last executing test programs: 6.92572119s ago: executing program 4 (id=3539): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$inet6(0xa, 0x5, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.212788755s ago: executing program 4 (id=3543): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xaa800, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000280), &(0x7f00000002c0)=0x4) splice(r0, 0x0, r0, 0x0, 0xd, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x6, &(0x7f0000000180)=[{&(0x7f00000001c0)="c9fe00001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a000200250ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r4 = socket(0x15, 0x5, 0x0) tee(r2, r0, 0x6, 0x4) getsockopt(r4, 0x200000000114, 0x270c, 0x0, &(0x7f0000000080)) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='htcp', 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000040)=0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xaa800, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000240)) (async) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async) splice(r0, 0x0, r0, 0x0, 0xd, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x6, &(0x7f0000000180)=[{&(0x7f00000001c0)="c9fe00001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a000200250ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async) socket(0x15, 0x5, 0x0) (async) tee(r2, r0, 0x6, 0x4) (async) getsockopt(r4, 0x200000000114, 0x270c, 0x0, &(0x7f0000000080)) (async) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='htcp', 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000040)=0x1) (async) 5.68763224s ago: executing program 4 (id=3547): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x34, r3, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xb, 0x1, [0xffffffff, 0xfffffffd]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8000}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc01}, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r4, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x10, 0x3e8, 0x200, 0x70bd28, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x148, r3, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xacf, 0xa}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0x2, 0x8, 0xe0, 0x1, 0x38a]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xfc, 0xac, "cfd89543c36c5917b50c9dc3ec4f3f58f461bd905c8de8801dc2a2bcbe80ced7cc0c2eda37804117332100252eb62e9d98e8c246cfe7e3fe2fa266430e06e384979fe856fded028c8de78f4615d2e0d71c30e7fd9bf5516af5fcb7995ebee793087b0c23925595c022e1f45535176feddb9017b3c81830be8129ee591b48fbb5bbfd8e0b6fbb7ff6abd5ee39c675e304f536f216c0ffe334e7e258dca3f146148b458c96c3b2c2fd2a2b81c7ead3b9f2c275053451e21de5be34abb6fc6578fc3cdebbd105b865c7429e7adf2268443dae10c18d14b3d082caf499f33392f456c492369ba3130641b830656dff43e4ad422bc307a7b77753"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x2}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x5, 0x8}}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x148}, 0x1, 0x0, 0x0, 0x4011}, 0x4000841) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @u32=0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008033}, 0x40814) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x4}, @TCA_SAMPLE_RATE, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x4}, {0xc}, {0x6, 0x4}}}]}]}, 0x60}}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r5) accept$packet(r6, &(0x7f0000000900), &(0x7f0000000940)=0x14) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000740)='ns/uts\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) shutdown(r9, 0x0) recvmsg$unix(r9, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r11, 0x29, 0x10, &(0x7f0000000a80), 0x4) sendto$inet6(r11, 0x0, 0x0, 0xbb8, &(0x7f0000000ac0)={0xa, 0x4e21, 0x0, @local}, 0x1c) syz_open_procfs$namespace(r10, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, r3, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x40}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x54}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_PID={0x8, 0x52, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x24000801) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="ff73bf2294d190ffff002f00"], 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x40000) syz_emit_ethernet(0xfef3, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0) 5.253146031s ago: executing program 2 (id=3550): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x80000006, 0x2}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r1}) 5.001811504s ago: executing program 2 (id=3551): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000540)={0x1, &(0x7f0000000a80)=[{0x6}]}, 0x10) bind$inet(r1, &(0x7f0000000ac0)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000b00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x3, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x3, "153e2c20706c6c460e47cb4f54c611344033aed8ba6c162ef0d68154eb3a39ba", "3d46696bcc306ff6585ec886e89b12d00dcd03eb8cb4a87738a3b2f2ef40880f55774630a7b8b6f81871857d51e01749", "ab292fb021862a006cd1e40f50a9b763d37ae55a17daa80d287ad345", {"e7da662530662bcb18acf3abfc2a7887", "90017e565337ee48958e7f4739b9bb74"}}}}}}}, 0x0) sendmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000500)="2b12", 0x2}, {&(0x7f0000001200)="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", 0xe1}, {&(0x7f0000000980)="5b88cd2b82c48d27f1bffbf7bc91611f289f767e3c4ce9a7240ffce251a9fa7ae83497098c82760f792d9d2544a7226ff56dd017029d31658aa0c0f4d7e11af187b22c1ae2a0894ead11f134e22de04f0a56e04e42394e100228539728ab1d821d2cd7a27f930290e0f3af62afd4a6611ecf2316b7180c37aa2b6d938d582a40e501c2ec995914119e5ee6c18a56446b28ec6a66c620a21e207b4df91c7345e72bdbdfbc681cc1551e8b95f85d02753494d95dbe493f8eae19fc535fb6c70dbff8d3cc9ff5d5ed82bf4e69d4b9672d97", 0xc4}, {&(0x7f0000001100)="f84bf4ca19c07c14bdcf0f8df2c85b4705c0e2f48d69cf1cba6322dd9ee2127ac97d4ee8a2707674cfed505550fdbe00fad52fad48130d38fdc4401deb0114ba239c3cd0f4e5667edf8a282fe1e580323745a7182f6535e1c6d884631a2b1a49613562c097351bac8063f2b2d7b12cd4065c04c7ea1c9051e0e05e63c783e7d26c169b616184efc3b16780aeb74c33973f5935ac6a7b5ab165", 0x34}], 0x3, 0x0, 0x0, 0x2c}, 0x4000000) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f0000000e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10c, 0x10c, 0x7, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @fwd={0xc}, @enum64={0xb, 0x5, 0x0, 0x13, 0x1, 0x2, [{0xd, 0x3, 0x7f}, {0xb, 0x7, 0x8}, {0xb, 0x6, 0x2}, {0x5, 0x6, 0x1000001}, {0x5, 0x101}]}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x4, 0x4}, @struct={0xe, 0x4, 0x0, 0x4, 0x0, 0x1ff, [{0x6, 0x3, 0x5}, {0x9, 0x1}, {0x0, 0x4, 0xe652}, {0xa, 0x4, 0x5}]}, @union={0x5, 0x0, 0x0, 0x5, 0x1, 0x34e}, @enum={0xb, 0x9, 0x0, 0x6, 0x4, [{0x2, 0x4b32}, {0x9, 0x4}, {0x0, 0x5}, {0xd, 0x10}, {0xc}, {0xc, 0xffffffff}, {0x7, 0x1}, {0x4}, {0x6, 0xffffd059}]}]}, {0x0, [0x0, 0x5f, 0x5f, 0x5f, 0x61]}}, &(0x7f0000000c00)=""/19, 0x12b, 0x13, 0x1, 0x1f}, 0x28) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, r2, 0x5, 0x1, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001040)=@bpf_lsm={0x3, 0x11, &(0x7f0000000cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000dc0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6gre0\x00', 0x0, 0x29, 0xba, 0x9, 0x8, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x80, 0x7, 0x6, 0x839c}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x3, 0x0}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0e00000cfcf7adac6eb2da00070000000000bb223b806b5f5d0023fa8a38fe451da1d579aa1b6b03b797e76791958211f8431ae17bfc21a04349f0b48814308ac647fdaa6a181a9d93847e5f1e32a5d7c8fea24ec8ed47f043d442ccf7d016ab23ac5f93e76e7988da1acf1e79a7d9689628e29eda13a18dc8193b5aea79b02f813d8f3e64d8dd2ae381e491a718343930605c726c86eaa88818fa2508ef55c1482998100684d04d9cd0a234cb4abd12ba29aa4edbb8eeea177067bccb51f4ea12aa1b3eaa", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x4, &(0x7f00000007c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000800)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0xffff0000, 0x10, 0x0, &(0x7f0000000440)="2b206d3c9d84609e73fb074824b354de", 0x0, 0x0, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) write(r4, &(0x7f0000000c80)='n\b', 0x2) 4.902950409s ago: executing program 0 (id=3552): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000000)={0x0, 0xe8b}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r0], 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, &(0x7f0000000800)="000000000000000002", 0x0}, 0x50) 4.796798599s ago: executing program 4 (id=3553): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x800}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={0x1, 0xb360}, &(0x7f0000000140)=0x8) r3 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private2, @in=@local, 0x4e28, 0x0, 0x4, 0xf000, 0x2}, {0xffffffffffffffff, 0x802, 0x913e, 0x0, 0xfffffffffffffffc, 0xfffffffffffff207, 0x5}, {0x0, 0x0, 0x0, 0x8}, 0x3, 0x0, 0x1, 0x0, 0x6, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3c}, 0x4d2, 0x33}, 0x0, @in=@multicast1, 0x3505, 0x0, 0x2, 0x4, 0x1, 0xffbffffe, 0xfffffffd}}, 0xe8) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffd}, 0x1c) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x0, 0x1000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={r2, 0x0, 0x4}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x10200}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000840)={&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000900)=[{&(0x7f0000000940)=""/248, 0x200105d0}], 0x1}, 0x1f00) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000002bc0), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000002c00)={'syzkaller1\x00', 0xc201}) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002cc0)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r8], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r8, &(0x7f0000002d00)={0x2, 0x4e20, @empty}, 0x10) r10 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002d40)={'syzkaller1\x00', @broadcast}) write$tun(r7, &(0x7f0000002d80)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x31, 0x66, 0x0, 0x3, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1d, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "5eade82003000000000000004c"}}}}, 0x3f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0) sendmsg$inet(r11, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b40)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000c00)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000c80)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000cc0)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000d80)="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", 0xcb3}], 0x5, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r12, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001b00)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) sendmsg$tipc(r6, &(0x7f0000002b00)={0x0, 0xfffffff5, &(0x7f0000002b40)=[{&(0x7f0000002b80)="a2", 0xfffffdef}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) 4.796082649s ago: executing program 0 (id=3554): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295a5, 0x70bd2c, 0x0, {0xa, 0x68, 0x0, 0xfd, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x208}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x6c, 0x30, 0x51b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x20000000}, 0x9}}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x6c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f0000000440)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000480)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000004c0)=0x60, 0x4) connect$inet(r5, &(0x7f0000000500)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r5, &(0x7f00000005c0)="be", 0x1, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r4) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa8, r6, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x19}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x45004}, 0x20000000) 4.402791021s ago: executing program 3 (id=3555): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x800) recvmsg$can_raw(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000640)=""/172, 0xac}, {&(0x7f0000000080)=""/35, 0x23}, {&(0x7f0000000340)=""/159, 0x9f}], 0x3}, 0x62) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS_V2(r2, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0xffff8000, @private2, 0x2}}, 0x4, 0xffe1, 0x5}, &(0x7f0000000180)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e21, @private=0xa010100}}, 0x5, 0x94, 0x6, 0xffff, 0xdf, 0x0, 0xc}, 0x9c) 4.189234034s ago: executing program 0 (id=3556): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x1800) setsockopt(r0, 0x8001, 0x2ea, &(0x7f0000000080)="ae61388ec5cbd276372dfb94fdf254fd902050424a62cde93b6c7e7a7ed4e280cb91d2c662bbdfd0664c42a6906b2b41b00fef3ca4e53a8543d359241103d013353f8a0798de9ed2f7222b5a9e125bb3bb2935877466508762ba7f7fbd0d737a4d3e4fbb8468e5", 0x67) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000100)={0x1, 0xffffffffffffffff, 0xc0800}, &(0x7f0000000140)=0xc) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x12}, 0x3ff}}, 0x0, 0x1, 0x8, 0x7f, 0x10001}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000280)={r3, 0x8}, &(0x7f00000002c0)=0x8) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7761}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004851}, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r6, 0x84, 0x7a, &(0x7f0000000440)={r1, 0xffffffffffffffff}, &(0x7f0000000480)=0xc) (async) r9 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)={r8}) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r10, 0x84, 0x19, &(0x7f0000000500)={r1}, 0x8) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r5, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7}, @NL80211_ATTR_BSSID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x884}, 0x4004840) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r8, 0x4058587a, &(0x7f0000000800)={{r8, &(0x7f0000000680)='@@[\x00', 0x8003, &(0x7f00000006c0)={@_ha_fsid={[0x6, 0x6]}, {0x8000, 0x3, 0xfffffffb, 0xff}}, 0x3, &(0x7f0000000700)={@_ha_fsid}, &(0x7f0000000740)=0x4089}, {[0x5, 0x8, 0x9]}, 0x7, 0x4c, &(0x7f0000000780)=""/76}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r12, 0x84, 0x1a, &(0x7f0000000880)={r7, 0x65, "bea303890f8069f08398d4cd345961e7b709af138f439828c74a323c9b6fb3e4e62c38e4b4bd79306ffc191c45f32a4efb530bcce22ff8ab6be11d6987c3ec7d2d5443886fc775ae3361e68942a49b71a22d1608290247786b4e409bc8c16a4a8b19d60c08"}, &(0x7f0000000900)=0x6d) (async) writev(r9, &(0x7f0000001b00)=[{&(0x7f0000000940)="cc79bead593bfc0bf4d57d07796f7aeab2a4e998a3866da1b99d3bcbbdd243d1ede5dfc49a56a452b8c3aa7cddad27ba447e3c7f02eddc31202f1c99e5fce6f9ed0fd0b3a169b18a39", 0x49}, {&(0x7f00000009c0)="d0ec7e8fb21984152ba44b4de07678d273fad41b24207e4d7a0dc74ef75b9bf48b6f6d1af48373ef0eaa5d741092f68b844a61538596cef108cf745f72027e0c5c1e132495352cd7b109f2bb4878dc911f74d904af3eb65fb30b4f1f506480369568e8450108cbfc2fae2e3b970e5626d32796c78d9eadaa33c789caba1f416e5a7629117a51dd288dd8c8b353aef55f65261851693ea421d7fa8d2ef063c7a124a1f8afe626048b42ef2281ca9870176999a2", 0xb3}, {&(0x7f0000000a80)="aba46e0dcfd782364cf9cb618630954ddbe3f00986976ed93d94d9611dad931f1b872cfd6b479222f61231b1b4a0282ab7df2ddc655147403d475bdb622290b8b1c8d99fdc5c802d5186927f63a6ae1e5542bcc5cc6287a11f4cbc50bea7e377c562b8c302aec41fc84c29d7918cebf1fde65a84ea881750b388f0400a0780f7f1e976877e92b1efe1f4a53aa1f38906928bb3360580dc5eaae910e609152f8c9244d0027071232d713f7d2218f157b0f0ed5d4e6965099ae5088047649955367ed14798faf7e8dbb1782a3611d7cf0d9956a7dd9b487e96a781bce3c369d3baea0d60ad0dbe6327c75a1d092aa261e9a894a56fce5b634ac4ae582e510c3f29be2d528d225e1c3a4b54fd95d28774281bdc146a26ec1d76609bf41e6d5312c545874ed227f01e32c5bac12da4a61c5a95cabb8de4f58a37bd68b45ec7bdc92b71304a7b1d001908ab87d375b26e2b1ee6481ce89d84d54b1838658dc82f206cccae7eb8d0c03804a998bc373a704ccc1069e92664bc4bffeb861e6ca87f72cab6983dfed7a34bc1cc913518fb4f85bc76f4d752b89fc2ce88c6f08b348f025ab934f564c13f6241127bd58e75bc2eb3a1bee91c4f50e79b00e43a523e3c11d6fe6afb249c60c1a58e7078ed62581cc8258c7ca40d0b89df6736c38b8a966d9dffa1251b3d0e4afca304a0d008589eff919b175268553640b8e6cff60ddae018485ba0f58f1fbfe4815a16417352140a26eedc80c9b96d73601f7c945d602521d24ea39d35e10b5fe4ba121d30e8a4f0edd25f17857a9e13912ae1da7f0de5c07c6dc448bcd55851d8e10aad0eade3ceb6b4206dfce7998a20142175351d10d7c35555ebc01fbb2144e39aecbe5e7cfc50bcb7044f3f99759882fadae4ce9068543d67556ef7de41111d37d30dd1aa29aae375a24f1ee48809286c983b8b0736855094b3ae39cc14541b455432e2ad579c75f9c1c648e1818ecfcb94365934f4165a81ecca1370b0e729bbccde292e0ebc58efe5adb3b0742d7fb082f4e24f0eb29b13fb36bffa6ad30c70657f149c0029b2d82b9c1a6cf5e6b3eaaae537e53144629e87c38c83a77f3608e7e8658ad006a6aa095a99b9a4ec01a17adbc98892db6e87d678b1941fec8b568d6b2c6dbe787a2c3fe6b378b2e0a09ed58703a28ffd4e806cd6e9a1666eae330b7ce1f78d5522dd93a3201f1dff31105bb94dd7a2fc094242cc1921e4df1eaaf4fca9452cb3d7bf7cd7dd951bbc3902073fd124c2839f8edef56e715f305ab09e810129263210cb4c4af82e9baac67cff90d6fc1c59f55e92a269278f10dc9d1e0767aaee7ea23931388384e54db9a80e84524f79061a2eca81fe4c8a1a4a0706058325455d0081e5a815125c360696644c50f4e4a7f957c689f8757d066397abd1799fc60389edcc9af98d8231c397a4f4826e56341e16996bfe5c7f70bc41606714eb86ef2d7eeed8ab28838cba894624f93b893b01cb46691c3e481564ef04d3f791ae1e581295e10290fb55af17e024d9ca6c609e96694d31b01bb68070a62d2502342b15a0e9c20d295a4c3da541e55df940e9f5176cb26304a177167284adce57fe90d8890bfc398d82045bb2075422ca187a5775f55de33c7ad6ce5733f0e3c11195e2b614589382028911342fab66c2a593f7588721a349077db4738aac73a5b3d07a625b7a3bf347a43152d23b183e6d43d48df951f3a4c9c8e7a5676d014ea036bd1f7e091b74e50c1425ecd496ec7a82c555efdd865724796dd9a336f67a9ec71c9ca7e56d807fa572fbd337d9b02517983d9c05670de19e7618c987a2da0bcc2de0dde24c80ea4f3b5078b99b0802e170194901495b10ac488668705208f8e12ae778fa1a916cc7c5e7e3e72206444932534954dc6d6307c51597f5c0d9f41f39ca3284ba2696cea12a55de12564697c99c647545b5a99155248da7702dffe693fe72066b08f0a219914d4d3660336c18af02bc9158790e5be91e34c1e14392a6965ba8d5951c1a74a3de369273bf5f154f8dfdfafaf0b1bd1db110a3f417c8708bfca740c049398e0f2dd88415a1bc13bc2f749c20d2654f254f7c8144f144035165d7e60f6002cbefe53891c3d13fc49c14ec7b7aa440bcb3a6edfebc1f8a4d11a0e70b2202eaf56d697a3212d49326ae3e100cfd905b4391023ae1c82fc750c9751f8a4c5a9b47859c1bd71ce026faf761dc2ed69b35564256fcdfe166026256c15f14a5911642acd3b96437aff239f170716f9797cf5f71b95d87e80ace37ffed42e15f9e279f690a1963170d1235d33531e03996530f01916ac999467315b775109ec841631a9c4887e2f96900b2da688e44b41d55911d6445dfe47f8b7fad91044d8dae29253c0df7fe2e41e22810e38c59f14c9d8b1ad10439c79ed400fe129a2754462e57fe020e0ae3dd0cdfdc3d60ace13860ac12bdfc2f83a67a461eb868011f252e18567a714799bf48b9f8ae481460e52e5afedfc9f9a358b4f6d8f5a86f7d03b575ec5f0cb0a34f17e3d5324331139fb65e8019dd1fe5e34ef681287a0454a1c2ae15cd1b784f0c03554a1b69c453154241aef29d6a77529e4679017d5014e3af5a4317ece859632b57513348b7381effefe5e2c93302ffcb8ee0d7ddf2ee3d09cb33a9920eacffa20bd3045550c3fd154068f1acf36fe33bf312b581b1cb89d2a388ba2d72cb7ab68d5fb9be6bae7589ea820c9b8fdbdb94e82ad4821fb17ce33d7505874c232eb1dfc8016d71b195733ebc31ced0f24d7bac5b949db3f0bfeec7e1f9e45b7f5e67716574574fd0e59b52e5a5733c09ca710b52e3a9699d8451f1fa60f45c63f0be2948db4ac17b2d8017368a3c538a2c65de15a184de307b5ad23834723cb8026e0483d6efa2602fc1d226fd0201c76bc0a2e07d73047a4c2dc68b589ef3c1a2f60b25f6c59bd7b9f0e8fd914e5f69940f54ba2101792456e03126e683603bb7173a5b667cf7f454a063013115a908e3b13df7393f6ab923146c596015dc0896257acdf1e4da834a809bce6d8b5b3d74506c81f38fa1aa5e449adc84c8c9d395de3355eee4584c00e015f984990ed9cddd0c4fbece63fdc4b836bd3b70d23ecd1586589b441ab781dc54f6d38c7056f265b1cd0be2cc10d934dd48d694e5de05834ee28c75d74943cfef594bc27da1f3741fe67512209134ff389b6c886da50a7c4b73e1275e86f2166f56403fd8dcee6f6bba4d29d76fa553bc252e896a946d5576c2a1fb762bce0775a33d6e3ada8d036c161efd43e98e87bfd53507e6ded44b9de0402a553cdaf94084888821993be815c48ef7e4c105d247626fd8e81eb14d08030335625e53b1df11efdf26b9f0adef2f04d5fafbaac98cc20ee1b9f81fc7876f3b6a530a70819586367ffbc0578da6a248f5387c45f99668e9e5da6741c99a87ebb7e3b6ed9ff28c79ee3f1b71dc5734d23ff83bfc5b232ce66df37205252f4097750782fdb49e19876f73d10a5cf55d368e3358c14c0ffe88e13970f9fd39b5225ba6ca25199ccff5c904c819f89603633d40611ce757aa86be8ef85881d3d8a4e1c0961a1e824437fb63493af2a720f601d9da6a2f8c75dd8c63068ece376d27bfda6ce3e310edf3ff7bb81019b00b5f54eb351995e86e8799ed9842fe69e06e6dcd2985e16c65497111b050e09e8089aac7d98eccf3a078e4eb11586431f10e4f7311411d08d29ec26314849063aa88e166ddb825e914842b982927f531c61fa6352abc7df089c40fa925b8c1a705e23fe59f37370dee2529409db662b29c67e4ccf26d2df628b6494f6e779683bc8964dc39971fc5d810da2af732ac37bdb1c9334ddb5f5d54418f75d724421d687f022f2a976a0dfe2e64780af7842ae64111117ed85c1b7c89e31eadc0657f2c45c306040ebff62197be9d99a74c4d85e7bc8a414131e0db4495985cd665d092a708df854e51dcbeb50a3a315ec04b436511b85ab6bf255f014ee3556c3f9b424ff4cfb4a0c12ce682d9dd813c5efb3c80379e2f0409ef3430053ae10d61e4def28ffe0129bd7dd9eeb6171b2d9b547fa8e730baf0fe2233df51c1da80c41f7e1ae5bf1864fe42375b0957d069fa5204a6fe0c34e52dc92782be06252d940b4fc36390c3b17c532591aaed7d7055a1e82f387cc09977bb957747c37c86cc2740944ba5d2c4b49066019f6701bc7f9986f2ebc32fea7631b5b836941aa422dc3b93abc5de1668226b35fb88949eacb158d3d30c9fab2df0447d2a24cf979d2772dc7a8d56776ec40462634b60765bed6ae4287af3a4014c700fd7da0e76fe811fc4e0f7879d645ec74837079d8105a56808ae8bdc39ec6a642e28dc448e541d82d1986979a7c5bdae413bbedc53a6f5bd9ef5bef4ce3d9022b086a2f77ad2615f7ac099bb165bb375f3bffd9362e13a89c0b3251920ab01b4d55200510ed4bc4b8181c29be97c7300bf43584fa9b831473df551a3fc75eb3536d7c267ea1a05b259913426cace9c50c06f57482396757abd908c15a51ee29c97a25b3d5e0fd62b92f6120b8c8c18347a62581ce1b7bd3590075de7efcd862e2964b3eb921f2a226859c97b55d48ab5e05160bc10d6e8fbe2c8d6825b07f2e67ade20405646b19498b97344d6b91b166ebec8db32493a8f56a86cfa846e967b4db2d2c2f6fa1876cec06112136ada5c4a39ce0dbbadbc32e9f82dd3e6fab8a056be0f2cdf9f6e256a37d8224647ea99c8a632d3c8b83b5f93e21742d5c241469260e97f42d3d23a81a4facdb3c45e28e14d204943c757491c0502daedf737f70a8b1bd3f83273e1919f38736bfc69b6bf0f845e125a17225c3adc785a0fdb754ea399c48e44fb813b0ca9f264285b6e0e1459fec6e65786eaf8c0382fb902cc55fb5164aa08746809bb92b5d322f8d053aebd88d9b28f7e13c3b00209afbff8853b3dd9e00035d71b5020c2e53104e23781351de6e424d021758eaea91efc0d74e6768d501b25ab5f728c88feaf2c8391685c9196f72ee1cd15790cbb924e925d323b4ea7598acfdbfc7a31af14d5971ab5b38e428f810a6291f04c88441f9393df54733097e94fdeafd6443c0965ed9bde52add891f841f876d7834f378c68c4ec76ca71ef2b17d921398eb09ac7a4aaddc05fda303db762fc989ecf00346effbb5b9647c4e71b29148c9f3e4bbe802f12289cd89d9a7c8f1c7b725fd66197df9b5312b330dce9bac6b3833d17be1db00d80ed6b83029a77fa00772ff54b0bf4b00bd3d02846d24783b4d794e32ff58c538eb346e591341b2ed5b260d5d6cd225300cc5d96fd10ffd55e9a7e7db07f3bde8ae692124773cd6cf41c37d1673bbaf9e82037ec977e62559b597c466fbd7dcb2f9a23c596e33ceb8831a6e14bc325eda6baa06c23c1d7df200698d4c6c8f5b54e1c05658e1bd738e36afe3643fefccea145ae6db2e9642c0d452113f900e4f49b64491893cb17b431324b2eefe0ccbb1fa8f4892690fa6bbaad3d6b4dfa278cc8a814ac7e82c0461bbdfc471515567ca0b65af3a60c77c40eab09a95c7fa8cec9174403f7d11457e77399f7ec153e3e3f083c46c304b3683fc2ba4a70293e126f1ccbee8f70cbd10889467f5d517d998cc2c03dbe833e71c8b43b8e1d2c5815f94f9b287162d7495da1cecbdb3a81a72787e6bac723d454a240afca8b96dca6b2132675b85a4bdb4eb8aa5af2ff22d4a3192b8e93837f765f5945933f765013f8ae068f728176238ecb127f13c5b9ce30d9a2982ea09ecfa15b539eb19f72e376806d", 0x1000}, {&(0x7f0000001a80)="8588e12ab557cc4c04338f2f1d3b3daa6cf7fac89b03187b7f32eb872ad23dd45ff2dab7641e206ee65a81ec806fc4f23ea43c30e177b2", 0x37}, {&(0x7f0000001ac0)="4db6a0236af3a6747776408bfeaa2d62da6f029f7b597e3b77cbd2d1df30cb0a0be246dbfe099e6711", 0x29}], 0x5) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001bc0), r10) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r12, &(0x7f0000001f00)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001c40)={0x254, r13, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_IE={0x9, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x6c, 0x6}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}, @NL80211_ATTR_IE={0xfa, 0x2a, [@fast_bss_trans={0x37, 0xea, {0x9, 0x9, "c10e9d2d280a7d80ee8f4e909f34265c", "4d61b9042bfa22ae42759f18488177bf33cd49ce748202302a6bd4f273b0d417", "0ce32360a766d6072b8f1a224265ae0a176014329a023fd37568522374c150a0", [{0x2, 0x18, "f5a5b2175201dec6d6e3112d3bd86fefe3ed23c3e442d3c7"}, {0x3, 0x16, "91ba539262a5750115d0dcfe6c50b94ff8c56235acad"}, {0x4, 0x7, "1242f86a8ab21d"}, {0x1, 0x1e, "a1c0c58327363829fb4741dac0de5df08e8a78c5afadc25d0039237a84cf"}, {0x3}, {0x1, 0x1c, "5458f25ed78293d9a18b498cb27f46e885eabf7f12814c863aa07da1"}, {0x4, 0x9, "2dbbf53d9965824c5b"}, {0x4, 0x7, "81f048b0380262"}, {0x3, 0x7, "56a19d71b532cc"}]}}, @peer_mgmt={0x75, 0x8, {0x1, 0x80, @val=0xe8c, @val=0x25, @void}}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_IE={0x118, 0x2a, [@chsw_timing={0x68, 0x4, {0x6, 0xfffb}}, @random={0x12, 0xa8, "69cbb4f1306717535827f0ab9d1b123b264a8d2b41791a904f0ee9f47a8b8dcd245410631251cb580f7b66e6e2fad734370ec6e2ff5d04ed29da91cada030cb46bf89fad79b4f9f26e3c9b4e5f8f09e4f7002678942edf6aef858fb2392f59a3a9d4f52472427e014da12dab7a1d97e0d5438d8253817861951c36a34db4cfa40175ab0f0cc7ffbb51545a83587a593b042fa5e2acb32f35ea3236005880417c303e8cdee9991989"}, @ht={0x2d, 0x1a, {0xc, 0x0, 0x2, 0x0, {0x3, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x6, 0x4, 0x5}}, @prep={0x83, 0x1f, {{}, 0x9, 0x0, @device_b, 0x1, @void, 0x9d, 0x1, @device_b, 0x80000001}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x8, 0xf7, @device_b, 0x400, @value=@device_b, 0x300, 0x2, @device_b, 0xb4a}}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x2000c051}, 0x40) (async) sendmsg$NL80211_CMD_LEAVE_OCB(r12, &(0x7f0000002000)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x1c, r5, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x85}, 0x4895) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002040)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r10, &(0x7f0000002540)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002500)={&(0x7f00000020c0)={0x42c, r5, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x320, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x244, 0xd, 0x0, 0x1, [{0xff, 0x0, "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"}, {0x3a, 0x0, "09af4870711dab9a6976e44957f5036f6dd39a29d7fa9ca451a50cce48a3e9ae5c33a1a9bc61d4eec796af895a9e8c21329ec3e0c3d3"}, {0x102, 0x0, "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"}]}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_SERVICE_INFO={0xc2, 0xb, "846381794f641f1148ff674ee8b50289c722ee368d2a9fdadf1a484656f04639bf47eae81557b4d5e51f060c53aea51eae908cfc67da45b594a43f913c19966b04071689b34f4d2cd3535f6754bb883b6132ec7bf508def82b27d72c961f42caadc3396c7f480b715465ff93c980574399f84e45ce58304c4a0e55a16952492194abb734db3ad3aa684690711bf4b88c9da736ac2faea07de62445ca12f8d52e7b6298f61bfbd305e2f61ce36099d5f6737848c3935b17a6743a09cddcbb"}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}, @NL80211_ATTR_NAN_FUNC={0xd0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "3588e6bd8150"}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0xa8, 