, 0x0, 0xa, [0x2, 0x2, 0x2, 0x2, 0x9, 0x6, 0x7]}, @timestamp_prespec={0x44, 0x34, 0x19, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@empty, 0x9}, {@multicast2, 0x8}, {@broadcast, 0xd6}, {@multicast2, 0x7}, {@loopback}]}, @generic={0x94, 0x6, "1f98e63f"}, @ra={0x94, 0x4}, @cipso={0x86, 0x3a, 0x1, [{0x1, 0x2}, {0x0, 0x9, "0872ba358d3075"}, {0x0, 0xf, "6ac15027d9b4fe4f959eb678eb"}, {0x0, 0x8, "dbfad07304de"}, {0x1, 0x3, "eb"}, {0x1, 0xf, "aa5025c6eecdecd12a86354cbf"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @rand_addr=0x64010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0xf8}}, {{&(0x7f00000045c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000004680)=[{&(0x7f0000004600)="f3eedacab39a8053b4931760cdd7999dcebd369bc55eae6451a5daf83f8e33225a0ce2e32243254e77b6f3e4e3", 0x2d}, {&(0x7f0000004640)="651c35fe3bb9d35755eef1f9ab43b1cfb04652f09ef9184f62413ff4b1fea16f3beb157e0d73a398d5977a", 0x2b}], 0x2, &(0x7f0000004780)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x37}, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x50}}, {{&(0x7f0000004800)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000004940)=[{&(0x7f0000004840)="fbac1fdae9c3163d51db7fcf6a6652972c50572af061df5f36d848abbf4605c6ab069a5b4b206b5aa71c345611604ea5ab414b1149808060d62d1eb77a01a5", 0x3f}, {&(0x7f0000004880)="d72d3bcafabd8d5856eae65d49fbdcfe5ff13058a9d0ef378679befc277f34eb9f01fc8d05180b1c910a3c027a39cbea367ede89e41f72295e5183323aa436bb6c86d118babc4608c1f0345d41435086962e3fff6de568f65fefcd9fc4fe5ed0af50129de9be681ad425d5f3e548b78d211d2bae3a", 0x75}, {&(0x7f0000004900)="d3314d6f46c225f29a46f8c78d1dabc257", 0x11}], 0x3, &(0x7f0000004a40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1000}}, @ip_tos_int={{0x14}}, @ip_retopts={{0x38, 0x0, 0x7, {[@end, @timestamp_addr={0x44, 0x24, 0xdd, 0x1, 0x8, [{@private=0xa010102, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@local, 0x3}, {@private=0xa010102, 0x3635}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x401}}, @ip_retopts={{0x68, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x1d, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @end, @timestamp={0x44, 0x24, 0x43, 0x0, 0x9, [0x1, 0x7, 0xdde7, 0x5, 0x9, 0x7, 0x3c2, 0x1]}, @ssrr={0x89, 0xb, 0x51, [@remote, @broadcast]}, @lsrr={0x83, 0xf, 0xbd, [@broadcast, @empty, @multicast2]}, @ssrr={0x89, 0xf, 0xe, [@local, @multicast2, @loopback]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@generic={0x82, 0x8, "00eb492b7ff0"}, @timestamp_prespec={0x44, 0x4c, 0x62, 0x3, 0x3, [{@loopback, 0x7}, {@local, 0xfffffff7}, {@empty, 0x329}, {@broadcast, 0x3}, {@multicast2, 0x8bc}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffff000}, {@dev={0xac, 0x14, 0x14, 0x18}}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x400}]}, @noop, @noop, @timestamp={0x44, 0xc, 0x2f, 0x0, 0x4, [0x4, 0x5]}, @timestamp={0x44, 0x18, 0xf6, 0x0, 0x9, [0x7, 0x6, 0x6, 0x2, 0xe7b9]}, @cipso={0x86, 0x35, 0x3, [{0x7, 0x8, "85e77620eb6b"}, {0x5, 0xd, "b4690f4cb1395512f46b89"}, {0x6, 0x4, "1721"}, {0x6, 0xf, "166515d8427ea89c8971ae5f3d"}, {0x1, 0x7, "e34fcb714a"}]}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @remote}}}], 0x1e0}}], 0x4, 0xc010) 3.759441058s ago: executing program 4 (id=3978): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37306a) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x60, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x60}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="d0040000", @ANYRESDEC=r4, @ANYRESDEC=0x0], 0x4d0}, 0x1, 0x0, 0x0, 0x2404c000}, 0x8040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) unshare(0x26020480) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0xfffff800, 0x1, 0x4, 0x9, 0xa4, 0xff9, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0xffc, 0x1, 0x702, 0x3, 0x1, 0xfffffffa, 0xe, 0xa, 0x9, 0xf, 0x7, 0x10001, 0x100000, 0x762, 0x1, 0xd, 0xe, 0x2b12, 0x80100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x10fdf, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd3, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x4002, 0x180000, 0xd, 0x8b, 0x5, 0x2b3, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x9, 0x27f, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x1, 0x6, 0x6, 0x9, 0x80000000, 0xfdfffffe, 0x2, 0x2, 0x800084, 0x100, 0x5, 0x1, 0x6, 0xb, 0x5, 0x20006, 0x8, 0x15, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0xffffffff, 0xfffffffe, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x1, 0x9fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x34, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) 3.555212029s ago: executing program 2 (id=3979): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f28bdda0a9423debbb86f9dba4a2dba4dbe076c28282900c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="cfe7336f91087ba18b"}]}]}, 0xe0}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000024c7b7f88b496c38082fbc3dc0d7937a1c31cf6ae26097281e2f7e3d5c72ed9a089e70c2ed1d7e3130a3f9d4527e7cfce71a15301acc1b3274eefc1bc616006da7e576a561e2d884c5da7ea07b465283335a556b67dab7255d8b866148465f56f455841463c5eb8a35b4371f6e34f5832e3526992309f4b56c591367eba74517bd14645ae53e995fa61fc6de52e29037c32ff7848c2602941dc5832d001e9b2125f8160b67fea3786b8e36118e085c2a3acd4f53cc113cf0c0c6ee10cf1adb26fd34c77812862da598e255afca7b79491a5c6ca0256a52520b382977"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc, '\x00', 0x0, r2}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x92fa11e7c198763d, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xa9}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f00000001c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1a3081, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) bind$l2tp(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @empty, 0x5}, 0x10) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r8, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) listen(r8, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r9, 0x0, 0x0, 0x1000) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0x0, &(0x7f0000000540)="3cdc166fd75394a0c51d7de5f8f0", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000140)=""/33, 0x202000, 0x800, 0x42, 0x1}, 0x20) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x66) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000fe0085abb78500000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000090000180000000000000000000000000000019500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x3, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) 3.554388465s ago: executing program 1 (id=3980): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x74, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0x18, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 3.379279508s ago: executing program 1 (id=3981): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x13c, 0x10, 0x1, 0x70bc2b, 0x4000000, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x8, 0x3, 0x5, 0xa, 0x60}, {@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x32}, {0xfffffffffffffffe, 0x4, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x89}, {0x3, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x70bd26, 0x0, 0x2, 0x4, 0x0, 0x6c}, [@algo_crypt={0x4c, 0x2, {{'cbc(blowfish)\x00'}, 0x20, "72f01afe"}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x44050) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x2, 0x4000000, 0xffffffff}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x55e6e33bbede5e4d, 0x40, 0x4, 0x401, {{0x33, 0x4, 0x2, 0x1b, 0xcc, 0x65, 0x0, 0x10, 0x152667487c9a7603, 0x0, @loopback, @rand_addr=0x64010102, {[@timestamp={0x44, 0x18, 0x9e, 0x0, 0x7, [0x3, 0xc, 0xc601, 0xd, 0x5]}, @timestamp_prespec={0x44, 0xc, 0x45, 0x3, 0x5, [{@empty, 0x7fffffff}]}, @cipso={0x86, 0x71, 0x2, [{0x2, 0xa, "4c659518149b7717"}, {0x2, 0xb, "ec2edc9c0ee4fddb5f"}, {0x7, 0x3, "8c"}, {0x4, 0xd, "07a0736c08ab49247adf9e"}, {0x1, 0xa, "0f483a0d047ccf08"}, {0x5, 0xe, "db4de30ac33623a83e8b0d4a"}, {0x5, 0xc, "fdc3427fcada1f418bc1"}, {0x2, 0xd, "5fcc6d177612bdadc5eab5"}, {0x1, 0x5, "ee423e"}, {0x2, 0x10, "91b8f5d84868e6c02da6bad34c29"}]}, @noop, @ssrr={0x89, 0x1f, 0x26, [@private=0xa010101, @remote, @multicast1, @remote, @loopback, @dev={0xac, 0x14, 0x14, 0x42}, @multicast2]}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f00000000c0), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@can_delroute={0x54, 0x19, 0x100, 0x70bd29, 0x25dfdbfc, {0x1d, 0x1, 0x450506ed3f2d1bc2}, [@CGW_FILTER={0xc, 0xb, {{0x0, 0x1}, {0x3}}}, @CGW_DST_IF={0x8, 0xa, r2}, @CGW_MOD_OR={0x15, 0x2, {{{0x2, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "bab2d7faa3885f71"}}}, @CGW_LIM_HOPS={0x5, 0xd, 0x15}, @CGW_FILTER={0xc, 0xb, {{0x1, 0x1, 0x0, 0x1}, {0x0, 0x1}}}]}, 0x54}}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000200)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x70bd29, 0x10080, {}, [@IFA_CACHEINFO={0x14, 0x6, {0x5, 0x9, 0x8, 0x200}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40080c4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r7, 0x29, 0x44, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40084}, 0x0) 3.371087999s ago: executing program 3 (id=3982): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_coalesce={0xf, 0x3, 0x7, 0x4, 0x2, 0x1, 0x202a9, 0x8a10, 0x71, 0x2, 0x8, 0xfffffff6, 0x0, 0x800, 0x8, 0x400c, 0x4, 0x9, 0x3, 0x8, 0xff, 0x5, 0x1}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000080000000000000000000000000200"/28], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x2, 0xe5e1}]}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x2, 0xe5e1}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x12, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009500080000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'netdevsim0\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000a80)=@newtaction={0x98c, 0x30, 0x9, 0x0, 0x0, {}, [{0x978, 0x1, [@m_police={0x974, 0xa, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0xd}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa2}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x8, 0xfffff000, 0xfffffffa, 0x3, 0x35ec, 0xff, 0x7, 0x1, 0x2, 0xffffff8b, 0x400, 0x6d9, 0x5, 0x0, 0x8be, 0x2, 0x6, 0x4, 0x382, 0x2, 0x7, 0xb6, 0xab0b, 0x400, 0x9, 0x5, 0x0, 0xf, 0x1, 0x1000, 0x4, 0xd4, 0x4, 0x3, 0x6, 0xf, 0xc9, 0x9, 0x4, 0x3a, 0x0, 0x4, 0x9d3, 0x3ff, 0x751, 0xfffffff9, 0x9, 0x8, 0x2, 0x3, 0xffff4f1b, 0x20008, 0xe858, 0xd, 0x7fff, 0xf23, 0xd26beb9b, 0x3, 0x7fffffff, 0xb6c, 0xffff4b24, 0x6ca, 0x3, 0x6f, 0x8001, 0x1, 0x8, 0x1, 0x8000, 0x400, 0x7, 0x7, 0x100, 0x5, 0x4, 0x9, 0xf, 0x4, 0x4, 0x0, 0x1, 0x8, 0x3, 0xfffff38b, 0x9, 0x7, 0x3, 0xa761, 0x0, 0x80000000, 0x8, 0x6, 0x4, 0x7fffffff, 0x12000000, 0x1, 0x3, 0x4d, 0x8, 0x800, 0x3, 0xdad, 0x40, 0x6, 0xfffffffe, 0xf, 0x5, 0x2, 0x5, 0x1, 0x7f, 0xd, 0x1, 0x3, 0x1000, 0x16b, 0x9, 0x6, 0x7, 0x1, 0xc0c8, 0x2, 0xd, 0x9, 0x0, 0x100, 0xfffffff9, 0x9, 0x7, 0x101, 0x1f78bcf4, 0x3, 0x7, 0x276, 0x4, 0x9, 0xffff, 0x5, 0x1, 0x8, 0x7ff, 0x10000, 0x8, 0x1ff, 0x81, 0x7, 0x81, 0x847, 0x1, 0x0, 0x1ff, 0x1fc5, 0xa008, 0x87, 0x4, 0x5, 0x5, 0x1, 0x8, 0x1, 0x7, 0x3, 0x9, 0x672c, 0x5, 0x3, 0x1, 0x0, 0x8393, 0x3, 0x5, 0xfffffff8, 0x5, 0xa48, 0x1ff, 0xffff, 0x7, 0xea, 0xb, 0x7ff, 0x9ac7, 0xde, 0x381, 0x4, 0x7, 0x7, 0x0, 0xc75, 0x4, 0x9, 0x7, 0x9, 0x7, 0x7fffffff, 0x9, 0x4, 0x4, 0x9, 0x1, 0x9, 0x9, 0xfffffff9, 0x8, 0x9, 0x7, 0x8fa, 0x4, 0x2, 0x9, 0x2, 0xfff, 0x1, 0xed, 0x8, 0x4c, 0x9, 0x0, 0x3, 0x5, 0x80, 0x4, 0x6, 0x9000000, 0x1, 0x4, 0xedc7, 0xffffffff, 0x8, 0x7f, 0x5, 0x6, 0x8, 0xffffffff, 0x9, 0xfffffff7, 0x10, 0x6, 0x1000, 0x2, 0xa69, 0x7, 0xb146, 0x4, 0x1, 0x3ff, 0x8, 0xfff, 0x4, 0xfffffffb, 0xffff0000, 0x5, 0x9, 0x9, 0x8, 0x499]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x101, 0x8005, 0x3, 0x3ff, 0x3, 0x1, 0x2, 0x80000040, 0x200, 0x5, 0x6, 0x0, 0x7fffffff, 0x0, 0x1, 0x5, 0x5, 0x280000, 0x5, 0x0, 0xb, 0x7, 0xfffffeff, 0x8, 0x1000, 0x4220, 0xa, 0x10000, 0xd0, 0x7ff, 0x657c, 0x2, 0x16f, 0x1000, 0xc05, 0x4, 0x1, 0x9, 0xa, 0x3, 0x3, 0x80, 0x6, 0x0, 0xd20, 0x80, 0xa2, 0x53, 0x0, 0x8, 0xfffff608, 0x1, 0x4, 0x8, 0x1, 0x9, 0x200, 0x1, 0x8, 0x5, 0x7, 0x77, 0x6, 0x7f, 0x0, 0x9, 0x80000001, 0x3, 0x5, 0x4, 0xffffff00, 0x4114, 0x9, 0x7, 0x8, 0xffffffff, 0x5, 0x800006, 0x7, 0x80, 0x7, 0xff, 0x1, 0x81, 0xffffffff, 0x53, 0x2, 0x6, 0x5, 0x101, 0xc, 0x4, 0x1000, 0x7, 0xa, 0x3, 0x7, 0x70426ec6, 0x2, 0x101, 0x46b8c77, 0x7, 0x2, 0x8, 0x2, 0xc, 0x1, 0x2, 0x9, 0x3, 0x6, 0x4, 0x2, 0x8, 0xf, 0x9, 0x5, 0x43, 0x1, 0xf0, 0xa383, 0x9, 0x2, 0x8, 0x80000000, 0x3, 0x5e, 0x6, 0x8, 0xba, 0x9, 0x7fffffff, 0x8, 0x3d, 0x1, 0x3, 0x3, 0x10001, 0x8, 0x300, 0x7, 0x9, 0x9, 0xa0, 0xffff5c67, 0x7ff, 0x10001, 0x4, 0x5, 0x161e800, 0x369, 0x0, 0xb, 0x79d, 0xd9, 0x9, 0x8, 0x3, 0x8, 0x7, 0x1, 0xd64, 0x6, 0x9, 0x8, 0x0, 0x1, 0x4, 0x1, 0xe0a9, 0x9, 0x4, 0xc0000000, 0x6, 0xddc000, 0x4, 0x2, 0x6, 0x800, 0x0, 0x0, 0x80, 0x5, 0x2, 0x101, 0x2, 0x6, 0x3, 0x200, 0x2, 0x42a9c59f, 0x5, 0x9, 0x40, 0x4, 0x14000, 0xa22, 0x5, 0x0, 0x5, 0x7, 0x4, 0x75f, 0x4, 0x3, 0x1, 0x4, 0x1, 0x25a, 0x6, 0x1, 0x5, 0x769, 0xfff, 0xfffffffe, 0x7ff, 0x100, 0x81, 0x5, 0x400, 0xfffff2c1, 0x8001, 0x1ff, 0xffffffd5, 0x9, 0x40, 0x200, 0x1, 0x0, 0x8, 0x4, 0x9, 0x2, 0x5, 0xd053, 0x200, 0x65, 0x800, 0xfffffffb, 0x9, 0x4, 0x4, 0x8, 0x4, 0x2, 0xd3, 0x46fb, 0x7fffffff, 0x2c7, 0x7, 0x8, 0x1ff, 0x4, 0x5, 0x4d7680, 0x200]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]]}, {0x103, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x98c}}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r7 = socket$kcm(0x1e, 0x4, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1e, 0x3, &(0x7f0000000340)=ANY=[@ANYRES16=r7], &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000000000000000000001700000018010000202064250000000000202020edf39cc00d78a18bba21997939c21af8ff00000000bfa100000000000007010000f8ffffb70300000200000085000000170000009500"/109], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.167553128s ago: executing program 0 (id=3983): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x200008c0}, 0x6008045) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000100006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9d76eebf2f17c"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x1, 0x2}, 0x10}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x4040004) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000041401002cbd7000fbdbdf25080001000100000011c960947fbf13f519d5933eade8254efa94b68d93da9e8fdd63bb3da197c724bbff836a1b5907779503c0797e86d31a4d146d40d0f907baa224f6c1c3e80225fc55f4b3babaa1407e7f335ba4217f9da1eb9a290efc22eb5cec3ba89d80820bc6ff"], 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000084) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) socket(0x11, 0x3, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10000, &(0x7f0000000440)={r6, r7+60000000}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x9, &(0x7f0000000100)=@raw=[@cb_func={0x18, 0x2, 0x4, 0x0, 0x6}, @generic={0xb7, 0x1, 0x0, 0x0, 0xa}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0xb5}, @exit, @generic={0xb7}, @exit], &(0x7f0000000200)='GPL\x00', 0x2, 0x1000, &(0x7f0000000300), 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b1a, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 405.837494ms ago: executing program 4 (id=3984): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x418, 0x288, 0xa, 0x148, 0x288, 0x10, 0x380, 0x2a8, 0x2a8, 0x380, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x288, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0xe2, 0x9, 0x0, 0x0, 0xfffffffb, 0x7}, {0x4}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x400, 0x0, 0x44, 0x7, 0xff, 0xff, 0xfffffaf9, 0xe, 0x20}, {0x9}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0xafc, 0xf8, 0x10001, '\x00', 'syz0\x00', {0x4}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'bond_slave_1\x00', 'vcan0\x00', {0xff}, {}, 0x33, 0x3}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@time={{0x38}, {0x4, 0xdf, 0x7b72, 0x30e7, 0x393, 0x4, 0x2}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x2}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x478) r1 = socket(0x10, 0x3, 0x9) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x2, 0x893, 0x800, 0x1}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4044855}, 0x10) 269.192155ms ago: executing program 0 (id=3985): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42}}}, 0x10) (async) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffefffe}}, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r4, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x1004) r5 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000140)={0x4, 0x7f, 0x4, 0x4000000}, 0x18) (async) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff110002000200000800040001000000", 0x24) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) write$bt_hci(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="0000023f3201"], 0x138) 113.512474ms ago: executing program 4 (id=3986): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0400990009000000440000000800020009e0fe00475211446f904617cc656bb62974073903f78b41347f2234c0d5f8b7ecc80a9457b28287d7730ed88de2ed3f9502d1b14a1ef59230ad4bfc0537d7ec0ec90ffdd5d2c52b215bbbcd1730dfa11effb7ea3b5db69576ffbc183d598ec694584b094ef3a2759423170153497938926f0d9456c80e953c5663f31fa9675982c4fb22d3fcc563ab26d20f07862d0e34cd278a2a255aa32e1ac920560d71ffb1e467eb02513859"], 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r3, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ff, 0x28}}}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xca}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x2}, @NL80211_MESHCONF_FORWARDING={0x5}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x8084) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x10}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xd0a6}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BCAST_FLOOD={0x5, 0x1e, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040c0}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) sendmmsg(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, 0x0, 0xd8}}], 0x1, 0x4000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01006dbd70000000000021ffffdd0c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, 