0xd, 0x0, 0x1, [{0x8a, 0x0, "9a842f5bbb97725aea8955d92dbb974f564021442c0e360b1f19cf1153efa3b69756ea576f0baea19698a54ee0b882ffad908365ab01b75e9a4ce0bc255da361c4c8b2d9b6ec97fcfd14816231984548f85e9247f4f5d3ea5d2e794c1dae2f059e257867fae2c8e017abdd682167441c55493c9f505507f4c4daf79c881bcd3f60357d87872a"}, {0x18, 0x0, "d891bcad86736b29e115bc890230a85e159e538d"}]}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x1}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x1}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "e749bd0957be"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}]}, 0x42c}, 0x1, 0x0, 0x0, 0x24004011}, 0x24000014) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000025c0), r4) sendmsg$NL80211_CMD_SET_KEY(r12, &(0x7f00000026c0)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x48, r15, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0x13, 0xa, "de972d942075af5f91d12a2330e849"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) getsockopt$inet_mreqsrc(r10, 0x0, 0x28, &(0x7f0000002700)={@broadcast, @loopback, @local}, &(0x7f0000002740)=0xc) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000003ec0)={'gre0\x00', &(0x7f0000003e40)={'erspan0\x00', 0x0, 0x7, 0x10, 0x34d, 0x5, {{0xe, 0x4, 0x3, 0x9, 0x38, 0x68, 0x0, 0xa, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x41}, {[@timestamp_addr={0x44, 0x24, 0xb9, 0x1, 0x9, [{@broadcast, 0x81}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0xbe9727c}, {@loopback}, {@loopback, 0x2}]}]}}}}}) sendmsg$inet(r0, &(0x7f0000004040)={&(0x7f0000002780)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, &(0x7f0000003d80)=[{&(0x7f00000027c0)="9dec456e140656bf30312589ac5af714e0dd4b216c470c18125fbbaf54c97409700da92d384bf74a9aded6fe0981bcc5bf9e2eb481daa0e016b473404afb06fa9aad0450a8bd5dc3a62e71952d4b256270587feff1e3dbe69e252063eacd0860e86dec7b0df37ce0298446e145c71511ced156448e0598e045c5ec17c8671e6620d3b273f569aa26af9e70d709e5e8778eac749d3176e5956ad7e1a066da", 0x9e}, {&(0x7f0000002880)="edd81eda7c33f944c6f6a3342e5c943620a65e0fa5d3c3aca45daa3a10897d0aa0e28f43ebef17647078f4b103f5a4a596a6575f48234375770934cd1907b265da180449497e9806ef0cc0eea17f25c153c95e992b5799400bccf89cdf2835842af4e7feb54efdf1e713d6e7712dc1a692b02065b08e728d70925b0734e121be6e03503645d8c8c698d327d836df3193723e528b4de94ad708c36012338e816a75e65334a5f20f1f94b2fc4d814337b7cd60d8baedf8860a38afa4b41495e36bc71703c29e76f295dc2485d7607395b1d20b3f2411bf0386db44b948691d61f662bf852c3a401281dba6a18d51e6d7b2e4dec89b0ce12af7c7e596b8a14248214f23f6df20f90fe2c8dfb88ce363a9daef865252f6125c297f9683af782072947089c1b1ec8aee268c937dbaa214c73788e38b5122821cab84e5275442d420c8d67eefdf32ec748a92ae884ff911999ffb5fbc0a88f6f5386902f5ef74a195ac06935cde6d34465f945a85120e3c26817bc891f55e96bfc85515b11f8b5f65cdb0103c1d4b82a4b7f98bd1accc01be3caf37ea9d36067fdc28f42db30824489cc2931c8b765fef78aa2b3c8e65efd95ea7963380ca51bccdab3f83dab91fe123fc3b74df11ad29b82fc25bfeac2875c0b6e9834aceb78952518b794f4c69e3a35b00448b1c5b5ae25dd94e3a042fddff24164160cc1a56c6f41cf19c934c8084b6348785f9cf8758695c12e2de03b2a0a03f15dabb079734032bca8595434b16c66b9346cfd63be16f60dc4ac589ef44eab417c74acdd0b413a45ce5d809359aeafcd9f5fc4831bb1c5cef0c3cb962cd3d74b066c4c7574b6c32156325bc7b87781939383d823abb2f0d37244b08d8b55364a201b131e0eabd3f95959b8b46c7640b0c7ce475fa304149c6b4152f05fc73076f85418ef81cc12e58ebb37f679955b481331cce0c6ee8e9e2cf332ee59b65212c48e3109ffa45a3c71cb79a7403538e95e9cfc843a3e18227f4077bc673d41ca0256d833a9a4a8bc990dfcde7e4c40720c923977d21267964af2e7dfd56e1ad8b9175673362a5beec82c9869a52e6784ae652db39eb79f16a72e0ca034de48fef747d7fd9bf070d112777c16f7ab8a401b351ad9d745988032bf92bf51e220690a506d25d162529a846682680510470e151085d4eab5ab531aeccafbb1a78b297e6d62640f9a1b314914f84dbb2f03353d15fd4aa1f2b24bff9c6ce976b0dca6c304b99abba52b2bcaf44be9d483e15158e8ca0576d7e3bf938aa62c2cfabef5d2efe01217f16699e088835f8db7b62e7a171b5188acb4a7d51fc4c1f62f811be092a11067671ddd85670c8daeb2ec2ff9a7d29703455cbb5d558de1bf0cce484f3808e9198b993a2b2546d487683103aeba7123b34251c3796929e0a961baea556cfa373a615542c6dd37619bfe9fe3802f064e0de8ee14c5171a2e441e91af814380fa9e52bfccb2392c1ee0088586e0022a7380981630bbd4fec8125643beed06bda00ee00d2d84f95dcce501e6692ac0160b4bbf07364ad754525a56845d1ae6c5f2442c84c52c5fa4c34724f003790b65e7fa955b495f29401257bf1060e0ed8f708ad4bf6a9543d12e55ed6a1113c07877a1b1a2ffc8139340387fc56dc605b5c546b11db21d241dffdadcb84e4597730bd3ddc0576dac2eb02364f2bc9ab69c90184bde0aea30e77d4977c324afb8c65cd3583a801245f497d2d4fd0c4b1cb5e132d73ea6051609fa57ffbd86069697bbfd2e27f47b7e25969bc7ef3967b79a02efc627e07ea15f9375f4a9ce2c125dc115b8ff8235f9bb9117fe116471c12905f268256fd03ece6a638d07e03c7dd7bb38b6753f1d39e5835c21d297ddc835d4182954bf3eb8b37d0452d85051267e8fc2667648207cc9232b0feaaf8081435c25a79dcf52d330f980b1db22c248aa54a9d3332be3390fe9918023e75b510901d87b667db0cb3047cdd1ff2ba5fbc756b62364f21a280333008656647170e659ea044c37565a8ba8607f8dea8e4bda908af214389ed82fdfa765f636bba80b7295ff0f097c55f9d9df369a3fd288013e92da97dda7572a6e2e162e8639595381f20e8405846e3fd91bc42655e505223cc92686c230ab4236e506f59075f6b8afbd53c8088d0ecdb35e51f65950831922bf947e0d00337345b2f7008a60cd32c528239684f942776a44041e0b0c44582c4b4f1372b56e207d6721c547183566e136c1e09054640e7cfb8d3581425efbf91669ecde1858995cdecf4d2dcd4b6db8e117a94d2557de6521cae37ace96df413513bc52e67d01850812616c76433348b769aff5651f47efe2271713e975c489a9feac2242bf93529e1190ec32539bc646b340e9eb67f4e834f6ff8134877c3208e14a871eaaacd5fee4dc98c1443e2ebd1fc73098339b670497697f42219ff607f1385e32bc785198ff977b2d51f88c0342352d217875705b88373246a1d10533a4fe5c2917be6858e131fc6b9ada78fde6d893f65eab1d03ad554b37e9029c8d7dbb25b4abbef118511e811fed13217e9daf584de7b0bcbd762bb043271a062d62b3b8dafdda5a3f41005927c2359af379f51888cf58787d24b7dbedafe1640f5eb66c0e89faaa34eac69d38ec61ebbf4e5a5b7f67fc0f51888d69301b1c7371e099df36e0f8f663332f553bf79cc1b95a739c91a4d765121ff29dea4e0e7bff2c98bd2f5aa2a401c4bef4ec2f49dca30ebdeadb062c97b57661e212a0d35e3cbd0b7156b49b2fe82f96700277d3a1d996b09d6a5fa42d97da179ee16ba8e7f1f03baa69982d3ce7387eb4c04b3378617e6ef92972f44633982b3d76f4b8aeaf78345f5524ab8606a1fcb8a33d0bbb098fec54a6a4c02ee7d6dbb038363b557b021f676c163e427309d410f3336ba88b8c87278bae859e37b290e109111ba5fc166b46af6855eed2dc0c551996a90c14a17838270ac6f61e6596e56e4a0efeb18a4c25c3db064d8f72c52dd2a65f9ec7c767336adc3d58fc2b441710521f11803d5b5a9ef2bdaf066212ee2672d044a708659321be4b3cfa714e2ba98423d800ccdd38fab2224e86e7571ad3512f353defccfd113dc79e2137460153d81850469fdcc6437462fb66f2942f3d7069c475e60a20d93529bceadb9a6506d1c918b595f9971a6be4bc4ff9469de224a4505191e5a0c9b1881f640e4c682a94d4dd671da0b1a8bcd59257d4845d8102caff61f0522fc75a1ce07cf62321301f7f04ac4406fb0f438abf13b47f9d047654e8653242b7ab077d32d9dc791632833963a9c3eac9e3f4001e9dcf3dbe3301ad2ef831338ccf24e8a1671a1e5306ea9bdca102fd915fe5631fe75051f28038c2fcd58a2e42847ee819ead4bdfd16e532dd1c72fd1bef29dd45aa0aac63f423739daf2f8599324fbf6b25321256153078fda75ac13080fc088a7e0ada65fdef1f275205e56608533a9f633eb344cac4b53e93f45bdb871bd80c88f7d48efdb5b3d7ae90eb4c3e3f83b473e46bd44a49f3dbb51fc53101c23b8cf00a30c66c9393727329328b4bf1d0f6cc429720ebe090a38cfa5f14fb6c5599d422f32887747187dc25087bb7c5548b18b9c6970e6460f7bc6d71b8e45279f5001366359913c148ab5ce1714aa37122993b535108ad6e56e8a0ecbc5fc834646b5891496165fbaae218bd143ce83a33a6b90ca4b2ebb05c972c8098a17aaaef5363c2b1900295a55c8d57a44610044af6b3009a38bb9e3e0ef4f18a58b2c16b23cee5b130728dce6993aa78ba64c805084afbb5751fc97fa40a763501982e824731872bfcbe4c8daf2f92e84b47e226e014f038bffcddc0a1ae3ba9310e90ba12386c95eb1a537d05fb37c6b7b474d437cd0ee4d11cd73414f9fb7a4eebee9a2686d292472a8eaae41aa2e6ef5cff360e3e35da4a807ba43f50523d4d6e3057de235d6a821b25de9359f76042c30a86d12a3446f0afd4b817a8eb4be01ac0bb8dbce8f4176838e6edb69e4afe0e1f64d0aa887d07522c76ee94f40bdd2f6fc12bdfc94575ad0dcfe8de41a67dd7d7a862b7b0cbde464362b882ca55d1128a92082b069db77deb125cf95c47e2be6b27d5868502d10f1731f9638866e7d0cf180f664005009da4037051bc9c91d5f5ab379ce5183479e63782545d8e6cca8355d435f92ec7224ec1a0e7974559ea39959c55849e16989afd90acc0e2ddae57d9773217807172f9b35acfe0b02819288b8ec025737b1de77ffff30716f0850a1eeee430f30854aa76639a832dc9fe5713cc48ece7c2c0183605a55b23d2f7d77d30d89433b969a7ddaa14b66a80780da3969178182f3749c9c2ef357e8c2adf837ea5b9220cb487735902f5198b73df44afe981234e0b43edf6a2e7900d299b0f7f0160e510aac4afa011203ffdae162c03b300a52616509aba37e34d12d371bbcb65d048305fce2f87c10e822b259d935bcec204f22875977fceb240aa6cb36b4b4bbc2e169257c29edad4d30a68f3684352c758b27ee48ca45d0e0c64d64a50f3d8e6568e3014d8403f689a76a6fe3a1ed0dabc1a777ee5fe317048b004d98cf96f1724a0ac3df78af84106f2d1f94e8c87cc403c0fa0f8b84c5a4962e9744c4a747165f608dc51039a7bc18bb89a0259da99b612d1c44e80e9df84c5e870ae455374e9961f5dc765989da67bc52eb78231014420973a598bd5cde77921221fdc0327532282b45fc50aa5ed22f10f07508d8a8a3ed3e89c6d448d34057a0e05db728bd84ddcb62808a999d6fd0c5f993da4dbbb759c5f03f0025e6dae2e05e45f511d82c05be4e3e4a1a836001d6a42e5ffacd0e80507e5d8730cfeacebe12b4034c2d97d3b0f534e0e09a05eb9c18405c3b8c3704319365782d6b2026a3a1f381c983d05b03edd6af6037be44c7ead18a494c49cc192dd5b1a9539acf1490665156e922a0589dbef4a8962f71b2cbf038e61e823c7ee375b035f38e7c1fa08b4dc9cdcede003215a64e8fc1f5884bbe92f8cb5dfec306ea56128e89c0f1e6e38530960d851937536182f297eff7e1cf3d9e18b72210cfe64267b6b44c39e95e999b172c72a5a85196c95e60091bcb0e00186a27119f2a452cc2196723d1fedeb818092eee95a4c36f07247226c8dca4ec85a4ea86602bbdd63dd7cdec4899061d1d895151d6a0918b66ceee5bbd1ac85c7794cca0a15b7d32a103460dfa0e8e89f21b9857f8860e8cd9c98628c308114d16800e4b119060635ae16d9e9b9409576b8d96e44e2b95787c2d46018963dd248c1ce53565ae9054e33165f56083a12e8ecd5145af11a9e69acc06f4a9494d5272a60ba9f9d099a918b23dfba8667facfac788a7b8a7d123fe66991db2a4d5b7c254f4bc27cb77e58714dc259b97894df761ae5e4b470ae1e0b9f8f9a392d4f130f13d8574781a6b660ef3e488c778c1afe9237b01897e6a52d6e4d4e122b2da5e9fd82782302d173a5f8df84edf72561677cbb5d7b064ece9dad5f1c3f79c885379364a337db360685383fa30ad31dc3a1f06df62d68446b0a4941fd8c1bc17316093c4f66e5eee6add61017cbadbfad1aabcf7e69dab2790743256fe701666329508d6e1be5a57601920270820c0390b9b5ddaae911af901cab133972f6e561222e65bd48e2cbb5f570f2760cf59effcb822a384a4f9abd844333b998ee39cfc9d4ea2c30c99dab6849ac5075d4c9a800a79bb9f2eb179431d9dda14e9c3bb3832ccba3b1e20ff8e1e8d3dbfa6269f3b92b0f7aafd7ad71d4559a3106d22d3", 0x1000}, {&(0x7f0000003880)="c78b21f9b4357b890c8a09e42ada53929622326dc2019680a6b078ff5ee03225a15e7739b45de05204746c6f7ba8", 0x2e}, {&(0x7f00000038c0)="5997d77ba6fc5515440d726b2173758ebbc107777a739bc6d7a77dcc1e61ff508286df3553ff437bdc00ebd0f4f14217ae4918ebfd65f1cd09365b572f5dd3386d4805274ccbe77ccd8bbbf365f9bb5c222bca6d40f8980455dd292e6f60849d7ba42e627bd33fe903ad0c46def521be056b6858d1ceb7f9cc9e4c8ce06374bcfb661992894db2cd42282bd083c859c3ff01d69bae1f512e492817d5b794f44628d29872a33dad5ece18ab621a8f568a4c00920c5ab1bc396e1d412f49ce171be6d1969c2cd42016a09ccab2bc20c716a63a525e09823bb9", 0xd8}, {&(0x7f00000039c0)="b0a0eb86ddd9340793803c6f3255d75c57d0e5fd8b67bbdc86753e91290c3025fa2668dadd492f9a371af7fe04a94a2432d09ce9a4a3d07c5e908322f1adcd5a69cdd0d2c0d6c6a2e731736c3f59ab99aebe5ce673c99df1454446e4cb4254c19bb9186c44a02db36bc1e23ad2f0bb11b9f7078455699a604087dac3365b3fe1d16b30ae920d8717b44816e95cfbf1657ca8a6abb71b2e0496b5ff", 0x9b}, {&(0x7f0000003a80)="35894665e4d5849589b218fc65ee8fbb89b67eed73286b2b5a558470ea4f2f881d23fd7a40c03f61ab286710e175509e5f8f4a6bbf6bd5058329f98cc464b57f8e52b6fe7869041c67fa93d60ce45468dc7453522f2aeca9128cf6f33cfc81e5f98cc76adec44cbaa0e62ba23dbed5470a4d974def8d4ae9720fbe181b017790a272dd614aa19db9193520a41218a613d0eb5d2cf22315", 0x97}, {&(0x7f0000003b40)="2956a734beabcfea5fc4809493a21ea89aa3e926325ecfa0f4aafb975de2d07ad863ba80f6493ed6730150f208a6", 0x2e}, {&(0x7f0000003b80)="dbc4ec944442b3a1cddfb9cbbbdae1104c14e6ae3f6037bae674e0deec4016073dddef0843cdab0345e1bf6a5414fe9227e4ddc10379bd84dea7f72d3efb645896f87aaa7082067e38a8fb84cdae75b07ded33f7c616e1e6dbc0ac95b43181a14f57661cba431089f6369de36a2c18695fa8e5ca2dc78efeaaef5de77a34e5a5cccbad67638bd530ac1f366e7084bfcb628d06b0f3b46955b7c6ec2652c3a41543a6093eaa11ca1090c4a2c34d903b944af46b08fd5fe0042c4235b51c82e5b2fbc579cf8f3b058c6cb8d4ed9d4c2590d1604c86c354ff352c430d09e692065bfd76bed45b7581a77f8c973bcef47cb21ddea3", 0xf3}, {&(0x7f0000003c80)="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", 0xfa}], 0x9, &(0x7f0000003f00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x70}}, @ip_retopts={{0x54, 0x0, 0x7, {[@timestamp_addr={0x44, 0x44, 0x6, 0x1, 0x5, [{@multicast1, 0x5}, {@multicast2, 0x1}, {@empty, 0x8}, {@loopback, 0x8}, {@private=0xa010100, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@remote, 0x9}, {@rand_addr=0x64010100, 0x8000}]}]}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0x37, 0x3, 0x5, [{@local, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@multicast1, 0x3}, {@empty, 0x3}]}, @rr={0x7, 0xf, 0xb1, [@rand_addr=0x64010102, @loopback, @private=0xa010102]}, @noop, @generic={0x0, 0x3, "a8"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r16, @multicast2, @private=0xa010102}}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x118}, 0x10000015) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004340)={0xffffffffffffffff, 0x0, 0x6b, 0xe2, &(0x7f0000004100)="fd888f99b1640a606315f1e8866652ed6cf4eca60eb408f16fc7807172fe0f3f15bc981a9c689476a581f5f8e7f95d4e17b42375dd58db44dde66401b0cfadb9f294a466d26887fabba7f47d6f2d89a3fbbb0ac5a9f9290b2beae810ab45989ef111e9609ff93c4604152c", &(0x7f0000004180)=""/226, 0x7fff, 0x0, 0x69, 0x3c, &(0x7f0000004280)="64cb576f2721c7073c5012cf9393a764a0519c24563e4a69fe2ac2d5895f7532936fc4de481eb42c779cda62bf2956634b3df384fa5528a25cdfc23bcb02bc8743bbac81d2c56cb73ed1c195262877e83510fd1c4a49db915218d46c1c77d505df4b76cd1187bb7101", &(0x7f0000004300)="f8fdd51e58a7b9b8e9e09010c1aa1645baf97d55d4989502dc65c43da18be617e8a19e5c4e8637a4580a5214bf957df032d5bb286944266c7ad4e922", 0x3, 0x0, 0x3}, 0x50) 4.14480964s ago: executing program 2 (id=3557): r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_mreqn(r0, 0x6a, 0x4, 0x0, &(0x7f00000005c0)=0x5c) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000600)='westwood', 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f00000003c0), 0x4) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20000000) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000005, 0x4010, r5, 0xe44a0000) close(r5) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r7], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x7) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b40)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x390, 0x2a0, 0x390, 0x1c0, 0x0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x0, 0x38}, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000010000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0x2f, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0xffffff00, 0xffffffff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9, 0x5}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x38, 0x17}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@eui64={{0x28}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f9) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r9, &(0x7f0000000640)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r9, &(0x7f0000000680)=[{{&(0x7f00000006c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000740)="f40a8c", 0x3}], 0x1}}], 0x1, 0x20008000) recvmsg(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0), 0x5c}, 0x123) shutdown(r9, 0x1) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r3) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', r11, 0x2f, 0x75, 0x8, 0x2, 0x10, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x10, 0x0, 0x1}}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r11, @ANYBLOB="01"], 0x3c}}, 0x0) socket(0x10, 0x3, 0x0) 4.144175632s ago: executing program 1 (id=3558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000080040fe8000000000000000000000000000aafe8000000000000000000000000000bb3b00010400000000"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}}, 0x0) 3.976060008s ago: executing program 3 (id=3559): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x821}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r0}]}}}]}, 0x38}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b34, &(0x7f0000000480)={'wlan0\x00'}) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x12, 0x3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14df257b000000000000b99d8f5e988b4a5f0000f01b77a8a31ad88ee3352e835240e53c9ae4943ca90aa5b2cc731871d0e6424c14861c912e826b079ded468a88eaf9dc104ee3e24e0b5ebf83966a6ad02c62ee73672fc0d34ffebb73f318049c5b2fcf4664f92d826847a58d8240b7db2ad577228c22d12896813123cde265d06d905ae448c98f93ff5024e47ef31a8a1f4824be0d484514abcd"], 0x14}, 0x1, 0x0, 0x0, 0x4c004}, 0x4000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r5, 0x84, 0x7a, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x80000}, &(0x7f0000000580)=0xc) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f00000004c0), &(0x7f00000005c0)=0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000780)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="340000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r12], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000900)={'syztnl1\x00', &(0x7f0000000880)={'erspan0\x00', 0x0, 0x20, 0x7800, 0x7, 0x867, {{0xd, 0x4, 0x3, 0x5, 0x34, 0x65, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0xb9, 0x0, 0x8, [0xa3d2, 0x1]}, @ra={0x94, 0x4}, @generic={0x94, 0x8, "2da183d68697"}]}}}}}) r14 = socket$kcm(0x11, 0x3, 0x0) r15 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000940)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r14, 0x107, 0xf, &(0x7f0000000980), 0x56) sendmsg$kcm(r14, &(0x7f00000009c0)={&(0x7f0000000a00)=@xdp={0x2c, 0x0, r16, 0x3e}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000b00)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000f80)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f40)={&(0x7f0000000b40)={0x3c4, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x88, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r10}, {0x10c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0xb99, 0x6, 0x5, 0x4ad}, {0x4, 0x2, 0x4, 0x4}, {0x7, 0x8, 0x9, 0x3}, {0x1000, 0x1, 0x2, 0x4bc}, {0xc, 0x4, 0x1, 0x4}, {0x7, 0x9, 0x5, 0x4}, {0x7, 0x1, 0x10, 0x8}, {0x2, 0xd2, 0x8, 0xb3}, {0x89c, 0x7, 0xff, 0x9}]}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0x1, 0x9, 0x2}, {0x8, 0x6, 0x8, 0x40}, {0x2, 0x80, 0x4, 0xfffffa25}]}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}]}}, {{0x8, 0x1, r17}, {0x4}}]}, 0x3c4}}, 0x24000000) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0706000000000000000000000000080005000000000008000400ac14140008000100", @ANYRES32=0x0, @ANYBLOB="0c0003000000000000000000080002000002"], 0x40}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8) 3.895216057s ago: executing program 1 (id=3560): socket(0x10, 0x803, 0x2) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000001680)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r1, 0x8914, &(0x7f00000016c0)='dummy0\x00'/40) ioctl(r1, 0x8914, &(0x7f0000001700)="64756d6d7930000000000000000000000100"/40) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000004ba0a322ff6c261adfc2daf5f01597ff93258b733799067e00adfe71e49f48093be40918f23d54cbb66de7f12c5d480ba87ef74e7dc7d7203c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x48) ioctl(r1, 0x8914, &(0x7f00000017c0)="6c6170623000000000000000000000000100"/40) (async) ioctl(r1, 0x8914, &(0x7f00000017c0)="6c6170623000000000000000000000000100"/40) ioctl(r1, 0x890b, &(0x7f0000001800)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0\x00'/64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000000c0)={0x4c, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3f2e, 0x41}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x4c}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000000c0)={0x4c, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3f2e, 0x41}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000001980)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001a40)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00012bbd7000fddbdf255c00000008006b005a0000cc8b7e15003700000008006b005a00000008006b000000000008006b00b400000008006b007800000008006b00e001000008006b00f000000008000000000099effa70679350079deea10ad9081d936fa68f42cb59fd95258a2bc6508ca83cf750374856cad4e762be495fe66a7b0fcc0593c77497cf0968ba28410ea3924b833a5c21157552546296fe1f374f3aea95853060e272119c63a82474cbe968a927bf1d41d87df4b87a742c91ecb83482cea407444975e0a0f4a02e5fd2e5bfec2f7272580403b246361791c930656c53c626b5ab1de3fabdbf3900"/248], 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x1) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000001980)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001a40)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00012bbd7000fddbdf255c00000008006b005a0000cc8b7e15003700000008006b005a00000008006b000000000008006b00b400000008006b007800000008006b00e001000008006b00f000000008000000000099effa70679350079deea10ad9081d936fa68f42cb59fd95258a2bc6508ca83cf750374856cad4e762be495fe66a7b0fcc0593c77497cf0968ba28410ea3924b833a5c21157552546296fe1f374f3aea95853060e272119c63a82474cbe968a927bf1d41d87df4b87a742c91ecb83482cea407444975e0a0f4a02e5fd2e5bfec2f7272580403b246361791c930656c53c626b5ab1de3fabdbf3900"/248], 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x1) close(r2) (async) close(r2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) (async) close(r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x7, 0x6, &(0x7f0000001c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40}, [@ldst={0x3, 0x1, 0x3, 0x8, 0x2, 0x40, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x0, 0x7, 0xa, 0x9, 0x140}]}, &(0x7f0000001c40)='syzkaller\x00', 0x2, 0x41, &(0x7f0000001c80)=""/65, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001d00)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000001d40)=[{0x0, 0x3, 0x5, 0xb}, {0x2, 0x5, 0xd, 0x7}, {0x4, 0x4, 0x6, 0x7}, {0x0, 0x4, 0x6, 0x8}, {0x3, 0x9, 0x9, 0x8}, {0x3, 0x2, 0x7, 0xb}, {0x0, 0x2, 0x1, 0x2}, {0x1, 0x3, 0x9, 0xb}], 0x10, 0x5}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001dc0)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001dc0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0xffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001e40)=r8, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000002000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, @NFT_MSG_NEWSET={0xe0, 0x9, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_DESC={0xa0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x596a03f1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x66da}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_CONCAT={0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}]}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3a}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x28}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x150}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, @NFT_MSG_NEWSET={0xe0, 0x9, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_DESC={0xa0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x596a03f1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x66da}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_CONCAT={0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}]}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3a}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x28}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x150}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r0) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000002400), 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000002400), 0x4) 2.452823567s ago: executing program 0 (id=3561): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_tracing={0x1a, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2bc85, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000001c0)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000002c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x29, 0x7, 0x66, 0x81, 0x2, 0x29, 0x1000, @empty, @multicast1}}}}}}, 0x0) write(r1, &(0x7f0000000240)="38000000240001050100000000000000000000000100000000000100ffffffff0000000008000100657473000c0002800500010003000000", 0x38) write(r1, &(0x7f0000000280)="240000002a00010002000000000000000000000001000000010001000000010000000000", 0x24) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x42201}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1138c32a1d0bbade, 0x2004}}}}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x631bb}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040040}, 0x8000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_tracing={0x1a, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2bc85, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket(0x10, 0x2, 0x0) (async) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000001c0)=0x7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000002c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) (async) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x29, 0x7, 0x66, 0x81, 0x2, 0x29, 0x1000, @empty, @multicast1}}}}}}, 0x0) (async) write(r1, &(0x7f0000000240)="38000000240001050100000000000000000000000100000000000100ffffffff0000000008000100657473000c0002800500010003000000", 0x38) (async) write(r1, &(0x7f0000000280)="240000002a00010002000000000000000000000001000000010001000000010000000000", 0x24) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x42201}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1138c32a1d0bbade, 0x2004}}}}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x631bb}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040040}, 0x8000) (async) 2.215488439s ago: executing program 3 (id=3562): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b705000000000000611030000000895f51638ce847cf5f00001fa00000000000"], &(0x7f0000000180)='GPL\x00', 0x5, 0xfd90, &(0x7f00000001c0)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000340), 0x1f3, 0x10, &(0x7f0000000400), 0xfffffffffffffc79}, 0x2a) recvmmsg(r0, &(0x7f0000002f00)=[{{&(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/215, 0xd7}, {&(0x7f00000005c0)=""/133, 0x85}], 0x2, &(0x7f00000006c0)=""/132, 0x84}, 0x6}, {{&(0x7f0000000780)=@qipcrtr, 0x80, &(0x7f0000002b00)=[{&(0x7f0000000800)=""/145, 0x91}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/241, 0xf1}, {&(0x7f0000001ac0)}, {&(0x7f0000001b00)=""/4096, 0x1000}], 0x6, &(0x7f0000002b80)=""/69, 0x45}, 0x80000000}, {{&(0x7f0000002c00)=@generic, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002c80)=""/218, 0xda}, {&(0x7f0000002d80)=""/233, 0xe9}], 0x2, &(0x7f0000002ec0)=""/29, 0x1d}}], 0x3, 0x10000, &(0x7f0000002fc0)={0x77359400}) (async) listen(r0, 0x402) (async) syz_emit_ethernet(0x4e, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 2.174831634s ago: executing program 1 (id=3563): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='wi\n', 0x3}], 0x1, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) mkdirat$cgroup(r0, &(0x7f0000000280)='syz1\x00', 0x1ff) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000300)={&(0x7f00000001c0)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0302}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000140)="27031c00f40e1400020000000000000006e1f0000000890900000002ee16c915df1b3d2bd4b836954268e611c00aaba815c2", 0x32}, {&(0x7f0000001a80)="7cdb015fbb1990080000006a2615837b6487d32d2fb46cbd152314980741e032cef721aadbc1994f1d49784b25a274803a7caf917f73a677974c21ab81963cf096b03d0369ef39458a06a2bccd5f12f4584d19a07664fe933703f7f6030000003abfd437d1e03de09e6074561fe9216c8b8ba00820c3de3c53bdba305901d7103513c9c2b71ea428a38f832416f3cafeccc552044f00ff3570a9ab9cf26b9af6af17547bf7f4e1762be569a68d54e854db809b155cc566b08f25c90861e29ab717f760ad57bbfd48e867a91d63c1ac78aafe22fc56f053ed1cc606f09b", 0xdd}, {&(0x7f0000000800)="7d586d16062b1e1b9685b88189e0093982f6994b8df2fe56386ed999f1b34b06f2f69618bf033adc88f5360397a115f725e1165f4333f06cbce55a5f20f3095d1492f30e34c2e78534aa2059bcdd5e6c215f8a1d23f5b78a8119bd6c6c6e104923606c286343b114791a0a866bcccd0fb4fa8a960d6e7a59fd52884294b949a1a028d0fd8aefa6ee1070863365ffdfc3ab2876f7423594e3ff0182a3b92a1d51842ad30dab67f17c9938c758102e63c18870f229e0ffd2398686915f863c49fdc6e949856be1d47dac4f6d56e49c9fe34ec3306a64761d6fce755e911854ad8aaf1eb5411bdd83773c3dbf8a774f02e39ce9a13692a2e62e497588697b3406011dff49e483b7af2e2ab2324cdb0854dd9c05fcd9f7891d3f4d166b88a26a1463ac7f87ab1108eb14620661c1eb302caa7417ef79e463c0447f90f85a5b7c8dfed05edcd6cd56eb526a10b859e6e23f7e8d0911defae5937f74d4b60e05992585a3a88d7234c77a5038ae4c84942a6dd682094421a9d22e412f8500823a9482dcddef53022db0e12a7ba36547b7a62e5a22279966bf8c9783d5ca2ebcff237bbbc50ae48f87e4bca97b69279826358efe838bd7a503a2d42ee1989e9302a221882e5d149588122a48becb9d21da437bd16fb3f5de45b8a2098d7597c2d12229f5887719ffeacbf702dd2ca8d3208c56f125a4e90207112d664a279eefb37ed3bd9cd4087a1ade4f8afb23bdf540d2342c714425a382c9c70dc444caa1cccb4f378851829702787c5386caed6b9361e8525cb6b25a8caaf3c6090b43a981f03dcc806caaf5d70750859be2de86be08795188b55538e5bb687bacd577d8d8c12dbdd6fb1f180a19012a052d563fef0ed3a87b3df41a64331db2bf12473d38e03160cc18210425e4aeb63766899824508ba8bdf44f97351d1c9d0fd503863bc10443ec1636cd29a611cc2df523eb995d909d1a4f2807853f6f3dc238d59306367fb25ef0b43be8b4b74d49eb1e0a5fd0b2d682b9f42203026c279b470e31da23e41bfa3fb17fcdeca7b27a14a9fcc1b0e6d41efe6f5b357eaff60460cf61fe3ddddb1cf9b19569f98dc79f1280ae1e163f5b2d8efee979ec17d6108d82443189cffb15baca91855646745d319bae3d6cae9dfbb9bbe70d20e74ac9e55b06bf40eb987112f8cd370f212f03c996baf884d4dab522a23d98bd3699fa244c5abac50a9650d199d9ef94ea932edf2153e02c9ec9c2d3d516a128584e4071b6f8aa04727f2703e80523504880b921d4326d648ba677bc920567e5282e4630c0e414b24e5c0799ca1ced216f86aec82fe9687b3f924dfef531b3bc2686a1e3042885bfe23445a7c15dce0090a7eb0ebd69be730c01bca3125e0e17f6e6d3496e599ee2ac90c6d6bb21d2e42ce7cb018ec5d8097d074393a5700c646f7c7ca8d0a81f3d6babdf028ef740f2272a5f2bf8f6978c3c6167f49fb5383e286e603ea58251409f6eb9412387fba434d6a2adae5d87ad5b3eae0b990f4a2860d4eaf4f36cd16762361514b9a5b20523c57771b87b921631113d5a1400de65766c57a2b94939cb4170afbd9cbd1be74832bcb81a8c2ceff17bdb76751ca2b7a2aed7f880ee1e3064271b456bd78f1e7cdf192ddc495a9356ce36d95d75b01616528bfdca5523ab300b1221b1690cb76bc41125b67fed8d04d6115cd2afd8569c1c5c25a007ab9638168d6c16ff4bb4e62cb4f723f43758675e7139c12690ecb34fb9334cf54aefd4d91adda73842bccd2e4d5ce192a92a8a6984156df13fef823cbdcf87ca87dd4d6a1d7a61ce161d319c72a0936a05b0da86fa08091436af30ea6234bffe2c163f9b521c2f886aef8b715a7e48055204172228ad64278968ccd01db0df89806cc8557e5f8a66fcf1dadae893f0b51db73c8035846fee2461fb272546d3b6b96ff24d0beff07ef96c2d157fd751d76079276effada716a933be58bf3ffc4b16fcea0736a508fb73e92cffdf72a7be5accce5fe0d62d79f7776945c474339c89452cc7e02ea69585d2451a1b21b8c3d9f785e62eb55e4927435165e95d807144f82355a8ab35c144c2e9cbfb7e7880344960fbe96283b828a403279d6aefcef8a9d88f615a3ee576d86c6d708d65b959d5954b95ace30f1e6beb145e0d41f544f78791034f325b12af763004ecb9f045c66f9a6812ab148a3ca4d28076c81829e7e41f2dbc65d814c6561cf9209e7d723917fb3e657a3d9f60d65ebac8d7e7e7fe94ddf8e3cf360cb65097d1ac76b893fd730ce923cf96cb6b6e5782b83b10f289621b82c37cafe04c8c5a521d3c6a43f6d15941aaa428bc22db8d53255aa217ffe8e0b02334a2bade0960066e9c84f9713b9912cfb55223d3bd17f3d3df7825bc03e3739a7cdf7e1a3ce0b77df0c6b3bb566922f52e85fbfb3f9dbcd46bf18f1a6734a3ca727a316f750d1d03eaad603674fecb1ec7d879e771c1c37b6c97b098717b40553a13d6a4831c557ab449614f780e68becfeffb8c2af86a3be388658ae1a86d4715f0c7892ffc39158d2f8348ce98eed5fe0ab1afcbd256a5f464867ddcfd077f12f6c8716859c9a46b007191455558efe2f5c4c816104f4515e96d461331d9e69dbdfa6d8e23bb9c5b8012726819f365d50f258ef30d675876fd95e06791864af2e6b4fc08e0f8162341c0cc0f5d238bd8b25e1036ef8f111c69818391237571330e174793350c9c2aada62f21108e144abe0b86ae2711e5f81cf0c1c7b9f89d36b144feada6aae488fc2f613d3868e388a141794162268b33aa35a5096259127328f22811be740daccb6bb78967e24be01cadf0c7344d1a4f01a94b3daaa4d4193ac1a6e651346a3ac7637ff852526ece318a40e9479189163d8f8d17593d0f5354c141a6461922ffbd80ea70105dcc903c3318ee185aba86d227a79e7744249743cd9b7ac651ce2528aee678c6608b373a9acc9906c3b97263a94a20a7af97d558ce3035879eb4ff6fbf0292a9debcf5bb28e681ed31fc929f7899036b6825c1e7bf9bbef7f92049bbc3047bd0a4315f7d2359cf8956c02f4c28a4ec3d1a8964ed79b52d2f0f2e8e8fa2987fd088f0afd26feda64efde38412ac3b0c1af45e4a56755b1e80d4879e8b1a63cdb0ddc834021db256305fe6f57b86927dbffce49269edcdd4938063f677a007ff4b0cfe3a304acdb665e3ceb0c4ca5398398a16ed9bfab650cda3e99e4872e5e4507a59263d0e7fbdda2414e3608466626becce4d4c4bc620a1c5824fcaf9e6f7394e6b954f5001de631b84148fd8e71f14dbd046c2aba8260c1c4467e6099ba569950bfc102a3e5d3e42bd65d6c11f61b91b9a9e0ede1ee8ee807803d3b2215989657f86d1e5f9289fc2823d64f9a0abfff0f3acbd4558e2bb02be2b15e84732f140672f72978b6e159ced84cf399f02824fb72828ef8cb2982dc1c1a0de6efa442dfc7e28b58fc67c752518fcd5b6ca58b626adaa3ffe1161eb586497841454ff80c96d70e4686885d94b84336c82f554fbcfaee9ff26924e478227b54895f0a14bd497f17924bc64a59ccc77fa322a75bd3f0d5278de02c2020e7b57f3ec63274dd4d5f921a9de61b39b068e093a9fddedb10a6b3cbc2567bfad1013c2c19fcb4e74708fc68c28472df82c85700248514cc294877762bf5371c7507f46614e015fbcecf3b273dd73266b45113146464a3eaf46bdb7118f91a87c85c955b971b427e9cb284ec8667a7797b59261c97a9698b9d448128c4042c1c23fbd4f69b009cb812fdfd534713d75889153bc86bf7616d7aafd0e1251bfe3c21632b6b265620e87f1c3f4889276529f256aeaff16aadc02554d59ea1664317494d7fe675fa814abe2d590c1eb425e7df8dd30887fbc2541b12d0ca36062a522074738e75399865a4dd142ceafe90f76cf505a34d30a2aafc211a7a753cc93342b6f107902b3656c127c401e2d00a68720279200065885982b4a553f29b3e9512621f2d7ea7ca521b3281d92ec844eb42997a53f819bafe1dd5d5c9b20a8aa2370cd8c6f4d554f87f2df542ec8a221218c1ad2df9ad9184d57e7aa0341805dc4b3b8f61697c1a365ec543d74ecb4a58bdd0a30b8245d82753616ef6f6a2bfcc661af785903c9022e092449f1ef5bc7d55217a56f7e8bd91243db88fc408d82dd6f9aee62f0558212e8d53b6b50947d4999d751186b81fcac95d0e2dc7612ee5573d88c44887c2963d33a468189d9e76ed98e77aa67509bc168272e737dee018a93e125637abf2355b449b87bb8fd502af240e73a6aa250ae823c5df567ddabd017adbf54790007a9d777a16d23c9f1ab300125dad2b9d91217527b518018590a1ea53ce6008622f30810b2bdc503fe6d8593a3e72be54c540bb34fafe134077569712c96e1cc7047d3578119ffc545779b6bffb7e40a955cd96abd57f0cab09d787f063606e7aded4678908965f41b6353bdf295f38572aed0281162dcab62b69f9fcbcf8373d1f304fda317b69724284bd2b1c1aa4f8b96b580870944612317559978f471dd47c605f64e656f67f8c8eea0e135ac2f04c8d09fe6cbfdf9110313ef90c3cc936bc8d4e4994856edaaa4e7d4a207da2136fdabe6c686c44b9c262c28f828b332d1cba03e5b9fb0f27692dd5068e4d99096ce52c25b0a3a9cc0665ca9f24d9d782a427276c4f06bb97cd03b02add5fe55035cf63061b7d2543d85822f698583e664bce8a7146694de9651e84f2dbba325c7d32015b413206a2605b5bd7bf681b14099264d82ff98f0abd6c5c4a500a10c7c32587bfed5e592f971e6ace5026a4977a7d91a89eb579651d1c50b800d8e8c7fd9389bb8ba3c4e4642854695dd1299a726d6edbbfee72a608b4d44df4d6b3355af506199c3c061bb94f6d841ff16f9d77e750aaf4fab6682af32277813cd892a9eadb0f98fe5cd2cac80e5b678f65094f11d0d13d380a385ee0d43a7b5204f09a2dec453047353b40b53602da5d1dc4f3f22f5d8b6e28b21ee3ed19876b38d4515a7293a9c2c32d0e52cccb359395ba27ea38e2dab9eb8e6593eaec15ecf9a25bf1354533a025a0eefa9c846355128b8d6973db2eb91bac31614f9d9d0d51fa7cde3161b9155956929330db2a77ac77a7b1cd8906d1170951846", 0xe3b}], 0x3}, 0x24000008) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0xb, 0x4, &(0x7f0000000400)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000440)='GPL\x00'}, 0x80) socket$rds(0x15, 0x5, 0x0) 1.698284753s ago: executing program 2 (id=3564): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@ifindex, 0xffffffffffffffff, 0xe}, 0x20) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010000d0400000000000000000000c300", @ANYRES32=0x0, @ANYBLOB="00000000498005000a0001004af29c3ff0490000140035006d6163766c616e30"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r1, 0x303, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x0) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r1, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x6e}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x28}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x2004c810}, 0x8010) 1.318393037s ago: executing program 3 (id=3565): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f00000000c0)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x80, 0x7800, 0x81, 0x7, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x65, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010101}}}}) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000200)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x28}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000002f00090027bd700000000000040000000c0016"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 1.276434463s ago: executing program 1 (id=3566): socket$unix(0x1, 0x5, 0x0) (async) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1}, 0xc) listen(r0, 0x0) (async) listen(r0, 0x0) ppoll(&(0x7f0000000340)=[{r0, 0x601}], 0x1, &(0x7f0000000380)={0x0, 0x989680}, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) poll(&(0x7f0000000180)=[{r2, 0x200}], 0x1, 0x30) (async) poll(&(0x7f0000000180)=[{r2, 0x200}], 0x1, 0x30) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000a61f6a41249000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018180000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800004339747942fc709ec98500000015002020207b1af8ff00000000bfa100000000000007072b77ae010000f8ffffffb702000008000000b70300000000000085000000070000579500"/129], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.14911694s ago: executing program 0 (id=3567): r0 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000080)) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="02ef667db5e53f90ddf725d589e79497ed32000192c55934a92b7b6285d5b1fb065ae78c91902eb69b165687a415b833508dc85680407417b65a83592a4e597178233649c148ab68571c3390210cbe7ea8194c25e9b37c83bb8055e08218fa6a47d9401cdffa24dd9b984cec90c7c1508f05453927e13e43ffc2f4482bd0fc", 0x4}, {&(0x7f00000001c0)="1a36c585040053c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d661416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a435e8d3810ce4899d5b04d17b099bbec7fb7f005b03bb00f6860f0cd665a14bd1b7ad319101e9beae62faa71a5f2383e963aba417592d7a84958", 0x7e}], 0x62) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x401c5820, &(0x7f00000002c0)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200762c7b4c428e4147d4a3e01f61ad7a77c4f64687d819175e31c19c5cd6532d2e34f26a4b9bf7bc9bcd3c14f1a5301331c4a3", 0x4a) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$nl_route(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0xd4dc08ab6e34dbc7}, 0x8000) accept4$vsock_stream(r3, 0x0, 0x0, 0x80000) 1.148216983s ago: executing program 2 (id=3568): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x0) r1 = socket(0x1d, 0x2, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000540)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xa3}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$can_j1939(r1, &(0x7f0000000140)={0x1d, r3, 0x8000000000000003}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) (async) getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) (async) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) (async) sendmsg$nl_route(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r9, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) (async) sendmsg$nl_route(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r9, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000880)={'gre0\x00', &(0x7f00000007c0)={'erspan0\x00', r3, 0x7, 0x1, 0x1, 0x0, {{0x24, 0x4, 0x1, 0x1d, 0x90, 0x65, 0x0, 0x7f, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @broadcast, {[@noop, @lsrr={0x83, 0x1f, 0x81, [@dev={0xac, 0x14, 0x14, 0x3d}, @dev={0xac, 0x14, 0x14, 0x1a}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @cipso={0x86, 0x5b, 0x3, [{0x7, 0x5, "acefde"}, {0x1, 0x5, "f8bfa3"}, {0x6, 0x5, "13c1b5"}, {0x2, 0xe, "6db5f9bd7b0b2319d35e0057"}, {0x1, 0x7, "138cdef0c5"}, {0x7, 0xf, "4b3def9a114c68a96c5b361d0d"}, {0x7, 0xf, "35cb7d30525ffb500536bf6ccc"}, {0x6, 0x6, "deec660d"}, {0x7, 0xd, "bfe32bab934fce2528fc3d"}]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x98, r6, 0x200, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20048041}, 0x4005) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) (async) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 1.060031678s ago: executing program 4 (id=3569): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000001fc0)={{r0}, "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"}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010300000000000000000500"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) recvmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1a4, 0x65, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5, 0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x178, 0x2, [@TCA_BPF_ACT={0x174, 0x1, [@m_skbmod={0x170, 0x1b, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x1, 0x1, 0x0, 0xab6d}, 0xa}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="addd8ec7b991"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="c42d89d0476d"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6e2, 0x6, 0x3, 0x7fa80, 0x7}, 0xc}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, {0xcd, 0x6, "0c5720b707de8a9600a2c5c884a83101ab1330a7c10ee2be34aa729f8f7f657f8621a2165e976c3538da2fa427f5a41285ad8376e443f0473df1a6abb6bf6be48dac58dd2b082bacfab3bcd53757683c1c0d212191fa3f0ec2d327fed0b2eab4bc9a2c74b4134ca0c5a9c1d5271da9a31296bde60257f2440d5e2a30e4e80d2148172961982fa14afb0c1e46c90998b87dcb9fe848ca94cccb28a2548a07b4f6c66706c6972ec9bf1e162134eaa471dae8349e2457250eb954363e269d1ff96cfe0d1ff0455bc96168"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@getnexthop={0x20, 0x6a, 0x501, 0xfffffffd, 0x0, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}}, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10000000000000004000"], 0x10}, 0x0) sendto(r2, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 769.414647ms ago: executing program 1 (id=3570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000080040fe8000000000000000000000000000aafe8000000000000000000000000000bb3b00010400000000"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}}, 0x0) 664.65743ms ago: executing program 3 (id=3571): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000b00)={r1, 0xb6c, 0x4, 0x2}) write$tun(r2, &(0x7f0000000b40)={@val={0x0, 0x6558}, @val={0x2, 0x1, 0x1, 0xe, 0x0, 0x98db}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @local, @rand_addr=0x64010102, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @rand_addr=0x64010101}}, 0x2a) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x3) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000dc0)={0xbc, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_NAT_DST={0xa8, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}]}]}, 0xbc}}, 0x800) (async) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x4001, 0x3, 0x458, 0x300, 0xb, 0x148, 0x308, 0x148, 0x3c0, 0x230, 0x242, 0x3c0, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x2d0, 0x300, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0xe, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0xec010000, 0xa0, 0xc0, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) (async) sendmsg$nl_route_sched(r3, 0x0, 0x24000880) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000009c0)={0x1, &(0x7f0000000a00)=[{0x20, 0x0, 0x0, 0xfffff010}]}, 0x10) (async) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="380000001714"], 0x38}}, 0x0) bind$alg(r8, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,aes)\x00'}, 0x58) (async) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async) getsockopt$bt_hci(r1, 0x11a, 0x5, 0x0, &(0x7f0000000240)=0x7ccd4176) (async) write$tun(r7, &(0x7f0000000e80)=ANY=[@ANYBLOB="0300050004000600ff030305f34820a5fafd58ca68d073fa81215858c0c9f94630f39a4dd1f226c2cdd72483b19e1c5e27e2f2a637760d8a28cdacb152a1bb851d0277236e095ed49eb9f6444c73f6e3a1863cc3a5babc48ce44c13883865be06ed17a9084d6521de4fb16b837eb353802b3e4056920cdfe343cd0271b6df63ccab87210882e0306f7fd187e39f89facea006fcf9714dc4686aaaac37aee10e949538924080064106b6258f8465dfb807fd08a29289c1f14301e4552a1e311f486240cc3b954105c87735ade5bf48c204dbc1c8b709ad38a5129980d115c10f6202f9225cf2da52add0236e72b02b187b3066a23c67e9e0d6ac66293abcda0e6099c3e344f1c1dec3e94f4b491e2780434f1370c12dac005902455d70bc07f4aecb3d02ec7c4071a03311705f7bdd77b4ccbd509fcebc504fd206fd19129b2ee9e07e82085853b5abb46508faeea595eace26a5f17e4b9baf097fb5e192c52a23934677257e5a472678bc6d27006f401d27714c04ca93fb91800493683cb96ebac150241d82632c061d56f98"], 0x6a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x42, 0x1, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)={0x1c, 0x5a, 0x1, 0x0, 0xfffffffe, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x5, 0x0, 0x0, @ipv4=@remote}]}]}, 0x1c}], 0x1}, 0x0) 663.681812ms ago: executing program 0 (id=3572): socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x7a05, 0x1700) socket$vsock_stream(0x28, 0x1, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000280), 0x806000) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000002500)={0x50, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0xffffffffffffff7c}]}]}, 0x50}}, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000019c0)=[{{&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000000640)=[{&(0x7f0000000300)=""/254, 0xfe}, {&(0x7f0000000400)=""/4, 0x4}, {&(0x7f0000000440)=""/220, 0xdc}, {&(0x7f0000000540)=""/61, 0x3d}, {&(0x7f0000000580)=""/25, 0x19}], 0x5, &(0x7f00000006c0)=""/176, 0xb0}, 0x6}, {{&(0x7f0000000780)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000800)=""/71, 0x47}], 0x1}, 0x9}, {{&(0x7f00000008c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000940)=""/235, 0xeb}, {&(0x7f0000000a40)=""/76, 0x4c}], 0x2, &(0x7f0000000b00)=""/97, 0x61}, 0x6}, {{&(0x7f0000000b80)=@caif=@rfm, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000c00)=""/212, 0xd4}, {&(0x7f0000000d00)=""/202, 0xca}, {&(0x7f0000000e00)=""/92, 0x5c}, {&(0x7f0000000e80)=""/103, 0x67}], 0x4, &(0x7f0000000f40)=""/122, 0x7a}, 0x8}, {{0x0, 0x0, &(0x7f0000000fc0), 0x0, &(0x7f0000001000)=""/155, 0x9b}, 0x3d0}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000010c0)=""/112, 0x70}, {&(0x7f0000001140)=""/3, 0x3}, {&(0x7f0000001180)=""/219, 0xdb}, {&(0x7f0000001280)=""/150, 0x96}, {&(0x7f0000001340)=""/152, 0x98}, {&(0x7f0000001400)=""/158, 0x9e}], 0x6, &(0x7f0000001540)=""/52, 0x34}, 0xf}, {{&(0x7f0000001580)=@nl=@proc, 0x80, &(0x7f0000001700)=[{&(0x7f0000001600)=""/244, 0xf4}], 0x1, &(0x7f0000001740)=""/176, 0xb0}, 0x40}, {{&(0x7f0000001800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001980)=[{&(0x7f0000001880)=""/18, 0x12}, {&(0x7f00000018c0)=""/93, 0x5d}, {&(0x7f0000001940)}], 0x3}, 0x2}], 0x8, 0x20000022, &(0x7f0000001bc0)) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0xfe}}, 0x1c}}, 0x0) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001c80)=@nat={'nat\x00', 0x2, 0x5, 0x628, 0x0, 0x250, 0xffffffff, 0x380, 0x250, 0x6a0, 0x6a0, 0xffffffff, 0x6a0, 0x6a0, 0x5, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @ipv4={'\x00', '\xff\xff', @loopback}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1], 0x9}}, @common=@unspec=@pkttype={{}, {0x9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@eui64, @common=@rt={{}, {0x7fff, [0xffffffff, 0x5], 0xf1a, 0x20, 0x0, [@empty, @empty, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @remote, @ipv4={'\x00', '\xff\xff', @empty}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, @mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}], 0x4}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4cc) (async) setsockopt$inet6_int(r4, 0x29, 0x12, 0x0, 0x0) (async) mmap$xdp(&(0x7f00008b6000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x180000000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f00000002c0)={0x0, 0x0, 0x4000, 0x9ffffc}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000002480)=@newtaction={0x58, 0x30, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_skbedit={0x40, 0x1, 0x0, 0x0, {{0xc}, {0xfffffffffffffe8c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x2c}}, 0x0) (async) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000001c00)="5983a30a71034cbf42efef569638d767f49571efe047157c3d021c374fab092c821775742894713adba805503603821a7bf30d8b52e052a1beee62b304fba9c68cb1be220da5bed50b7397c820b0", 0x4e) 247.025708ms ago: executing program 4 (id=3573): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0x5001}) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)="1400000016001963d25a80648c56915a1974a8d9", 0x14}], 0x1}, 0x44000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000540)='highspeed', 0x9) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x7}, {0xb, 0xffff}, {0x300, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0xa}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000004c0)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="03031b003000320006006300000000442f"], 0x76) readv(r0, &(0x7f0000001780)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e23, @remote}]}, &(0x7f0000000100)=0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r9, 0x400454cd, 0x10f) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030073797a6b616c6c65723000000000000008001c00", @ANYRES32=0xc9, @ANYBLOB="d4355f5d62c5ee56ffb7b9d7a9fe6b2316605af89f048c3059d9da20abeb"], 0x3c}}, 0x0) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000700)={'syzkaller0\x00', 0x1}) write$tun(r9, &(0x7f0000000780)={@val={0x0, 0x805}, @void, @ipv6=@icmpv6={0x6, 0x6, "a80ad9", 0x20, 0x3a, 0xff, @mcast2, @local, {[@hopopts={0xe2}], @mld={0x82, 0x0, 0x0, 0xb0, 0xb9, @empty}}}}, 0x4c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000180)={r8, 0x40}, 0x8) 129.837489ms ago: executing program 1 (id=3574): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000008085000000c0000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000800000000000000000000001802d574885ab3615f5f801c73795914b0e9b9ee78078c582c400085ad0bc2481e2b9590d50f8521984ae6fd816380af011359872cd52e38811dd4f9f91713df450aaea3c8a698d1c142ddff31e696cdf63dfec3bccafc2378a0d250177f94562184ef154dd418572aaf5b8aebfca4f2000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xe80, 0x0, &(0x7f0000000480)="c1dfb061cd21d3084d94d3540800", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bond0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000100), 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xd00, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xc, 0x17, 0x19, 0x19, 0x5}}]}}]}, 0x44}}, 0x4008000) 1.050276ms ago: executing program 3 (id=3575): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000240)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001600010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\b'], 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xd}, {0x1, 0xc}, {0x3, 0x16}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x804) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)='%pK \x00'}, 0x20) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@o_path={&(0x7f0000000000)='./file0\x00', r1, 0x4000, r2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000440)={r2, 0x9, 0x1, 0x5}) 0s ago: executing program 2 (id=3576): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000018c0)={r0, 0x0}, 0x20) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000000000000000000408000000000000000000000200000000002e5f61610030dc300097cae5d59c02026292928902e5bafb8241a36b756bc6c652e808db072f8f76b4e25a1be887f96997d475c70897773cd83c430f906bbbb63fa28674c4a2384474"], 0x0, 0x3a}, 0x28) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000440)=0x100000001, 0x76dc) (async) connect$inet6(r2, &(0x7f00000015c0)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000001600), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000001640)=@ccm_128={{0x304}, "2041f09a821e1e3d", "bc1219b53b562baafd2400170f311e6d", "152d5cb7", "c2035c44dee1dcca"}, 0x28) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001680)='memory.events\x00', 0x275a, 0x0) write$tun(r3, &(0x7f00000016c0)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000004, 0x10012, r3, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000001700)=@ccm_128={{0x303}, "a06adadb1e8816ec", "de0000006deed7f21d74bc440900", "9884f958", "fc4bd6b33a9b93ca"}, 0x28) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) writev(r2, &(0x7f0000001740)=[{&(0x7f0000001780)="58fd", 0x2}], 0x1) (async) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000017c0)=0xffff1884, 0x4) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x2, {0x0, 0x1, 0x2}, 0xfe}, 0x18) (async) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000380)=0x1, 0x4) sendmsg$inet(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="81b1ea3933126e76dc159204dd5ce6cb05bb1b490659ab7389b511bc48416da494bc0bb21da3ad8fb1af8462aa9b58e35366abebb90b0ca8e3a4b5b0ecdf657fd6aed1448ca086b618ac5faef501caa79d08edb8d0d2fdda7e67f8aca454e4883edfc3a60f2fd0e587d6f84966fa046c4176fbd2a1efea5b9d31595a53f74243da3ebc8891d93c000835c7963cc09a580c63343c4c60267c6ab6e2f305c26741c78b362a67d389c169a171537ffe5700ffd163bb85829f54f24064bdca5efc8f32ae349a86c79e0f0ca4eedfeaad2f8a6f1816886191e66f9d1455d55344e3bd809e68b1c053074b8552c9ab50c2ad2bfb510aea", 