0x0, 0x0) r11 = socket$inet6(0xa, 0x3, 0x1) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r12, &(0x7f00000007c0)=[{{&(0x7f00000013c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000001d80)=[{&(0x7f0000000380)}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e26, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000540)="17349d03781faa032c8e742110fdadf10996fbc9115102495f1af15f54debe265b2c6a62d7a93a9bf3a4db35c49b93", 0x2f}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000900)=[{0x0}, {0x0}], 0x2}}], 0x3, 0x2000c044) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x558, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x488, 0xffffffff, 0xffffffff, 0x488, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62, 0x0, 0x5}, 0x0, 0x358, 0x398, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f4, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'macvlan0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5b8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0000000200000006500000ff"], 0x50) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040000000c0000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="009e89d38b00"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r14}, 0x38) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) socket$nl_route(0x10, 0x3, 0x0) 20.069687ms ago: executing program 2 (id=3987): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) pipe(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f0000000400000004000000120000"], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "1b8100", 0x18, 0x11, 0x0, @empty, @mcast2, {[], {0x4e25, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x5, 0x9}}}}}}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @icmp={{0xe, 0x4, 0x2, 0x27, 0x40, 0x66, 0x0, 0x81, 0x1, 0x0, @loopback, @broadcast, {[@ssrr={0x89, 0x7, 0x16, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0xc, 0x49, 0x1, 0x8, [{@local, 0x8c}]}, @ssrr={0x89, 0xb, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @end, @ra={0x94, 0x4, 0x1}]}}, @address_reply={0x12, 0x0, 0x0, 0x90e}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) r7 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000000000)=0x400, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r9, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) write$cgroup_int(r8, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) sendfile(r8, r0, 0x0, 0x7d1d7457) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) 16.377593ms ago: executing program 1 (id=3988): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000d80)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x10001}, 0x80, 0x0}, 0x20000800) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @dev={0xfe, 0x80, '\x00', 0xfc}}, 0x80, 0x0}, 0x20000804) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001040)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000485}, 0x4000000) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)=@buf) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r3, 0x8914, &(0x7f0000000940)='dummy0') pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r4, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000001010103000008000000000002000000180001801400018027000100ff08004000000000000000198008000100020000008574d383b1219ccf4156e3f58fd4000000ccf5767f4c2069648a1fceb2000000"], 0x38}}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, &(0x7f00000002c0)="6ee6787b8abd024e2d9a", 0xa, 0x4000000, &(0x7f0000000880)={0x2, 0x4e23, @private=0xa010100}, 0x10) openat$cgroup_ro(r0, &(0x7f0000000140)='freezer.state\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000001100), &(0x7f0000001180)=0x8) 0s ago: executing program 3 (id=3989): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x140c, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004810}, 0x40) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x140c, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004810}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}]}}}]}, 0x50}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) close(r3) (async) close(r3) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2710, &(0x7f0000c35fff), &(0x7f0000000000)) getpeername$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) (async) getpeername$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000340)={@rand_addr=' \x01\x00', 0x33, r7}) (async) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000340)={@rand_addr=' \x01\x00', 0x33, r7}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa1f4ffffffffff06010000f8ffffffbf", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000ec0000001e0000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010040"], 0x12) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)={0x14, 0x3c, 0x1, 0x70bd27, 0x25dfdbfb, "", [@nested={0x4, 0x117}]}, 0x14}], 0x1, 0x0, 0x0, 0x20000080}, 0x880) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1}}}}}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r11, &(0x7f0000000380), 0x0}, 0x20) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r9, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="20002cbd1446fedbdf25030000000700ffffffff080100"/46], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) (async) sendmsg$NLBL_MGMT_C_LISTALL(r9, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="20002cbd1446fedbdf25030000000700ffffffff080100"/46], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r8, 0xfffff000, 0x1b, 0x0, &(0x7f0000000380)="61df712bc88efed5ecc03234ad139064f57d9a689e722780b605a7", 0x0, 0x3, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r8, 0xfffff000, 0x1b, 0x0, &(0x7f0000000380)="61df712bc88efed5ecc03234ad139064f57d9a689e722780b605a7", 0x0, 0x3, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): space 0, times 0 [ 448.922684][T18595] CPU: 0 UID: 0 PID: 18595 Comm: syz.3.3065 Not tainted syzkaller #0 PREEMPT(full) [ 448.922710][T18595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 448.922725][T18595] Call Trace: [ 448.922733][T18595] [ 448.922743][T18595] dump_stack_lvl+0xe8/0x150 [ 448.922782][T18595] should_fail_ex+0x410/0x560 [ 448.922814][T18595] should_failslab+0xa8/0x100 [ 448.922845][T18595] __kmalloc_cache_noprof+0xa3/0x600 [ 448.922870][T18595] ? __nft_trans_set_add+0x5e/0x710 [ 448.922900][T18595] ? __nft_trans_set_add+0x5e/0x710 [ 448.922932][T18595] ? __asan_memset+0x22/0x50 [ 448.922970][T18595] __nft_trans_set_add+0x5e/0x710 [ 448.923009][T18595] nf_tables_newset+0x1d87/0x2570 [ 448.923052][T18595] ? __pfx_nf_tables_newset+0x10/0x10 [ 448.923095][T18595] ? lock_acquire+0x115/0x350 [ 448.923134][T18595] ? __nla_parse+0x40/0x60 [ 448.923167][T18595] nfnetlink_rcv+0x1288/0x28c0 [ 448.923235][T18595] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 448.923283][T18595] ? ref_tracker_free+0x689/0x830 [ 448.923412][T18595] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 448.923483][T18595] ? rcu_preempt_deferred_qs_irqrestore+0x7b7/0xb90 [ 448.923555][T18595] netlink_unicast+0x7bd/0x940 [ 448.923598][T18595] netlink_sendmsg+0x813/0xb40 [ 448.923642][T18595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.923684][T18595] ? apparmor_socket_sendmsg+0x98/0x360 [ 448.923712][T18595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.923743][T18595] sock_sendmsg_nosec+0x13a/0x180 [ 448.923784][T18595] ____sys_sendmsg+0x54e/0x850 [ 448.923818][T18595] ? __pfx_____sys_sendmsg+0x10/0x10 [ 448.923858][T18595] ? import_iovec+0x73/0xa0 [ 448.923891][T18595] ___sys_sendmsg+0x2a5/0x360 [ 448.923919][T18595] ? __lock_acquire+0x747/0x2de0 [ 448.923948][T18595] ? __pfx____sys_sendmsg+0x10/0x10 [ 448.924016][T18595] ? __fget_files+0x2a/0x420 [ 448.924047][T18595] ? __fget_files+0x3a2/0x420 [ 448.924098][T18595] __x64_sys_sendmsg+0x1b1/0x290 [ 448.924132][T18595] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 448.924186][T18595] do_syscall_64+0x166/0x520 [ 448.924211][T18595] ? trace_irq_disable+0x3b/0x140 [ 448.924233][T18595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.924258][T18595] ? clear_bhb_loop+0x70/0xc0 [ 448.924286][T18595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.924309][T18595] RIP: 0033:0x7fd9f239e159 [ 448.924330][T18595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.924349][T18595] RSP: 002b:00007fd9f31ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.924374][T18595] RAX: ffffffffffffffda RBX: 00007fd9f2625fa0 RCX: 00007fd9f239e159 [ 448.924391][T18595] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 448.924405][T18595] RBP: 00007fd9f31ec090 R08: 0000000000000000 R09: 0000000000000000 [ 448.924419][T18595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 448.924432][T18595] R13: 00007fd9f2626038 R14: 00007fd9f2625fa0 R15: 00007fff80e306d8 [ 448.924469][T18595] [ 449.060232][ T5618] Bluetooth: hci1: command tx timeout [ 449.493246][T18605] netlink: 'syz.2.3067': attribute type 1 has an invalid length. [ 449.493701][T18606] netlink: 'syz.2.3067': attribute type 1 has an invalid length. [ 449.664132][T18619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3069'. [ 449.830637][T18625] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3071'. [ 450.020201][T18636] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3073'. [ 450.137959][T18642] x_tables: duplicate underflow at hook 3 [ 450.329792][T18527] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.332539][T18527] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.332728][T18527] bridge_slave_0: entered allmulticast mode [ 450.355554][T18527] bridge_slave_0: entered promiscuous mode [ 450.374056][T18527] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.374181][T18527] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.374351][T18527] bridge_slave_1: entered allmulticast mode [ 450.399526][T18527] bridge_slave_1: entered promiscuous mode [ 450.540475][T18661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3077'. [ 450.540518][T18661] FAULT_INJECTION: forcing a failure. [ 450.540518][T18661] name failslab, interval 1, probability 0, space 0, times 0 [ 450.540547][T18661] CPU: 0 UID: 0 PID: 18661 Comm: syz.3.3077 Not tainted syzkaller #0 PREEMPT(full) [ 450.540580][T18661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 450.540594][T18661] Call Trace: [ 450.540602][T18661] [ 450.540611][T18661] dump_stack_lvl+0xe8/0x150 [ 450.540650][T18661] should_fail_ex+0x410/0x560 [ 450.540680][T18661] should_failslab+0xa8/0x100 [ 450.540710][T18661] __kmalloc_cache_noprof+0xa3/0x600 [ 450.540735][T18661] ? nfnetlink_rcv+0x1021/0x28c0 [ 450.540764][T18661] ? nfnetlink_rcv+0x1021/0x28c0 [ 450.540799][T18661] nfnetlink_rcv+0x1021/0x28c0 [ 450.540862][T18661] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 450.540908][T18661] ? ref_tracker_free+0x689/0x830 [ 450.540962][T18661] ? skb_clone+0x246/0x3a0 [ 450.540996][T18661] ? __netlink_deliver_tap+0x811/0x860 [ 450.541040][T18661] ? netlink_deliver_tap+0x2e/0x1b0 [ 450.541071][T18661] ? netlink_deliver_tap+0x2e/0x1b0 [ 450.541108][T18661] netlink_unicast+0x7bd/0x940 [ 450.541150][T18661] netlink_sendmsg+0x813/0xb40 [ 450.541199][T18661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.541242][T18661] ? apparmor_socket_sendmsg+0x98/0x360 [ 450.541268][T18661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.541300][T18661] sock_sendmsg_nosec+0x13a/0x180 [ 450.541338][T18661] ____sys_sendmsg+0x54e/0x850 [ 450.541374][T18661] ? __pfx_____sys_sendmsg+0x10/0x10 [ 450.541414][T18661] ? import_iovec+0x73/0xa0 [ 450.541446][T18661] ___sys_sendmsg+0x2a5/0x360 [ 450.541475][T18661] ? __lock_acquire+0x747/0x2de0 [ 450.541503][T18661] ? __pfx____sys_sendmsg+0x10/0x10 [ 450.541579][T18661] ? __fget_files+0x2a/0x420 [ 450.541610][T18661] ? __fget_files+0x3a2/0x420 [ 450.541653][T18661] __x64_sys_sendmsg+0x1b1/0x290 [ 450.541687][T18661] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 450.541741][T18661] do_syscall_64+0x166/0x520 [ 450.541765][T18661] ? trace_irq_disable+0x3b/0x140 [ 450.541788][T18661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.541811][T18661] ? clear_bhb_loop+0x70/0xc0 [ 450.541839][T18661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.541862][T18661] RIP: 0033:0x7fd9f239e159 [ 450.541884][T18661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.541903][T18661] RSP: 002b:00007fd9f31ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.541928][T18661] RAX: ffffffffffffffda RBX: 00007fd9f2625fa0 RCX: 00007fd9f239e159 [ 450.541950][T18661] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 450.541965][T18661] RBP: 00007fd9f31ec090 R08: 0000000000000000 R09: 0000000000000000 [ 450.541979][T18661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 450.541993][T18661] R13: 00007fd9f2626038 R14: 00007fd9f2625fa0 R15: 00007fff80e306d8 [ 450.542030][T18661] [ 450.863654][T18527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.893724][T18527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.944440][T18527] team0: Port device team_slave_0 added [ 450.976362][T18527] team0: Port device team_slave_1 added [ 451.052984][T18527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.053004][T18527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.053033][T18527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.085226][T18527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.085280][T18527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.085356][T18527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.149827][ T5618] Bluetooth: hci1: command tx timeout [ 451.197719][T18527] hsr_slave_0: entered promiscuous mode [ 451.198796][T18527] hsr_slave_1: entered promiscuous mode [ 451.199555][T18527] debugfs: 'hsr0' already exists in 'hsr' [ 451.199576][T18527] Cannot create hsr debugfs directory [ 451.633795][T18527] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.633836][T18527] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.633865][T18527] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 451.776545][T18527] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.776583][T18527] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.776603][T18527] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 451.913987][T18527] team0: Port device netdevsim1 removed [ 451.930699][T18527] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.930740][T18527] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.930771][T18527] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 452.030277][T18527] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.030318][T18527] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.030347][T18527] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 452.547939][T18615] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 452.583937][T18527] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 452.632116][T18527] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 452.634709][T18527] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 452.681439][T18527] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 452.693765][T18527] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 452.737671][T18527] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 452.738600][T18527] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 452.783213][T18527] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 453.043826][T18527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.121243][T18527] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.148236][T18709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3089'. [ 453.164481][T10314] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.164586][T10314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.200710][T11406] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.200826][T11406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.215540][ T5618] Bluetooth: hci1: command tx timeout [ 453.333895][T18712] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3090'. [ 453.463176][T18720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3093'. [ 453.466622][T18720] FAULT_INJECTION: forcing a failure. [ 453.466622][T18720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.466658][T18720] CPU: 1 UID: 0 PID: 18720 Comm: syz.3.3093 Not tainted syzkaller #0 PREEMPT(full) [ 453.466684][T18720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 453.466697][T18720] Call Trace: [ 453.466707][T18720] [ 453.466717][T18720] dump_stack_lvl+0xe8/0x150 [ 453.466756][T18720] should_fail_ex+0x410/0x560 [ 453.466788][T18720] _copy_from_user+0x2d/0xb0 [ 453.466888][T18720] kstrtouint_from_user+0xd6/0x180 [ 453.466915][T18720] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 453.466954][T18720] ? lock_acquire+0x115/0x350 [ 453.466985][T18720] proc_fail_nth_write+0x8e/0x210 [ 453.467018][T18720] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 453.467064][T18720] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 453.467100][T18720] vfs_write+0x296/0xba0 [ 453.467152][T18720] ? __pfx_vfs_write+0x10/0x10 [ 453.467187][T18720] ? __fget_files+0x2a/0x420 [ 453.467225][T18720] ? __fget_files+0x3a2/0x420 [ 453.467263][T18720] ? __fget_files+0x2a/0x420 [ 453.467304][T18720] ksys_write+0x150/0x270 [ 453.467342][T18720] ? __pfx_ksys_write+0x10/0x10 [ 453.467389][T18720] do_syscall_64+0x166/0x520 [ 453.467413][T18720] ? trace_irq_disable+0x3b/0x140 [ 453.467436][T18720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.467460][T18720] ? clear_bhb_loop+0x70/0xc0 [ 453.467489][T18720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.467512][T18720] RIP: 0033:0x7fd9f235e98e [ 453.467533][T18720] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 453.467552][T18720] RSP: 002b:00007fd9f31ebfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 453.467577][T18720] RAX: ffffffffffffffda RBX: 00007fd9f31ec6c0 RCX: 00007fd9f235e98e [ 453.467594][T18720] RDX: 0000000000000001 RSI: 00007fd9f31ec0a0 RDI: 0000000000000004 [ 453.467608][T18720] RBP: 00007fd9f31ec090 R08: 0000000000000000 R09: 0000000000000000 [ 453.467622][T18720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 453.467636][T18720] R13: 00007fd9f2626038 R14: 00007fd9f2625fa0 R15: 00007fff80e306d8 [ 453.467672][T18720] [ 