0xf4}, {&(0x7f0000001980)="0589212125f75300e44ce32fc3f1cf091afca8b34ad02a73d51f8cf189529f8d698e24b68b5a4c4a222f92bf154cd646e3513565972dcfe72d0d4e88ff8d6c7d3ead836e69da50740dd098135963c4e420eea237390bd9b4c3c3b91b95b9074cf703c04468f638f3aa75a8458db89d355323b77105cdf77c0f14269d384c4d3899293c0f6c91cd47e5535249d3bd3ac16eece0bd7d2ab36e223283af446c9e9185400359adda79b8c9aff2d1321d41225b39654d236250c59dada4603f47b15ddc94f82f4c6be6a089cea80b70b82018a3a1d4d64cfba5174b795c75d1cbed1127149654ec1e56a9c44215f4cfec46176c761dee7e2877bd9e854bbc5aa19ec74e80eaeda4f48897ddbb7d913f1d53896cb40dede7e2517e3031644feb3b85b4859c2ee13b18271587a93471936b284b5a33a074a5180c11fc844782920c6f8de93b79df60e28dca38bd39a272cdd5b00c7bea3f3db52f8302fbd201577f02c74230bd23e1fdf4cd3675aef34ea8287e280c96c421c4dd04f96591f14be76311bf083474b9463a9b10cb20d9bbdbfadcea48ad9eba07e9b19a4cfe3e03dfcae2a413a291aa5d8f3345d004c73be5f255aa319fb24eafa52156d19caaa2041b1ba0c23111f17846d8047c704b706f1797e5b38d4196476f53e2ffc97bac60a37bb6d4fa2f29433de8f28936e506ab08ee195ddc2c91adb8aeb6287751412f13c382225810f4408fb8842abc76242e2b6031f0f23e6ca24c8897ae1e3916c2bca87cac19cab846dee1b1df65fed5b3d994c12a8a0ecbe847b184a0c0bcd2255297e96f8875c8e9fbc9919aecf943e514bb123c0425302390b9c68ac72379a63fdb3a2e9d103691b614d0e62a96f226881cc3eae307f40b71c9edc3663745ed35920c4dc3211f6e0fff338b25a73e222e4663f46dcca2892e67a95f541f67285838896db616790b7bf682336058a1c8c4ead0474bdc9d831153f7feec99814331e9596a7608a887a25097fe172a623f3a6e3f583437dee8f456ed2a1aa997bda8b0c021c2f9d2648f55a634499d38e621116897927859ddb2601b75397a51a53c8d2e1db78a070b65815ea8faa96f82516efce76f7c7344062c66298bfcbdd68b07f4291f3fa95343d6563fba8ff137db604a518265c55d5d295a0e5437cac3c401a8587e762c21920cf49a948fa9193dbe0e065d079d40a79a4fdd57479ae2ad623bfd29a81ab8ba6e74431b0740cd30ac90471b84f28810e645343616d177db0eb8f2cb1e1f1b20f9732234f9a36d3990c5adc269392b7f0c837b0eb7b3adaf1781dcd4ceaf2f546624e201c6ed3cd865b374adf4cca98f7ef25534b7d7a48f061b8d6b2dda925147c8a5f23a41a9c15af6ef2f98cd858b9cb528f06312c551f97774cced7e198404220d04d585929a92f96dc07d00bc162aa1a5734c7d03c8c6250a283cd5e910f7301f3d756044fbe6bfcecf0639ad2cbc53fb539cae8a9ef2312ef861f4b91c0aa8d775fc6cd56d71ba816bb68619a726d520ba66ef95b392354580aba803464fb390f35be2d2b1de5f85841024e4d049346becd5bfbddcbfe0661751482df92cc50c537c75c542de522d3b964b6640521d937c32c9fd75ac58a911d4cbd169c1c6ab330bc9ab0c9c384300970767cda59934de071ff50523ff4d228a5234f511a66f74529dc769c153850104f13fe91af0ec067b6d2d1812935084e38682bd5f641ceb27de60c053f1fe955f394b5c3f0b2fdc3828773bcea8ba104e06dc84bf28dad02e85400cb4eee5406f77ac802d63762d6bfdddca24ffb08439887cb2995d02fd141542ee990d70e7c5c0e73c08f61db9bfb8922d545135d6778ddcfdc4ba6a26b5dce8f9dd4a6565d74ae80f0a35c2810dba14862d927d7b3d1a156e4d5a1ebef34c11a71b29c7bdd9885b6361c5ec0b45011e60e0fb160f8c1b89652ef12f145b58102cd8a750e28a954e5a5f555008105301cd3608726ce4ea8f3c9791d7226e6aa55dc0feda0ed73128fac4cf1be2fecf8eadb5f4b7b92cb99973c1402dc488205cb413295c55c0caf9cf45eefeb70e344a2aa5bf7d2e1bbdacad5e5e0cf347489dd9a859afd5776c966903949b33bd9fb96f7945bc1db57a5a44d0613f287fa56207017b6a234a7a86e8083a369283dc35588d90c2b3ef9fcb12a510653d1ba8d6437e99aca550e217faa4ee92b9d5b8a4480927799dc157122f05ade857fb697aec244480cea4fd1878b3ecaacd387b2de171521753e3f0cfed31173998069f54a67f9b52fa7bfa313f10f3ce6b3cf615d8cc26510493c29953948102626c89fc0520aeca1c48394845b92a44ccc2e6f6025d079fb2d744b2580237ca4d74e5c07287b87328f3fe91b512b84c3d12041d3792057e86b7db7777ae55c377c4d1806c0c3a79c7dd1189e2a82c2c038345fc1c947a41ad9dedc3269451417b2cd476297dd2fa137982fdfecaf1db3fbd45be4a31516b83a148d5572faec7a6fc69ab56a7bc4654241c47ffdd0440474875ab85074e9df5757f6f978f78af882f4b45f7ac1391c7a52f88e5039217e1aa48c0e8d6cf1e902bd3a0775fc1dab9973679f83a07bcd8d60cb3513a348a208072a44895de55cfd48081d8a08dbcd8537987e2d0569286ca8f71fd50a845a496e46a79a62f208b83f8acca9d12f0e2817ee4afe63c0d17c47affa149b13ac21bfeb75157568541aa25370c002350faa8aae0d44cc36c77fdbf54bc8ec5b8d707886bee040533b043096cdf103176408a23ab38605ac2580f123ed93d9b600978e3316067234906e36777b8d4d841875b9371d5c3e55dcc43eb47237be55a52ce2da1ad31ef3fdffe09be9590a1144aa962a37e480c6042b5c9439a274b90c6768b16604b5f76730dbe9009400bc8c967a529bfaf63a45ec06f4eb5868d2fbdbc7976eab62941ad8452dde64410855f294821694285a595fcc13da30bfaf4985951a5f23df7247152305184b37a5d0ac6e27aa6c4ff019f495b688a13d71f40b488d21572920a822596a2170db6e5604c6c27e91353d5716e9bf351b82fccc69b25c7eed65fdace6fd7a9054f3109352b95ebdb96d724293ec39eeaf9aaf18976d68c512663175067ccad86d4c75ebe775c2feb8a56ffafab74497dd2de9cb237a0fb775fb15e551ba865d35a40fdcd9275e9510f313f923f2cad30e219a4046d5296cfdc63973410f5444a5b4632cf388f9f2865a41832dd8fbed14ddcdf264ec6993683c793171e2d41f1efebc25597f7f7239bc426548497a038356c0f4c0f64c1be39f011414b8495e206c7095b9233a2f3bdb03dbb2f8250a7d81f4f42a4e89253bbae0946ddd2196d52d3a1f10104a74dae844b498e9a302e88f3c1a67f726881f462f4771eb9f3f802c2604e8cfa807e28045ab0b1ae7ca6a925978fa80d55fdb831e300450e12521392e964fc151e01f59337b0db2329e33ad9528aa8d0de80baeca7f9aac09b3f77b6834402feb85ca8b9eae1e0d9c9fe2e1a6cf4a2e1d5d51babe283a7573ee68fc3c11d301c50e1b46cc923cf1b4aaf85950218cb4ac740a79573e9b87738ae5432144cae4e26e39349db95f465b2d210131e3957a37da42d99555b3c4a6fcf02c41d694af9fff990461fa2295c067e8c50f43a38c8575e46e4ca0abbfb50751077f36be0813985a396bc552c93a711c8601ad78933e0d4e3fc8f3bc4ee18e049ed6af9a44766db601bf1be10206d41b8e299177c1865f2ac24f759071ea3703a51bc294ba83117e599c0b4e76d6e798631801dc803e536a869b1df028e95c0b72e84c1d7ca7698835ec6e0c282b21d4d082a42b5a1075bf81a058ae12ca7dc5e97e3186d2376a280bb8bf054134aae1697f738cdd5132aefb23c107883f0d7b4137ab861c9cae828f01c501e9aa9f7155c895c43f80a27408e3b38fa792099e08fca2daeb7265d18cbbeb2ac5661325845bb8a223b9f4d47aa994261a1eb87996fd29695868f08fb2d4900d085c741ad9e77540a45715eabee9c3b4b8f3060be8a1d87b0211a679086770a36692c328eb57b61bd765016e93bcbcd4b71de0358fb305266295c4678fc2f6dcb83bf65bd2913b8c03e7eeaa3f4320feb51125c2c7a38310e743b00b7d2787bf1a857d9dd4a9dcb8d0d676b07f6da0c387d5075418f8c12506bf7a2e7e625e16152366de0077128a96a1e32468ca5a4b3dbef04f1eefa2c475deeb6df44639424125b2fd01f3d638ad5a46b047433aaaa470b4d7076e684324e533c2f4a63edbef42a99fc4ca323c6b7c7831a0cf0615f31edbd8affc0867161f9ffba783f165b245d5a73331973fd8c37e049bfc569734895d9e9dc8abe89db984707318c7a1c2b9f19a1066474776b5caab3ddb1f0580f6b57056ebca8705a2725cb74126c56963eb6f5c0a3e9d27761c2fc04702f826f178065a2012aafe45ae35fc4d0bf32fd43ef16773487f6e4cd8adfce586bb73a52c12adb935db2bf370e31c3975c6cf1cf9fad21b570fa66d382e582dc3477411d6850d0b57d4dc7930a02c44b07a0e08f18d65b661646303fdb9f7722e9cf7933805b4b00157010467f4d374bb5c5201da8e78a067744ac509adad79d6bb2c88396818d48890cbcec8a04c4291a1718c1917ef194ae871885fca6e129657c53b4e1c8800e7bee3d4f4ae1e0edb3e4124f3ac5b441752779bdf21ac00221430200bbf2574c8696742fb79cd5af197cbef6ac70e11458939d0687fa434104fd0c02542d1bbfc53e4254849ad02ed08b020681b38fcb00a07a8167b306ad0de576301f45c0ee51a0f8d5798ebbb61c85e3a170c6212d24664f32a18df90732611e84dd5fe80dca0e85ecc8b728ce28f17f7c0060a12f9da3231ee3fdcdfee2eb9d528e29cba8659214ce63085c8d139ea474ab1dcc3272f49ddd7c46cd9296787ee3e71306adcd3fa277b8d7cfe4ed6d8edff1a96e03c053eefbea7380473606d77d49231fbc15eb80ad076d53528f130aa160e01e59d6967327f481dfd06298678d02210b04e41a7fbb6ce2cbc28bb8b3c195e839a9b7e60d6f96d78784a08fd4174029bfe188d3162f9d367e5427339e32d0db30bad75c3bdf332cd0805a61870b6723576547a6e7d935d25d3100f828a6ffa1d03f857d06c56e918b328e0179bf908073153d62997a3ce0f31c083143d1a3525f34ecddd8d91f3953242a641bbc8b4c51dfb6fffe9639d31973235d013726e3c35d85366b30a0a6691927375cd7816e1d4aa0f8ca49e9580f3954792953484fccb47addf4d7cb68788b0f82b525d94e1ff6e2574f813d40178dc494bc6efa5f488ea4b10c2c57862f3b9c28bf500acc3cccb6808bfd2cad0adcb328d6762a6bd890b67bbe02928a4a88cad03072f231959ca69e2a7e2ab9cce671432780645e88214a15595a5ae305b49205ec331ce0e94f1ac82c8cbdce223c4ac1ac7cfecb2f37263523b10a74d4e907efb635b35e24b9c69348c5e4f856eb987222198959b705ed5f2be47f17fbc3ad53ad096f80af4b2dc2cc51a74f7e3f16a050b48545c1e93db61f8b95fce2145f0a32ffc3fa9ee6cb600c9075f4e86da1e85bc72d6c60a973530686917d151e71305f556541a2899cc78af0ca70d439a5293dde8a113a1dea1b7932fdf0051d1fcba94899093d1e5473b26e65861f9511f32426ebfb7b435c3189f10f364849eee2199acde36d129c299ed5e48055582c1ca4bfb1acfcda70da9f6efafaacedc7507b65a0f6143e22ca4a220bef185d266e45dc90bf640891437ba6c4f7", 0x1000}, {&(0x7f0000002980)="ef270f936a0c5561ec8c11312ac8f22221e4dedd8be4aaa309c316003d155943213ef69f1e874522a6e32b1f5ec763fc11911615d2b7fb503abb3c46c3c9b883ff00243a955d9b206c1a98c74ad9867b611543f2a82966323a3262282ed41f", 0xffffff7e}], 0x4}, 0x4048881) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x3c) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r8, &(0x7f0000000200)={0x1f, 0x0, @any, 0xfffc, 0x1}, 0xe) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000140)="4b0c4ff1dc583eeea35f9c2c87379fae692a22f8030446198404171ae03caa3f20c23d9e3a047248dc30dbf8fe666b4f9ab4067743d74a7ff8d86f361f808656f9a04160d0eeaa812be0f56c3cef6aaf88338a093899fe242456a177b7c95a3b3bafaf2c9d5287dfb2fbaaf3d479ae4bb57668a938027f10f4266c5de5c6e107d144788e8be26f7943a2938ba95e00a8afd23f9364d2c3e02eedcfbf70667fa3ff722fed27c5b0e2a24ccdb1b9b4b248d7", 0xb1}], 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x18, 0xf, &(0x7f00000018c0)=ANY=[], &(0x7f0000001900)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001940)=[{0x0, 0x2, 0x8, 0x6}], 0x10, 0x10001}, 0x94) kernel console output (not intermixed with test programs): devsim2: renamed from eth2 [ 439.687812][T17037] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 439.706200][T17037] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 439.742000][T17037] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 439.803281][T17226] netlink: 'syz.3.2912': attribute type 25 has an invalid length. [ 439.855785][T17244] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2913'. [ 439.855814][T17244] openvswitch: netlink: Flow key attr not present in new flow. [ 439.878309][T17244] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 439.910427][T17244] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2913'. [ 440.032092][T17037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.060101][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.122559][T17037] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.167769][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.167909][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.203514][T10321] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.203689][T10321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.259949][T17263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2919'. [ 440.259984][T17263] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 440.260838][T17261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2917'. [ 440.298512][T17263] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 440.377996][T17266] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2920'. [ 440.378035][T17266] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2920'. [ 440.438830][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 440.441130][ T4936] Bluetooth: hci5: command tx timeout [ 440.496049][T17269] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2921'. [ 440.567695][T17275] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2924'. [ 440.568097][T17275] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2924'. [ 441.095941][T17301] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2930'. [ 441.272403][T17308] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 441.306042][T17037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.435917][T17312] mac80211_hwsim hwsim10 ÿ: renamed from wlan1 (while UP) [ 441.478871][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 441.914732][T17037] veth0_vlan: entered promiscuous mode [ 441.971624][T17037] veth1_vlan: entered promiscuous mode [ 442.211283][T17037] veth0_macvtap: entered promiscuous mode [ 442.234167][T17037] veth1_macvtap: entered promiscuous mode [ 442.320662][T17037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.349223][T17037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.389853][T10306] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.389933][T10306] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.389971][T10306] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.390007][T10306] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.518783][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 442.642132][T17363] pimreg3: entered allmulticast mode [ 442.707104][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.707127][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.912518][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.912542][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.947441][T17374] netlink: 'syz.2.2946': attribute type 10 has an invalid length. [ 443.075548][T17382] bond0: Error: Cannot enslave bond to itself. [ 443.342429][T17395] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 443.455779][T17399] tipc: Enabling of bearer rejected, failed to enable media [ 443.558828][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 444.026972][T17426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.253096][T17439] netlink: 'syz.1.2968': attribute type 11 has an invalid length. [ 444.453346][T17450] netlink: 'syz.0.2970': attribute type 1 has an invalid length. [ 444.453372][T17450] netlink: 'syz.0.2970': attribute type 1 has an invalid length. [ 444.608784][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 444.646865][T17455] netlink: 'syz.4.2972': attribute type 4 has an invalid length. [ 444.672524][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 444.688965][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 444.696796][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 444.709213][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 444.710478][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 445.395712][T17474] __nla_validate_parse: 10 callbacks suppressed [ 445.395736][T17474] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2977'. [ 445.573023][T17483] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2978'. [ 445.638774][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 446.060513][ T6691] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.060554][ T6691] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.493504][T17504] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2982'. [ 446.678885][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 446.759027][ T4936] Bluetooth: hci0: command tx timeout [ 446.958356][ T6691] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.958398][ T6691] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.017191][T17452] rxe_eth0 speed is unknown, defaulting to 1000 [ 447.336953][ T6691] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.336994][ T6691] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.533789][T10306] IPVS: starting estimator thread 0... [ 447.637316][T17543] IPVS: using max 24 ests per chain, 57600 per kthread [ 447.676299][T17548] netlink: 'syz.2.2991': attribute type 1 has an invalid length. [ 447.704587][ T6691] netdevsim netdevsim1  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.704627][ T6691] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.719039][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 447.997116][T17552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2992'. [ 448.410862][T17558] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2994'. [ 448.588350][T17572] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 448.747417][T17576] tipc: Cannot configure node identity twice [ 448.758906][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 448.840947][ T4936] Bluetooth: hci0: command tx timeout [ 448.921043][T17579] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3000'. [ 448.987775][ T6691] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.054149][ T6691] dvmrp1: left allmulticast mode [ 449.806240][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 449.825422][ T6691] bond6 (unregistering): (slave gretap1): Releasing active interface [ 450.130160][ T6691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.132834][ T6691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.136848][ T6691] bond0 (unregistering): (slave macsec0): Releasing backup interface [ 450.137694][ T6691] veth1_macvtap: left promiscuous mode [ 450.174009][ T6691] bond0 (unregistering): Released all slaves [ 450.190064][ T6691] bond1 (unregistering): Released all slaves [ 450.213631][ T6691] bond2 (unregistering): Released all slaves [ 450.242510][ T6691] bond3 (unregistering): Released all slaves [ 450.270477][ T6691] bond4 (unregistering): Released all slaves [ 450.308011][ T6691] bond5 (unregistering): (slave veth3): Releasing active interface [ 450.321121][ T6691] bond5 (unregistering): Released all slaves [ 450.342363][ T6691] bond6 (unregistering): Released all slaves [ 450.376758][ T6691] bond7 (unregistering): Released all slaves [ 450.403217][ T6691] bond8 (unregistering): Released all slaves [ 450.435112][ T6691] bond9 (unregistering): Released all slaves [ 450.781844][T17579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.802538][T17579] bond_slave_0: left allmulticast mode [ 450.838880][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 450.912195][T17579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.916364][T17579] bond_slave_1: left allmulticast mode [ 450.921454][ T4936] Bluetooth: hci0: command tx timeout [ 451.032139][T17579] bond0 (unregistering): (slave team0): Releasing backup interface [ 451.038816][T17579] team0: left allmulticast mode [ 451.038841][T17579] team_slave_0: left allmulticast mode [ 451.040350][T17579] team_slave_1: left allmulticast mode [ 451.170805][T17579] bond0 (unregistering): Released all slaves [ 451.654687][ T6691] : left promiscuous mode [ 451.861504][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 451.883409][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 451.986130][T17617] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3007'. [ 452.008011][ T6691] tipc: Left network mode [ 452.331582][T17622] netlink: set zone limit has 4 unknown bytes [ 452.391299][ T6691] IPVS: stopping master sync thread 13446 ... [ 452.680243][T17638] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20004 [ 452.918864][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 452.999071][ T4936] Bluetooth: hci0: command tx timeout [ 453.513440][T17452] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.515641][T17452] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.515822][T17452] bridge_slave_0: entered allmulticast mode [ 453.534726][T17452] bridge_slave_0: entered promiscuous mode [ 453.560095][T17452] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.564443][T17452] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.564617][T17452] bridge_slave_1: entered allmulticast mode [ 453.591019][T17452] bridge_slave_1: entered promiscuous mode [ 453.920302][T17671] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 453.958916][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 454.117321][T17452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.153675][T17452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.319590][T17683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3020'. [ 454.412446][T17683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3020'. [ 454.619289][T17452] team0: Port device team_slave_0 added [ 454.677511][T17452] team0: Port device team_slave_1 added [ 454.999015][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 455.006751][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 455.275073][T17452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.275093][T17452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.275125][T17452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.312656][T17452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.312674][T17452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.312703][T17452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.800072][T17713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3026'. [ 455.806680][T17710] tunl0: entered promiscuous mode [ 455.932154][T17710] netlink: 'syz.3.3025': attribute type 3 has an invalid length. [ 455.932181][T17710] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3025'. [ 456.039375][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 456.083954][T17723] netlink: 'syz.4.3027': attribute type 21 has an invalid length. [ 456.135292][ T6691] hsr_slave_0: left promiscuous mode [ 456.146963][ T6691] hsr_slave_1: left promiscuous mode [ 456.157621][ T6691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.157668][ T6691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.174205][ T6691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.174229][ T6691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.466663][ T6691] veth0_macvtap: left promiscuous mode [ 457.078901][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 457.762977][ T6691] team0 (unregistering): Port device team_slave_1 removed [ 457.786133][ T6691] team0 (unregistering): Port device team_slave_0 removed [ 458.034388][T17452] hsr_slave_0: entered promiscuous mode [ 458.035559][T17452] hsr_slave_1: entered promiscuous mode [ 458.036431][T17452] debugfs: 'hsr0' already exists in 'hsr' [ 458.036452][T17452] Cannot create hsr debugfs directory [ 458.099787][T17723] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3027'. [ 458.119136][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 458.122259][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 458.423638][T17753] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3029'. [ 458.471002][T17752] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3031'. [ 458.818556][T17757] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 459.145656][ T6691] IPVS: stop unused estimator thread 0... [ 459.160030][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 459.484253][T17786] Bluetooth: MGMT ver 1.23 [ 460.198894][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 460.221017][T17808] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3043'. [ 460.221047][T17808] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3043'. [ 461.238852][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 461.925302][T17864] tipc: Started in network mode [ 461.925341][T17864] tipc: Node identity ac14142f, cluster identity 4711 [ 461.934149][T17864] tipc: Enabled bearer , priority 10 [ 462.278895][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 462.361855][T17875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3054'. [ 462.720375][T17452] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 462.765707][T17452] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 462.776363][T17452] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 462.842721][T17452] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 462.852845][T17452] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 462.903817][T17452] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 462.907897][T17452] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 462.947649][T17452] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 463.043689][T10216] tipc: Node number set to 2886997039 [ 463.318757][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 463.706575][T17452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.810357][T17919] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3066'. [ 463.840579][T17452] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.918257][T10321] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.918372][T10321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.036490][T10323] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.036596][T10323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.298072][T17931] netlink: 'syz.0.3068': attribute type 12 has an invalid length. [ 464.358809][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 464.934329][T17961] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3072'. [ 465.288423][T17965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3074'. [ 465.327100][T17965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3074'. [ 465.398768][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 466.151242][ T31] audit: type=1107 audit(1792446297.978:7): pid=17989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='cå' [ 466.151292][ T31] audit: type=1107 audit(1792446297.978:8): pid=17989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='cå' [ 466.151329][ T31] audit: type=1107 audit(1792446297.978:9): pid=17989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='cå' [ 466.151374][ T31] audit: type=1107 audit(1792446297.978:10): pid=17989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='cå' [ 466.151414][ T31] audit: type=1107 audit(1792446297.978:11): pid=17989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='cå' [ 466.151455][ T31] audit: type=1107 audit(1792446297.978:12): pid=17989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='cå' [ 466.241778][ T31] audit: type=1107 audit(1792446298.058:13): pid=17989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='cå' [ 466.241836][ T31] audit: type=1107 audit(1792446298.058:14): pid=17989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='cå' [ 466.291405][ T31] audit: type=1107 audit(1792446298.118:15): pid=17989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='cå' [ 466.292231][ T31] audit: type=1107 audit(1792446298.118:16): pid=17989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='cå' [ 466.438766][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 467.082123][T18005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.167222][T17452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.367140][T18029] FAULT_INJECTION: forcing a failure. [ 467.367140][T18029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.367178][T18029] CPU: 1 UID: 0 PID: 18029 Comm: syz.4.3083 Not tainted syzkaller #0 PREEMPT(full) [ 467.367215][T18029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 467.367231][T18029] Call Trace: [ 467.367239][T18029] [ 467.367249][T18029] dump_stack_lvl+0xe8/0x150 [ 467.367290][T18029] should_fail_ex+0x410/0x560 [ 467.367331][T18029] _copy_from_user+0x2d/0xb0 [ 467.367367][T18029] ___sys_sendmsg+0x1c6/0x360 [ 467.367392][T18029] ? __lock_acquire+0x747/0x2de0 [ 467.367424][T18029] ? __pfx____sys_sendmsg+0x10/0x10 [ 467.367498][T18029] ? __fget_files+0x2a/0x420 [ 467.367521][T18029] ? __fget_files+0x3a2/0x420 [ 467.367554][T18029] __x64_sys_sendmsg+0x1b1/0x290 [ 467.367584][T18029] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 467.367636][T18029] do_syscall_64+0x166/0x520 [ 467.367663][T18029] ? trace_irq_disable+0x3b/0x140 [ 467.367689][T18029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.367711][T18029] ? clear_bhb_loop+0x70/0xc0 [ 467.367740][T18029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.367762][T18029] RIP: 0033:0x7f5476d9e559 [ 467.367783][T18029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.367801][T18029] RSP: 002b:00007f5477cb9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.367824][T18029] RAX: ffffffffffffffda RBX: 00007f5477025fa0 RCX: 00007f5476d9e559 [ 467.367841][T18029] RDX: 0000000000000084 RSI: 00002000000002c0 RDI: 0000000000000003 [ 467.367855][T18029] RBP: 00007f5477cb9090 R08: 0000000000000000 R09: 0000000000000000 [ 467.367870][T18029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.367884][T18029] R13: 00007f5477026038 R14: 00007f5477025fa0 R15: 00007ffe70491f78 [ 467.367921][T18029] [ 467.482838][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 467.728814][T18033] bridge0: port 1(gretap0) entered blocking state [ 467.729011][T18033] bridge0: port 1(gretap0) entered disabled state [ 467.729171][T18033] gretap0: entered allmulticast mode [ 467.734490][T18033] gretap0: entered promiscuous mode [ 467.765995][T18033] bridge0: port 1(gretap0) entered blocking state [ 467.766110][T18033] bridge0: port 1(gretap0) entered forwarding state [ 467.955309][T17452] veth0_vlan: entered promiscuous mode [ 468.072684][T17452] veth1_vlan: entered promiscuous mode [ 468.303456][T18052] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3088'. [ 468.518801][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 468.594653][T17452] veth0_macvtap: entered promiscuous mode [ 468.769353][T17452] veth1_macvtap: entered promiscuous mode [ 468.923719][T17452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.974061][T17452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.051064][T10306] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.051247][T10306] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.051287][T10306] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.051324][T10306] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.207707][T18062] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 469.481865][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.481891][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.558774][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 469.693900][T18078] netlink: 'syz.0.3093': attribute type 1 has an invalid length. [ 469.693926][T18078] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3093'. [ 469.740648][T18081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3093'. [ 469.874224][T10323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.874250][T10323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.583464][T18092] syzkaller0: entered promiscuous mode [ 470.583493][T18092] syzkaller0: entered allmulticast mode [ 470.584493][T18106] netlink: 'syz.4.3098': attribute type 1 has an invalid length. [ 470.602184][T18106] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 470.602635][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 471.078070][T18127] netlink: 'syz.4.3102': attribute type 32 has an invalid length. [ 471.078097][T18127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3102'. [ 471.377306][ T5633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 471.412380][ T5633] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 471.438961][ T5633] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 471.464496][ T5633] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 471.480098][ T5633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 471.638941][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 472.681910][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 473.646734][ T4936] Bluetooth: hci4: command tx timeout [ 473.718911][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 474.758933][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 475.718733][ T4936] Bluetooth: hci4: command tx timeout [ 475.798889][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 476.093019][T18127] bond1: option coupled_control: invalid value (192) [ 476.139415][T18127] bond1 (unregistering): Released all slaves [ 476.257430][T18177] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 476.257919][T18179] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 476.674012][T18195] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 476.838895][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 476.995379][T18198] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING [ 477.238102][T18214] bond0: entered promiscuous mode [ 477.238127][T18214] bond0: entered allmulticast mode [ 477.315601][T18133] rxe_eth0 speed is unknown, defaulting to 1000 [ 477.436836][T18223] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3112'. [ 477.799976][ T4936] Bluetooth: hci4: command tx timeout [ 477.878769][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 478.290697][T18242] FAULT_INJECTION: forcing a failure. [ 478.290697][T18242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.290733][T18242] CPU: 1 UID: 0 PID: 18242 Comm: syz.3.3119 Not tainted syzkaller #0 PREEMPT(full) [ 478.290757][T18242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 478.290771][T18242] Call Trace: [ 478.290778][T18242] [ 478.290786][T18242] dump_stack_lvl+0xe8/0x150 [ 478.290817][T18242] should_fail_ex+0x410/0x560 [ 478.290861][T18242] _copy_from_user+0x2d/0xb0 [ 478.290898][T18242] generic_map_update_batch+0x662/0xae0 [ 478.290951][T18242] ? __pfx_generic_map_update_batch+0x10/0x10 [ 478.290991][T18242] ? __fget_files+0x2a/0x420 [ 478.291021][T18242] ? __pfx_generic_map_update_batch+0x10/0x10 [ 478.291059][T18242] bpf_map_do_batch+0x391/0x630 [ 478.291092][T18242] __sys_bpf+0xbe5/0xd90 [ 478.291120][T18242] ? __pfx___sys_bpf+0x10/0x10 [ 478.291151][T18242] ? __fget_files+0x2a/0x420 [ 478.291182][T18242] ? ksys_write+0x242/0x270 [ 478.291203][T18242] ? __pfx_ksys_write+0x10/0x10 [ 478.291226][T18242] __x64_sys_bpf+0xba/0xd0 [ 478.291249][T18242] do_syscall_64+0x166/0x520 [ 478.291269][T18242] ? trace_irq_disable+0x3b/0x140 [ 478.291288][T18242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.291306][T18242] ? clear_bhb_loop+0x70/0xc0 [ 478.291328][T18242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.291345][T18242] RIP: 0033:0x7f886db9e559 [ 478.291362][T18242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.291377][T18242] RSP: 002b:00007f886e9a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 478.291396][T18242] RAX: ffffffffffffffda RBX: 00007f886de25fa0 RCX: 00007f886db9e559 [ 478.291409][T18242] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 478.291420][T18242] RBP: 00007f886e9a0090 R08: 0000000000000000 R09: 0000000000000000 [ 478.291431][T18242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 478.291442][T18242] R13: 00007f886de26038 R14: 00007f886de25fa0 R15: 00007ffc860099e8 [ 478.291471][T18242] [ 478.815845][T18252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3121'. [ 478.918756][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 479.296116][T18266] netlink: 'syz.0.3124': attribute type 6 has an invalid length. [ 479.876151][T18133] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.878146][T18287] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3130'. [ 479.878361][T18133] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.878530][T18133] bridge_slave_0: entered allmulticast mode [ 479.878984][ T4936] Bluetooth: hci4: command tx timeout [ 479.931272][T18133] bridge_slave_0: entered promiscuous mode [ 479.956561][T18133] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.956690][T18133] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.956874][T18133] bridge_slave_1: entered allmulticast mode [ 479.958796][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 479.995702][T18133] bridge_slave_1: entered promiscuous mode [ 480.090308][T18289] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 480.090902][T18288] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 480.202360][T18133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.278412][T18133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.344577][T18133] team0: Port device team_slave_0 added [ 480.381899][T18133] team0: Port device team_slave_1 added [ 480.435976][T18133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.435997][T18133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.436025][T18133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.488563][T18133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.488663][T18133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.488692][T18133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.557477][T18301] syzkaller0: entered promiscuous mode [ 480.557503][T18301] syzkaller0: entered allmulticast mode [ 480.844106][T18133] hsr_slave_0: entered promiscuous mode [ 480.847577][T18133] hsr_slave_1: entered promiscuous mode [ 480.866694][T18133] debugfs: 'hsr0' already exists in 'hsr' [ 480.866719][T18133] Cannot create hsr debugfs directory [ 481.000704][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 481.028649][T18308] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3135'. [ 481.075475][T18318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3138'. [ 481.964752][T18133] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.964804][T18133] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.048804][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 482.422681][T18345] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3147'. [ 482.460653][T18133] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.460694][T18133] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.553796][T18345] ip_tables: iptables: counters copy to user failed while replacing table [ 482.639316][T18133] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.639355][T18133] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.687389][T18352] ip_tables: iptables: counters copy to user failed while replacing table [ 482.701953][T18349] netlink: 71 bytes leftover after parsing attributes in process `syz.4.3148'. [ 482.861100][T18357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3151'. [ 482.884648][T18133] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.884688][T18133] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.078752][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 483.783983][T18390] netlink: 'syz.3.3158': attribute type 1 has an invalid length. [ 483.915038][T18390] netlink: 'syz.3.3158': attribute type 1 has an invalid length. [ 484.118751][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 484.207289][T18397] netlink: 'syz.1.3157': attribute type 10 has an invalid length. [ 484.352994][T18391] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3157'. [ 484.487932][T18397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.528739][T18397] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 484.529102][T18133] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 484.566891][T18133] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 484.568241][T18133] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 484.647915][T18133] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 484.879684][T18133] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 484.914837][T18133] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 484.915291][T18411] netlink: 'syz.4.3164': attribute type 8 has an invalid length. [ 484.915534][T18411] sch_fq: defrate 0 ignored. [ 484.954900][T18418] netlink: 'syz.4.3164': attribute type 8 has an invalid length. [ 484.954924][T18418] sch_fq: defrate 0 ignored. [ 485.067296][T18133] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 485.158769][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 485.204870][T18427] netlink: 'syz.3.3166': attribute type 2 has an invalid length. [ 485.293180][T18133] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 485.804400][T18443] bond1: Removing last ns target with arp_interval on [ 485.894588][T18443] bond2: Removing last ns target with arp_interval on [ 485.969624][T18443] bond3: Removing last ns target with arp_interval on [ 486.009564][T18443] bond4: Removing last ns target with arp_interval on [ 486.051911][T18443] bond5: Removing last ns target with arp_interval on [ 486.087919][T18443] bond6: Removing last ns target with arp_interval on [ 486.165319][T18443] bond7: Removing last ns target with arp_interval on [ 486.198997][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 486.221439][T18443] bond8: Removing last ns target with arp_interval on [ 486.302782][T18443] bond9: Removing last ns target with arp_interval on [ 486.383025][T18443] bond10: Removing last ns target with arp_interval on [ 486.478502][T18443] bond11: Removing last ns target with arp_interval on [ 486.534336][T18133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.620577][T18133] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.671018][T10312] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.671134][T10312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.757871][ T6691] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.757986][ T6691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.799636][T18478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3175'. [ 486.801118][T18478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3175'. [ 487.064078][T18486] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3176'. [ 487.238840][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 487.336077][T18491] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 487.885692][T18506] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3186'. [ 487.885721][T18506] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3186'. [ 487.886048][T18511] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3186'. [ 487.886063][T18511] tc_dump_action: action bad kind [ 487.886303][T18511] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3186'. [ 487.886320][T18511] tc_dump_action: action bad kind [ 487.886762][T18511] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3186'. [ 487.886779][T18511] tc_dump_action: action bad kind [ 487.886978][T18511] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3186'. [ 487.886993][T18511] tc_dump_action: action bad kind [ 487.887218][T18511] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3186'. [ 487.887234][T18511] tc_dump_action: action bad kind [ 487.887419][T18511] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3186'. [ 487.887434][T18511] tc_dump_action: action bad kind [ 488.002541][T18511] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3186'. [ 488.002565][T18511] tc_dump_action: action bad kind [ 488.002792][T18511] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3186'. [ 488.002808][T18511] tc_dump_action: action bad kind [ 488.002999][T18511] tc_dump_action: action bad kind [ 488.003239][T18511] tc_dump_action: action bad kind [ 488.003469][T18511] tc_dump_action: action bad kind [ 488.003658][T18511] tc_dump_action: action bad kind [ 488.003846][T18511] tc_dump_action: action bad kind [ 488.004034][T18511] tc_dump_action: action bad kind [ 488.004259][T18511] tc_dump_action: action bad kind [ 488.004447][T18511] tc_dump_action: action bad kind [ 488.004693][T18511] tc_dump_action: action bad kind [ 488.004883][T18511] tc_dump_action: action bad kind [ 488.005099][T18511] tc_dump_action: action bad kind [ 488.005296][T18511] tc_dump_action: action bad kind [ 488.005580][T18511] tc_dump_action: action bad kind [ 488.005774][T18511] tc_dump_action: action bad kind [ 488.005992][T18511] tc_dump_action: action bad kind [ 488.006231][T18511] tc_dump_action: action bad kind [ 488.006417][T18511] tc_dump_action: action bad kind [ 488.006602][T18511] tc_dump_action: action bad kind [ 488.006824][T18511] tc_dump_action: action bad kind [ 488.007040][T18511] tc_dump_action: action bad kind [ 488.007236][T18511] tc_dump_action: action bad kind [ 488.007426][T18511] tc_dump_action: action bad kind [ 488.007682][T18511] tc_dump_action: action bad kind [ 488.007869][T18511] tc_dump_action: action bad kind [ 488.008061][T18511] tc_dump_action: action bad kind [ 488.008257][T18511] tc_dump_action: action bad kind [ 488.008470][T18511] tc_dump_action: action bad kind [ 488.189372][T18511] tc_dump_action: action bad kind [ 488.189590][T18511] tc_dump_action: action bad kind [ 488.189781][T18511] tc_dump_action: action bad kind [ 488.190025][T18511] tc_dump_action: action bad kind [ 488.190222][T18511] tc_dump_action: action bad kind [ 488.190486][T18511] tc_dump_action: action bad kind [ 488.190713][T18511] tc_dump_action: action bad kind [ 488.190931][T18511] tc_dump_action: action bad kind [ 488.191127][T18511] tc_dump_action: action bad kind [ 488.191314][T18511] tc_dump_action: action bad kind [ 488.191503][T18511] tc_dump_action: action bad kind [ 488.191721][T18511] tc_dump_action: action bad kind [ 488.191966][T18511] tc_dump_action: action bad kind [ 488.278916][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 488.764677][T18528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 489.108118][T18554] netlink: zone id is out of range [ 489.108138][T18554] netlink: zone id is out of range [ 489.296153][T18133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.319670][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 489.515207][T18133] veth0_vlan: entered promiscuous mode [ 489.607493][T18133] veth1_vlan: entered promiscuous mode [ 489.665237][T18561] netlink: 'syz.3.3194': attribute type 21 has an invalid length. [ 489.802177][T18561] netlink: 'syz.3.3194': attribute type 21 has an invalid length. [ 489.997055][T18133] veth0_macvtap: entered promiscuous mode [ 490.037977][T18133] veth1_macvtap: entered promiscuous mode [ 490.126056][T18133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.224943][T18133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.359017][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 490.519122][T10309] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.520112][T10309] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.520157][T10309] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.520195][T10309] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.048308][T10306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.048333][T10306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.275983][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.276009][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.398866][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 492.141512][T18611] ip6erspan0: entered allmulticast mode [ 492.281313][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 492.299164][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 492.373950][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 492.411328][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 492.414653][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 492.439199][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 492.930402][T18626] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 493.104111][T18632] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 493.379194][T18638] syzkaller0: entered promiscuous mode [ 493.379219][T18638] syzkaller0: entered allmulticast mode [ 493.478748][ C1] net_ratelimit: 1 callbacks suppressed [ 493.478770][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 493.637193][T18617] rxe_eth0 speed is unknown, defaulting to 1000 [ 493.883789][ T31] kauditd_printk_skb: 55 callbacks suppressed [ 493.883812][ T31] audit: type=1804 audit(1792446325.708:72): pid=18653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3224" name="/newroot/31/memory.events" dev="tmpfs" ino=175 res=1 errno=0 [ 493.951631][ T31] audit: type=1800 audit(1792446325.768:73): pid=18653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3224" name="memory.events" dev="tmpfs" ino=175 res=0 errno=0 [ 493.999299][ T31] audit: type=1804 audit(1792446325.818:74): pid=18655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3224" name="/newroot/31/memory.events" dev="tmpfs" ino=175 res=1 errno=0 [ 494.440529][ T5633] Bluetooth: hci2: command tx timeout [ 494.518750][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 494.978103][T18693] Unknown options in mask 4 [ 495.049513][T18695] __nla_validate_parse: 46 callbacks suppressed [ 495.049535][T18695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3233'. [ 495.081424][T10216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.221254][T18702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3233'. [ 495.274695][T18695] bond12: option xmit_hash_policy: invalid value (64) [ 495.289904][T18695] bond12 (unregistering): Released all slaves [ 495.388172][T18698] lo: entered promiscuous mode [ 495.417055][T18698] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 495.478924][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.559305][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 495.611832][T18068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.949182][T18702] bond12: option xmit_hash_policy: invalid value (64) [ 496.008281][T18702] bond12 (unregistering): Released all slaves [ 496.120120][T10207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.438003][T18700] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 496.520179][ T4936] Bluetooth: hci2: command tx timeout [ 496.598776][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 497.029315][T18754] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3240'. [ 497.055193][T18756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3241'. [ 497.108529][T18756] nbd: socks must be embedded in a SOCK_ITEM attr [ 497.253936][T18617] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.254546][T18617] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.255132][T18617] bridge_slave_0: entered allmulticast mode [ 497.258343][T18617] bridge_slave_0: entered promiscuous mode [ 497.298309][T18617] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.306291][T18617] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.328748][T18617] bridge_slave_1: entered allmulticast mode [ 497.355335][T18617] bridge_slave_1: entered promiscuous mode [ 497.468271][T18772] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3245'. [ 497.727602][T18773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3244'. [ 497.785238][T18617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.800941][T18617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.851514][T18617] team0: Port device team_slave_0 added [ 497.855204][T18617] team0: Port device team_slave_1 added [ 497.893227][T18780] netlink: 'syz.0.3248': attribute type 30 has an invalid length. [ 497.893252][T18780] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3248'. [ 497.927384][T18617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.927413][T18617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.927442][T18617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.986714][T18617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.986734][T18617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.986764][T18617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.194523][T18785] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3253'. [ 498.346379][T18793] FAULT_INJECTION: forcing a failure. [ 498.346379][T18793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.346419][T18793] CPU: 1 UID: 0 PID: 18793 Comm: syz.4.3252 Not tainted syzkaller #0 PREEMPT(full) [ 498.346445][T18793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 498.346459][T18793] Call Trace: [ 498.346468][T18793] [ 498.346478][T18793] dump_stack_lvl+0xe8/0x150 [ 498.346518][T18793] should_fail_ex+0x410/0x560 [ 498.346557][T18793] _copy_from_user+0x2d/0xb0 [ 498.346595][T18793] generic_map_update_batch+0x662/0xae0 [ 498.346648][T18793] ? __pfx_generic_map_update_batch+0x10/0x10 [ 498.346685][T18793] ? __fget_files+0x2a/0x420 [ 498.346716][T18793] ? __pfx_generic_map_update_batch+0x10/0x10 [ 498.346753][T18793] bpf_map_do_batch+0x391/0x630 [ 498.346790][T18793] __sys_bpf+0xbe5/0xd90 [ 498.346829][T18793] ? __pfx___sys_bpf+0x10/0x10 [ 498.346874][T18793] ? __fget_files+0x2a/0x420 [ 498.346917][T18793] ? ksys_write+0x242/0x270 [ 498.346944][T18793] ? __pfx_ksys_write+0x10/0x10 [ 498.346975][T18793] __x64_sys_bpf+0xba/0xd0 [ 498.347005][T18793] do_syscall_64+0x166/0x520 [ 498.347032][T18793] ? trace_irq_disable+0x3b/0x140 [ 498.347057][T18793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.347082][T18793] ? clear_bhb_loop+0x70/0xc0 [ 498.347110][T18793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.347133][T18793] RIP: 0033:0x7f5476d9e559 [ 498.347155][T18793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.347174][T18793] RSP: 002b:00007f5477cb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 498.347199][T18793] RAX: ffffffffffffffda RBX: 00007f5477025fa0 RCX: 00007f5476d9e559 [ 498.347217][T18793] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 498.347232][T18793] RBP: 00007f5477cb9090 R08: 0000000000000000 R09: 0000000000000000 [ 498.347247][T18793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 498.347261][T18793] R13: 00007f5477026038 R14: 00007f5477025fa0 R15: 00007ffe70491f78 [ 498.347308][T18793] [ 498.599027][ T4936] Bluetooth: hci2: command tx timeout [ 498.638507][T18795] syzkaller0: entered promiscuous mode [ 498.638532][T18795] syzkaller0: entered allmulticast mode [ 498.678776][ C1] net_ratelimit: 3 callbacks suppressed [ 498.678802][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 498.680202][T18068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.747007][T18798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.747185][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.834336][T18801] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 498.883680][T18617] hsr_slave_0: entered promiscuous mode [ 498.899327][T18617] hsr_slave_1: entered promiscuous mode [ 498.906427][T18617] debugfs: 'hsr0' already exists in 'hsr' [ 498.906453][T18617] Cannot create hsr debugfs directory [ 499.026774][T18806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.096058][T18809] ip_tables: iptables: counters copy to user failed while replacing table [ 499.127934][T18806] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3259'. [ 499.241043][T10207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.728843][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 499.984262][T18836] FAULT_INJECTION: forcing a failure. [ 499.984262][T18836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.984299][T18836] CPU: 0 UID: 0 PID: 18836 Comm: syz.1.3266 Not tainted syzkaller #0 PREEMPT(full) [ 499.984324][T18836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 499.984338][T18836] Call Trace: [ 499.984347][T18836] [ 499.984358][T18836] dump_stack_lvl+0xe8/0x150 [ 499.984398][T18836] should_fail_ex+0x410/0x560 [ 499.984442][T18836] _copy_from_user+0x2d/0xb0 [ 499.984479][T18836] generic_map_update_batch+0x6b1/0xae0 [ 499.984532][T18836] ? __pfx_generic_map_update_batch+0x10/0x10 [ 499.984569][T18836] ? __fget_files+0x2a/0x420 [ 499.984599][T18836] ? __pfx_generic_map_update_batch+0x10/0x10 [ 499.984635][T18836] bpf_map_do_batch+0x391/0x630 [ 499.984681][T18836] __sys_bpf+0xbe5/0xd90 [ 499.984718][T18836] ? __pfx___sys_bpf+0x10/0x10 [ 499.984757][T18836] ? __fget_files+0x2a/0x420 [ 499.984795][T18836] ? ksys_write+0x242/0x270 [ 499.984823][T18836] ? __pfx_ksys_write+0x10/0x10 [ 499.984852][T18836] __x64_sys_bpf+0xba/0xd0 [ 499.984881][T18836] do_syscall_64+0x166/0x520 [ 499.984907][T18836] ? trace_irq_disable+0x3b/0x140 [ 499.984932][T18836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.984955][T18836] ? clear_bhb_loop+0x70/0xc0 [ 499.984982][T18836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.985005][T18836] RIP: 0033:0x7f446cd9e559 [ 