453.480193][T18718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3092'. [ 453.480294][T18718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3092'. [ 453.932195][T18734] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3094'. [ 453.932426][T18734] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3094'. [ 453.932448][T18734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3094'. [ 454.424632][T18746] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 455.219310][T18527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.296457][ T5618] Bluetooth: hci1: command tx timeout [ 455.318654][T18776] __nla_validate_parse: 3 callbacks suppressed [ 455.318677][T18776] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3101'. [ 455.344461][T18527] veth0_vlan: entered promiscuous mode [ 455.373618][T18780] ip6gre1: entered promiscuous mode [ 455.373644][T18780] ip6gre1: entered allmulticast mode [ 455.407755][T18527] veth1_vlan: entered promiscuous mode [ 455.526023][T18527] veth0_macvtap: entered promiscuous mode [ 455.558198][T18527] veth1_macvtap: entered promiscuous mode [ 455.657695][T18527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.732057][T18527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.819384][T18789] syzkaller0: mtu less than device minimum [ 455.909958][T18789] syzkaller0: mtu less than device minimum [ 456.037192][ T1001] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.037244][ T1001] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.037283][ T1001] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.037331][ T1001] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.176058][T18803] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3109'. [ 456.223203][T10314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.223230][T10314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.249745][T18808] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3109'. [ 456.293001][T18812] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3108'. [ 456.317440][ T6070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.317465][ T6070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.936261][ T4930] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 456.942575][ T4930] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 456.944319][ T4930] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 456.946892][ T4930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 456.962611][ T4930] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 457.241912][T18837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3116'. [ 457.241939][T18837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3116'. [ 458.182414][T18832] lo speed is unknown, defaulting to 1000 [ 458.200004][T18832] wg2 speed is unknown, defaulting to 1000 [ 458.247527][T18878] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3124'. [ 458.250509][T18878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3124'. [ 458.520805][T18881] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3125'. [ 458.701907][T18887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3126'. [ 458.832909][T18885] netlink: 'syz.4.3127': attribute type 8 has an invalid length. [ 458.886109][ T1001] tipc: Subscription rejected, illegal request [ 458.961867][T18891] xt_hashlimit: size too large, truncated to 1048576 [ 459.056533][ T5618] Bluetooth: hci0: command tx timeout [ 459.144261][T18896] Bluetooth: MGMT ver 1.23 [ 459.789012][T18926] x_tables: duplicate underflow at hook 3 [ 460.133736][T18832] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.133924][T18832] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.134064][T18832] bridge_slave_0: entered allmulticast mode [ 460.136572][T18832] bridge_slave_0: entered promiscuous mode [ 460.146634][T18832] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.146745][T18832] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.146925][T18832] bridge_slave_1: entered allmulticast mode [ 460.148905][T18832] bridge_slave_1: entered promiscuous mode [ 460.309547][T18832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.324683][T18832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.386576][T18832] team0: Port device team_slave_0 added [ 460.394881][T18832] team0: Port device team_slave_1 added [ 460.479898][T18832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.479918][T18832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.479947][T18832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.482330][T18832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.482347][T18832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.482376][T18832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.135293][ T5618] Bluetooth: hci0: command tx timeout [ 461.442356][T18832] hsr_slave_0: entered promiscuous mode [ 461.448541][T18832] hsr_slave_1: entered promiscuous mode [ 461.463844][T18832] debugfs: 'hsr0' already exists in 'hsr' [ 461.463872][T18832] Cannot create hsr debugfs directory [ 462.184745][T19001] x_tables: duplicate underflow at hook 3 [ 462.805951][T19014] __nla_validate_parse: 7 callbacks suppressed [ 462.805976][T19014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3148'. [ 463.203926][T19038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3152'. [ 463.215718][ T5618] Bluetooth: hci0: command tx timeout [ 463.287283][T19042] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3152'. [ 465.133116][T19031] tipc: New replicast peer: 255.255.255.255 [ 465.135075][T19031] tipc: Enabled bearer , priority 10 [ 465.297272][ T5618] Bluetooth: hci0: command tx timeout [ 465.381074][T19048] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3155'. [ 465.384640][T19050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3156'. [ 465.490880][T19055] x_tables: duplicate underflow at hook 3 [ 465.879159][T19067] lo speed is unknown, defaulting to 1000 [ 465.882233][T18832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 465.913443][T18832] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 465.915021][T18832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 465.974068][T18832] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 465.979205][T19067] wg2 speed is unknown, defaulting to 1000 [ 466.009479][T18832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 466.031377][T19082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3163'. [ 466.034693][T18832] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 466.091165][T18832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 466.136871][T19076] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3162'. [ 466.143020][T18832] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 466.721461][T19097] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3165'. [ 466.804212][T19105] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 466.832814][T19105] syzkaller0: entered promiscuous mode [ 466.832839][T19105] syzkaller0: entered allmulticast mode [ 466.884445][T19108] tipc: Enabled bearer , priority 0 [ 466.905865][T19113] netlink: 'syz.1.3169': attribute type 21 has an invalid length. [ 466.905892][T19113] IPv6: NLM_F_CREATE should be specified when creating new route [ 466.906068][T19113] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 466.906080][T19113] IPv6: NLM_F_CREATE should be set when creating new route [ 466.906124][T19113] IPv6: NLM_F_CREATE should be set when creating new route [ 466.906150][T19113] IPv6: NLM_F_CREATE should be set when creating new route [ 466.973243][T19104] tipc: Resetting bearer [ 467.034444][T19104] tipc: Disabling bearer [ 467.072057][T18832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.129533][T18832] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.169455][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.169570][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.226989][T11401] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.227124][T11401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.375483][ T5618] Bluetooth: hci0: command tx timeout [ 467.799918][T19138] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3173'. [ 468.071144][T19146] netlink: 'syz.0.3176': attribute type 1 has an invalid length. [ 468.189856][T19146] bond8: entered promiscuous mode [ 468.191886][T19146] 8021q: adding VLAN 0 to HW filter on device bond8 [ 468.276494][T19149] syzkaller1: tun_chr_ioctl cmd 1074812117 [ 468.516804][T18832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.561181][T19167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3180'. [ 468.640706][T18832] veth0_vlan: entered promiscuous mode [ 468.688931][T18832] veth1_vlan: entered promiscuous mode [ 468.759234][T18832] veth0_macvtap: entered promiscuous mode [ 468.776475][T18832] veth1_macvtap: entered promiscuous mode [ 468.823681][T18832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.882135][T18832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.948370][T19192] xt_hashlimit: size too large, truncated to 1048576 [ 468.970569][ T6073] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.978774][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.036297][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.036610][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.381570][T19172] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 469.381599][T19172] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 469.420476][T19172] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 469.422147][T19172] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 469.526571][T19172] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 469.526597][T19172] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 469.707023][T19172] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 469.707051][T19172] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 470.259494][T11402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.259519][T11402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.388404][T19226] x_tables: unsorted underflow at hook 3 [ 470.488376][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.488402][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.607226][T19237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3195'. [ 470.610516][T19239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3195'. [ 470.610872][T19237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3195'. [ 470.848647][T19236] FAULT_INJECTION: forcing a failure. [ 470.848647][T19236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.848683][T19236] CPU: 0 UID: 0 PID: 19236 Comm: syz.0.3193 Not tainted syzkaller #0 PREEMPT(full) [ 470.848710][T19236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 470.848725][T19236] Call Trace: [ 470.848734][T19236] [ 470.848744][T19236] dump_stack_lvl+0xe8/0x150 [ 470.848786][T19236] should_fail_ex+0x410/0x560 [ 470.848819][T19236] _copy_to_user+0x31/0xb0 [ 470.848852][T19236] do_ipt_get_ctl+0xce3/0x1300 [ 470.848962][T19236] ? release_sock+0x2f/0x260 [ 470.848996][T19236] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 470.849021][T19236] ? do_ip_getsockopt+0x12fb/0x1d00 [ 470.849087][T19236] ? __local_bh_enable_ip+0xd6/0x140 [ 470.849136][T19236] ? __mutex_trylock_common+0x15f/0x270 [ 470.849170][T19236] ? __pfx___mutex_trylock_common+0x10/0x10 [ 470.849204][T19236] ? rcu_is_watching+0x16/0xb0 [ 470.849234][T19236] ? trace_contention_end+0x3d/0x140 [ 470.849277][T19236] ? nf_getsockopt+0x224/0x290 [ 470.849312][T19236] ? __mutex_unlock_slowpath+0x731/0x900 [ 470.849347][T19236] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 470.849392][T19236] nf_getsockopt+0x26e/0x290 [ 470.849428][T19236] ip_getsockopt+0x19e/0x230 [ 470.849462][T19236] ? __pfx_ip_getsockopt+0x10/0x10 [ 470.849502][T19236] udp_getsockopt+0x138/0x2d0 [ 470.849559][T19236] ? __pfx_udp_getsockopt+0x10/0x10 [ 470.849604][T19236] ? sock_common_getsockopt+0x2d/0xb0 [ 470.849636][T19236] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 470.849660][T19236] do_sock_getsockopt+0x51d/0x7e0 [ 470.849698][T19236] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 470.849747][T19236] ? __fget_files+0x3a2/0x420 [ 470.849780][T19236] ? __fget_files+0x2a/0x420 [ 470.849821][T19236] __x64_sys_getsockopt+0x1a4/0x240 [ 470.849862][T19236] do_syscall_64+0x166/0x520 [ 470.849887][T19236] ? trace_irq_disable+0x3b/0x140 [ 470.849910][T19236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.849935][T19236] ? clear_bhb_loop+0x70/0xc0 [ 470.849965][T19236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.849989][T19236] RIP: 0033:0x7fb1a8d9e159 [ 470.850011][T19236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.850032][T19236] RSP: 002b:00007fb1a9bdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 470.850057][T19236] RAX: ffffffffffffffda RBX: 00007fb1a9026090 RCX: 00007fb1a8d9e159 [ 470.850075][T19236] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 000000000000000e [ 470.850089][T19236] RBP: 00007fb1a9bdf090 R08: 0000200000003000 R09: 0000000000000000 [ 470.850105][T19236] R10: 0000200000000ec0 R11: 0000000000000246 R12: 0000000000000002 [ 470.850120][T19236] R13: 00007fb1a9026128 R14: 00007fb1a9026090 R15: 00007ffd76681f78 [ 470.850158][T19236] [ 471.313443][T19244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3113'. [ 471.354318][T19244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3113'. [ 471.978835][T19265] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 472.090599][ T4930] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 472.109257][ T4930] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 472.110300][ T4930] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 472.138370][ T4930] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 472.142988][ T4930] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 472.207814][T19273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3201'. [ 472.229545][T19265] bond1: (slave macvlan2): making interface the new active one [ 472.297812][T19265] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 472.304757][ T979] bond_slave_0: entered promiscuous mode [ 472.304800][ T979] bond_slave_1: entered promiscuous mode [ 473.040650][T19298] lo speed is unknown, defaulting to 1000 [ 473.072779][T19298] wg2 speed is unknown, defaulting to 1000 [ 473.297808][T19306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3206'. [ 473.377080][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 473.503020][T19306] bond0: entered promiscuous mode [ 473.503507][T19306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.622678][T19311] vlan2: entered allmulticast mode [ 473.622704][T19311] bond0: entered allmulticast mode [ 474.255320][ T5618] Bluetooth: hci3: command tx timeout [ 474.503938][T19274] lo speed is unknown, defaulting to 1000 [ 474.618223][T19322] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.623769][T19274] wg2 speed is unknown, defaulting to 1000 [ 476.338644][ T5618] Bluetooth: hci3: command tx timeout [ 476.450953][T19365] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 476.829125][T19373] openvswitch: netlink: IP tunnel dst address not specified [ 477.201022][T19379] lo speed is unknown, defaulting to 1000 [ 477.203111][T19379] wg2 speed is unknown, defaulting to 1000 [ 477.519651][T19389] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3224'. [ 477.824465][T19274] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.824671][T19274] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.824833][T19274] bridge_slave_0: entered allmulticast mode [ 477.849671][T19274] bridge_slave_0: entered promiscuous mode [ 477.870186][T19274] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.870301][T19274] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.870490][T19274] bridge_slave_1: entered allmulticast mode [ 477.872954][T19274] bridge_slave_1: entered promiscuous mode [ 477.912865][T19404] netlink: 'syz.1.3227': attribute type 1 has an invalid length. [ 477.980416][T19274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.984141][T19274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.191047][T19274] team0: Port device team_slave_0 added [ 478.276818][T19274] team0: Port device team_slave_1 added [ 478.418366][ T5618] Bluetooth: hci3: command tx timeout [ 478.547863][T19274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.547913][T19274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.547944][T19274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.618995][T19274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.619015][T19274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.619047][T19274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.933128][T19274] hsr_slave_0: entered promiscuous mode [ 478.955714][T19274] hsr_slave_1: entered promiscuous mode [ 478.958386][T19274] debugfs: 'hsr0' already exists in 'hsr' [ 478.958409][T19274] Cannot create hsr debugfs directory [ 479.540737][T19437] netlink: 'syz.3.3236': attribute type 1 has an invalid length. [ 479.822453][T19440] bond1: (slave veth7): Enslaving as an active interface with an up link [ 480.032612][T19448] tipc: Enabling of bearer rejected, failed to enable media [ 480.197178][T19452] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 480.343043][T19458] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3241'. [ 480.495539][ T5618] Bluetooth: hci3: command tx timeout [ 480.940337][T19478] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3245'. [ 481.074546][T19478] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 481.093671][T19478] batman_adv: batadv0: Adding interface: gretap2 [ 481.093692][T19478] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.093727][T19478] batman_adv: batadv0: Interface activated: gretap2 [ 481.385325][T19496] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3247'. [ 481.512545][T19497] openvswitch: netlink: Missing valid actions attribute. [ 481.512593][T19497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.583087][T19497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3248'. [ 482.136690][T19516] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3250'. [ 482.607595][T19528] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3254'. [ 