499.985026][T18836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.985045][T18836] RSP: 002b:00007f446dc72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 499.985068][T18836] RAX: ffffffffffffffda RBX: 00007f446d025fa0 RCX: 00007f446cd9e559 [ 499.985083][T18836] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 499.985097][T18836] RBP: 00007f446dc72090 R08: 0000000000000000 R09: 0000000000000000 [ 499.985111][T18836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 499.985124][T18836] R13: 00007f446d026038 R14: 00007f446d025fa0 R15: 00007ffca9167278 [ 499.985161][T18836] [ 500.316895][T10216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.363304][T18617] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.363344][T18617] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.518172][T18823] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 500.531871][T18823] bond1 (unregistering): Released all slaves [ 500.558502][T18846] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 500.679411][ T4936] Bluetooth: hci2: command tx timeout [ 500.976182][T18617] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.976222][T18617] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.233586][T18864] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3270'. [ 501.332773][T18879] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3269'. [ 501.332803][T18879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3269'. [ 501.351182][T18879] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 501.442595][T18848] syzkaller0: entered promiscuous mode [ 501.442622][T18848] syzkaller0: entered allmulticast mode [ 501.486188][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.732273][T18617] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.732316][T18617] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.461627][T18903] FAULT_INJECTION: forcing a failure. [ 502.461627][T18903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 502.461664][T18903] CPU: 0 UID: 0 PID: 18903 Comm: syz.2.3276 Not tainted syzkaller #0 PREEMPT(full) [ 502.461687][T18903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 502.461700][T18903] Call Trace: [ 502.461708][T18903] [ 502.461717][T18903] dump_stack_lvl+0xe8/0x150 [ 502.461752][T18903] should_fail_ex+0x410/0x560 [ 502.461786][T18903] _copy_from_user+0x2d/0xb0 [ 502.461817][T18903] generic_map_update_batch+0x662/0xae0 [ 502.461869][T18903] ? __pfx_generic_map_update_batch+0x10/0x10 [ 502.461902][T18903] ? __fget_files+0x2a/0x420 [ 502.461928][T18903] ? __pfx_generic_map_update_batch+0x10/0x10 [ 502.461960][T18903] bpf_map_do_batch+0x391/0x630 [ 502.461992][T18903] __sys_bpf+0xbe5/0xd90 [ 502.462025][T18903] ? __pfx___sys_bpf+0x10/0x10 [ 502.462060][T18903] ? __fget_files+0x2a/0x420 [ 502.462097][T18903] ? ksys_write+0x242/0x270 [ 502.462120][T18903] ? __pfx_ksys_write+0x10/0x10 [ 502.462146][T18903] __x64_sys_bpf+0xba/0xd0 [ 502.462171][T18903] do_syscall_64+0x166/0x520 [ 502.462194][T18903] ? trace_irq_disable+0x3b/0x140 [ 502.462215][T18903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.462236][T18903] ? clear_bhb_loop+0x70/0xc0 [ 502.462260][T18903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.462280][T18903] RIP: 0033:0x7f05c839e559 [ 502.462298][T18903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.462315][T18903] RSP: 002b:00007f05c92b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 502.462337][T18903] RAX: ffffffffffffffda RBX: 00007f05c8625fa0 RCX: 00007f05c839e559 [ 502.462352][T18903] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 502.462365][T18903] RBP: 00007f05c92b1090 R08: 0000000000000000 R09: 0000000000000000 [ 502.462377][T18903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 502.462389][T18903] R13: 00007f05c8626038 R14: 00007f05c8625fa0 R15: 00007ffd142b1528 [ 502.462456][T18903] [ 503.881598][ C1] net_ratelimit: 10 callbacks suppressed [ 503.881624][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 503.882266][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.449733][T10207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.919426][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 505.322857][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.482167][T10216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.810041][T18906] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3278'. [ 505.810868][T18908] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3278'. [ 505.815176][T18927] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 505.959296][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 506.066983][T18617] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.067026][T18617] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.186330][T18933] netlink: 'syz.1.3281': attribute type 9 has an invalid length. [ 506.354693][T18937] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3284'. [ 506.358074][T18937] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3284'. [ 506.387095][T18937] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3284'. [ 506.520077][T10207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.596861][T18941] lo: entered promiscuous mode [ 506.629207][T18941] tunl0: entered promiscuous mode [ 506.635207][T18941] gre0: entered promiscuous mode [ 506.690183][T18941] gretap0: entered promiscuous mode [ 506.709530][T18941] erspan0: entered promiscuous mode [ 506.741663][T18941] ip_vti0: entered promiscuous mode [ 506.763194][T18941] ip6_vti0: entered promiscuous mode [ 506.766882][ T4936] block nbd2: Receive control failed (result -32) [ 506.767620][ T5633] block nbd2: Receive control failed (result -32) [ 506.804651][T18941] sit0: entered promiscuous mode [ 506.865665][T18941] ip6tnl0: entered promiscuous mode [ 506.920287][T18068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.951106][T18941] ip6gre0: entered promiscuous mode [ 506.998907][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 507.041989][T18941] syz_tun: entered promiscuous mode [ 507.094239][T18941] ip6gretap0: entered promiscuous mode [ 507.109814][T18941] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.112090][T18941] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.128465][T18941] bridge0: entered promiscuous mode [ 507.177847][T18952] FAULT_INJECTION: forcing a failure. [ 507.177847][T18952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.177886][T18952] CPU: 1 UID: 0 PID: 18952 Comm: syz.0.3288 Not tainted syzkaller #0 PREEMPT(full) [ 507.177913][T18952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 507.177928][T18952] Call Trace: [ 507.177937][T18952] [ 507.177948][T18952] dump_stack_lvl+0xe8/0x150 [ 507.177990][T18952] should_fail_ex+0x410/0x560 [ 507.178029][T18952] _copy_from_user+0x2d/0xb0 [ 507.178068][T18952] generic_map_update_batch+0x6b1/0xae0 [ 507.178121][T18952] ? __pfx_generic_map_update_batch+0x10/0x10 [ 507.178160][T18952] ? __fget_files+0x2a/0x420 [ 507.178190][T18952] ? __pfx_generic_map_update_batch+0x10/0x10 [ 507.178228][T18952] bpf_map_do_batch+0x391/0x630 [ 507.178267][T18952] __sys_bpf+0xbe5/0xd90 [ 507.178309][T18952] ? __pfx___sys_bpf+0x10/0x10 [ 507.178352][T18952] ? __fget_files+0x2a/0x420 [ 507.178395][T18952] ? ksys_write+0x242/0x270 [ 507.178430][T18952] ? __pfx_ksys_write+0x10/0x10 [ 507.178461][T18952] __x64_sys_bpf+0xba/0xd0 [ 507.178492][T18952] do_syscall_64+0x166/0x520 [ 507.178519][T18952] ? trace_irq_disable+0x3b/0x140 [ 507.178545][T18952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.178569][T18952] ? clear_bhb_loop+0x70/0xc0 [ 507.178595][T18952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.178618][T18952] RIP: 0033:0x7f4ba119e559 [ 507.178637][T18952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.178654][T18952] RSP: 002b:00007f4ba211b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 507.178678][T18952] RAX: ffffffffffffffda RBX: 00007f4ba1425fa0 RCX: 00007f4ba119e559 [ 507.178694][T18952] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 507.178709][T18952] RBP: 00007f4ba211b090 R08: 0000000000000000 R09: 0000000000000000 [ 507.178724][T18952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 507.178737][T18952] R13: 00007f4ba1426038 R14: 00007f4ba1425fa0 R15: 00007ffd2968d9e8 [ 507.178774][T18952] [ 507.193020][T18941] vcan0: entered promiscuous mode [ 507.460090][T18941] bond0: entered promiscuous mode [ 507.460116][T18941] bond_slave_0: entered promiscuous mode [ 507.460349][T18941] bond_slave_1: entered promiscuous mode [ 507.513570][T18941] team0: entered promiscuous mode [ 507.513596][T18941] team_slave_0: entered promiscuous mode [ 507.513809][T18941] team_slave_1: entered promiscuous mode [ 507.549977][T18941] dummy0: entered promiscuous mode [ 507.572464][T18956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3289'. [ 507.572496][T18956] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3289'. [ 507.574500][T18954] netlink: 'syz.4.3287': attribute type 1 has an invalid length. [ 507.574523][T18954] netlink: 'syz.4.3287': attribute type 2 has an invalid length. [ 507.630126][T18941] nlmon0: entered promiscuous mode [ 507.633287][T18941] batadv0: entered promiscuous mode [ 507.665518][T18941] vxcan0: entered promiscuous mode [ 507.669064][T18941] vxcan1: entered promiscuous mode [ 507.683791][T18941] veth0: entered promiscuous mode [ 507.701485][T18941] veth1: entered promiscuous mode [ 507.722306][T18941] wg0: entered promiscuous mode [ 507.728263][T18941] wg1: entered promiscuous mode [ 507.757108][T18941] wg2: entered promiscuous mode [ 507.770421][T18941] veth0_to_bridge: entered promiscuous mode [ 507.796107][T18941] veth1_to_bridge: entered promiscuous mode [ 507.822273][T18941] veth0_to_bond: entered promiscuous mode [ 507.855606][T18941] veth1_to_bond: entered promiscuous mode [ 507.884140][T18941] veth0_to_team: entered promiscuous mode [ 507.912550][T18941] veth1_to_team: entered promiscuous mode [ 507.933758][T18941] veth0_to_batadv: entered promiscuous mode [ 507.953544][T18941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.953603][T18941] batadv_slave_0: entered promiscuous mode [ 507.976448][T18941] veth1_to_batadv: entered promiscuous mode [ 507.993524][T18941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.993583][T18941] batadv_slave_1: entered promiscuous mode [ 507.997460][T18941] xfrm0: entered promiscuous mode [ 508.021021][T18941] veth0_to_hsr: entered promiscuous mode [ 508.041262][T18941] veth1_to_hsr: entered promiscuous mode [ 508.060377][T18941] hsr0: entered promiscuous mode [ 508.063816][T18941] veth1_virt_wifi: entered promiscuous mode [ 508.079123][T18941] veth0_virt_wifi: entered promiscuous mode [ 508.086629][T18941] virt_wifi0: entered promiscuous mode [ 508.125247][T18941] vlan0: entered promiscuous mode [ 508.138033][T18941] vlan1: entered promiscuous mode [ 508.174250][T18941] macvlan0: entered promiscuous mode [ 508.189702][T18941] macvlan1: entered promiscuous mode [ 508.197179][T18941] ipvlan0: entered promiscuous mode [ 508.197370][T18941] ipvlan1: entered promiscuous mode [ 508.255019][T18941] macvtap0: entered promiscuous mode [ 508.319429][T18972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3291'. [ 508.331496][T18941] macsec0: entered promiscuous mode [ 508.408001][T18941] geneve0: entered promiscuous mode [ 508.425171][T18941] geneve1: entered promiscuous mode [ 508.448492][T18941] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 508.464559][T18941] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 508.478145][T18941] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 508.494218][T18941] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 508.513899][T18941] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 508.561815][T18941] mac80211_hwsim hwsim35 wlan1: entered promiscuous mode [ 508.631229][T18941] ifb2: entered promiscuous mode [ 508.639969][T10283] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.640046][T10283] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.640088][T10283] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.640130][T10283] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.844752][T18972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3291'. [ 509.065828][T18982] net_ratelimit: 12 callbacks suppressed [ 509.066061][T18982] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 509.085366][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 509.127306][T18617] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 509.153503][T18617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 509.155451][T18617] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 509.184417][T18617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 509.185693][T18617] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 509.238425][T18617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 509.263296][T18617] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 509.287226][T18617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 509.630735][T19001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3301'. [ 509.643015][T10211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.828653][T18617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.867549][T19005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3304'. [ 509.960362][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.044949][T18617] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.059218][T19014] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 510.059237][T19014] IPv6: NLM_F_CREATE should be set when creating new route [ 510.059282][T19014] IPv6: NLM_F_CREATE should be set when creating new route [ 510.059362][T19014] IPv6: NLM_F_CREATE should be set when creating new route [ 510.118741][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 510.210095][T10307] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.210210][T10307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.243286][T19014] sctp: [Deprecated]: syz.1.3302 (pid 19014) Use of int in max_burst socket option. [ 510.243286][T19014] Use struct sctp_assoc_value instead [ 510.342258][T10317] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.342374][T10317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.441020][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.681644][T10207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.840968][T19031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3306'. [ 510.913892][T10321] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 510.914782][T10307] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 510.914826][T10307] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 510.914864][T10307] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 510.971053][T19036] dvmrp0: entered allmulticast mode [ 511.082740][T10211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.158745][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 511.941171][T10211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.246045][T19062] __nla_validate_parse: 1 callbacks suppressed [ 512.246069][T19062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3317'. [ 512.246114][T19062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3317'. [ 512.431300][T19070] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3318'. [ 512.501509][T19071] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3319'. [ 512.501538][T19071] veth0_to_bond: default FDB implementation only supports local addresses [ 512.542004][T19073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3320'. [ 512.585644][T19073] netlink: 'syz.4.3320': attribute type 12 has an invalid length. [ 512.585669][T19073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3320'. [ 512.585908][T19073] netlink: 'syz.4.3320': attribute type 12 has an invalid length. [ 512.585924][T19073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3320'. [ 512.635493][T19075] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3319'. [ 512.635518][T19075] veth0_to_bond: default FDB implementation only supports local addresses [ 513.214063][T18617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.358339][T19093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.475326][T18617] veth0_vlan: entered promiscuous mode [ 513.507027][T19103] netlink: 'syz.4.3325': attribute type 1 has an invalid length. [ 513.518233][T18617] veth1_vlan: entered promiscuous mode [ 513.628343][T19103] 8021q: adding VLAN 0 to HW filter on device bond1 [ 513.680955][T19109] netlink: 'syz.4.3325': attribute type 1 has an invalid length. [ 513.888454][T19104] bond1: (slave geneve2): making interface the new active one [ 513.906868][T19104] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 514.031970][T19108] bond12: entered promiscuous mode [ 514.032015][T19108] bond12: entered allmulticast mode [ 514.034892][T19108] 8021q: adding VLAN 0 to HW filter on device bond12 [ 514.123556][ T30] net_ratelimit: 6 callbacks suppressed [ 514.123579][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.203454][T10324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.228778][T10207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.279041][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 514.412861][T18617] veth0_macvtap: entered promiscuous mode [ 514.443259][T18617] veth1_macvtap: entered promiscuous mode [ 514.552579][T18617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.615389][T18617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.638969][T19123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3328'. [ 514.642777][T19123] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 514.691459][T10317] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.692473][T10317] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.777008][T19126] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 514.818912][T19133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3328'. [ 514.915769][ T6697] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.918470][T10321] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.082234][T10211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.189486][T10324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.189508][T10324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.306599][ T6697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.306623][ T6697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.325552][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 515.822541][ T1014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.825243][ T1014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.070949][T19164] netlink: 'syz.4.3340': attribute type 5 has an invalid length. [ 516.101107][T19165] x_tables: duplicate underflow at hook 2 [ 516.196805][T19165] tun0: tun_chr_ioctl cmd 1074025675 [ 516.197059][T19165] tun0: persist enabled [ 516.313842][T19165] pim6reg: entered allmulticast mode [ 516.335463][T19171] veth1_to_hsr: entered allmulticast mode [ 516.505747][T19174] x_tables: duplicate underflow at hook 2 [ 516.616131][T19171] tipc: Started in network mode [ 516.616167][T19171] tipc: Node identity 32b17a40eea7, cluster identity 4711 [ 516.616352][T19171] tipc: Enabled bearer , priority 10 [ 516.834750][ T4936] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 516.861392][ T4936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 516.862282][ T4936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 516.890968][ T4936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 516.894817][ T4936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 516.960775][T19162] tipc: Resetting bearer [ 517.240738][T19162] tipc: Disabling bearer [ 517.396315][T19162] pim6reg: left allmulticast mode [ 517.396479][T19162] veth1_to_hsr: left allmulticast mode [ 517.653297][ T5622] tipc: Resetting bearer [ 517.843943][ T5622] tipc: Disabling bearer [ 518.324531][T19199] __nla_validate_parse: 5 callbacks suppressed [ 518.324555][T19199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3348'. [ 518.588533][T19202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3349'. [ 518.720249][T19202] 8021q: adding VLAN 0 to HW filter on device team1 [ 518.891766][T19213] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 518.992144][T19176] rxe_eth0 speed is unknown, defaulting to 1000 [ 519.000693][ T5624] Bluetooth: hci1: command tx timeout [ 519.040998][T19218] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3351'. [ 519.084452][T19218] sctp: [Deprecated]: syz.2.3351 (pid 19218) Use of struct sctp_assoc_value in delayed_ack socket option. [ 519.084452][T19218] Use struct sctp_sack_info instead [ 519.247005][T10209] net_ratelimit: 2260 callbacks suppressed [ 519.247027][T10209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.264813][T19223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.264997][T19223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.265271][T19223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.302618][T19217] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 519.329397][T19224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.331232][T19224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.430803][T19224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.461894][T19224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.478896][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 519.479074][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.653653][T19232] FAULT_INJECTION: forcing a failure. [ 519.653653][T19232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.653692][T19232] CPU: 1 UID: 0 PID: 19232 Comm: syz.2.3357 Not tainted syzkaller #0 PREEMPT(full) [ 519.653727][T19232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 519.653740][T19232] Call Trace: [ 519.653750][T19232] [ 519.653760][T19232] dump_stack_lvl+0xe8/0x150 [ 519.653800][T19232] should_fail_ex+0x410/0x560 [ 519.653838][T19232] _copy_to_iter+0x1e4/0x1810 [ 519.653878][T19232] ? do_raw_spin_lock+0x12b/0x2f0 [ 519.653921][T19232] ? __pfx__copy_to_iter+0x10/0x10 [ 519.653955][T19232] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 519.653982][T19232] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 519.654007][T19232] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 519.654040][T19232] __skb_datagram_iter+0xf8/0x980 [ 519.654065][T19232] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 519.654100][T19232] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 519.654138][T19232] skb_copy_datagram_iter+0xb5/0x240 [ 519.654171][T19232] netlink_recvmsg+0x2b9/0xa50 [ 519.654213][T19232] ? __pfx_netlink_recvmsg+0x10/0x10 [ 519.654247][T19232] ? aa_sock_msg_perm+0x144/0x210 [ 519.654287][T19232] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 519.654320][T19232] ? security_socket_recvmsg+0x7e/0x2c0 [ 519.654347][T19232] ? __pfx_netlink_recvmsg+0x10/0x10 [ 519.654377][T19232] sock_recvmsg+0x196/0x1e0 [ 519.654414][T19232] __sys_recvfrom+0x231/0x3a0 [ 519.654445][T19232] ? __pfx___sys_recvfrom+0x10/0x10 [ 519.654499][T19232] ? rcu_is_watching+0x16/0xb0 [ 519.654537][T19232] __x64_sys_recvfrom+0xde/0x100 [ 519.654565][T19232] do_syscall_64+0x166/0x520 [ 519.654592][T19232] ? trace_irq_disable+0x3b/0x140 [ 519.654618][T19232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.654642][T19232] ? clear_bhb_loop+0x70/0xc0 [ 519.654671][T19232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.654694][T19232] RIP: 0033:0x7f05c835ed8e [ 519.654724][T19232] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 519.654745][T19232] RSP: 002b:00007f05c928ee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 519.654770][T19232] RAX: ffffffffffffffda RBX: 00007f05c92906c0 RCX: 00007f05c835ed8e [ 519.654788][T19232] RDX: 0000000000001000 RSI: 00007f05c928f000 RDI: 0000000000000004 [ 519.654803][T19232] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 519.654816][T19232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 519.654830][T19232] R13: 00007f05c928ef58 R14: 00007f05c928f000 R15: 0000000000000000 [ 519.654867][T19232] [ 520.221871][T19234] netlink: 'syz.3.3356': attribute type 5 has an invalid length. [ 520.241556][T19234] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.498126][T19257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3360'. [ 520.604880][T19260] netlink: 'syz.3.3361': attribute type 8 has an invalid length. [ 520.961904][T19262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3363'. [ 520.964170][T19176] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.964285][T19176] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.964458][T19176] bridge_slave_0: entered allmulticast mode [ 521.001875][T19176] bridge_slave_0: entered promiscuous mode [ 521.023129][T19176] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.023251][T19176] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.023423][T19176] bridge_slave_1: entered allmulticast mode [ 521.028111][T19176] bridge_slave_1: entered promiscuous mode [ 521.088785][ T5624] Bluetooth: hci1: command tx timeout [ 521.274521][T19278] ip6t_hbh: Not strict - not implemented [ 521.379759][T19176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.382132][T19278] syz_tun: left promiscuous mode [ 521.409637][T19176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.562835][T19176] team0: Port device team_slave_0 added [ 521.565929][T19176] team0: Port device team_slave_1 added [ 521.640183][T19278] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 521.912018][T19176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.912039][T19176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.912067][T19176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.974627][T19176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.974646][T19176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.974676][T19176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.035570][T19298] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3368'. [ 522.068322][T19305] FAULT_INJECTION: forcing a failure. [ 522.068322][T19305] name failslab, interval 1, probability 0, space 0, times 0 [ 522.068360][T19305] CPU: 1 UID: 0 PID: 19305 Comm: syz.4.3369 Not tainted syzkaller #0 PREEMPT(full) [ 522.068385][T19305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 522.068398][T19305] Call Trace: [ 522.068411][T19305] [ 522.068420][T19305] dump_stack_lvl+0xe8/0x150 [ 522.068461][T19305] should_fail_ex+0x410/0x560 [ 522.068500][T19305] should_failslab+0xa8/0x100 [ 522.068534][T19305] ? skb_clone+0x212/0x3a0 [ 522.068560][T19305] kmem_cache_alloc_noprof+0xa1/0x600 [ 522.068595][T19305] ? skb_clone+0x212/0x3a0 [ 522.068628][T19305] skb_clone+0x212/0x3a0 [ 522.068658][T19305] __netlink_deliver_tap+0x413/0x860 [ 522.068702][T19305] ? netlink_deliver_tap+0x2e/0x1b0 [ 522.068734][T19305] netlink_deliver_tap+0x19c/0x1b0 [ 522.068766][T19305] netlink_sendskb+0x68/0x140 [ 522.068795][T19305] netlink_rcv_skb+0x2a4/0x4a0 [ 522.068825][T19305] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 522.068865][T19305] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 522.068911][T19305] ? netlink_deliver_tap+0x2e/0x1b0 [ 522.068939][T19305] ? netlink_deliver_tap+0x2e/0x1b0 [ 522.068976][T19305] netlink_unicast+0x8ef/0xa80 [ 522.069024][T19305] netlink_sendmsg+0x813/0xb40 [ 522.069066][T19305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 522.069106][T19305] ? apparmor_socket_sendmsg+0x98/0x360 [ 522.069142][T19305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 522.069171][T19305] sock_sendmsg_nosec+0x13a/0x180 [ 522.069206][T19305] __sys_sendto+0x408/0x5a0 [ 522.069234][T19305] ? __pfx___sys_sendto+0x10/0x10 [ 522.069300][T19305] ? do_user_addr_fault+0xc4c/0x1340 [ 522.069328][T19305] __x64_sys_sendto+0xde/0x100 [ 522.069353][T19305] do_syscall_64+0x166/0x520 [ 522.069379][T19305] ? trace_irq_disable+0x3b/0x140 [ 522.069404][T19305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.069428][T19305] ? clear_bhb_loop+0x70/0xc0 [ 522.069458][T19305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.069482][T19305] RIP: 0033:0x7f5476d5ed8e [ 522.069504][T19305] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 522.069525][T19305] RSP: 002b:00007f5477c75e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 522.069550][T19305] RAX: ffffffffffffffda RBX: 00007f5477c776c0 RCX: 00007f5476d5ed8e [ 522.069568][T19305] RDX: 0000000000000020 RSI: 00007f5477c76000 RDI: 0000000000000004 [ 522.069584][T19305] RBP: 0000000000000000 R08: 00007f5477c75f04 R09: 000000000000000c [ 522.069606][T19305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 522.069619][T19305] R13: 00007f5477c75f58 R14: 00007f5477c76000 R15: 0000000000000000 [ 522.069656][T19305] [ 522.448544][T19176] hsr_slave_0: entered promiscuous mode [ 522.449721][T19176] hsr_slave_1: entered promiscuous mode [ 522.450516][T19176] debugfs: 'hsr0' already exists in 'hsr' [ 522.450537][T19176] Cannot create hsr debugfs directory [ 522.601893][T19294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3368'. [ 523.160380][ T5624] Bluetooth: hci1: command tx timeout [ 523.160598][T19321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3375'. [ 523.160627][T19321] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3375'. [ 523.421374][T19176] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.421416][T19176] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 523.421447][T19176] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.421477][T19176] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 523.592137][T19333] netlink: 193 bytes leftover after parsing attributes in process `syz.2.3380'. [ 523.744752][T19176] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.744794][T19176] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 523.744826][T19176] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.744856][T19176] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 524.131304][T19176] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.131346][T19176] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 524.131377][T19176] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.131407][T19176] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 524.264317][T19350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3386'. [ 524.427018][T19354] FAULT_INJECTION: forcing a failure. [ 524.427018][T19354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.427055][T19354] CPU: 1 UID: 0 PID: 19354 Comm: syz.3.3385 Not tainted syzkaller #0 PREEMPT(full) [ 524.427084][T19354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 524.427099][T19354] Call Trace: [ 524.427108][T19354] [ 524.427118][T19354] dump_stack_lvl+0xe8/0x150 [ 524.427159][T19354] should_fail_ex+0x410/0x560 [ 524.427198][T19354] _copy_from_user+0x2d/0xb0 [ 524.427235][T19354] generic_map_update_batch+0x662/0xae0 [ 524.427287][T19354] ? __pfx_generic_map_update_batch+0x10/0x10 [ 524.427326][T19354] ? __fget_files+0x2a/0x420 [ 524.427356][T19354] ? __pfx_generic_map_update_batch+0x10/0x10 [ 524.427393][T19354] bpf_map_do_batch+0x391/0x630 [ 524.427432][T19354] __sys_bpf+0xbe5/0xd90 [ 524.427471][T19354] ? __pfx___sys_bpf+0x10/0x10 [ 524.427509][T19354] ? __fget_files+0x2a/0x420 [ 524.427547][T19354] ? ksys_write+0x242/0x270 [ 524.427572][T19354] ? __pfx_ksys_write+0x10/0x10 [ 524.427601][T19354] __x64_sys_bpf+0xba/0xd0 [ 524.427628][T19354] do_syscall_64+0x166/0x520 [ 524.427656][T19354] ? trace_irq_disable+0x3b/0x140 [ 524.427681][T19354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.427705][T19354] ? clear_bhb_loop+0x70/0xc0 [ 524.427734][T19354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.427757][T19354] RIP: 0033:0x7f65e3f9e559 [ 524.427778][T19354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.427799][T19354] RSP: 002b:00007f65e21f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 524.427831][T19354] RAX: ffffffffffffffda RBX: 00007f65e4225fa0 RCX: 00007f65e3f9e559 [ 524.427849][T19354] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 524.427864][T19354] RBP: 00007f65e21f6090 R08: 0000000000000000 R09: 0000000000000000 [ 524.427879][T19354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 524.427894][T19354] R13: 00007f65e4226038 R14: 00007f65e4225fa0 R15: 00007ffc44d50588 [ 524.427932][T19354] [ 524.428150][ T6691] net_ratelimit: 53 callbacks suppressed [ 524.428163][ T6691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.522545][T10206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.678731][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 524.688139][T19176] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.688180][T19176] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 524.688211][T19176] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.688240][T19176] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 524.828113][T19359] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3389'. [ 525.176621][ T6691] nci: nci_rx_work: unknown MT 0x1 [ 525.235812][T19371] syz_tun: entered allmulticast mode [ 525.239164][ T5624] Bluetooth: hci1: command tx timeout [ 525.363707][T19374] netlink: 'syz.3.3391': attribute type 33 has an invalid length. [ 525.392083][T19373] pimreg: entered allmulticast mode [ 525.484570][T19374] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 525.560383][T10205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.563111][T19374] bond1 (unregistering): Released all slaves [ 525.614059][T19389] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3393'. [ 525.690920][T10324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.718815][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 525.745601][T19373] bond2: entered allmulticast mode [ 525.746028][T19373] 8021q: adding VLAN 0 to HW filter on device bond2 [ 525.894706][T19389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.927018][T19389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.949308][T19389] bond0 (unregistering): Released all slaves [ 526.096004][T19362] syz_tun: left allmulticast mode [ 526.126755][T19396] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3399'. [ 526.207415][T19401] FAULT_INJECTION: forcing a failure. [ 526.207415][T19401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.207450][T19401] CPU: 1 UID: 0 PID: 19401 Comm: syz.1.3400 Not tainted syzkaller #0 PREEMPT(full) [ 526.207475][T19401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 526.207488][T19401] Call Trace: [ 526.207498][T19401] [ 526.207507][T19401] dump_stack_lvl+0xe8/0x150 [ 526.207545][T19401] should_fail_ex+0x410/0x560 [ 526.207587][T19401] _copy_from_user+0x2d/0xb0 [ 526.207625][T19401] generic_map_update_batch+0x6b1/0xae0 [ 526.207682][T19401] ? __pfx_generic_map_update_batch+0x10/0x10 [ 526.207720][T19401] ? __fget_files+0x2a/0x420 [ 526.207749][T19401] ? __pfx_generic_map_update_batch+0x10/0x10 [ 526.207785][T19401] bpf_map_do_batch+0x391/0x630 [ 526.207822][T19401] __sys_bpf+0xbe5/0xd90 [ 526.207859][T19401] ? __pfx___sys_bpf+0x10/0x10 [ 526.207902][T19401] ? __fget_files+0x2a/0x420 [ 526.207943][T19401] ? ksys_write+0x242/0x270 [ 526.207971][T19401] ? __pfx_ksys_write+0x10/0x10 [ 526.208003][T19401] __x64_sys_bpf+0xba/0xd0 [ 526.208033][T19401] do_syscall_64+0x166/0x520 [ 526.208061][T19401] ? trace_irq_disable+0x3b/0x140 [ 526.208086][T19401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.208108][T19401] ? clear_bhb_loop+0x70/0xc0 [ 526.208136][T19401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.208159][T19401] RIP: 0033:0x7f446cd9e559 [ 526.208178][T19401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.208197][T19401] RSP: 002b:00007f446dc72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 526.208220][T19401] RAX: ffffffffffffffda RBX: 00007f446d025fa0 RCX: 00007f446cd9e559 [ 526.208237][T19401] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 526.208251][T19401] RBP: 00007f446dc72090 R08: 0000000000000000 R09: 0000000000000000 [ 526.208265][T19401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 526.208279][T19401] R13: 00007f446d026038 R14: 00007f446d025fa0 R15: 00007ffca9167278 [ 526.208315][T19401] [ 526.284715][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.529891][T19403] syzkaller0: entered promiscuous mode [ 526.530094][T19403] syzkaller0: entered allmulticast mode [ 526.567322][T19403] Bluetooth: MGMT ver 1.23 [ 526.609721][T10205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.758845][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 526.799849][T10320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.212971][T10324] bond2: left allmulticast mode [ 527.777325][T10324] bond18 (unregistering): (slave bridge6): Releasing backup interface [ 527.777355][T10324] bridge6 (unregistering): left promiscuous mode [ 527.777378][T10324] bridge6 (unregistering): left allmulticast mode [ 527.826207][T10324] bond0 (unregistering): Released all slaves [ 527.842970][T10324] bond1 (unregistering): Released all slaves [ 527.871559][T10324] bond2 (unregistering): Released all slaves [ 527.894245][T10324] bond3 (unregistering): Released all slaves [ 527.921918][T10324] bond4 (unregistering): Released all slaves [ 527.944239][T10324] bond5 (unregistering): Released all slaves [ 527.986838][T10324] bond6 (unregistering): Released all slaves [ 528.009915][T10324] bond7 (unregistering): Released all slaves [ 528.024961][T19365] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 528.075210][T10324] bond8 (unregistering): Released all slaves [ 528.186395][T10324] bond9 (unregistering): Released all slaves [ 528.303901][T10324] bond10 (unregistering): Released all slaves [ 528.403898][T10324] bond11 (unregistering): Released all slaves [ 528.482268][T10324] bond12 (unregistering): Released all slaves [ 528.532063][T10324] bond13 (unregistering): Released all slaves [ 528.566295][T10324] bond14 (unregistering): (slave bond15): Releasing backup interface [ 528.567482][T10324] bond14 (unregistering): Released all slaves [ 528.603116][T10324] bond15 (unregistering): Released all slaves [ 528.633914][T10324] bond16 (unregistering): Released all slaves [ 528.660241][T10324] bond17 (unregistering): Released all slaves [ 528.697362][T10324] bond18 (unregistering): Released all slaves [ 528.804115][T19176] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 528.847697][T19176] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 528.860929][T19176] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 528.898317][T19176] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 528.933234][T19435] batman_adv: batadv0: Adding interface: veth0 [ 528.933254][T19435] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.933338][T19435] batman_adv: batadv0: Interface activated: veth0 [ 528.938537][T19438] FAULT_INJECTION: forcing a failure. [ 528.938537][T19438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 528.983070][T19436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.983574][T19436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.008270][T19436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.008486][T19436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.024454][T19438] CPU: 1 UID: 0 PID: 19438 Comm: syz.2.3411 Not tainted syzkaller #0 PREEMPT(full) [ 529.024483][T19438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 529.024496][T19438] Call Trace: [ 529.024505][T19438] [ 529.024517][T19438] dump_stack_lvl+0xe8/0x150 [ 529.024556][T19438] should_fail_ex+0x410/0x560 [ 529.024596][T19438] _copy_from_user+0x2d/0xb0 [ 529.024634][T19438] generic_map_update_batch+0x662/0xae0 [ 529.024687][T19438] ? __pfx_generic_map_update_batch+0x10/0x10 [ 529.024726][T19438] ? __fget_files+0x2a/0x420 [ 529.024754][T19438] ? __pfx_generic_map_update_batch+0x10/0x10 [ 529.024790][T19438] bpf_map_do_batch+0x391/0x630 [ 529.024840][T19438] __sys_bpf+0xbe5/0xd90 [ 529.024879][T19438] ? __pfx___sys_bpf+0x10/0x10 [ 529.024941][T19438] ? __fget_files+0x2a/0x420 [ 529.024984][T19438] ? ksys_write+0x242/0x270 [ 529.025013][T19438] ? __pfx_ksys_write+0x10/0x10 [ 529.025044][T19438] __x64_sys_bpf+0xba/0xd0 [ 529.025074][T19438] do_syscall_64+0x166/0x520 [ 529.025108][T19438] ? trace_irq_disable+0x3b/0x140 [ 529.025134][T19438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.025158][T19438] ? clear_bhb_loop+0x70/0xc0 [ 529.025186][T19438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.025209][T19438] RIP: 0033:0x7f05c839e559 [ 529.025230][T19438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.025247][T19438] RSP: 002b:00007f05c92b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 529.025267][T19438] RAX: ffffffffffffffda RBX: 00007f05c8625fa0 RCX: 00007f05c839e559 [ 529.025284][T19438] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 529.025299][T19438] RBP: 00007f05c92b1090 R08: 0000000000000000 R09: 0000000000000000 [ 529.025314][T19438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 529.025329][T19438] R13: 00007f05c8626038 R14: 00007f05c8625fa0 R15: 00007ffd142b1528 [ 529.025367][T19438] [ 529.231854][T19436] batman_adv: batadv0: Interface deactivated: veth0 [ 529.231880][T19436] batman_adv: batadv0: Removing interface: veth0 [ 529.472351][T19176] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 529.482862][T19442] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3412'. [ 529.513083][T19176] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 529.514217][T19176] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 529.559164][T19176] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 529.597040][T10324] tipc: Disabling bearer [ 529.597918][T10324] tipc: Left network mode [ 529.650750][ T5813] net_ratelimit: 9 callbacks suppressed [ 529.650771][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.726879][T10209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.799828][T19453] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3416'. [ 529.804253][T19176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.878794][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 529.892468][T19458] netlink: NAT attribute has 8 unknown bytes [ 529.892509][T19458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.892973][T19458] netlink: NAT attribute has 8 unknown bytes [ 529.893007][T19458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.904634][T19454] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3416'. [ 530.145940][T19459] netlink: 'syz.3.3416': attribute type 1 has an invalid length. [ 530.161941][T19468] netlink: 'syz.3.3416': attribute type 1 has an invalid length. [ 530.202388][T19176] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.393513][T19453] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3416'. [ 530.394213][T19475] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3416'. [ 530.479290][T19478] netlink: 'syz.1.3419': attribute type 1 has an invalid length. [ 530.521608][T19293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.760760][T10205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.786728][ T1374] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.786854][ T1374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.808757][ T1374] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.808880][ T1374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.919837][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 531.063481][T19490] FAULT_INJECTION: forcing a failure. [ 531.063481][T19490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.063520][T19490] CPU: 1 UID: 0 PID: 19490 Comm: syz.3.3423 Not tainted syzkaller #0 PREEMPT(full) [ 531.063547][T19490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 531.063561][T19490] Call Trace: [ 531.063571][T19490] [ 531.063581][T19490] dump_stack_lvl+0xe8/0x150 [ 531.063621][T19490] should_fail_ex+0x410/0x560 [ 531.063661][T19490] _copy_from_user+0x2d/0xb0 [ 531.063700][T19490] generic_map_update_batch+0x6b1/0xae0 [ 531.063754][T19490] ? __pfx_generic_map_update_batch+0x10/0x10 [ 531.063792][T19490] ? __fget_files+0x2a/0x420 [ 531.063822][T19490] ? __pfx_generic_map_update_batch+0x10/0x10 [ 531.063858][T19490] bpf_map_do_batch+0x391/0x630 [ 531.063904][T19490] __sys_bpf+0xbe5/0xd90 [ 531.063943][T19490] ? __pfx___sys_bpf+0x10/0x10 [ 531.063989][T19490] ? __fget_files+0x2a/0x420 [ 531.064030][T19490] ? ksys_write+0x242/0x270 [ 531.064058][T19490] ? __pfx_ksys_write+0x10/0x10 [ 531.064091][T19490] __x64_sys_bpf+0xba/0xd0 [ 531.064120][T19490] do_syscall_64+0x166/0x520 [ 531.064148][T19490] ? trace_irq_disable+0x3b/0x140 [ 531.064174][T19490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.064198][T19490] ? clear_bhb_loop+0x70/0xc0 [ 531.064227][T19490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.064250][T19490] RIP: 0033:0x7f65e3f9e559 [ 531.064272][T19490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.064292][T19490] RSP: 002b:00007f65e21f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 531.064317][T19490] RAX: ffffffffffffffda RBX: 00007f65e4225fa0 RCX: 00007f65e3f9e559 [ 531.064334][T19490] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 531.064350][T19490] RBP: 00007f65e21f6090 R08: 0000000000000000 R09: 0000000000000000 [ 531.064365][T19490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 531.064388][T19490] R13: 00007f65e4226038 R14: 00007f65e4225fa0 R15: 00007ffc44d50588 [ 531.064425][T19490] [ 531.615472][T19492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3425'. [ 531.646271][T19500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3426'. [ 531.798015][T19500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3426'. [ 531.910056][T10307] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.998026][ T1374] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.998290][ T1374] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.029561][T10307] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.593088][T19523] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3434'. [ 532.636020][T19521] bond1: entered allmulticast mode [ 532.636486][T19521] 8021q: adding VLAN 0 to HW filter on device bond1 [ 532.724721][T19529] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3434'. [ 532.740143][T19533] netlink: 'syz.4.3435': attribute type 7 has an invalid length. [ 532.740167][T19533] netlink: 'syz.4.3435': attribute type 8 has an invalid length. [ 532.877102][T19521] ip6gretap1: entered allmulticast mode [ 532.878450][T19521] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 532.998392][T19529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.024531][T19529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.053103][T19529] bond0 (unregistering): Released all slaves [ 533.618440][T19551] bridge_slave_1: default FDB implementation only supports local addresses [ 534.007379][T10324] veth1_macvtap: left promiscuous mode [ 534.007424][T10324] veth0_macvtap: left promiscuous mode [ 534.007523][T10324] veth1_vlan: left promiscuous mode [ 534.007652][T10324] veth0_vlan: left promiscuous mode [ 534.854959][T19573] No such timeout policy "syz1" [ 534.922917][T10205] net_ratelimit: 11 callbacks suppressed [ 534.922941][T10205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.974406][T19574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.067471][ T6697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.078762][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 535.538457][T19580] No such timeout policy "syz1" [ 535.569887][T18068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.674779][T19594] xt_hashlimit: size too large, truncated to 1048576 [ 535.729281][T19595] geneve0: left promiscuous mode [ 535.729307][T19595] geneve0: entered allmulticast mode [ 535.842191][T19574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.960187][T10209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.058989][T19176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.119412][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 536.168139][ T6697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.397702][T19176] veth0_vlan: entered promiscuous mode [ 536.476503][T19176] veth1_vlan: entered promiscuous mode [ 536.651386][T19574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.708178][T19176] veth0_macvtap: entered promiscuous mode [ 536.755209][T19176] veth1_macvtap: entered promiscuous mode [ 536.901691][T19176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.971812][T19176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.060898][ T6688] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.061898][ T6688] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.061939][ T6688] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.061977][ T6688] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.320691][T10324] IPVS: stop unused estimator thread 0... [ 537.479062][ T5633] Bluetooth: hci1: command 0x0405 tx timeout [ 537.487096][ T6697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.487121][ T6697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.686351][ T1374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.686378][ T1374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.986310][T19637] __nla_validate_parse: 6 callbacks suppressed [ 537.986337][T19637] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3464'. [ 538.030356][T19637] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3464'. [ 538.250788][T19637] netlink: 'syz.2.3464': attribute type 12 has an invalid length. [ 538.250814][T19637] netlink: 'syz.2.3464': attribute type 29 has an invalid length. [ 538.251040][T19637] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3464'. [ 538.251075][T19637] netlink: 'syz.2.3464': attribute type 1 has an invalid length. [ 538.251090][T19637] netlink: 'syz.2.3464': attribute type 2 has an invalid length. [ 538.251104][T19637] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3464'. [ 538.800242][T19668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3473'. [ 538.801453][T19668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3473'. [ 539.014652][T19673] netlink: 'syz.1.3475': attribute type 1 has an invalid length. [ 539.014677][T19673] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3475'. [ 539.215000][T19680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3474'. [ 539.236447][T19680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3474'. [ 539.703145][T19693] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3481'. [ 540.118451][T19702] netlink: 'syz.4.3484': attribute type 1 has an invalid length. [ 540.201635][T10205] net_ratelimit: 16 callbacks suppressed [ 540.201660][T10205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.278739][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 540.439855][ T31] audit: type=1800 audit(1792446372.268:75): pid=19708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3487" name=4005 dev="tmpfs" ino=408 res=0 errno=0 [ 540.600296][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.656718][T19719] netlink: 'syz.2.3491': attribute type 9 has an invalid length. [ 540.739218][T19717] syz_tun: entered allmulticast mode [ 540.841458][T10320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.893421][T19723] netlink: 'syz.3.3488': attribute type 30 has an invalid length. [ 540.934031][T19723] openvswitch: netlink: Duplicate key (type 6). [ 541.243230][T10206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.326043][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 541.371588][T19714] syz_tun: left allmulticast mode [ 541.509500][T19743] netlink: 'syz.0.3493': attribute type 3 has an invalid length. [ 541.648674][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.794493][T19761] IPVS: set_ctl: invalid protocol: 94 172.30.1.4:20002 [ 541.799234][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.896124][T19768] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 542.036082][T19775] FAULT_INJECTION: forcing a failure. [ 542.036082][T19775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.036121][T19775] CPU: 1 UID: 0 PID: 19775 Comm: syz.3.3501 Not tainted syzkaller #0 PREEMPT(full) [ 542.036147][T19775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 542.036162][T19775] Call Trace: [ 542.036172][T19775] [ 542.036182][T19775] dump_stack_lvl+0xe8/0x150 [ 542.036222][T19775] should_fail_ex+0x410/0x560 [ 542.036271][T19775] _copy_from_user+0x2d/0xb0 [ 542.036310][T19775] generic_map_update_batch+0x662/0xae0 [ 542.036364][T19775] ? __pfx_generic_map_update_batch+0x10/0x10 [ 542.036403][T19775] ? __fget_files+0x2a/0x420 [ 542.036433][T19775] ? __pfx_generic_map_update_batch+0x10/0x10 [ 542.036470][T19775] bpf_map_do_batch+0x391/0x630 [ 542.036510][T19775] __sys_bpf+0xbe5/0xd90 [ 542.036548][T19775] ? __pfx___sys_bpf+0x10/0x10 [ 542.036591][T19775] ? __fget_files+0x2a/0x420 [ 542.036633][T19775] ? ksys_write+0x242/0x270 [ 542.036660][T19775] ? __pfx_ksys_write+0x10/0x10 [ 542.036691][T19775] __x64_sys_bpf+0xba/0xd0 [ 542.036721][T19775] do_syscall_64+0x166/0x520 [ 542.036748][T19775] ? trace_irq_disable+0x3b/0x140 [ 542.036774][T19775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.036798][T19775] ? clear_bhb_loop+0x70/0xc0 [ 542.036827][T19775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.036850][T19775] RIP: 0033:0x7f65e3f9e559 [ 542.036872][T19775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.036892][T19775] RSP: 002b:00007f65e21f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 542.036917][T19775] RAX: ffffffffffffffda RBX: 00007f65e4225fa0 RCX: 00007f65e3f9e559 [ 542.036935][T19775] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 542.036950][T19775] RBP: 00007f65e21f6090 R08: 0000000000000000 R09: 0000000000000000 [ 542.036965][T19775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 542.036979][T19775] R13: 00007f65e4226038 R14: 00007f65e4225fa0 R15: 00007ffc44d50588 [ 542.037020][T19775] [ 542.402158][T19777] netlink: 'syz.0.3502': attribute type 15 has an invalid length. [ 543.221314][T19804] __nla_validate_parse: 9 callbacks suppressed [ 