482.782192][T19528] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3254'. [ 483.332238][T19274] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 483.365166][T19274] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 483.371938][T19274] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 483.410529][T19274] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 483.415472][T19274] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 483.475422][T19274] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 483.487415][T19274] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 483.520297][T19274] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 483.688579][T19558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3260'. [ 484.412932][T19581] netlink: 'syz.4.3264': attribute type 1 has an invalid length. [ 484.470522][T19274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.517432][T19581] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3264'. [ 484.654782][T19274] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.697591][T11398] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.697705][T11398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.741000][T11401] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.741111][T11401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.816124][T19274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 484.816152][T19274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 485.371788][T19600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3269'. [ 486.071591][T19611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3272'. [ 486.286115][T19614] bond1: entered allmulticast mode [ 486.304645][T19621] macvlan2: entered promiscuous mode [ 486.304672][T19621] macvlan2: entered allmulticast mode [ 486.319446][T19621] bond1: entered promiscuous mode [ 486.331660][T19621] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 486.458490][T19623] netlink: 'syz.2.3272': attribute type 3 has an invalid length. [ 486.458516][T19623] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3272'. [ 486.496281][T14131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.518753][T19624] netlink: 'syz.2.3272': attribute type 1 has an invalid length. [ 486.621189][T19621] bond1: left promiscuous mode [ 486.819490][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.057488][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.173011][T19639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3277'. [ 487.193570][T19645] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3277'. [ 487.205850][T19639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3277'. [ 487.278210][T19648] netlink: 'syz.3.3279': attribute type 11 has an invalid length. [ 487.713108][T19639] __nla_validate_parse: 18 callbacks suppressed [ 487.713133][T19639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3277'. [ 487.762435][T19638] veth0_to_bridge: entered promiscuous mode [ 487.774928][T19638] macvtap1: entered allmulticast mode [ 487.774953][T19638] veth0_to_bridge: entered allmulticast mode [ 488.075246][T19645] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3277'. [ 488.095815][T11403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.107136][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.110578][T19638] veth0_to_bridge: left allmulticast mode [ 488.110618][T19638] veth0_to_bridge: left promiscuous mode [ 488.318838][T19274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.874271][T19274] veth0_vlan: entered promiscuous mode [ 488.902314][T19274] veth1_vlan: entered promiscuous mode [ 488.985203][T19686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.095891][T19274] veth0_macvtap: entered promiscuous mode [ 489.123920][T19274] veth1_macvtap: entered promiscuous mode [ 489.137065][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.244045][T19274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.363793][T19274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.363894][T19687] lo speed is unknown, defaulting to 1000 [ 489.402225][T19687] wg2 speed is unknown, defaulting to 1000 [ 489.446237][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.446290][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.446330][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.446369][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.117523][T19713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.164563][T11403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.164590][T11403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.181713][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.405400][T11398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.405426][T11398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.498784][T19721] x_tables: unsorted entry at hook 3 [ 490.734794][T19723] netlink: 'syz.3.3293': attribute type 4 has an invalid length. [ 490.960434][T19726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3200'. [ 491.044164][T19730] IPv6: sit1: Disabled Multicast RS [ 491.137918][T11148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.667846][T19740] netlink: 'syz.2.3298': attribute type 10 has an invalid length. [ 491.667874][T19740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3298'. [ 491.939861][T14129] net_ratelimit: 1 callbacks suppressed [ 491.939884][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.992230][T19756] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3303'. [ 492.259666][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.326454][T19770] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3308'. [ 493.156398][T11398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.306464][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.393433][T19808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 493.506056][T19817] xt_LOG: level 125 >= 8 [ 493.527171][T19813] Unknown options in mask 6 [ 493.528980][T19815] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3313'. [ 493.529016][T19815] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3313'. [ 493.531685][T19819] netlink: 'syz.4.3313': attribute type 1 has an invalid length. [ 493.531704][T19819] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3313'. [ 493.859751][ T5623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.042353][T19827] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3316'. [ 494.337625][ T5623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.367537][T19852] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3319'. [ 494.367628][T19852] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3319'. [ 495.168101][T19865] pim6reg1: entered promiscuous mode [ 495.168128][T19865] pim6reg1: entered allmulticast mode [ 495.313941][T19879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3327'. [ 495.426414][ T5623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.780031][T11401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.782371][T14131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.932049][T19887] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3331'. [ 495.977294][T19887] bond2: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 495.998469][T19887] bond2 (unregistering): Released all slaves [ 496.238097][T19898] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3330'. [ 496.775911][T19914] syzkaller1: entered promiscuous mode [ 496.776131][T19914] syzkaller1: entered allmulticast mode [ 496.783837][T19914] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 497.033508][T19924] gre1: entered promiscuous mode [ 497.033534][T19924] gre1: entered allmulticast mode [ 497.061686][ T25] net_ratelimit: 3 callbacks suppressed [ 497.061709][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.062018][T14131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.547115][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.711668][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.186676][T11403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.243589][T19928] IPVS: Error connecting to the multicast addr [ 498.577004][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.630174][T19938] lo speed is unknown, defaulting to 1000 [ 498.674943][T19938] wg2 speed is unknown, defaulting to 1000 [ 499.412819][T19962] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3350'. [ 499.617334][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.619342][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.071493][T19977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3356'. [ 500.097732][T19978] syzkaller0: entered promiscuous mode [ 500.097759][T19978] syzkaller0: entered allmulticast mode [ 500.358262][T19989] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3357'. [ 500.401517][T19989] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.402502][T19989] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.658029][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.850689][T19993] netlink: 324 bytes leftover after parsing attributes in process `syz.0.3358'. [ 500.912026][T11398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.419302][T19998] veth0_to_bridge: entered promiscuous mode [ 501.426265][T19998] macvtap1: entered allmulticast mode [ 501.426328][T19998] veth0_to_bridge: entered allmulticast mode [ 501.454883][T20004] netlink: 'syz.1.3361': attribute type 1 has an invalid length. [ 501.477713][T19998] veth0_to_bridge: left allmulticast mode [ 501.478114][T19998] veth0_to_bridge: left promiscuous mode [ 502.081471][T20004] bond5: entered promiscuous mode [ 502.084220][T20004] 8021q: adding VLAN 0 to HW filter on device bond5 [ 502.822405][ T25] net_ratelimit: 3 callbacks suppressed [ 502.822430][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.295794][T11399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.468920][T11399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.491001][T20055] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3373'. [ 503.832508][T20059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3375'. [ 503.860540][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.070866][T20063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3376'. [ 504.597631][T20083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.703912][T20080] lo speed is unknown, defaulting to 1000 [ 504.727922][T20083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.737470][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 504.996787][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.044207][T20080] wg2 speed is unknown, defaulting to 1000 [ 505.819058][T20104] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.3382'. [ 506.080122][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.346339][T11148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.673555][T11401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.673582][T11401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.887257][T20117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3383'. [ 507.164785][T20125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3387'. [ 507.339297][T20125] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 507.378179][T20125] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 508.179252][ T25] net_ratelimit: 2 callbacks suppressed [ 508.179275][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.439078][T20139] virtio_blk virtio5: 1/0/0 default/read/poll queues [ 508.521236][T20139] virtio_blk virtio5: [vdb] 262144 512-byte logical blocks (134 MB/128 MiB) [ 508.581315][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.600350][T11403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.642757][ T5623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.222887][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.274600][T20139] vdb: unable to read partition table [ 509.694930][T20180] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3401'. [ 510.104879][T20192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3405'. [ 510.122212][T20194] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3404'. [ 510.122243][T20194] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3404'. [ 510.228998][T14131] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 510.246827][T20199] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 510.340129][T14131] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 510.341001][T20200] netlink: 'syz.0.3408': attribute type 4 has an invalid length. [ 510.442566][T20192] netlink: Failed to add filter helper -22 [ 510.442626][T20192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.465621][T20188] netlink: 'syz.4.3403': attribute type 1 has an invalid length. [ 510.465645][T20188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3403'. [ 510.497080][T20201] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3408'. [ 510.516048][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.562904][T20201] veth1_to_team: entered promiscuous mode [ 510.592724][T20201] gretap0: entered promiscuous mode [ 510.607703][T20201] hsr1: entered promiscuous mode [ 511.139909][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.200792][T20220] syzkaller0: entered promiscuous mode [ 511.200819][T20220] syzkaller0: entered allmulticast mode [ 511.539990][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.791371][T20232] netlink: 'syz.4.3416': attribute type 1 has an invalid length. [ 511.922107][T11398] IPVS: starting estimator thread 0... [ 511.922354][T20241] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3419'. [ 512.033322][T20242] IPVS: using max 26 ests per chain, 62400 per kthread [ 513.104997][T20247] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 513.126657][T20247] bond2 (unregistering): Released all slaves [ 513.448554][T20262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3423'. [ 513.448581][T20262] nft_compat: unsupported protocol 0 [ 513.617557][ T979] net_ratelimit: 3 callbacks suppressed [ 513.617581][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.901368][T20273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.007161][T20284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3426'. [ 514.059133][T20290] netlink: 'syz.4.3428': attribute type 10 has an invalid length. [ 514.339776][T11403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.340366][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.741120][ T5623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.975833][ T5623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.290049][T20286] dummy0: entered allmulticast mode [ 516.291304][T20286] dummy0: left allmulticast mode [ 516.309859][T20290] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.310489][T20290] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.337236][ T5623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.358090][T20290] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.358238][T20290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.358497][T20290] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.358611][T20290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.380764][T20290] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 516.701993][T20308] netlink: 'syz.2.3433': attribute type 1 has an invalid length. [ 517.057822][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.423202][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.867575][T20332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3438'. [ 517.867604][T20332] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3438'. [ 518.099195][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.559175][T20347] pim6reg0: tun_chr_ioctl cmd 35111 [ 518.626057][T20322] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 519.138172][ T979] net_ratelimit: 1 callbacks suppressed [ 519.138195][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.182714][T20374] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3445'. [ 519.463985][T20382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3448'. [ 520.078111][T20407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3455'. [ 520.107548][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.108002][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.157620][T20410] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3454'. [ 520.184982][ T5623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.216414][ T5623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.262040][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.584495][T20405] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3454'. [ 522.584524][T20405] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 523.033661][T20414] lo speed is unknown, defaulting to 1000 [ 523.043486][T20414] wg2 speed is unknown, defaulting to 1000 [ 523.145808][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.300782][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.539161][T20435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.120879][T20441] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3462'. [ 524.346782][ T25] net_ratelimit: 2 callbacks suppressed [ 524.346804][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.585604][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.622859][T20452] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3465'. [ 524.734892][T20463] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.735178][T20463] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.753952][T20463] bridge0: entered allmulticast mode [ 524.793687][T20463] bridge_slave_1: left allmulticast mode [ 524.793718][T20463] bridge_slave_1: left promiscuous mode [ 524.793965][T20463] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.851091][T20463] bridge_slave_0: left allmulticast mode [ 524.851124][T20463] bridge_slave_0: left promiscuous mode [ 524.851404][T20463] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.220819][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.244988][T20463] bond0: (slave bridge0): Releasing backup interface [ 525.377209][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.856210][T14131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.856726][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.857149][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.988247][T20484] netlink: 332 bytes leftover after parsing attributes in process `syz.1.3472'. [ 525.988313][T20484] netlink: 'syz.1.3472': attribute type 9 has an invalid length. [ 525.988330][T20484] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3472'. [ 525.988347][T20484] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3472'. [ 526.419399][ T5623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.502031][T20503] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3479'. [ 526.536663][T20498] veth0_to_bridge: entered promiscuous mode [ 526.554504][T20498] macvtap1: entered allmulticast mode [ 526.554529][T20498] veth0_to_bridge: entered allmulticast mode [ 526.591771][T20498] veth0_to_bridge: left allmulticast mode [ 526.591804][T20498] veth0_to_bridge: left promiscuous mode [ 526.906119][T20522] netlink: 'syz.1.3484': attribute type 13 has an invalid length. [ 526.955969][T20522] netlink: 'syz.1.3484': attribute type 13 has an invalid length. [ 526.965400][T11407] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.072207][T11402] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.082116][T11398] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.082270][T11398] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.306957][T20521] syzkaller0: entered promiscuous mode [ 527.306984][T20521] syzkaller0: entered allmulticast mode [ 527.538937][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.628280][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.936738][T20544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3489'. [ 528.936778][T20544] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3489'. [ 529.531063][T20553] bridge_slave_0: left allmulticast mode [ 529.531095][T20553] bridge_slave_0: left promiscuous mode [ 529.531338][T20553] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.609295][T20553] bridge_slave_1: left allmulticast mode [ 529.613245][T20553] bridge_slave_1: left promiscuous mode [ 529.614275][T20553] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.702628][ T5623] net_ratelimit: 2 callbacks suppressed [ 529.702652][ T5623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.722849][T11398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.767423][T20565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3492'. [ 529.883339][T20553] bond0: (slave bond_slave_0): Releasing backup interface [ 529.994100][T20553] bond0: (slave bond_slave_1): Releasing backup interface [ 530.063113][T20577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3498'. [ 530.092561][T20553] team0: Port device team_slave_0 removed [ 530.107487][T20553] team0: Port device team_slave_1 removed [ 530.108658][T20553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.108683][T20553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.110643][T20553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.110664][T20553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.155667][T20553] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 530.184565][T20558] team0: Mode changed to "broadcast" [ 530.374218][T20576] bond5: left promiscuous mode [ 530.596752][T20584] veth0_to_bridge: entered promiscuous mode [ 530.604429][T20584] macvtap1: entered allmulticast mode [ 530.604453][T20584] veth0_to_bridge: entered allmulticast mode [ 530.657430][T20584] veth0_to_bridge: left allmulticast mode [ 530.657466][T20584] veth0_to_bridge: left promiscuous mode [ 530.980283][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.980776][T11403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.121360][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.125178][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.226304][T20608] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3500'. [ 531.512497][T20611] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 532.128806][T20624] lo speed is unknown, defaulting to 1000 [ 532.151858][T20624] wg2 speed is unknown, defaulting to 1000 [ 532.176386][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.312884][T20632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3510'. [ 532.362972][T20633] netlink: zone id is out of range [ 532.362991][T20633] netlink: zone id is out of range [ 533.018940][ T5618] Bluetooth: hci3: link tx timeout [ 533.019180][ T5618] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 533.027253][ T5618] Bluetooth: hci3: link tx timeout [ 533.027276][ T5618] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 533.032582][ T5618] Bluetooth: hci3: link tx timeout [ 533.032602][ T5618] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 533.040016][ T5618] Bluetooth: hci3: link tx timeout [ 533.040081][ T5618] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 533.169282][T20657] x_tables: ip_tables: osf match: only valid for protocol 6 [ 534.034705][T20671] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3520'. [ 534.378101][T20676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3521'. [ 534.600011][T20678] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 535.065203][ T5618] Bluetooth: hci3: command 0x0405 tx timeout [ 535.340516][ T5623] net_ratelimit: 1531 callbacks suppressed [ 535.340542][ T5623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.457339][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.458478][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.504443][T20713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3529'. [ 535.657250][T20722] FAULT_INJECTION: forcing a failure. [ 535.657250][T20722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.657290][T20722] CPU: 0 UID: 0 PID: 20722 Comm: syz.1.3528 Not tainted syzkaller #0 PREEMPT(full) [ 535.657317][T20722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 535.657332][T20722] Call Trace: [ 535.657342][T20722] [ 535.657352][T20722] dump_stack_lvl+0xe8/0x150 [ 535.657396][T20722] should_fail_ex+0x410/0x560 [ 535.657430][T20722] _copy_from_user+0x2d/0xb0 [ 535.657461][T20722] ___sys_sendmsg+0x1c6/0x360 [ 535.657495][T20722] ? __lock_acquire+0x747/0x2de0 [ 535.657527][T20722] ? __pfx____sys_sendmsg+0x10/0x10 [ 535.657597][T20722] ? __fget_files+0x2a/0x420 [ 535.657631][T20722] ? __fget_files+0x3a2/0x420 [ 535.657677][T20722] __x64_sys_sendmsg+0x1b1/0x290 [ 535.657711][T20722] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 535.657766][T20722] do_syscall_64+0x166/0x520 [ 535.657794][T20722] ? trace_irq_disable+0x3b/0x140 [ 535.657819][T20722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.657843][T20722] ? clear_bhb_loop+0x70/0xc0 [ 535.657870][T20722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.657901][T20722] RIP: 0033:0x7fe13cf9e159 [ 535.657922][T20722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.657943][T20722] RSP: 002b:00007fe13dea4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.657969][T20722] RAX: ffffffffffffffda RBX: 00007fe13d226090 RCX: 00007fe13cf9e159 [ 535.657987][T20722] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 535.658002][T20722] RBP: 00007fe13dea4090 R08: 0000000000000000 R09: 0000000000000000 [ 535.658017][T20722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.658032][T20722] R13: 00007fe13d226128 R14: 00007fe13d226090 R15: 00007ffea2c77f18 [ 535.658070][T20722] [ 535.664884][T20715] veth0_to_bridge: entered promiscuous mode [ 535.676451][T20715] macvtap1: entered allmulticast mode [ 535.676536][T20715] veth0_to_bridge: entered allmulticast mode [ 535.909199][T20715] veth0_to_bridge: left allmulticast mode [ 535.909231][T20715] veth0_to_bridge: left promiscuous mode [ 536.019199][T10305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.416637][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.626563][T20734] bond1: option all_slaves_active: invalid value (255) [ 536.750630][T10314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.769259][T20734] bond1 (unregistering): Released all slaves [ 538.757012][T20774] netlink: 'syz.1.3542': attribute type 2 has an invalid length. [ 538.757037][T20774] netlink: 'syz.1.3542': attribute type 1 has an invalid length. [ 538.888855][T20737] gre1: left promiscuous mode [ 538.888879][T20737] gre1: left allmulticast mode [ 538.912159][T20745] syz.3.3533 (20745) used obsolete PPPIOCDETACH ioctl [ 539.000502][ T51] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.000555][ T51] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.000594][ T51] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.000632][ T51] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.340165][T20787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.340195][T20787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.354011][T20787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.354038][T20787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.969863][T20801] veth0_to_bridge: entered promiscuous mode [ 539.972460][T20801] macvtap1: entered allmulticast mode [ 539.972483][T20801] veth0_to_bridge: entered allmulticast mode [ 540.036695][T20802] FAULT_INJECTION: forcing a failure. [ 540.036695][T20802] name failslab, interval 1, probability 0, space 0, times 0 [ 540.036733][T20802] CPU: 1 UID: 0 PID: 20802 Comm: syz.1.3549 Not tainted syzkaller #0 PREEMPT(full) [ 540.036758][T20802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 540.036771][T20802] Call Trace: [ 540.036779][T20802] [ 540.036788][T20802] dump_stack_lvl+0xe8/0x150 [ 540.036825][T20802] should_fail_ex+0x410/0x560 [ 540.036852][T20802] ? __alloc_skb+0x1db/0x7a0 [ 540.036876][T20802] should_failslab+0xa8/0x100 [ 540.036905][T20802] ? __alloc_skb+0x1db/0x7a0 [ 540.036925][T20802] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 540.036962][T20802] ? __alloc_skb+0x18d/0x7a0 [ 540.036990][T20802] ? __alloc_skb+0x1db/0x7a0 [ 540.037021][T20802] __alloc_skb+0x1db/0x7a0 [ 540.037048][T20802] netlink_sendmsg+0x5d4/0xb40 [ 540.037091][T20802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.037130][T20802] ? apparmor_socket_sendmsg+0x98/0x360 [ 540.037156][T20802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.037185][T20802] sock_sendmsg_nosec+0x13a/0x180 [ 540.037253][T20802] ____sys_sendmsg+0x54e/0x850 [ 540.037287][T20802] ? __pfx_____sys_sendmsg+0x10/0x10 [ 540.037346][T20802] ? import_iovec+0x73/0xa0 [ 540.037376][T20802] ___sys_sendmsg+0x2a5/0x360 [ 540.037401][T20802] ? __lock_acquire+0x747/0x2de0 [ 540.037427][T20802] ? __pfx____sys_sendmsg+0x10/0x10 [ 540.037489][T20802] ? __fget_files+0x2a/0x420 [ 540.037517][T20802] ? __fget_files+0x3a2/0x420 [ 540.037555][T20802] __x64_sys_sendmsg+0x1b1/0x290 [ 540.037584][T20802] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 540.037631][T20802] do_syscall_64+0x166/0x520 [ 540.037653][T20802] ? trace_irq_disable+0x3b/0x140 [ 540.037674][T20802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.037695][T20802] ? clear_bhb_loop+0x70/0xc0 [ 540.037721][T20802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.037741][T20802] RIP: 0033:0x7fe13cf9e159 [ 540.037761][T20802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.037779][T20802] RSP: 002b:00007fe13dea4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 540.037802][T20802] RAX: ffffffffffffffda RBX: 00007fe13d226090 RCX: 00007fe13cf9e159 [ 540.037818][T20802] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 540.037831][T20802] RBP: 00007fe13dea4090 R08: 0000000000000000 R09: 0000000000000000 [ 540.037844][T20802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.037857][T20802] R13: 00007fe13d226128 R14: 00007fe13d226090 R15: 00007ffea2c77f18 [ 540.037889][T20802] [ 540.043245][T20801] veth0_to_bridge: left allmulticast mode [ 540.043530][T20801] veth0_to_bridge: left promiscuous mode [ 541.118927][T20821] block nbd7: server does not support multiple connections per device. [ 541.123927][T20821] block nbd7: shutting down sockets [ 541.272390][T20828] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3555'. [ 541.321161][T20821] veth0: entered promiscuous mode [ 541.946763][T20820] veth0: left promiscuous mode [ 542.690003][T20822] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 542.690037][T20822] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 542.881354][T11403] IPVS: starting estimator thread 0... [ 542.980570][T20871] IPVS: using max 28 ests per chain, 67200 per kthread [ 543.450486][T20880] netlink: 'syz.4.3566': attribute type 1 has an invalid length. [ 543.643379][T20880] veth5: entered allmulticast mode [ 543.894283][T20881] veth5: entered allmulticast mode [ 544.397956][T20908] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3574'. [ 544.400910][T20908] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3574'. [ 544.932279][T20921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3578'. [ 544.969685][T20924] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3576'. [ 545.201398][T20928] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 545.721255][T20944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3583'. [ 545.931754][T20950] openvswitch: netlink: Message has 8 unknown bytes. [ 546.072341][T20951] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 546.401192][T20946] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 546.557586][T20965] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3591'. [ 547.162211][T20984] syz.4.3596: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 547.162315][T20984] CPU: 0 UID: 0 PID: 20984 Comm: syz.4.3596 Not tainted syzkaller #0 PREEMPT(full) [ 547.162342][T20984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 547.162358][T20984] Call Trace: [ 547.162367][T20984] [ 547.162377][T20984] dump_stack_lvl+0xe8/0x150 [ 547.162418][T20984] warn_alloc+0x24d/0x270 [ 547.162443][T20984] ? kasan_save_track+0x4f/0x80 [ 547.162468][T20984] ? kasan_save_track+0x3e/0x80 [ 547.162494][T20984] ? __pfx_warn_alloc+0x10/0x10 [ 547.162515][T20984] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 547.162545][T20984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.162590][T20984] __vmalloc_node_range_noprof+0x127/0x1540 [ 547.162654][T20984] ? rcu_is_watching+0x16/0xb0 [ 547.162689][T20984] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 547.162724][T20984] ? __kmalloc_cache_noprof+0x321/0x600 [ 547.162747][T20984] ? __kmalloc_cache_noprof+0x14d/0x600 [ 547.162770][T20984] ? xskq_create+0x56/0x220 [ 547.162886][T20984] xskq_create+0x148/0x220 [ 547.162907][T20984] ? xsk_init_queue+0x8a/0xe0 [ 547.162945][T20984] xsk_init_queue+0x8a/0xe0 [ 547.162982][T20984] xsk_setsockopt+0x52a/0x960 [ 547.163019][T20984] ? __pfx_xsk_setsockopt+0x10/0x10 [ 547.163052][T20984] ? __pfx_aa_sk_perm+0x10/0x10 [ 547.163129][T20984] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 547.163177][T20984] ? __pfx_xsk_setsockopt+0x10/0x10 [ 547.163213][T20984] do_sock_setsockopt+0x17c/0x1b0 [ 547.163255][T20984] __x64_sys_setsockopt+0x13d/0x1b0 [ 547.163290][T20984] do_syscall_64+0x166/0x520 [ 547.163315][T20984] ? trace_irq_disable+0x3b/0x140 [ 547.163337][T20984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.163362][T20984] ? clear_bhb_loop+0x70/0xc0 [ 547.163389][T20984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.163413][T20984] RIP: 0033:0x7f918839e159 [ 547.163435][T20984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.163455][T20984] RSP: 002b:00007f9189204028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 547.163479][T20984] RAX: ffffffffffffffda RBX: 00007f9188625fa0 RCX: 00007f918839e159 [ 547.163497][T20984] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 547.163511][T20984] RBP: 00007f918843503b R08: 0000000000000004 R09: 0000000000000000 [ 547.163525][T20984] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.163539][T20984] R13: 00007f9188626038 R14: 00007f9188625fa0 R15: 00007ffc15ae6b08 [ 547.163575][T20984] [ 547.165744][T20984] Mem-Info: [ 547.165759][T20984] active_anon:5548 inactive_anon:0 isolated_anon:0 [ 547.165759][T20984] active_file:16 inactive_file:43690 isolated_file:0 [ 547.165759][T20984] unevictable:0 dirty:254 writeback:0 [ 547.165759][T20984] slab_reclaimable:12390 slab_unreclaimable:124656 [ 547.165759][T20984] mapped:29672 shmem:520 pagetables:1203 [ 547.165759][T20984] sec_pagetables:0 bounce:0 [ 547.165759][T20984] kernel_misc_reclaimable:0 [ 547.165759][T20984] free:1209030 free_pcp:11577 free_cma:0 [ 547.165825][T20984] Node 0 active_anon:22192kB inactive_anon:0kB active_file:64kB inactive_file:174564kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118688kB dirty:1016kB writeback:0kB shmem:2080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16144kB pagetables:4668kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 547.165893][T20984] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 547.165961][T20984] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 547.166025][T20984] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 547.166070][T20984] Node 0 DMA32 free:884900kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22192kB inactive_anon:0kB active_file:64kB inactive_file:174564kB unevictable:0kB writepending:1016kB zspages:0kB present:3129332kB managed:2546620kB mlocked:0kB bounce:0kB free_pcp:46060kB local_pcp:23736kB free_cma:0kB [ 547.166143][T20984] lowmem_reserve[]: 0 0 0 0 0 [ 547.166185][T20984] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 547.166261][T20984] lowmem_reserve[]: 0 0 0 0 0 [ 547.166305][T20984] Node 1 Normal free:3935860kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 547.224521][T20984] lowmem_reserve[]: 0 0 0 0 0 [ 547.566790][T20984] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 547.567185][T20984] Node 0 DMA32: 2481*4kB (UM) 1131*8kB (UME) 403*16kB (UME) 351*32kB (UME) 167*64kB (UME) 143*128kB (UME) 94*256kB (UM) 19*512kB (UM) 25*1024kB (UME) 7*2048kB (UM) 182*4096kB (UM) = 884844kB [ 547.567702][T20984] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 547.568060][T20984] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 2*16kB (UM) 2*32kB (UM) 10*64kB (UM) 5*128kB (UM) 5*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 959*4096kB (M) = 3935860kB [ 547.669464][T20984] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 547.669526][T20984] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 547.669588][T20984] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 547.669662][T20984] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 547.669709][T20984] 44222 total pagecache pages [ 547.669738][T20984] 0 pages in swap cache [ 547.669760][T20984] Free swap = 124996kB [ 547.669783][T20984] Total swap = 124996kB [ 547.669813][T20984] 2097051 pages RAM [ 547.669827][T20984] 0 pages HighMem/MovableOnly [ 547.669850][T20984] 428780 pages reserved [ 547.669880][T20984] 0 pages cma reserved [ 547.965384][T20990] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3596'. [ 548.017620][T20990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3596'. [ 548.115507][T21003] openvswitch: netlink: Duplicate key (type 0). [ 548.232825][T21009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3603'. [ 548.320328][T20984] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 548.754374][T21022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3605'. [ 548.866218][T21022] macsec1: entered promiscuous mode [ 548.938145][T21028] netlink: 'syz.2.3608': attribute type 1 has an invalid length. [ 548.938180][T21028] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3608'. [ 548.939382][T21028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3608'. [ 549.085345][T21032] netlink: 'syz.4.3607': attribute type 2 has an invalid length. [ 549.651052][T21051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3616'. [ 549.652074][T21050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3616'. [ 549.746925][T21049] syzkaller0: entered promiscuous mode [ 549.746977][T21049] syzkaller0: entered allmulticast mode [ 549.859990][T21057] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3618'. [ 550.584129][T21062] team0: Port device team_slave_0 removed [ 551.182333][T21076] syzkaller0: entered promiscuous mode [ 551.182357][T21076] syzkaller0: entered allmulticast mode [ 551.243572][T21076] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode [ 551.243603][T21076] mac80211_hwsim hwsim36 wlan0: entered allmulticast mode [ 551.550330][T21090] netlink: 'syz.2.3630': attribute type 39 has an invalid length. [ 551.686867][T21100] xt_hashlimit: max too large, truncated to 1048576 [ 551.686890][T21100] xt_hashlimit: overflow, try lower: 0/0 [ 551.913907][T21106] __nla_validate_parse: 2 callbacks suppressed [ 551.913930][T21106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3633'. [ 552.212027][T21105] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 552.212158][T21105] syzkaller1: linktype set to 6 [ 552.507167][T21121] macvtap1: entered allmulticast mode [ 552.507201][T21121] macsec0: entered allmulticast mode [ 552.507216][T21121] veth1_macvtap: entered allmulticast mode [ 552.623854][T21121] macsec0: left allmulticast mode [ 552.623881][T21121] veth1_macvtap: left allmulticast mode [ 552.870443][T21130] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3642'. [ 553.016418][T21141] netlink: 'syz.1.3643': attribute type 4 has an invalid length. [ 553.016444][T21141] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3643'. [ 553.395840][T10312] IPVS: starting estimator thread 0... [ 553.434531][T21153] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3645'. [ 553.507784][T21154] IPVS: using max 28 ests per chain, 67200 per kthread [ 553.554296][T21156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.569578][T21156] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.585000][T21156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.697371][T11407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.710463][T11403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.725641][T11407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.733286][T11403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.783453][T10314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.785643][T11403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.830685][T21156] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 553.830716][T21156] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 553.834776][T21156] veth1_vlan: left promiscuous mode [ 553.866493][T21156] veth0_vlan: left promiscuous mode [ 553.872815][T21156] veth0_vlan: entered promiscuous mode [ 553.894656][T21156] veth1_vlan: entered promiscuous mode [ 553.911344][T21156] veth1_macvtap: left promiscuous mode [ 553.913042][T21156] veth0_macvtap: left promiscuous mode [ 553.914433][T21156] veth0_macvtap: entered promiscuous mode [ 553.933614][T21156] veth1_macvtap: entered promiscuous mode [ 553.958195][T21156] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 553.959679][T21156] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 553.961538][T21156] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 553.962802][T21156] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 553.963542][T21156] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 554.485623][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.485680][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.485723][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.485773][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.741485][T21179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3651'. [ 554.741516][T21179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3651'. [ 554.741547][T21179] netlink: 'syz.1.3651': attribute type 11 has an invalid length. [ 554.741566][T21179] netlink: 'syz.1.3651': attribute type 14 has an invalid length. [ 554.799573][T21176] smbdirect: ib_dev[syz2] removed [ 554.936911][T11148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.944987][T21176] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3653'. [ 555.082169][T21184] netlink: 'syz.2.3657': attribute type 11 has an invalid length. [ 555.084234][T21184] netlink: 'syz.2.3657': attribute type 11 has an invalid length. [ 555.084258][T21184] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3657'. [ 555.269626][T21186] bond1: option min_links: invalid value (18446744073709551612) [ 555.269656][T21186] bond1: option min_links: allowed values 0 - 2147483647 [ 555.272636][T21186] bond1 (unregistering): Released all slaves [ 555.350434][T21192] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3654'. [ 555.425430][T21192] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3654'. [ 555.426085][T21192] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 555.458649][T11403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.664030][ T4930] block nbd7: Receive control failed (result -32) [ 555.840232][T21203] tipc: Failed to remove unknown binding: 66,1,1/0:4201289393/4201289395 [ 557.018153][T21266] netlink: 'syz.0.3671': attribute type 1 has an invalid length. [ 557.174444][T21271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3673'. [ 557.174486][T21271] netlink: 'syz.4.3673': attribute type 10 has an invalid length. [ 557.174506][T21271] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3673'. [ 557.262084][T21274] netlink: 'syz.0.3671': attribute type 50 has an invalid length. [ 557.336903][T21266] 8021q: adding VLAN 0 to HW filter on device bond3 [ 557.490624][T21270] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 557.577071][T21271] geneve3: entered promiscuous mode [ 557.577096][T21271] geneve3: entered allmulticast mode [ 558.153829][T21287] netlink: 'syz.0.3678': attribute type 83 has an invalid length. [ 558.736251][T11403] net_ratelimit: 7 callbacks suppressed [ 558.736276][T11403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.818284][T11403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.072641][T21315] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3687'. [ 559.107348][T21316] batman_adv: batadv0: Adding interface: dummy0 [ 559.107368][T21316] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.107404][T21316] batman_adv: batadv0: Interface activated: dummy0 [ 559.168280][T10312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.170417][T11401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.170854][T11401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.171281][T11401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.357498][T21316] batadv0: mtu less than device minimum [ 559.360739][T21316] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 559.362265][T21316] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 559.363802][T21316] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 559.484603][T21315] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 559.506875][T21317] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 559.815317][T21325] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3690'. [ 559.887853][T21325] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3690'. [ 560.373333][T21339] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3692'. [ 560.374878][T21339] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.377086][T21339] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.518178][T21348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3695'. [ 560.776671][T21357] syzkaller0: entered promiscuous mode [ 560.776702][T21357] syzkaller0: entered allmulticast mode [ 560.945881][T21368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3700'. [ 560.945952][T21368] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3700'. [ 561.212725][T21374] rdma_rxe: rxe_newlink: failed to add bond0 [ 564.269888][T10312] net_ratelimit: 18 callbacks suppressed [ 564.269905][T10312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.275615][T11403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.276054][T11403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.276868][T10312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.902587][T11401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.904437][T11401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.514758][T21408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3714'. [ 565.798127][T21421] ip_tables: iptables: counters copy to user failed while replacing table [ 565.804737][T21421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.860352][T21417] xt_CT: No such helper "netbios-ns" [ 565.929282][T21430] netlink: 'syz.0.3719': attribute type 9 has an invalid length. [ 566.290558][T21436] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3721'. [ 567.420889][T21484] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3729'. [ 567.422401][T21482] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3729'. [ 567.509825][T21489] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 567.584313][T21493] netlink: 'syz.4.3732': attribute type 1 has an invalid length. [ 567.631888][T21491] geneve1: entered promiscuous mode [ 567.656932][T21482] syzkaller1: entered promiscuous mode [ 567.657151][T21482] syzkaller1: entered allmulticast mode [ 567.795080][T21497] erspan1: entered allmulticast mode [ 567.988852][T21506] syzkaller0: entered promiscuous mode [ 567.988885][T21506] syzkaller0: entered allmulticast mode [ 568.011373][T11401] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.011420][T11401] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.011459][T11401] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.011497][T11401] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.109266][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.774979][T21526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3738'. [ 568.775017][T21526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3738'. [ 568.838651][T21526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3738'. [ 568.838691][T21526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3738'. [ 569.218859][T21541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3742'. [ 569.295995][T11398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.301521][T21543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3743'. [ 569.301560][T21543] netlink: 'syz.0.3743': attribute type 14 has an invalid length. [ 569.393355][T11398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.458324][T21546] lo speed is unknown, defaulting to 1000 [ 569.478303][T21552] Bluetooth: hci0: unsupported parameter 5134 [ 569.478325][T21552] Bluetooth: hci0: unsupported parameter 8192 [ 569.478339][T21552] Bluetooth: hci0: unsupported parameter 5134 [ 569.478352][T21552] Bluetooth: hci0: unsupported parameter 8192 [ 569.478591][T21552] Bluetooth: hci0: unsupported parameter 5134 [ 569.478606][T21552] Bluetooth: hci0: unsupported parameter 8192 [ 569.478620][T21552] Bluetooth: hci0: unsupported parameter 5134 [ 569.478633][T21552] Bluetooth: hci0: unsupported parameter 8192 [ 569.478861][T21552] Bluetooth: hci0: unsupported parameter 5134 [ 569.478876][T21552] Bluetooth: hci0: unsupported parameter 8192 [ 569.478889][T21552] Bluetooth: hci0: unsupported parameter 5134 [ 569.478902][T21552] Bluetooth: hci0: unsupported parameter 8192 [ 569.479129][T21552] Bluetooth: hci0: unsupported parameter 5134 [ 569.479144][T21552] Bluetooth: hci0: unsupported parameter 8192 [ 569.479157][T21552] Bluetooth: hci0: unsupported parameter 5134 [ 569.479171][T21552] Bluetooth: hci0: unsupported parameter 8192 [ 569.479390][T21552] Bluetooth: hci0: unsupported parameter 5134 [ 569.479405][T21552] Bluetooth: hci0: unsupported parameter 8192 [ 569.479419][T21552] Bluetooth: hci0: unsupported parameter 5134 [ 569.479432][T21552] Bluetooth: hci0: unsupported parameter 8192 [ 569.681424][T21552] Bluetooth: hci0: unsupported parameter 5134 [ 569.681447][T21552] Bluetooth: hci0: unsupported parameter 8192 [ 569.681461][T21552] Bluetooth: hci0: unsupported parameter 5134 [ 569.681476][T21552] Bluetooth: hci0: unsupported parameter 8192 [ 569.681756][T21552] Bluetooth: hci0: unsupported parameter 5134 [ 569.681772][T21552] Bluetooth: hci0: unsupported parameter 8192 [ 569.681785][T21552] Bluetooth: hci0: unsupported parameter 5134 [ 569.681799][T21552] Bluetooth: hci0: unsupported parameter 8192 [ 569.682034][T21552] Bluetooth: hci0: unsupported parameter 5134 [ 569.682049][T21552] Bluetooth: hci0: unsupported parameter 8192 [ 569.682062][T21552] Bluetooth: hci0: unsupported parameter 5134 [ 569.682076][T21552] Bluetooth: hci0: unsupported parameter 8192 [ 569.682299][T21552] Bluetooth: hci0: unsupported parameter 5134 [ 569.682314][T21552] Bluetooth: hci0: unsupported parameter 8192 [ 569.682327][T21552] Bluetooth: hci0: unsupported parameter 5134 [ 569.682341][T21552] Bluetooth: hci0: unsupported parameter 8192 [ 569.682569][T21552] Bluetooth: hci0: unsupported parameter 5134 [ 569.682584][T21552] Bluetooth: hci0: unsupported parameter 8192 [ 569.682597][T21552] Bluetooth: hci0: unsupported parameter 5134 [ 569.682610][T21552] Bluetooth: hci0: unsupported parameter 8192 [ 569.684127][T21552] Bluetooth: hci0: unsupported parameter 5134 [ 569.684149][T21552] Bluetooth: hci0: unsupported parameter 8192 [ 569.684163][T21552] Bluetooth: hci0: unsupported parameter 5134 [ 569.684177][T21552] Bluetooth: hci0: unsupported parameter 8192 [ 570.021447][T11403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.033226][T10312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.590243][T21563] block nbd0: reconnected socket [ 570.607745][T21563] netlink: 'syz.4.3746': attribute type 9 has an invalid length. [ 570.656565][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.656984][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.854199][ T6073] IPVS: starting estimator thread 0... [ 570.890395][T21569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.935520][T21571] IPVS: using max 25 ests per chain, 60000 per kthread [ 571.020648][ T4930] block nbd0: Receive control failed (result -32) [ 571.283895][T21577] rdma_rxe: rxe_newlink: failed to add lo [ 571.332253][ T6073] IPVS: starting estimator thread 0... [ 571.405817][T21587] IPVS: rr: UDP [::1]:8080 - no destination available [ 571.423153][T21588] IPVS: using max 24 ests per chain, 57600 per kthread [ 571.550402][T21590] can: request_module (can-proto-3) failed. [ 571.607037][T21590] Bluetooth: MGMT ver 1.23 [ 571.710903][T21594] ip_tables: iptables: counters copy to user failed while replacing table [ 572.208682][T21593] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.208845][T21593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.209204][T21593] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.209328][T21593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.473228][T21593] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 572.594066][T21618] __nla_validate_parse: 1 callbacks suppressed [ 572.594091][T21618] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3758'. [ 572.594109][T21618] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3758'. [ 573.316294][T21633] xt_recent: hitcount (268435462) is larger than allowed maximum (65535) [ 573.317433][T21634] xt_CT: You must specify a L4 protocol and not use inversions on it [ 573.781556][T21643] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3767'. [ 574.030187][T21649] vxcan3: entered allmulticast mode [ 574.295667][T21656] syzkaller0: entered promiscuous mode [ 574.295692][T21656] syzkaller0: entered allmulticast mode [ 574.497672][T11403] net_ratelimit: 3 callbacks suppressed [ 574.497695][T11403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.941517][T21659] macsec2: entered promiscuous mode [ 574.941556][T21659] hsr0: entered promiscuous mode [ 575.137670][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.139304][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.142344][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.840622][T21679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.858203][T21679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.858775][T21679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.065188][T21679] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3775'. [ 576.072409][T21679] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3775'. [ 576.112480][T21682] x_tables: duplicate underflow at hook 3 [ 576.416083][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.416603][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.476321][T21691] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3779'. [ 576.819330][T21698] ip6erspan0: entered allmulticast mode [ 576.870807][T21698] netlink: 'syz.3.3781': attribute type 4 has an invalid length. [ 576.871350][T21698] netlink: 'syz.3.3781': attribute type 4 has an invalid length. [ 576.871876][T21698] netlink: 'syz.3.3781': attribute type 4 has an invalid length. [ 576.872405][T21698] netlink: 'syz.3.3781': attribute type 4 has an invalid length. [ 576.872917][T21698] netlink: 'syz.3.3781': attribute type 4 has an invalid length. [ 576.873438][T21698] netlink: 'syz.3.3781': attribute type 4 has an invalid length. [ 576.873972][T21698] netlink: 'syz.3.3781': attribute type 4 has an invalid length. [ 576.874501][T21698] netlink: 'syz.3.3781': attribute type 4 has an invalid length. [ 576.875023][T21698] netlink: 'syz.3.3781': attribute type 4 has an invalid length. [ 576.886029][T21698] netlink: 'syz.3.3781': attribute type 4 has an invalid length. [ 576.972880][T21703] lo speed is unknown, defaulting to 1000 [ 576.972945][T21703] lo speed is unknown, defaulting to 1000 [ 576.973833][T21703] lo speed is unknown, defaulting to 1000 [ 577.012604][T21703] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 577.012649][T21703] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 577.012696][T21703] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 577.030224][T21708] xt_policy: too many policy elements [ 577.138892][T21703] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 577.170934][T21709] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3783'. [ 577.270519][T21705] geneve4: entered promiscuous mode [ 577.405832][T21703] lo speed is unknown, defaulting to 1000 [ 577.423929][T21703] lo speed is unknown, defaulting to 1000 [ 577.448275][T21703] lo speed is unknown, defaulting to 1000 [ 577.465618][T21703] lo speed is unknown, defaulting to 1000 [ 577.474290][T21703] lo speed is unknown, defaulting to 1000 [ 577.503983][T21703] lo speed is unknown, defaulting to 1000 [ 577.564607][T21703] lo speed is unknown, defaulting to 1000 [ 577.580982][T21703] lo speed is unknown, defaulting to 1000 [ 577.584834][T21703] lo speed is unknown, defaulting to 1000 [ 578.249430][T21730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3787'. [ 578.270550][T21727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3787'. [ 578.463310][T21729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3788'. [ 578.477574][T21734] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3787'. [ 578.792982][T21740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3789'. [ 578.910279][T21738] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3789'. [ 579.216114][T21743] lo speed is unknown, defaulting to 1000 [ 579.720747][T21766] syzkaller1: entered promiscuous mode [ 579.720773][T21766] syzkaller1: entered allmulticast mode [ 580.228076][T11403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.259506][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.502179][T21743] lo speed is unknown, defaulting to 1000 [ 580.915019][T11401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.916633][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.462950][T21794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3802'. [ 581.575838][T21805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3806'. [ 582.206769][T10312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.256168][T10312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.809639][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a743c00: rx timeout, send abort [ 582.812393][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a743c00: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 582.830287][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.296583][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.300498][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.387877][T11151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.503862][T21830] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3809'. [ 585.624116][T21818] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 585.943734][T10312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.096504][T14112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.669560][T10312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.912954][T21840] udevd[21840]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 586.952531][T21866] xt_limit: Overflow, try lower: 268435456/134217728 [ 586.966331][T21816] udevd[21816]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 587.008264][T21866] validate_nla: 10 callbacks suppressed [ 587.008288][T21866] netlink: 'syz.1.3816': attribute type 18 has an invalid length. [ 587.008304][T21866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3816'. [ 587.012424][T21866] netlink: 'syz.1.3816': attribute type 18 has an invalid length. [ 587.012456][T21866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3816'. [ 587.380964][T11407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.629891][T21872] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000 [ 587.783524][T21875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3818'. [ 587.822229][T21876] mac80211_hwsim hwsim39 ..ăc¤±: renamed from wlan1 [ 587.850238][T21877] tap0: tun_chr_ioctl cmd 2148553947 [ 587.939670][T10312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.238233][ T4930] block nbd8: Receive control failed (result -22) [ 588.243151][T21883] nbd8: detected capacity change from 0 to 32 [ 588.247603][ T1714] block nbd8: Dead connection, failed to find a fallback [ 588.248764][ T1714] block nbd8: shutting down sockets [ 588.248895][ T1714] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 588.249012][ T1714] Buffer I/O error on dev nbd8, logical block 0, async page read [ 588.270325][ T1714] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 588.270363][ T1714] Buffer I/O error on dev nbd8, logical block 0, async page read [ 588.270517][ T1714] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 588.270547][ T1714] Buffer I/O error on dev nbd8, logical block 0, async page read [ 588.270680][ T1714] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 588.270709][ T1714] Buffer I/O error on dev nbd8, logical block 0, async page read [ 588.270839][ T1714] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 588.270867][ T1714] Buffer I/O error on dev nbd8, logical block 0, async page read [ 588.271162][ T1714] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 588.272913][ T1714] Buffer I/O error on dev nbd8, logical block 0, async page read [ 588.273145][ T1714] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 588.273175][ T1714] Buffer I/O error on dev nbd8, logical block 0, async page read [ 588.273312][ T1714] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 588.273341][ T1714] Buffer I/O error on dev nbd8, logical block 0, async page read [ 588.273468][T21816] ldm_validate_partition_table(): Disk read failed. [ 588.273579][ T1714] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 588.273608][ T1714] Buffer I/O error on dev nbd8, logical block 0, async page read [ 588.288928][ T1714] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 588.288972][ T1714] Buffer I/O error on dev nbd8, logical block 0, async page read [ 588.300571][T21816] Dev nbd8: unable to read RDB block 0 [ 588.382061][T21816] nbd8: unable to read partition table [ 588.563997][T21816] ldm_validate_partition_table(): Disk read failed. [ 588.587073][T21816] Dev nbd8: unable to read RDB block 0 [ 588.589208][T21816] nbd8: unable to read partition table [ 588.709173][T21883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.750828][T21892] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3826'. [ 588.750945][T21892] 0·: renamed from hsr0 (while UP) [ 588.778260][T21892] 0·: entered allmulticast mode [ 588.778284][T21892] hsr_slave_0: entered allmulticast mode [ 588.778303][T21892] hsr_slave_1: entered allmulticast mode [ 589.267293][T21902] veth0_to_bridge: entered promiscuous mode [ 589.267592][T21902] macvtap1: entered allmulticast mode [ 589.267609][T21902] veth0_to_bridge: entered allmulticast mode [ 589.317833][T21902] veth0_to_bridge: left allmulticast mode [ 589.317867][T21902] veth0_to_bridge: left promiscuous mode [ 589.663354][T21906] syzkaller1: entered promiscuous mode [ 589.663380][T21906] syzkaller1: entered allmulticast mode [ 589.705068][ C1] sched: DL replenish lagged too much [ 590.496830][ T36] net_ratelimit: 1 callbacks suppressed [ 590.496856][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.559551][T21929] syz_tun: entered allmulticast mode [ 590.583846][T21928] syz_tun: left allmulticast mode [ 590.777867][T21935] set match dimension is over the limit! [ 590.951423][T21938] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 591.057360][T21938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.137012][T11398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.178597][T21938] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 591.285758][T11407] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 591.285798][T11407] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 591.778327][T11398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.801420][T11398] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 591.801458][T11398] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 592.150176][T21955] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 592.250200][T21957] netlink: 'syz.3.3844': attribute type 1 has an invalid length. [ 592.352813][T21957] 8021q: adding VLAN 0 to HW filter on device bond2 [ 592.415129][T21968] netlink: 'syz.4.3846': attribute type 1 has an invalid length. [ 592.434123][T21955] IPVS: Scheduler module ip_vs_sip not found [ 592.462995][T21965] team0: Device wg1 is of different type [ 592.684791][T21968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3846'. [ 592.706863][T21969] bond3: option arp_validate: invalid value (1048579) [ 592.709303][T21969] bond3 (unregistering): Released all slaves [ 592.903292][T21965] bond3: option arp_validate: invalid value (1048579) [ 592.935108][T21965] bond3 (unregistering): Released all slaves [ 593.298147][T21968] bridge0: entered promiscuous mode [ 593.953245][T22009] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3855'. [ 594.125577][T21981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3848'. [ 594.260088][T22019] xt_REDIRECT: bad MAP_IPS. [ 594.355581][T22022] netlink: 'syz.3.3859': attribute type 1 has an invalid length. [ 594.407681][T22021] netlink: 'syz.3.3859': attribute type 29 has an invalid length. [ 594.407707][T22021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3859'. [ 594.777089][T22037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3862'. [ 594.787203][T22038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3862'. [ 595.482900][T22026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.501535][T22026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.604382][T22026] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 595.632774][T22026] mac80211_hwsim hwsim36 wlan0: left promiscuous mode [ 595.632804][T22026] mac80211_hwsim hwsim36 wlan0: left allmulticast mode [ 595.644617][T22026] bond1: left allmulticast mode [ 595.648866][T22026] geneve3: left promiscuous mode [ 595.648921][T22026] geneve3: left allmulticast mode [ 595.660737][T22026] geneve4: left promiscuous mode [ 595.675844][T11151] lo speed is unknown, defaulting to 1000 [ 595.675887][T11151] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 595.687081][T10312] net_ratelimit: 17 callbacks suppressed [ 595.687103][T10312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 595.687130][T10312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 595.881926][T22039] bridge2: port 1(veth3) entered blocking state [ 595.882076][T22039] bridge2: port 1(veth3) entered disabled state [ 595.882237][T22039] veth3: entered allmulticast mode [ 595.910724][T22039] veth3: entered promiscuous mode [ 596.030505][T22040] bridge2: port 2(veth5) entered blocking state [ 596.030625][T22040] bridge2: port 2(veth5) entered disabled state [ 596.030766][T22040] veth5: entered allmulticast mode [ 596.058956][T22040] veth5: entered promiscuous mode [ 596.108020][T11403] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.108666][T11403] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.108739][T11403] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.108820][T11403] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.186079][T11403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.196620][T11407] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 596.196656][T11407] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 596.269102][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.705607][ T6073] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 596.705644][ T6073] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 596.756920][T22073] ip6gre1: entered promiscuous mode [ 596.756945][T22073] ip6gre1: entered allmulticast mode [ 596.762971][T22067] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3872'. [ 597.215890][T11403] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 597.215931][T11403] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 597.789823][T22090] netlink: 'syz.1.3877': attribute type 39 has an invalid length. [ 598.071797][T22113] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3880'. [ 598.987998][T22125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3884'. [ 599.408140][T22133] syzkaller1: entered promiscuous mode [ 599.408167][T22133] syzkaller1: entered allmulticast mode [ 599.412855][T22138] C: renamed from veth1_to_team [ 599.436796][T22138] netlink: 'syz.4.3887': attribute type 2 has an invalid length. [ 599.436820][T22138] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3887'. [ 599.510498][T22133] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 599.510543][T22133] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 599.510589][T22133] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 599.572235][T22133] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 600.269477][T22157] netlink: 'syz.0.3894': attribute type 1 has an invalid length. [ 600.273671][T22159] netlink: 'syz.4.3893': attribute type 4 has an invalid length. [ 600.273693][T22159] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3893'. [ 600.343900][T22165] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 600.659856][T22170] bond5: (slave bridge4): making interface the new active one [ 600.664375][T22170] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 600.767610][T10312] net_ratelimit: 15 callbacks suppressed [ 600.767635][T10312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 600.767663][T10312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 601.276802][T11403] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 601.276840][T11403] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 601.429809][T22178] syzkaller1: entered promiscuous mode [ 601.430025][T22178] syzkaller1: entered allmulticast mode [ 601.651590][T22184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.698105][T22184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.700010][T22184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.721495][T22184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.740010][T22184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.761191][T22184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.766812][T22202] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 602.811362][T22202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3903'. [ 602.972405][T22212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3905'. [ 603.281684][T22230] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3911'. [ 603.872565][T22240] x_tables: duplicate underflow at hook 3 [ 604.066777][T22250] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3919'. [ 604.502545][T22266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3923'. [ 604.502579][T22266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3923'. [ 604.787848][T22276] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3927'. [ 604.788148][T22275] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3926'. [ 607.055704][ T51] net_ratelimit: 1046 callbacks suppressed [ 607.055743][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.161222][T10312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 607.161259][T10312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 607.665535][T11407] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 607.665576][T11407] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 607.796878][T11407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.828437][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.193216][T11403] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 608.193253][T11403] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 608.440300][T11403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.256909][ T51] net_ratelimit: 17 callbacks suppressed [ 612.256934][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.265396][ T51] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 612.265427][ T51] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 612.775777][ T36] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 612.775818][ T36] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 612.897986][T11407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.898456][T11407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.287065][ T6073] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 613.287115][ T6073] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 613.377096][T22313] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3932'. [ 613.379351][T22313] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3932'. [ 613.611869][T22321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3935'. [ 613.611905][T22321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3935'. [ 613.806717][ T51] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 614.648113][T22323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3934'. [ 614.693664][T22357] netlink: 'syz.1.3944': attribute type 40 has an invalid length. [ 614.714922][T22323] hsr_slave_1 (unregistering): left promiscuous mode [ 614.912307][T22369] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 614.913607][T22369] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 615.065307][T22372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3949'. [ 615.065341][T22372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3949'. [ 615.399406][T22381] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3951'. [ 615.399731][T22381] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3951'. [ 615.495674][T22385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.747130][T22377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.821498][T22380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.892110][T22377] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3952'. [ 615.967374][T22377] netlink: 'syz.1.3952': attribute type 32 has an invalid length. [ 616.296130][T22403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.086099][T22421] netlink: 'syz.0.3961': attribute type 3 has an invalid length. [ 617.343125][T22431] net_ratelimit: 18 callbacks suppressed [ 617.343148][T22431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.414421][T11151] bridge0: entered promiscuous mode [ 617.511845][T11407] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 617.511894][T11407] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 617.761753][T22445] netlink: 'syz.4.3964': attribute type 8 has an invalid length. [ 617.761779][T22445] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 617.942261][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.955631][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.039313][T11391] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 618.039350][T11391] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 618.042414][T11398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.545687][ T36] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 619.350109][T22478] __nla_validate_parse: 7 callbacks suppressed [ 619.350134][T22478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3973'. [ 619.815154][T22486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.717824][T22509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3982'. [ 622.788482][T11407] net_ratelimit: 18 callbacks suppressed [ 622.788509][T11407] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 622.788545][T11407] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 623.204933][ T6073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.295280][T11398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.402950][T22532] xt_CT: You must specify a L4 protocol and not use inversions on it [ 623.437302][ T36] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 623.437342][ T36] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 623.740825][T22539] netlink: 'syz.4.3986': attribute type 153 has an invalid length. [ 623.796885][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.915818][T22549] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3989'. [ 623.989784][T22551] xt_hashlimit: size too large, truncated to 1048576 [ 623.991989][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 623.992072][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 624.055556][T22549] [ 624.057953][T22549] ====================================================== [ 624.065032][T22549] WARNING: possible circular locking dependency detected [ 624.072103][T22549] syzkaller #0 Not tainted [ 624.076589][T22549] ------------------------------------------------------ [ 624.083639][T22549] syz.3.3989/22549 is trying to acquire lock: [ 624.089738][T22549] ffff888031918f18 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0 [ 624.098672][T22549] [ 624.098672][T22549] but task is already holding lock: [ 624.106062][T22549] ffff8880269fbd68 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 624.115601][T22549] [ 624.115601][T22549] which lock already depends on the new lock. [ 624.115601][T22549] [ 624.126035][T22549] [ 624.126035][T22549] the existing dependency chain (in reverse order) is: [ 624.135086][T22549] [ 624.135086][T22549] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 624.142971][T22549] __mutex_lock+0x19d/0x1550 [ 624.148162][T22549] elevator_change+0x1af/0x480 [ 624.153489][T22549] elevator_set_none+0xb5/0x140 [ 624.158903][T22549] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 624.165362][T22549] nbd_start_device+0x189/0xb30 [ 624.170866][T22549] nbd_genl_connect+0x167d/0x1cd0 [ 624.176533][T22549] genl_family_rcv_msg_doit+0x233/0x340 [ 624.182673][T22549] genl_rcv_msg+0x614/0x7a0 [ 624.187723][T22549] netlink_rcv_skb+0x226/0x4a0 [ 624.193042][T22549] genl_rcv+0x28/0x40 [ 624.197562][T22549] netlink_unicast+0x7bd/0x940 [ 624.202869][T22549] netlink_sendmsg+0x813/0xb40 [ 624.208182][T22549] sock_sendmsg_nosec+0x13a/0x180 [ 624.213758][T22549] ____sys_sendmsg+0x54e/0x850 [ 624.219066][T22549] ___sys_sendmsg+0x2a5/0x360 [ 624.224289][T22549] __x64_sys_sendmsg+0x1b1/0x290 [ 624.229774][T22549] do_syscall_64+0x166/0x520 [ 624.234902][T22549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.241347][T22549] [ 624.241347][T22549] -> #5 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 624.249994][T22549] blk_alloc_queue+0x544/0x690 [ 624.255368][T22549] __blk_mq_alloc_disk+0x194/0x390 [ 624.261036][T22549] nbd_dev_add+0x494/0xb60 [ 624.265996][T22549] nbd_init+0x168/0x1f0 [ 624.270849][T22549] do_one_initcall+0x250/0x870 [ 624.276162][T22549] do_initcall_level+0x10a/0x1a0 [ 624.281709][T22549] do_initcalls+0x59/0xa0 [ 624.286586][T22549] kernel_init_freeable+0x29d/0x3e0 [ 624.292326][T22549] kernel_init+0x22/0x1d0 [ 624.297251][T22549] ret_from_fork+0x514/0xb70 [ 624.302395][T22549] ret_from_fork_asm+0x1a/0x30 [ 624.307714][T22549] [ 624.307714][T22549] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 624.314942][T22549] fs_reclaim_acquire+0x71/0x100 [ 624.320417][T22549] __kmalloc_cache_node_noprof+0x66/0x620 [ 624.326694][T22549] create_worker+0x112/0x7c0 [ 624.331840][T22549] workqueue_prepare_cpu+0xe4/0x170 [ 624.337591][T22549] cpuhp_invoke_callback+0x434/0x810 [ 624.343440][T22549] _cpu_up+0x2ce/0x5b0 [ 624.348064][T22549] cpu_up+0x1d2/0x220 [ 624.352595][T22549] cpuhp_bringup_mask+0xb2/0x1a0 [ 624.358154][T22549] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 624.364514][T22549] bringup_nonboot_cpus+0x17/0x30 [ 624.370087][T22549] smp_init+0x32/0x110 [ 624.374750][T22549] kernel_init_freeable+0x27f/0x3e0 [ 624.380511][T22549] kernel_init+0x22/0x1d0 [ 624.385393][T22549] ret_from_fork+0x514/0xb70 [ 624.390525][T22549] ret_from_fork_asm+0x1a/0x30 [ 624.395937][T22549] [ 624.395937][T22549] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 624.403707][T22549] cpus_read_lock+0x42/0x160 [ 624.408930][T22549] static_key_slow_inc+0x12/0x30 [ 624.414443][T22549] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 624.420807][T22549] nbd_genl_foreach_sock+0x265/0x450 [ 624.426654][T22549] nbd_genl_reconfigure+0xbbb/0x1040 [ 624.432484][T22549] genl_family_rcv_msg_doit+0x233/0x340 [ 624.438604][T22549] genl_rcv_msg+0x614/0x7a0 [ 624.443650][T22549] netlink_rcv_skb+0x226/0x4a0 [ 624.448967][T22549] genl_rcv+0x28/0x40 [ 624.453500][T22549] netlink_unicast+0x7bd/0x940 [ 624.458823][T22549] netlink_sendmsg+0x813/0xb40 [ 624.464153][T22549] sock_sendmsg_nosec+0x13a/0x180 [ 624.469727][T22549] ____sys_sendmsg+0x54e/0x850 [ 624.475057][T22549] ___sys_sendmsg+0x2a5/0x360 [ 624.480299][T22549] __x64_sys_sendmsg+0x1b1/0x290 [ 624.485784][T22549] do_syscall_64+0x166/0x520 [ 624.490922][T22549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.497358][T22549] [ 624.497358][T22549] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 624.505030][T22549] __mutex_lock+0x19d/0x1550 [ 624.510191][T22549] nbd_queue_rq+0x373/0xff0 [ 624.515239][T22549] blk_mq_dispatch_rq_list+0x499/0x1990 [ 624.521332][T22549] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 624.528270][T22549] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 624.534890][T22549] blk_mq_run_work_fn+0x16c/0x300 [ 624.540461][T22549] process_scheduled_works+0xc3d/0x1630 [ 624.546572][T22549] worker_thread+0xa47/0xfb0 [ 624.551714][T22549] kthread+0x38b/0x480 [ 624.556348][T22549] ret_from_fork+0x514/0xb70 [ 624.561479][T22549] ret_from_fork_asm+0x1a/0x30 [ 624.566809][T22549] [ 624.566809][T22549] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 624.574067][T22549] __mutex_lock+0x19d/0x1550 [ 624.579221][T22549] nbd_queue_rq+0xc1/0xff0 [ 624.584193][T22549] blk_mq_dispatch_rq_list+0x499/0x1990 [ 624.590295][T22549] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 624.597176][T22549] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 624.603742][T22549] blk_mq_run_work_fn+0x16c/0x300 [ 624.609329][T22549] process_scheduled_works+0xc3d/0x1630 [ 624.615437][T22549] worker_thread+0xa47/0xfb0 [ 624.620583][T22549] kthread+0x38b/0x480 [ 624.625204][T22549] ret_from_fork+0x514/0xb70 [ 624.630346][T22549] ret_from_fork_asm+0x1a/0x30 [ 624.635668][T22549] [ 624.635668][T22549] -> #0 (set->srcu){.+.+}-{0:0}: [ 624.642836][T22549] __lock_acquire+0x164c/0x2de0 [ 624.648270][T22549] lock_sync+0xb3/0x130 [ 624.652994][T22549] __synchronize_srcu+0xc9/0x2f0 [ 624.658474][T22549] elevator_switch+0x1e8/0x7b0 [ 624.663782][T22549] elevator_change+0x2fa/0x480 [ 624.669091][T22549] elevator_set_default+0x375/0x440 [ 624.674840][T22549] blk_register_queue+0x3f3/0x4e0 [ 624.680503][T22549] __add_disk+0x6b8/0xdb0 [ 624.685386][T22549] add_disk_fwnode+0x100/0x3a0 [ 624.690719][T22549] nbd_dev_add+0x733/0xb60 [ 624.695685][T22549] nbd_genl_connect+0x96c/0x1cd0 [ 624.701211][T22549] genl_family_rcv_msg_doit+0x233/0x340 [ 624.707313][T22549] genl_rcv_msg+0x614/0x7a0 [ 624.712369][T22549] netlink_rcv_skb+0x226/0x4a0 [ 624.717691][T22549] genl_rcv+0x28/0x40 [ 624.722218][T22549] netlink_unicast+0x7bd/0x940 [ 624.727530][T22549] netlink_sendmsg+0x813/0xb40 [ 624.732849][T22549] sock_sendmsg_nosec+0x13a/0x180 [ 624.738431][T22549] ____sys_sendmsg+0x54e/0x850 [ 624.743754][T22549] ___sys_sendmsg+0x2a5/0x360 [ 624.748984][T22549] __x64_sys_sendmsg+0x1b1/0x290 [ 624.754473][T22549] do_syscall_64+0x166/0x520 [ 624.759616][T22549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.766080][T22549] [ 624.766080][T22549] other info that might help us debug this: [ 624.766080][T22549] [ 624.776349][T22549] Chain exists of: [ 624.776349][T22549] set->srcu --> &q->q_usage_counter(io)#50 --> &q->elevator_lock [ 624.776349][T22549] [ 624.790037][T22549] Possible unsafe locking scenario: [ 624.790037][T22549] [ 624.797508][T22549] CPU0 CPU1 [ 624.802891][T22549] ---- ---- [ 624.808286][T22549] lock(&q->elevator_lock); [ 624.812895][T22549] lock(&q->q_usage_counter(io)#50); [ 624.820821][T22549] lock(&q->elevator_lock); [ 624.827952][T22549] sync(set->srcu); [ 624.831883][T22549] [ 624.831883][T22549] *** DEADLOCK *** [ 624.831883][T22549] [ 624.840034][T22549] locks held by syz.3.3989/22549: 6, last CPU#0: [ 624.846372][T22549] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 624.854582][T22549] #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 624.863572][T22549] #2: ffff888039db49c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 624.873962][T22549] #3: ffff8880269fbdf0 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4e0 [ 624.883821][T22549] #4: ffff8880269fb878 (&q->q_usage_counter(queue)#55){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 624.894724][T22549] #5: ffff8880269fbd68 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 624.904579][T22549] [ 624.904579][T22549] stack backtrace: [ 624.910487][T22549] CPU: 0 UID: 0 PID: 22549 Comm: syz.3.3989 Not tainted syzkaller #0 PREEMPT(full) [ 624.919872][T22549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 624.929946][T22549] Call Trace: [ 624.933248][T22549] [ 624.936204][T22549] dump_stack_lvl+0xe8/0x150 [ 624.940823][T22549] print_circular_bug+0x2e2/0x300 [ 624.945877][T22549] check_noncircular+0x12f/0x150 [ 624.950852][T22549] __lock_acquire+0x164c/0x2de0 [ 624.955738][T22549] ? lockdep_unlock+0x5c/0xd0 [ 624.960440][T22549] ? __lock_acquire+0x1511/0x2de0 [ 624.965495][T22549] lock_sync+0xb3/0x130 [ 624.969673][T22549] ? __synchronize_srcu+0xb5/0x2f0 [ 624.974804][T22549] ? __synchronize_srcu+0xb5/0x2f0 [ 624.979932][T22549] __synchronize_srcu+0xc9/0x2f0 [ 624.984897][T22549] ? __pfx___synchronize_srcu+0x10/0x10 [ 624.990463][T22549] ? do_raw_spin_lock+0x12b/0x2f0 [ 624.995519][T22549] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 625.001364][T22549] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 625.006958][T22549] ? synchronize_srcu+0x20a/0x260 [ 625.012005][T22549] elevator_switch+0x1e8/0x7b0 [ 625.016790][T22549] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 625.022276][T22549] elevator_change+0x2fa/0x480 [ 625.027071][T22549] ? do_raw_spin_unlock+0xf5/0x200 [ 625.032217][T22549] elevator_set_default+0x375/0x440 [ 625.037439][T22549] ? __pfx_elevator_set_default+0x10/0x10 [ 625.043180][T22549] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 625.050347][T22549] ? blk_crypto_sysfs_register+0x11c/0x170 [ 625.056227][T22549] blk_register_queue+0x3f3/0x4e0 [ 625.061284][T22549] __add_disk+0x6b8/0xdb0 [ 625.065640][T22549] add_disk_fwnode+0x100/0x3a0 [ 625.070430][T22549] nbd_dev_add+0x733/0xb60 [ 625.074863][T22549] ? __pfx_nbd_dev_add+0x10/0x10 [ 625.079821][T22549] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 625.085659][T22549] ? bpf_lsm_capable+0x9/0x20 [ 625.090363][T22549] ? security_capable+0x7e/0x2c0 [ 625.095386][T22549] ? radix_tree_lookup+0x25c/0x290 [ 625.100561][T22549] nbd_genl_connect+0x96c/0x1cd0 [ 625.105537][T22549] ? __pfx_nbd_genl_connect+0x10/0x10 [ 625.110947][T22549] ? rcu_is_watching+0x16/0xb0 [ 625.115756][T22549] ? trace_kmalloc+0x2a/0xf0 [ 625.120390][T22549] ? __kmalloc_noprof+0x38c/0x720 [ 625.125439][T22549] ? __nla_parse+0x40/0x60 [ 625.129885][T22549] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 625.136238][T22549] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 625.142590][T22549] genl_family_rcv_msg_doit+0x233/0x340 [ 625.148180][T22549] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 625.154276][T22549] ? __lock_acquire+0x747/0x2de0 [ 625.159240][T22549] genl_rcv_msg+0x614/0x7a0 [ 625.163767][T22549] ? __pfx_genl_rcv_msg+0x10/0x10 [ 625.168810][T22549] ? __pfx_nbd_genl_connect+0x10/0x10 [ 625.174217][T22549] netlink_rcv_skb+0x226/0x4a0 [ 625.179008][T22549] ? __pfx_genl_rcv_msg+0x10/0x10 [ 625.184054][T22549] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 625.189370][T22549] ? down_read+0x2be/0x330 [ 625.193812][T22549] genl_rcv+0x28/0x40 [ 625.197807][T22549] netlink_unicast+0x7bd/0x940 [ 625.202603][T22549] netlink_sendmsg+0x813/0xb40 [ 625.207407][T22549] ? __pfx_netlink_sendmsg+0x10/0x10 [ 625.212725][T22549] ? apparmor_socket_sendmsg+0x98/0x360 [ 625.218296][T22549] ? __pfx_netlink_sendmsg+0x10/0x10 [ 625.223611][T22549] sock_sendmsg_nosec+0x13a/0x180 [ 625.228671][T22549] ____sys_sendmsg+0x54e/0x850 [ 625.233466][T22549] ? __pfx_____sys_sendmsg+0x10/0x10 [ 625.238789][T22549] ? import_iovec+0x73/0xa0 [ 625.243318][T22549] ___sys_sendmsg+0x2a5/0x360 [ 625.248032][T22549] ? __lock_acquire+0x747/0x2de0 [ 625.252993][T22549] ? __pfx____sys_sendmsg+0x10/0x10 [ 625.258215][T22549] ? futex_wait+0x2a2/0x390 [ 625.262787][T22549] ? __fget_files+0x2a/0x420 [ 625.267397][T22549] ? __fget_files+0x3a2/0x420 [ 625.272138][T22549] __x64_sys_sendmsg+0x1b1/0x290 [ 625.277101][T22549] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 625.282594][T22549] do_syscall_64+0x166/0x520 [ 625.287215][T22549] ? trace_irq_disable+0x3b/0x140 [ 625.292278][T22549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.298380][T22549] ? clear_bhb_loop+0x70/0xc0 [ 625.303092][T22549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.309015][T22549] RIP: 0033:0x7fd9f239e159 [ 625.313455][T22549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.333098][T22549] RSP: 002b:00007fd9f31cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 625.341536][T22549] RAX: ffffffffffffffda RBX: 00007fd9f2626090 RCX: 00007fd9f239e159 [ 625.349534][T22549] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 000000000000000a [ 625.357519][T22549] RBP: 00007fd9f243503b R08: 0000000000000000 R09: 0000000000000000 [ 625.365595][T22549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.373585][T22549] R13: 00007fd9f2626128 R14: 00007fd9f2626090 R15: 00007fff80e306d8 [ 625.381582][T22549] [ 625.397009][ T36] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 625.467702][T22556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3988'. [ 625.585118][T22545] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3989'. [ 625.585149][T22545] nbd: device at index 64 is going down [ 625.872074][T22563] udevd[22563]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 625.897177][T22563] udevd[22563]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 627.945136][T11391] net_ratelimit: 12 callbacks suppressed [ 627.945161][T11391] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 627.945187][T11391] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 628.455322][T11398] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 628.455362][T11398] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 628.895990][T11391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.896361][T11398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.965494][T11398] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 628.965541][T11398] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 629.475964][T11398] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 629.476001][T11398] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 633.045200][T11407] net_ratelimit: 16 callbacks suppressed [ 633.045225][T11407] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 633.045251][T11407] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 633.555184][T11398] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 633.555221][T11398] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01