543.221337][T19804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3509'. [ 543.546279][T19813] Bluetooth: hci0: unsupported parameter 5161 [ 543.546321][T19813] Bluetooth: hci0: unsupported parameter 8192 [ 543.546337][T19813] Bluetooth: hci0: unsupported parameter 5161 [ 543.546351][T19813] Bluetooth: hci0: unsupported parameter 8192 [ 543.985257][T19829] smc: net device team0 applied user defined pnetid SYZ2 [ 544.204934][T19836] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3520'. [ 544.204962][T19836] bridge: RTM_NEWNEIGH with invalid ether address [ 544.300110][T19836] block nbd0: reconnected socket [ 544.307014][ T5633] block nbd0: Receive control failed (result -32) [ 544.425046][T10324] bridge_slave_1: left promiscuous mode [ 544.425306][T10324] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.462201][T10324] bridge_slave_0: left allmulticast mode [ 544.462449][T10324] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.531862][T19849] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3522'. [ 544.661813][T19850] netlink: 'syz.2.3521': attribute type 1 has an invalid length. [ 545.067788][T19869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3526'. [ 545.158964][T19870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3525'. [ 545.392947][T19875] netlink: 'syz.4.3527': attribute type 2 has an invalid length. [ 545.479366][ C1] net_ratelimit: 11 callbacks suppressed [ 545.479391][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 545.481062][T10206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.595445][ T6697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.812561][T10324] bond1 (unregistering): Released all slaves [ 545.835680][T10324] bond2 (unregistering): Released all slaves [ 545.864787][T10324] bond3 (unregistering): Released all slaves [ 545.887629][T10324] bond4 (unregistering): Released all slaves [ 545.913704][T10324] bond5 (unregistering): Released all slaves [ 545.945324][T10324] bond6 (unregistering): Released all slaves [ 545.975952][T10324] bond7 (unregistering): Released all slaves [ 545.997155][T10324] bond8 (unregistering): Released all slaves [ 546.025090][T10324] bond9 (unregistering): Released all slaves [ 546.053157][T10324] bond10 (unregistering): Released all slaves [ 546.073989][T10324] bond11 (unregistering): Released all slaves [ 546.096292][T10324] bond12 (unregistering): Released all slaves [ 546.140382][T10324] bond13 (unregistering): Released all slaves [ 546.166942][T10324] bond14 (unregistering): Released all slaves [ 546.197441][T10324] bond15 (unregistering): Released all slaves [ 546.221264][T10324] bond16 (unregistering): Released all slaves [ 546.254189][T10324] bond17 (unregistering): Released all slaves [ 546.275618][T10324] bond0 (unregistering): Released all slaves [ 546.515465][T10324] tipc: Disabling bearer [ 546.515599][T10324] tipc: Left network mode [ 546.522931][T10216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.782244][ T6697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.784483][T10324] IPVS: stopping master sync thread 9996 ... [ 547.082406][T19890] FAULT_INJECTION: forcing a failure. [ 547.082406][T19890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.082441][T19890] CPU: 0 UID: 0 PID: 19890 Comm: syz.2.3531 Not tainted syzkaller #0 PREEMPT(full) [ 547.082463][T19890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 547.082476][T19890] Call Trace: [ 547.082483][T19890] [ 547.082492][T19890] dump_stack_lvl+0xe8/0x150 [ 547.082527][T19890] should_fail_ex+0x410/0x560 [ 547.082560][T19890] _copy_from_user+0x2d/0xb0 [ 547.082592][T19890] generic_map_update_batch+0x662/0xae0 [ 547.082637][T19890] ? __pfx_generic_map_update_batch+0x10/0x10 [ 547.082668][T19890] ? __fget_files+0x2a/0x420 [ 547.082693][T19890] ? __pfx_generic_map_update_batch+0x10/0x10 [ 547.082724][T19890] bpf_map_do_batch+0x391/0x630 [ 547.082764][T19890] __sys_bpf+0xbe5/0xd90 [ 547.082796][T19890] ? __pfx___sys_bpf+0x10/0x10 [ 547.082836][T19890] ? __fget_files+0x2a/0x420 [ 547.082871][T19890] ? ksys_write+0x242/0x270 [ 547.082894][T19890] ? __pfx_ksys_write+0x10/0x10 [ 547.082919][T19890] __x64_sys_bpf+0xba/0xd0 [ 547.082944][T19890] do_syscall_64+0x166/0x520 [ 547.082968][T19890] ? trace_irq_disable+0x3b/0x140 [ 547.082989][T19890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.083009][T19890] ? clear_bhb_loop+0x70/0xc0 [ 547.083033][T19890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.083053][T19890] RIP: 0033:0x7f05c839e559 [ 547.083071][T19890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.083088][T19890] RSP: 002b:00007f05c92b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 547.083109][T19890] RAX: ffffffffffffffda RBX: 00007f05c8625fa0 RCX: 00007f05c839e559 [ 547.083123][T19890] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 547.083136][T19890] RBP: 00007f05c92b1090 R08: 0000000000000000 R09: 0000000000000000 [ 547.083148][T19890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 547.083159][T19890] R13: 00007f05c8626038 R14: 00007f05c8625fa0 R15: 00007ffd142b1528 [ 547.083191][T19890] [ 547.562312][T10205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.730042][T18068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.029587][ T6697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.174635][T19914] bond2 (unregistering): Released all slaves [ 548.295119][T19923] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3541'. [ 548.335176][T19916] netlink: 'syz.4.3539': attribute type 21 has an invalid length. [ 548.335200][T19916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3539'. [ 548.405891][T19916] netlink: 'syz.4.3539': attribute type 21 has an invalid length. [ 548.405917][T19916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3539'. [ 548.429983][ T6688] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.431141][ T6688] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.431198][ T6688] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.431239][ T6688] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.527505][T19925] netlink: 'syz.3.3541': attribute type 3 has an invalid length. [ 548.528317][T19925] netlink: 'syz.3.3541': attribute type 3 has an invalid length. [ 548.561890][T19929] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3542'. [ 548.600033][T19932] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.3543'. [ 548.601356][T10205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.605408][T19932] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.3543'. [ 548.841650][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.172756][T19944] FAULT_INJECTION: forcing a failure. [ 549.172756][T19944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 549.172795][T19944] CPU: 1 UID: 0 PID: 19944 Comm: syz.2.3545 Not tainted syzkaller #0 PREEMPT(full) [ 549.172821][T19944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 549.172836][T19944] Call Trace: [ 549.172845][T19944] [ 549.172857][T19944] dump_stack_lvl+0xe8/0x150 [ 549.172897][T19944] should_fail_ex+0x410/0x560 [ 549.172936][T19944] _copy_from_user+0x2d/0xb0 [ 549.172975][T19944] generic_map_update_batch+0x6b1/0xae0 [ 549.173049][T19944] ? __pfx_generic_map_update_batch+0x10/0x10 [ 549.173088][T19944] ? __fget_files+0x2a/0x420 [ 549.173125][T19944] ? __pfx_generic_map_update_batch+0x10/0x10 [ 549.173163][T19944] bpf_map_do_batch+0x391/0x630 [ 549.173202][T19944] __sys_bpf+0xbe5/0xd90 [ 549.173241][T19944] ? __pfx___sys_bpf+0x10/0x10 [ 549.173283][T19944] ? __fget_files+0x2a/0x420 [ 549.173325][T19944] ? ksys_write+0x242/0x270 [ 549.173353][T19944] ? __pfx_ksys_write+0x10/0x10 [ 549.173384][T19944] __x64_sys_bpf+0xba/0xd0 [ 549.173419][T19944] do_syscall_64+0x166/0x520 [ 549.173451][T19944] ? trace_irq_disable+0x3b/0x140 [ 549.173476][T19944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.173500][T19944] ? clear_bhb_loop+0x70/0xc0 [ 549.173529][T19944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.173553][T19944] RIP: 0033:0x7f05c839e559 [ 549.173575][T19944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.173596][T19944] RSP: 002b:00007f05c92b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 549.173621][T19944] RAX: ffffffffffffffda RBX: 00007f05c8625fa0 RCX: 00007f05c839e559 [ 549.173639][T19944] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 549.173654][T19944] RBP: 00007f05c92b1090 R08: 0000000000000000 R09: 0000000000000000 [ 549.173669][T19944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 549.173683][T19944] R13: 00007f05c8626038 R14: 00007f05c8625fa0 R15: 00007ffd142b1528 [ 549.173721][T19944] [ 549.628800][T19951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3547'. [ 549.628829][T19951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3547'. [ 549.628870][T19951] netlink: 'syz.4.3547': attribute type 3 has an invalid length. [ 549.629435][T19948] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3547'. [ 549.747598][T10324] team0: Port device wlan0 removed [ 549.832371][T19956] syzkaller1: entered promiscuous mode [ 549.832399][T19956] syzkaller1: entered allmulticast mode [ 550.135738][T19972] ieee802154 phy1 wpan1: encryption failed: -22 [ 550.238047][T19976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3554'. [ 550.616270][T19979] syzkaller1: entered promiscuous mode [ 550.616297][T19979] syzkaller1: entered allmulticast mode [ 550.681076][T10205] net_ratelimit: 3 callbacks suppressed [ 550.681099][T10205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.766281][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.812941][T10324] hsr_slave_0: left promiscuous mode [ 550.838401][T10324] hsr_slave_1: left promiscuous mode [ 550.896076][T19992] netlink: 'syz.2.3557': attribute type 1 has an invalid length. [ 550.913890][T10324] veth1_macvtap: left promiscuous mode [ 550.913935][T10324] veth0_macvtap: left promiscuous mode [ 550.914043][T10324] veth1_vlan: left promiscuous mode [ 551.048221][T20000] Cannot find add_set index 0 as target [ 551.469270][T10307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.724158][T10206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.971394][T10324] team0 (unregistering): Port device team_slave_1 removed [ 552.037111][T10324] team0 (unregistering): Port device team_slave_0 removed [ 552.378458][T19995] bond2: (slave geneve2): making interface the new active one [ 552.396694][T19995] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 552.429934][T10307] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 552.432202][T10307] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 552.432262][T10307] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 552.432304][T10307] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 552.604082][ T6691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.830602][T10206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.722916][T20051] netlink: 'syz.3.3565': attribute type 11 has an invalid length. [ 553.801717][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.834933][ T6697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.838426][T10324] IPVS: stop unused estimator thread 0... [ 553.880724][T10206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.917702][T20060] netlink: 'syz.2.3568': attribute type 1 has an invalid length. [ 553.944776][T20057] netlink: 'syz.2.3568': attribute type 1 has an invalid length. [ 554.132011][T20060] 8021q: adding VLAN 0 to HW filter on device bond3 [ 554.138518][T20061] veth0_to_bond: left promiscuous mode [ 554.183459][T20061] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 554.264515][T20077] xt_bpf: check failed: parse error [ 554.306198][T20067] bond3: entered promiscuous mode [ 554.306224][T20067] bond3: entered allmulticast mode [ 554.421779][T20084] __nla_validate_parse: 4 callbacks suppressed [ 554.421802][T20084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3572'. [ 554.504664][T20087] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3572'. [ 554.504693][T20087] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3572'. [ 554.766448][ T5624] Bluetooth: hci5: command 0x0406 tx timeout [ 554.853205][ T5633] [ 554.855627][ T5633] ====================================================== [ 554.862676][ T5633] WARNING: possible circular locking dependency detected [ 554.869734][ T5633] syzkaller #0 Not tainted [ 554.874171][ T5633] ------------------------------------------------------ [ 554.881211][ T5633] kworker/u9:6/5633 is trying to acquire lock: [ 554.887390][ T5633] ffff88801d2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 554.897719][ T5633] [ 554.897719][ T5633] but task is already holding lock: [ 554.905114][ T5633] ffff88801d2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 554.916046][ T5633] [ 554.916046][ T5633] which lock already depends on the new lock. [ 554.916046][ T5633] [ 554.926483][ T5633] [ 554.926483][ T5633] the existing dependency chain (in reverse order) is: [ 554.935540][ T5633] [ 554.935540][ T5633] -> #10 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 554.944282][ T5633] down_read+0x4a/0x330 [ 554.949007][ T5633] kernfs_remove_by_name_ns+0x3f/0x140 [ 554.955034][ T5633] internal_create_group+0x58e/0x1180 [ 554.960965][ T5633] sysfs_update_groups+0x60/0x130 [ 554.963928][T10320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.974620][ T5633] pmu_dev_alloc+0x29b/0x300 [ 554.979777][ T5633] perf_event_sysfs_init+0x76/0x100 [ 554.985536][ T5633] do_one_initcall+0x250/0x870 [ 554.990852][ T5633] do_initcall_level+0x10a/0x1a0 [ 554.996349][ T5633] do_initcalls+0x59/0xa0 [ 555.001225][ T5633] kernel_init_freeable+0x29d/0x3e0 [ 555.006969][ T5633] kernel_init+0x22/0x1d0 [ 555.011841][ T5633] ret_from_fork+0x514/0xb70 [ 555.016971][ T5633] ret_from_fork_asm+0x1a/0x30 [ 555.022267][ T5633] [ 555.022267][ T5633] -> #9 (pmus_lock){+.+.}-{4:4}: [ 555.029409][ T5633] __mutex_lock+0x19d/0x1550 [ 555.034541][ T5633] perf_event_init_cpu+0x1d1/0x7a0 [ 555.040190][ T5633] cpuhp_invoke_callback+0x434/0x810 [ 555.046019][ T5633] cpuhp_thread_fun+0x362/0x780 [ 555.051415][ T5633] smpboot_thread_fn+0x565/0xa70 [ 555.056904][ T5633] kthread+0x38b/0x480 [ 555.061510][ T5633] ret_from_fork+0x514/0xb70 [ 555.066647][ T5633] ret_from_fork_asm+0x1a/0x30 [ 555.071961][ T5633] [ 555.071961][ T5633] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 555.079551][ T5633] cpuhp_thread_fun+0x127/0x780 [ 555.084955][ T5633] smpboot_thread_fn+0x565/0xa70 [ 555.090436][ T5633] kthread+0x38b/0x480 [ 555.095048][ T5633] ret_from_fork+0x514/0xb70 [ 555.100175][ T5633] ret_from_fork_asm+0x1a/0x30 [ 555.105469][ T5633] [ 555.105469][ T5633] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 555.113227][ T5633] cpus_read_lock+0x42/0x160 [ 555.118356][ T5633] static_key_slow_inc+0x12/0x30 [ 555.123830][ T5633] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 555.130097][ T5633] nbd_genl_foreach_sock+0x265/0x450 [ 555.135927][ T5633] nbd_genl_reconfigure+0xbbb/0x1040 [ 555.141748][ T5633] genl_family_rcv_msg_doit+0x233/0x340 [ 555.147840][ T5633] genl_rcv_msg+0x614/0x7a0 [ 555.152890][ T5633] netlink_rcv_skb+0x226/0x4a0 [ 555.158231][ T5633] genl_rcv+0x28/0x40 [ 555.162756][ T5633] netlink_unicast+0x8ef/0xa80 [ 555.168133][ T5633] netlink_sendmsg+0x813/0xb40 [ 555.173471][ T5633] sock_sendmsg_nosec+0x13a/0x180 [ 555.179056][ T5633] ____sys_sendmsg+0x54e/0x850 [ 555.184356][ T5633] ___sys_sendmsg+0x2a5/0x360 [ 555.189593][ T5633] __x64_sys_sendmsg+0x1b1/0x290 [ 555.195074][ T5633] do_syscall_64+0x166/0x520 [ 555.200210][ T5633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.206640][ T5633] [ 555.206640][ T5633] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 555.214299][ T5633] __mutex_lock+0x19d/0x1550 [ 555.219433][ T5633] nbd_queue_rq+0x373/0xff0 [ 555.224485][ T5633] blk_mq_dispatch_rq_list+0x499/0x1990 [ 555.230572][ T5633] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 555.237467][ T5633] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 555.244008][ T5633] blk_mq_run_work_fn+0x16c/0x300 [ 555.249580][ T5633] process_scheduled_works+0xc3d/0x1630 [ 555.255680][ T5633] worker_thread+0xa47/0xfb0 [ 555.260819][ T5633] kthread+0x38b/0x480 [ 555.265427][ T5633] ret_from_fork+0x514/0xb70 [ 555.270549][ T5633] ret_from_fork_asm+0x1a/0x30 [ 555.275852][ T5633] [ 555.275852][ T5633] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 555.283081][ T5633] __mutex_lock+0x19d/0x1550 [ 555.288217][ T5633] nbd_queue_rq+0xc1/0xff0 [ 555.293200][ T5633] blk_mq_dispatch_rq_list+0x499/0x1990 [ 555.299289][ T5633] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 555.306160][ T5633] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 555.312689][ T5633] blk_mq_run_work_fn+0x16c/0x300 [ 555.318250][ T5633] process_scheduled_works+0xc3d/0x1630 [ 555.324340][ T5633] worker_thread+0xa47/0xfb0 [ 555.329472][ T5633] kthread+0x38b/0x480 [ 555.334078][ T5633] ret_from_fork+0x514/0xb70 [ 555.339199][ T5633] ret_from_fork_asm+0x1a/0x30 [ 555.344502][ T5633] [ 555.344502][ T5633] -> #4 (set->srcu){.+.+}-{0:0}: [ 555.351640][ T5633] __synchronize_srcu+0xc9/0x2f0 [ 555.357125][ T5633] elevator_switch+0x1e8/0x7b0 [ 555.362437][ T5633] elevator_change+0x2fa/0x480 [ 555.367743][ T5633] elevator_set_default+0x375/0x440 [ 555.373484][ T5633] blk_register_queue+0x3f3/0x4e0 [ 555.379055][ T5633] __add_disk+0x6b8/0xdb0 [ 555.383919][ T5633] add_disk_fwnode+0x100/0x3a0 [ 555.389216][ T5633] nbd_dev_add+0x733/0xb60 [ 555.394175][ T5633] nbd_init+0x168/0x1f0 [ 555.398868][ T5633] do_one_initcall+0x250/0x870 [ 555.404183][ T5633] do_initcall_level+0x10a/0x1a0 [ 555.409662][ T5633] do_initcalls+0x59/0xa0 [ 555.414531][ T5633] kernel_init_freeable+0x29d/0x3e0 [ 555.420273][ T5633] kernel_init+0x22/0x1d0 [ 555.425143][ T5633] ret_from_fork+0x514/0xb70 [ 555.430276][ T5633] ret_from_fork_asm+0x1a/0x30 [ 555.435574][ T5633] [ 555.435574][ T5633] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 555.443409][ T5633] __mutex_lock+0x19d/0x1550 [ 555.448541][ T5633] elevator_change+0x1af/0x480 [ 555.453858][ T5633] elevator_set_none+0xb5/0x140 [ 555.459253][ T5633] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 555.465624][ T5633] nbd_start_device+0x189/0xb30 [ 555.471016][ T5633] nbd_genl_connect+0x167d/0x1cd0 [ 555.476580][ T5633] genl_family_rcv_msg_doit+0x233/0x340 [ 555.482674][ T5633] genl_rcv_msg+0x614/0x7a0 [ 555.487722][ T5633] netlink_rcv_skb+0x226/0x4a0 [ 555.493029][ T5633] genl_rcv+0x28/0x40 [ 555.497557][ T5633] netlink_unicast+0x8ef/0xa80 [ 555.502866][ T5633] netlink_sendmsg+0x813/0xb40 [ 555.508174][ T5633] sock_sendmsg_nosec+0x13a/0x180 [ 555.513739][ T5633] ____sys_sendmsg+0x54e/0x850 [ 555.519037][ T5633] ___sys_sendmsg+0x2a5/0x360 [ 555.524259][ T5633] __x64_sys_sendmsg+0x1b1/0x290 [ 555.529733][ T5633] do_syscall_64+0x166/0x520 [ 555.534865][ T5633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.541300][ T5633] [ 555.541300][ T5633] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 555.549926][ T5633] blk_alloc_queue+0x544/0x690 [ 555.555243][ T5633] __blk_mq_alloc_disk+0x194/0x390 [ 555.560898][ T5633] nbd_dev_add+0x494/0xb60 [ 555.565864][ T5633] nbd_init+0x168/0x1f0 [ 555.570569][ T5633] do_one_initcall+0x250/0x870 [ 555.575881][ T5633] do_initcall_level+0x10a/0x1a0 [ 555.581360][ T5633] do_initcalls+0x59/0xa0 [ 555.586232][ T5633] kernel_init_freeable+0x29d/0x3e0 [ 555.591979][ T5633] kernel_init+0x22/0x1d0 [ 555.596858][ T5633] ret_from_fork+0x514/0xb70 [ 555.601983][ T5633] ret_from_fork_asm+0x1a/0x30 [ 555.607296][ T5633] [ 555.607296][ T5633] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 555.614520][ T5633] fs_reclaim_acquire+0x71/0x100 [ 555.620000][ T5633] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 555.626258][ T5633] alloc_inode+0xb8/0x1b0 [ 555.631165][ T5633] iget_locked+0x131/0x6a0 [ 555.636118][ T5633] kernfs_get_inode+0x4f/0x770 [ 555.641424][ T5633] kernfs_get_tree+0x5cd/0x980 [ 555.646729][ T5633] vfs_get_tree+0x92/0x2a0 [ 555.651688][ T5633] do_new_mount+0x325/0xb00 [ 555.656735][ T5633] __se_sys_mount+0x31d/0x420 [ 555.661957][ T5633] do_syscall_64+0x166/0x520 [ 555.667095][ T5633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.673535][ T5633] [ 555.673535][ T5633] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 555.681554][ T5633] __lock_acquire+0x164c/0x2de0 [ 555.686954][ T5633] lock_acquire+0x115/0x350 [ 555.691994][ T5633] down_write+0x96/0x200 [ 555.696780][ T5633] kernfs_remove_by_name_ns+0x4e/0x140 [ 555.702789][ T5633] sysfs_unmerge_group+0xd3/0x140 [ 555.708363][ T5633] dpm_sysfs_remove+0x5f/0xd0 [ 555.713604][ T5633] device_del+0x250/0x8f0 [ 555.718497][ T5633] device_unregister+0x21/0xf0 [ 555.723806][ T5633] hci_conn_del+0xc3d/0x1200 [ 555.728979][ T5633] hci_abort_conn_sync+0xdd0/0x1190 [ 555.734736][ T5633] hci_cmd_sync_work+0x280/0x430 [ 555.740224][ T5633] process_scheduled_works+0xc3d/0x1630 [ 555.746317][ T5633] worker_thread+0xa47/0xfb0 [ 555.751544][ T5633] kthread+0x38b/0x480 [ 555.756152][ T5633] ret_from_fork+0x514/0xb70 [ 555.761285][ T5633] ret_from_fork_asm+0x1a/0x30 [ 555.766626][ T5633] [ 555.766626][ T5633] other info that might help us debug this: [ 555.766626][ T5633] [ 555.776920][ T5633] Chain exists of: [ 555.776920][ T5633] &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem [ 555.776920][ T5633] [ 555.790863][ T5633] Possible unsafe locking scenario: [ 555.790863][ T5633] [ 555.798355][ T5633] CPU0 CPU1 [ 555.803734][ T5633] ---- ---- [ 555.809121][ T5633] rlock(&root->kernfs_supers_rwsem); [ 555.814607][ T5633] lock(pmus_lock); [ 555.821042][ T5633] lock(&root->kernfs_supers_rwsem); [ 555.829037][ T5633] lock(&root->kernfs_rwsem); [ 555.833817][ T5633] [ 555.833817][ T5633] *** DEADLOCK *** [ 555.833817][ T5633] [ 555.841976][ T5633] locks held by kworker/u9:6/5633: 5, last CPU#1: [ 555.848493][ T5633] #0: ffff888076139140 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 555.859327][ T5633] #1: ffffc90003affc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 555.871976][ T5633] #2: ffff888033f44ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 555.881854][ T5633] #3: ffff888033f440b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 555.891637][ T5633] #4: ffff88801d2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 555.902981][ T5633] [ 555.902981][ T5633] stack backtrace: [ 555.908890][ T5633] CPU: 1 UID: 0 PID: 5633 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) [ 555.918371][ T5633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 555.928444][ T5633] Workqueue: hci5 hci_cmd_sync_work [ 555.933688][ T5633] Call Trace: [ 555.936996][ T5633] [ 555.939953][ T5633] dump_stack_lvl+0xe8/0x150 [ 555.944584][ T5633] print_circular_bug+0x2e2/0x300 [ 555.949634][ T5633] check_noncircular+0x12f/0x150 [ 555.954697][ T5633] __lock_acquire+0x164c/0x2de0 [ 555.959576][ T5633] ? __lock_acquire+0x1511/0x2de0 [ 555.964629][ T5633] lock_acquire+0x115/0x350 [ 555.969151][ T5633] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 555.974830][ T5633] down_write+0x96/0x200 [ 555.979110][ T5633] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 555.984765][ T5633] ? __pfx_down_write+0x10/0x10 [ 555.989645][ T5633] kernfs_remove_by_name_ns+0x4e/0x140 [ 555.995137][ T5633] sysfs_unmerge_group+0xd3/0x140 [ 556.000189][ T5633] dpm_sysfs_remove+0x5f/0xd0 [ 556.004888][ T5633] device_del+0x250/0x8f0 [ 556.009262][ T5633] ? klist_iter_exit+0xc1/0x100 [ 556.014166][ T5633] ? __pfx_device_del+0x10/0x10 [ 556.019046][ T5633] device_unregister+0x21/0xf0 [ 556.023838][ T5633] hci_conn_del+0xc3d/0x1200 [ 556.028461][ T5633] ? hci_abort_conn_sync+0xa7b/0x1190 [ 556.033871][ T5633] hci_abort_conn_sync+0xdd0/0x1190 [ 556.039102][ T5633] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 556.044763][ T5633] ? abort_conn_sync+0x26/0x210 [ 556.049642][ T5633] ? abort_conn_sync+0x26/0x210 [ 556.054518][ T5633] ? abort_conn_sync+0x19c/0x210 [ 556.059493][ T5633] ? __pfx_abort_conn_sync+0x10/0x10 [ 556.064801][ T5633] hci_cmd_sync_work+0x280/0x430 [ 556.069773][ T5633] ? process_scheduled_works+0x97a/0x1630 [ 556.075525][ T5633] process_scheduled_works+0xc3d/0x1630 [ 556.081116][ T5633] ? __pfx_process_scheduled_works+0x10/0x10 [ 556.087131][ T5633] ? assign_work+0x3cf/0x5d0 [ 556.091778][ T5633] worker_thread+0xa47/0xfb0 [ 556.096406][ T5633] ? __kthread_parkme+0x71/0x1f0 [ 556.101374][ T5633] kthread+0x38b/0x480 [ 556.105584][ T5633] ? __pfx_worker_thread+0x10/0x10 [ 556.110718][ T5633] ? __pfx_kthread+0x10/0x10 [ 556.115327][ T5633] ret_from_fork+0x514/0xb70 [ 556.119935][ T5633] ? __pfx_ret_from_fork+0x10/0x10 [ 556.125061][ T5633] ? __switch_to+0xc89/0x1420 [ 556.129767][ T5633] ? __pfx_kthread+0x10/0x10 [ 556.134377][ T5633] ret_from_fork_asm+0x1a/0x30 [ 556.139199][ T5633] [ 556.170271][T10206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.397320][T20111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3575'. [ 556.397346][T20111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3575'. [ 556.397372][T20111] netlink: 'syz.3.3575': attribute type 15 has an invalid length. [ 556.440600][T20111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3575'. [ 556.440639][T20111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3575'. [ 556.440667][T20111] netlink: 'syz.3.3575': attribute type 15 has an invalid length. [ 556.448886][ T1374] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 556.448940][ T1374] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 556.448975][ T1374] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 556.449009][ T1374] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 557.149240][T10320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.238892][T18068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.274571][T10205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.261474][ T1374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.280578][T10205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.580252][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.322001][T10206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.390943][ T6691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.283204][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.401362][T10205] net_ratelimit: 2 callbacks suppressed [ 561.401381][T10205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.590364][T10307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.441294][T10206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.689657][T10307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.922684][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.926172][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.480379][T10205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.481052][ T6691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.501806][T10205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.517645][T10205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.791075][ T6691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog