last executing test programs: 19.712143204s ago: executing program 4 (id=2747): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x280, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x318, 0xffffffff, 0xffffffff, 0x318, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @private=0xa010100, 0x0, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0x220, 0x280, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x0, 0x39, 0x0, 0x0, 0x80000000, 0x3, 0x3}, {0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x8, 0x7, 0x4, 0xd], 0x3, 0xdab9f66e79d89cfe}, {0x1, [0x0, 0x4, 0x2, 0x0, 0x5, 0x2], 0x1}}}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff, 0xffffff, 'veth0_vlan\x00', 'vcan0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x410) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r4, 0x12, 0x4, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002ac311600080001000200"/32], 0x20}}, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r5, 0x89e0, &(0x7f0000000200)={'tunl0\x00', 0x0, 0x1000}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x4e20, 0x3, 'rr\x00', 0x30, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000380)=@assoc_value, &(0x7f00000003c0)=0x8) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={r7}, &(0x7f00000000c0)=0x8) sendmmsg$inet_sctp(r2, &(0x7f00000044c0)=[{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001080)="67307cd5c87466cd1fe065514f6937a81853f5e4993687194cc964c9c2b245447cfab2bb529deb52ba6dae33afb49a33087a7827fa2239419b551ec51ff49bcc2e1dcb57225df2a078d07da930a77d4fdcf485aeae0bbf66d41455005581767ba4de8c927da64fa2ae9a354dc049485b98eff27eeb527f4ebb2f5791c464cf9cdfc812997bbfd543caa745067ad5ed500a5fb45d1c0d3f58f41bedb1feaad1310c31b9f0be7c16a3ad6ecd36244dada97fed468d11983c4843d976e734ec349a19480fc9abe431f3ab422dfe09e37e5d", 0xd0}, {&(0x7f0000000400)="93cd545bdc67703cea66f95238a6fef547250cf16a0961951b55f3ca9c8e4ee05e47dc02a2a32bae16df821a6d01f4b6bc0469f5f9e008eebbae5af238420efab9371633b54e0c6de223addce39ca862e87f19286208a5320aa8d6cf4acef466fb76509861ce190f1e0550", 0x6b}, {&(0x7f0000000580)="adabd96e0ea5504a41071c388b4923fe7e01a3092976064f8c565d88b88ef53333aae57ee32353640603312194acc820e1ccdbd8b01f0777bdb96a8dfebd23b6e1b0b710c43249d74e70eea5a6c6ad805581c8", 0x53}, {&(0x7f0000001180)="5418d87e00ede1bd43eb8b56f12ed095e383ab8f9fa4221bd265102688f2ed954443ef4e2f7fd7ddd27c228ed3fe8ecba68a7218cb8eedfcc726df619a9418568f82b43cec4db8f2a25aa2e57fbccd9eac176abfa39e3faa033c40c144da2f72", 0x60}, {&(0x7f0000001200)="cc490ffdcfeb10d8c1debdb069a01e39acb546cbe4da3d6160d34b4e94f055b9b46f403a6af405296283005a94d04c85dd8e6e4f249c579fbe21866ebe853a7ff3a4c30ac416aa18f0c2666e6d5772fd711163903570c76a082b678f9f7998292f4071115cb1547b53c9186ff796e7b4dda5c7bf60a7482817431b05fd701dc8d0c5e467d828c2d29c1e78c302d97426f1681e2832c69d2e09abda4a05cd9ff51390e34072f4cb4baca325e878d8259582aea76b319938713a04fcee366af8d9abe5211a9dc0b1f1a3a32f429044df783c0f78c83376c16fa179257edc86d6e1", 0xe0}], 0x5, &(0x7f0000000480)=[@init={0x18, 0x84, 0x0, {0x7, 0xbe, 0x5, 0x8}}], 0x18, 0x40004}, {&(0x7f0000000600)=@in6={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x22e}, 0x1c, &(0x7f0000001740)=[{0x0}, {&(0x7f0000001580)}, {&(0x7f00000015c0)="f3c86affae65fe9a148e4bde4b61fceb509312e050e23dc87665216f900d587bd2c557614129812e", 0x28}, {&(0x7f0000001600)="313f7f436402b49a7f752209d05284be797ff4e9f9bb3bdc51b2e6c10a53c5a3b066edb7520f", 0x26}, {&(0x7f0000001640)="2de0b483c56c1078d682777c86c3d109ef9e688062eff548e3b1180cc08552aa8f1c715efb3cc369c7d942db4783f2fa0fdee3b07120528c252bb32fe736458b9e93edeab8e3b62a27842592ff178809cc90d87bb95c1c81e6a6179d06215175534b09d42a1343745f6cc52e549e7b84b726eaa6af37b95ea2e5f714d05f520a5664271b4272ebbabeabc66fd220d9d7819692340dba34f2e04c675da4449482c245f3f75ffe85cba7742fe49abc7d461d5da4fdd38db6b693c03ccb7095e553fcae069cad7015ec814de543c2bac41ea8aaf09dbd35caf2861963ace3c6c615fb", 0xe1}], 0x5, &(0x7f00000017c0)=[@authinfo={0x18, 0x84, 0x6, {0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @init={0x18, 0x84, 0x0, {0x2, 0x6, 0x8d, 0x9dc}}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010102}], 0x68, 0x4040000}, {&(0x7f0000001840)=@in={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000003a40)=[{&(0x7f0000001880)="976ad95e274b469b8c9e4d38d945059c998e8f628bca98f49ee3de56516a2c93a7c438198e3ed3a380bfbd57518ae3321a6f11b2af8135873ff5e0bfd95537ea70bdd5540c1a94ec9f66633d203681a081c76fafa3ce3dbe6c41b722bd94d5e6bdfcf680d91b72a8eb2db7eb4790e0307ac90b73f33e916bbe0554233a4bbb46f41b703a80b94f93861ebdc9c12f3b2cadbc083e957cea088a66cc0a0cda24aa256d3490ae71072d7dd6fea5e0bbbf61ce11998694e9b3e871f0b88a98ed1d428dcc01a25fc76b8ac775da901afffe752f2c4f3066bc211d0cb5921a55e8c44942fd8a1cb772c0681146a43b9b89d798ec45c9f385b7283893ebd5ac63aeab774541f00a170333ebd1a9a683403073722968bd5d1da1ca3a84865989142bf8ec5da4e154053c3185abf1f26e5033980d472b89a42a0714561afc4580295b7a829b9bd100a7f865e6a04bb5651183e5545cceb8111776e26d2f7baee72f1b45608431398f0130f368719c29ed67483269d4a7b5d9370342f7cd7d2cce73505d7109f683678f752438835c0c7675af9f0750c845847ef518bb59b4725c4545e76116546b3ff7f31fcf009f372b5d173089d140b0a77b6830b3f3eda91e7eb73d56f3031e54ba87caff50ce94fc1f1aaf6336852b00282b6fdfbaac0f970d601c5c192c00dce71d4fe159d7262800a8e57350deabfb32a4f40d4e55085effb93282898902ffbe783d419b40cf9c7279aa936e6d3c4761d7b3f1609e66a965acd2c73e7092b4a3bc848c0434dc93e85fd3e1e92e7d07b372622796d4ab2c63ab5667711941b0bf0a1f2d666ffeb303207376e5f78ca3f41387aa8b6ff0666361a47dbf352ce05c5e116e0b7cb3872c35b7dfee1393c55a9a24914c4ff27b5894dbd92d0dc143170aa7c2b68bd57e59578377e01aa833e9c5fd642d631be5cbad9a0fc4251d529e13e2b822bcf29292c7e5682986030f0d35b28c11b7c1f4c032fdee85c8c189c2ee111be0abd8f0ae5fe8b71ffe7612924cf28805a5f2ce47da61a37ea6c0acb977bef5fd7876d0c6498cca18226a9559d225da4826e2330224530ae0846f596d3ad271e44cfae919bf1a0194220f97e87160af3253ca688990bb375f6f0f9b0ecc617b663a2f81a8642201f38da1f870c4da9142974f317caca915de734a357974da736d3a0f46b63b4443ac3b0dc667e842b3183b1c6162ae98b9b8d501a3a628ff585432f23097d7d3cde57c924a82269896f56505c8b324211483cf6799018c20d0833fbe42aff1a22304b7b2ec4b2b61c1bffc0bffd9d3d91e13b21b502c4eac9eafe3c92d68b001f6dd7d3735c880801133d1a321add8276a996316053f019d24283ba4293df29bd2963aa2f88d04e5df990d794c410bd0f1ada3660688b78575e4111b687ee7e1b16cc32a3ea2d23318aa70d4bc16aeaba31e8462628978a2257980523f4a33ad254b902ceac29dedc65f8d6b79a156150e04b376ca1eb371b17dc750ea8338f3f1bd8b7037c67dac1c2876d13de2c5c03c2ef46a8916c0a6346869bf4fda621ff9f4896f7cda6d8229c876980f00e9becdcdaf3acb3fa52adef3e7d88fda0c420626f41c637a5a1960f6bbdb57dd699e123e7831350607b29dcbd1f9ed2886060a4201d71b0b63b3b6a52e6b22ed0558143d466771f66a59c731bdb00e1f4c4abf169f560f64b3f9370da0492d8f0c2dc12c0a5e9393daef8c8ee759d05764b7167d2d28709f6492ea731ab7fcbe19ccc8df587eba0234c79b6a6f8bd3a4c483b10c56d74fcc861bb2d900f6e61519f6a6d78916c951848b55d59c026783fc16d42a219370973c05b3dc3b751271482233ed0c19eed8d4b9ce71387e1ad8890e350d7bc60817113b76566f9698c5e4dc71987d382aaf8573aa949e4798866e8fd85e9989c45b3b9bef5a4b9cc2742d6d007e63e3ddb7acdf6676c25fb2ce1aea53efdd46233d9f545c31bd50611f9644a27635902b2fdcd5809a263c84bb006b929fe070a1fae198f5351a02769ad19ce47e8d36518fe6d620f1b475225e3149044f4b0ccf5a381d71024d1f13bdb70502941742fd38630b4e6affd1e00462da133ebf54e0ba2c70e4f193af0cf579793ae6e4c629fdbf351529325c66ee613cd17f9144c9e663f68698766e65a67ee3966427a6039e7824ca96a22e5f971710d4240ebfde49d296bf2779beaf3fab66af374026d37135602def8165b2040d1ab96e9004a7f3bdb452dbeb84bf26a97bbcd873824ebf9c86208771d8157fa6964935c3bcdbfce29e1e1a695a5e463112ad5cc0fc133dfd61146fad8ae6f62252b890aa4ea67ba4723ef4e13c0009e329ee0666a765d6ae50d22482a8d39a1288022ee66d57a9dcf8fdf76c631e497c3c99860a6a8762a115015ef56adcd8baca906eee0a11bf11109f978ac4750b1cff16b48a174c7484171059daddfa20ffbe2bf7b17bbd5752c302094657af4aa275198b6ff45be76dca3bb5eb81d792fb84bb3bbe00d28cb076da4495544a6c46757a17e7033b343f2b284448848eb1f03df936ba370ab697b0326be0cfbd6cc4d83cde83a252b8385e24a680491514f6c2e3dc60b1c6370320d447a77e23cbd1d5fa11ec4a07dcba591ec166be2983a95b8713afc34ed5db4f60207e58ed2f754d6ed24b8c0d60873873bb1cd0de5a5d063ccef030944f42b13e50e5bffc2f19563fc4aa99267a3472e37672fc148a1818366acd6fbe761224a742bb1a6db77684207f66101cdc1d868d9b3e04e98dd8549b3310cec5c2fd90704cfab8df0a45ba49f452ccc1bd9f788661f73d9290f56feff3faae54ebc9e149cea93cfc9064a2346188ddaa9a2cd35e2846ca13afb53515f9fc11ef3c7f62ff56b8611ca92ee00349720f90b963d1688fb9b7b37cb54bc5c524b65d7452b02d76645b4245b7f3d21179b76f6ec2e61b313cc0d42046d817fb33635c7f291d50b8568c3e8e8d31a8c8a389ae856c194906a40d6c8408a2558b56b6306bd241f19530cb64a76740bfaeb9b362c7f9a6e5024eddef053f49727c912ad5e0f6465fec79cc0f89c10d3e7df5c3a1c9af6fa1bfb597c40a49d2c4d0c8518ce42e864dcffb3122be06d5f1aaed1c2f5bfd33ab191ad099144ec0bae33b420dfe7b3ba1f6f69d4b1b9f86b15c2f240bc32412001dd7e1af025cfe4bf342f8476630dd6d689df74776b9e476559a6084023c9b05cb767cd60f1867d01bcedf86869229caca8b64148fec4fbc1f648373905281c0f5c19539d674bf4ff15383cfa2c90268f2532ec2cf7bcbff4fdc702be18b630a08535e7b4204e3ea848c360ec132c5ef6188eb0b7695606486f08e4bc94965d33b392d1f3a12496c67c976165ffc475ede5bef79b3fa82b93c8e91eb6f96fa863a1abe7d55e560767ae6c46afa782b11c5d20c49b4de7b28f51ee4e20e3e1beddf368ee1064ba4e99e2fbbfba5ea83b7483dd96395e043e4b01ad02d473e4d48b48d25b5cc198de8a16d3cf10aaa5d54297108ff0f61bc92056f49a29537eef6bdc6d4f7a922dc54a28cc3734e756262e5ddd310c8589cc2f68d69727bd81454df64b2825f8fef4f43c559d69726e4dec0e5e4344d9439e6372bebbca30d20c509cf75f2ede48782ccee29467121c3cdbaada19f7f91bdb3a1bd14416e1a50645f30e5beb83f6abefafd305cf4c3d432b44550efe0e43845726137d03a9490ee352c9c9bc1acaa5a6097e0cbcb2b49bb8b9d55d74d1a1593df76592f793064d617950e6b2ffebf47def2ec053e20c470ea955c043448b771f03155322ce0935d4d86a62c908df5775b597b630c2b8fd3436c751d6f37f46d8d27dd4167bf338a5b55a95e6b3835cf3a674a3b008930e27880f2cd1c0cd93ca254cf04eab09060a307610d3e59d338242f452999dc96db6f8ad65eb8b661594a652e8d23bd1621177da2de5a9b1c6c8b481a4ea10226e350118771883580993c5ff4b5d4cad2fdf8917ff8820d4e1d227938ea37dfae16bca61b91917395e4b1f1faed6a8322e1a49c5ca3fc7ddcb1f59a047a714c88b80257775b789db6c0595a82339890c89fa9301c5f0747b4531352e7bd63645e5b7a9a412b871068cabee30a711e4ceb3e7d21d62c4b0c6a07e66245fbf87b9957294658dee7fbfe0e244e1ece90a22acdc449119e0818333bfe27401664f2cff5e639911dc1f1f17b67eaa444ad71ffcb0c718baf30b9a35c36033e3c3dae1e12e64bcf5c58eef2725ecb53b9d2fb106afd37fd47b27d83532267bec97c16c25533af5116ecba82c85709125468b4c97611fe6cdcaa5da0ff880560d477a7755e5ef1e138be9e7fcd865b76618cef4bdb7076c7538b161e22077850ff60311efc6e00908e593ea0548d6c1cce2125d56cdd919ec4b46ec8377075644862cce508bf78ac25fb9840d23e5f0d805386a1681db4dad6ea68ecf985b331195a7d6e89848d656af3412eeb7fff0e8bcb842a682af08c2e0f0f9335b9e82a7c92e11aa6ec1ec156bd09c00bc5fba4b41648e0f8870f05111d52b9f90c55aa129164d4de121438f282415da69c35f87babf5e0052182d453ca6c4b511248b67070f62d8b686248d9ca454c83d29032b76da18535a7f4b7fe5b1736d0654ad191d9966cfb00593c32906aef74857799eba910730fdcdadbe2a3e132dd21d26d1e80f8870ce2861cdb139fcb2d276647c894aa31d0b4084f4d71f36db935d09776ebbcd2c45b6243e3606452c077d77c3baff092c103d00ecfe82d77c584d396b5aab70145f6b4ef567a15c8129d9f02880679eefd85615607c01705cb1a58adae827a69f179a426620c6b0229597a6905e42c7a671a0485e777425e5165b8e9456a799ae60e45811ea2a5f34526b3d594ffb5c3bf4249c1bdd399bab5a5ca7616009e01e250fe6a7eaed31313538e8843a359047d0f2e73403a379471f884f35bdf0a505a9f62ae5c63333609351db9d4bd5b35aaac3f8e94e5344d33e6188b2b3306f9ae7c00d29efa5a265a1f831961330463304412f8444bc4a6ed9bc58efedd79065a496ef89cd3945c9ac8c6171b907fc3947e6d354c94b7fb013065a38477b2bc171c8465a73b6366cb85888a6971fc27cffb59aaf661e4b8752736a0f9527246c57055e6fa8a6af6cecf9727fe69732e124463909ab41a145118fe74792f7bd74dee669a15a53fe58b2790ba399ecd55da6841f8b1782a8d09a1aa79c9370329e968aa93df251896ebbe81860a6b40e57877ad0a368d6add64ba8bfb3761e5bd8238ef6ebd56146cf914b34aca9ca1061e972ad555e69acd98c785a8e2c012e3890b74986781682314700610bedf09727a4a2c91bd6cf668eff15f994bb6d70221c96e954b9da640122e8acda17413ff80bd8211f0f1b35333b0c996aac608e276447c047b85a86a43", 0xf00}, {&(0x7f0000002880)="3904ca86f1a4b8bc3eb21a1a63", 0xd}, {&(0x7f00000028c0)="204444191e8a8a7a24f53f271c8d9b53f5e24767b76b855b2c34df1421e71d8f501720ab6565df717d1be6cd524f2fb84d68630d3b39217cd7ff073df3047cc0ffc31020ca9097e80a1e395610dfb8574627ba86fe7ecfacd35b358179a15be53fbce1796810bbe5ef6e6fde7ea2e72879a21d3f8d0be8a3863dcf41123a8117389bff8e35829f7104e5026badb1e653a0a3f07fc93fbc01b89f60a695797936437c889dd1aa7ea49c6fbae707180cfbff9b9ae1fbc1bb6f060c4ef265d18cfac1903824e1a82070812940cb790a5265b8ba1ef3672ecb02d89e40c4f61b9efe557ebefccf34da48827d5251709927", 0xef}, {0x0}, {&(0x7f0000002a40)="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", 0x1000}], 0x5, &(0x7f0000003ac0)=[@init={0x18, 0x84, 0x0, {0x2, 0x3, 0x2, 0x3}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}], 0x30, 0x4000800}, {&(0x7f0000003b00)=@in6={0xa, 0x4e24, 0x6c, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000003d40)=[{&(0x7f0000003b40)="5d0723555608e32ef435ec90a32c6e34b7ecc7eef4b3009934efa2dc6be18cf71f0533f0b99adcdb7c00d705ec526eb6140e67dd04c9677077124f80b0cb4324858c32cb1bdcf8d066d0419a08bce6823e143a9644c67e62e7b2719d339ad740c2e910e9e28015a5f73cbb55699556aa070c61c4b5ac742128c963370cfaaab924c8f4e81f52c3b467e5bc4c91ddd3431b915d6daf2230dfe2951441b2046e60ac1207c7600f34eac8b070438ec7bbf0eee97e3b8d811276764d2c3a399762f6505bf5", 0xc3}, {&(0x7f0000003c40)="3dd9974ae746566b871f06ee7d19680ea090a62469328db6513ec04276779ea48d69207e1c79827449eee83de8d3492510e3eb448610c69814af9a5b30bb022b435854b68128c18021fa376d152d3b92fc9d99b555059807d75a23a012bbd26b5f3124383a7ece386ec7a08a1e1abda3f35fd41a89a571a6bfd449e5760441e8a43e238b47540647812d4c3da099729f361b", 0x92}, {&(0x7f0000003d00)="95868ee5a3e911", 0x7}], 0x3, &(0x7f0000003d80), 0x0, 0xd5}, {&(0x7f0000003e00)=@in6={0xa, 0x4e22, 0x9, @mcast2, 0x7}, 0x1c, &(0x7f0000003f40)=[{&(0x7f0000003e80)="cce8b9b67ded87613971fbb844535ae4148768d7dddd8ee850c2a5d583e3a0949f27d8e5764d0ec44927121e99d4a80b98e647903d21286ad65149b12e7cebeac0a4c7f7b1a654404419f8c9871653216c21dad090947136edac5f54a2e95818b9725d87c75ec0ef235eb6b24125099e65d250810db18a4cbd0766dbf77b3b8a23b43a7008bcfc39b2dda5e10d5f1fe9f6a6a2f0041234e4d4257597ccdf29", 0x9f}], 0x1, &(0x7f0000004080)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0xb7f}}, @sndrcv={0x30, 0x84, 0x1, {0xf69, 0x9da, 0x8000, 0x80000001, 0x0, 0xff6, 0x2}}], 0x48, 0x4000}, {&(0x7f0000004100)=@in6={0xa, 0x4e21, 0x4c63e1ee, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, 0x7}, 0x1c, &(0x7f0000004200)=[{&(0x7f0000004140)="4cbc452f3d9090045753e0cad483b4157cc6f8c04c065afeedf4c6f49b884322595c45faea200cdf0fe4", 0x2a}, {&(0x7f0000004180)="2713538ae962885759e6779cc150d5c73b8b9890524ae6cc7bc82de8de0d54230f6352e461e543f05bfaddbe8aeb6d1c332a56d2a4b2f55bf29108825aaccbf784da3dc249053eb68b1103c3bffd7d81e228d456532b11bd834ce63df2145199215cc7541f", 0x65}], 0x2, &(0x7f00000042c0)=[@sndinfo={0x20, 0x84, 0x2, {0x9a, 0x204, 0x4, 0x2}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}, @init={0x18, 0x84, 0x0, {0xd, 0x920, 0xb, 0x3}}, @dstaddrv6={0x20, 0x84, 0x8, @private2}, @init={0x18, 0x84, 0x0, {0x7, 0x9, 0x5}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x6}}, @authinfo={0x18, 0x84, 0x6, {0xfff}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}], 0xe0, 0x800}, {&(0x7f00000043c0)=@in={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000004440)=[{&(0x7f0000004400)="d4ffb1863f0319d5672538969072fa6e535fd65e01ffea3e0471b0719feaf9491733872baff647058c0cd5192e00395f1b06ad5c21594b3dddbe", 0x3a}], 0x1, &(0x7f0000004480), 0x0, 0x4000}], 0x7, 0x20000051) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x6, 0x4}, 0x20) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f00000001c0)=""/77, &(0x7f0000000100)=0x4d) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r8, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x1000, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x2, 0x3, 0x2c, 0x65, 0x0, 0x52, 0x6, 0x0, @private=0xa010102, @broadcast, {[@rr={0x7, 0x3, 0xb}]}}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x10, 0x0, 0x1}}}}, 0x3a) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r10, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x11) 19.461300735s ago: executing program 4 (id=2748): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000300), 0x8) r4 = socket(0x25, 0x80805, 0x5) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r5}, 0x20) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x5, 0xcf) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000175ea8bffcf4f7376eec6979e26e179bc400bed3d2a9e90dca335b83f5", @ANYRES16=r7], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) 17.510324228s ago: executing program 3 (id=2751): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) write$tun(0xffffffffffffffff, 0x0, 0x3e) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5452, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x11, 0x6, @broadcast}, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000080)='veth0_to_bond\x00') sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0xffea, &(0x7f00000001c0)={&(0x7f0000001b00)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) unshare(0x22020600) unshare(0x2a020400) sendmsg$netlink(r5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x30}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x600, 0xe8, 0x320, 0x440, 0x440, 0xe8, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, &(0x7f0000000000), {[{{@ipv6={@local, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0xff000000, 0xa348fa5a8cffd889], 'vcan0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x4, 0x1, 0x3, 0x6a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x644, 0x7f, @ipv6=@mcast2, 0x4e22}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x101, 0xffffffff, 0xffffffff, 0xffffffff], [0xffff7f, 0xff000000, 0x0, 0xff], 'veth0_vlan\x00', '\x00', {}, {0xff}, 0x3a, 0xf7, 0x4, 0x18}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x28, 0x1, 0x7fff}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3d}, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xa02529c283c5d53b, 0xff000000, 0xffffffff], [0xffffffff, 0xff0000ff, 0xffffff00], 'vlan0\x00', 'veth1\x00', {}, {0xff}, 0x84, 0x4, 0x1, 0x14}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x5, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xd}, @private0, [0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 'nicvf0\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x2c, 0xfb, 0x4}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x32}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [0x0, 0x0, 0x1fffffffe], [0xff000000, 0xffffffff, 0xffffff00, 0xffffff00], 'veth1_to_hsr\x00', 'erspan0\x00', {}, {0xff}, 0x87, 0x9, 0x3, 0x44}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x2c, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) getsockopt$sock_buf(r6, 0x1, 0x1f, 0x0, &(0x7f0000001000)=0x1e) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r8 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r9, 0x5452, &(0x7f0000000000)=0xf) 17.462673297s ago: executing program 1 (id=2752): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) shutdown(r0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0x2d, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xa0, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee5233188", 0x0, 0x8000}, 0x50) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x60, 0x4, 0xfd}]}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) socket$inet(0x2, 0x2, 0x0) write(r5, &(0x7f0000000040)="05000000010000", 0x7) 16.503857505s ago: executing program 1 (id=2753): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000300), 0x8) r4 = socket(0x25, 0x80805, 0x5) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r5}, 0x20) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x5, 0xcf) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000175ea8bffcf4f7376eec6979e26e179bc400bed3d2a9e90dca335b83f56d3a246a28", @ANYRES16=r7], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008800c00024000000000000080010c00024000000000000000040c00014000000000000000000c00014000000000000000014c000480080002404c82f47c080001400000000008000140000000010800014000000003080002404f32945f080001400000000308000140000000020800024019885f270800014000000003fd000c00a03ac330bf11a2145946e6d945deece8485ee69dbc29a8dd5dbce127f829a3adf5c4171b4bedbbc9b913a67b9ee679020f0200000064419faae0136b893d91d95b1174f115798a1abfdc06983fb83f2116a85a00dd35cdf9d8f81683e5e2ebcca132a712e0be44c12c02ac92fbbb86ed717ce0cbd6a0134f899e23ca6d2f063d26be86555cc0e9c7a25d77e6c0f4217794be96b5d797e3116d874c3adfb096e0567ec28bd1e4d8d6713109695f1f3a877d89d20e19304501aeb851d14c4f9b2d769d554fe5308810d19bb040c1977bce50b894f2c45a1f0e80c8256b6dcb072f9d91d94a67bba9f62eb2f192fa4b3786d9a774b99aa332dfbb000000080007006e6174002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000014000000110001"], 0x25c}}, 0x0) 13.203180845s ago: executing program 4 (id=2762): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000300), 0x8) r4 = socket(0x25, 0x80805, 0x5) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r5}, 0x20) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x5, 0xcf) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES16=r7], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) 11.65206033s ago: executing program 3 (id=2766): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)}], 0x1}}], 0x2, 0x24000045) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feff", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138a"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[r3, r3, 0xffffffffffffffff], &(0x7f0000000dc0), 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r5, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)={0x114, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0xcc, 0x51, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "fa06ba7b11"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "52de00e117a7a8bb12d1321188"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_SEQ={0xd, 0x4, "147a3a26423bfae265"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "21dc7a8c3b178f6374b4c0c9d6"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "7884a30641869be29c535d13c3"}]}, {0x4}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "d7f78bf48e6d00033b3312d710"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x87a03}]}]}]}, 0x114}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000000580)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void}, 0x26) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f0000000240)=@broadcast, &(0x7f0000000500)=ANY=[], 0x28) 11.164388001s ago: executing program 1 (id=2767): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000100)=0xffff0080) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000000)=0x8) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)="88b0bae0e826425499f4d4ddb99bbe211a", 0x11}, 0x1, 0x0, 0x0, 0x8004}, 0x24044044) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000080001"], 0xe0}}, 0x0) r5 = socket(0x28, 0x5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x80, 0x20, 0x8, 0x2, {{0x45, 0x4, 0x1, 0x8, 0x114, 0x68, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ssrr={0x89, 0x7, 0x51, [@empty]}, @noop, @cipso={0x86, 0x62, 0x1, [{0x5, 0xd, "7e0d4edd7ff9c6fbaccea5"}, {0x0, 0x12, "ce1372b71c6978d0546012f0965492c9"}, {0x2, 0xf, "9d7f654e047faffc6ecb48c0d8"}, {0x5, 0x7, "106e759ccc"}, {0x5, 0xa, "8684b1b7ee80b2bb"}, {0x6, 0xb, "51e9c746c45f44325e"}, {0x7, 0x12, "3073da82ff4d8427d2bb9582ab72611f"}]}, @timestamp_addr={0x44, 0x3c, 0xe5, 0x1, 0xd, [{@local, 0x6f2}, {@local, 0x6}, {@empty, 0x700000}, {@local, 0xa}, {@multicast2, 0x5}, {@local, 0x1ff}, {@remote, 0x2}]}, @noop, @ssrr={0x89, 0x13, 0xf6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @timestamp={0x44, 0x24, 0xc5, 0x0, 0x0, [0x0, 0xff1, 0x10, 0x2, 0x9, 0x5, 0x6, 0xfff]}, @ssrr={0x89, 0x7, 0x81, [@empty]}, @end, @timestamp={0x44, 0x18, 0xe9, 0x0, 0x7, [0x4, 0x0, 0x5, 0x5, 0x9]}]}}}}}) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff020002000000", 0x1b) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40101}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 10.942480733s ago: executing program 1 (id=2768): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)}], 0x1}}], 0x2, 0x24000045) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r2 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feff", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138a"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000d80), &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r4, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)={0x114, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0xcc, 0x51, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "fa06ba7b11"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "52de00e117a7a8bb12d1321188"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_SEQ={0xd, 0x4, "147a3a26423bfae265"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "21dc7a8c3b178f6374b4c0c9d6"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "7884a30641869be29c535d13c3"}]}, {0x4}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "d7f78bf48e6d00033b3312d710"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x87a03}]}]}]}, 0x114}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000000580)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void}, 0x26) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f0000000240)=@broadcast, &(0x7f0000000500)=ANY=[], 0x28) 10.504272819s ago: executing program 3 (id=2769): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)}], 0x1}}], 0x2, 0x24000045) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000d80)=[r3, r3, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r5, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)={0x114, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0xcc, 0x51, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "fa06ba7b11"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "52de00e117a7a8bb12d1321188"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_SEQ={0xd, 0x4, "147a3a26423bfae265"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "21dc7a8c3b178f6374b4c0c9d6"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "7884a30641869be29c535d13c3"}]}, {0x4}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "d7f78bf48e6d00033b3312d710"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x87a03}]}]}]}, 0x114}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000000580)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void}, 0x26) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f0000000240)=@broadcast, &(0x7f0000000500)=ANY=[], 0x28) 10.33160439s ago: executing program 2 (id=2770): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000100)=0xffff0080) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000000)=0x8) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)="88b0bae0e826425499f4d4ddb99bbe211a", 0x11}, 0x1, 0x0, 0x0, 0x8004}, 0x24044044) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000080001"], 0xe0}}, 0x0) r5 = socket(0x28, 0x5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x80, 0x20, 0x8, 0x2, {{0x45, 0x4, 0x1, 0x8, 0x114, 0x68, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ssrr={0x89, 0x7, 0x51, [@empty]}, @noop, @cipso={0x86, 0x62, 0x1, [{0x5, 0xd, "7e0d4edd7ff9c6fbaccea5"}, {0x0, 0x12, "ce1372b71c6978d0546012f0965492c9"}, {0x2, 0xf, "9d7f654e047faffc6ecb48c0d8"}, {0x5, 0x7, "106e759ccc"}, {0x5, 0xa, "8684b1b7ee80b2bb"}, {0x6, 0xb, "51e9c746c45f44325e"}, {0x7, 0x12, "3073da82ff4d8427d2bb9582ab72611f"}]}, @timestamp_addr={0x44, 0x3c, 0xe5, 0x1, 0xd, [{@local, 0x6f2}, {@local, 0x6}, {@empty, 0x700000}, {@local, 0xa}, {@multicast2, 0x5}, {@local, 0x1ff}, {@remote, 0x2}]}, @noop, @ssrr={0x89, 0x13, 0xf6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @timestamp={0x44, 0x24, 0xc5, 0x0, 0x0, [0x0, 0xff1, 0x10, 0x2, 0x9, 0x5, 0x6, 0xfff]}, @ssrr={0x89, 0x7, 0x81, [@empty]}, @end, @timestamp={0x44, 0x18, 0xe9, 0x0, 0x7, [0x4, 0x0, 0x5, 0x5, 0x9]}]}}}}}) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40101}}, 0x20}}, 0x0) 10.02401031s ago: executing program 1 (id=2771): mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c00000000000000", @ANYBLOB="ff5aa60e942f7e22ac2975d519fc3b96d7f99b5b54d0744297a39ac23d76df3129a825cc88883049a3b2ed47ba073f390acce2b9b412a70e23e50500ff25e40de8", @ANYRES32, @ANYRES64=0x0], 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x448c1}, 0x24004050) unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001014000806bd7000fddbdf2508004c0000000000080001000100000008000300040000000800150000"], 0x30}, 0x1, 0x0, 0x0, 0x48}, 0x4000) r1 = socket$inet6(0xa, 0x3, 0xc) sendmmsg$inet6(r1, &(0x7f0000001a00)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xa7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf}, 0x1c, 0x0}}], 0x1, 0x90) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) socket$kcm(0x28, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) 9.942140631s ago: executing program 2 (id=2772): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) write$tun(0xffffffffffffffff, 0x0, 0x3e) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5452, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x11, 0x6, @broadcast}, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000080)='veth0_to_bond\x00') sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0xffea, &(0x7f00000001c0)={&(0x7f0000001b00)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) unshare(0x22020600) unshare(0x2a020400) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000140)=ANY=[@ANYRES16=r4, @ANYRESOCT=r2], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x30}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x600, 0xe8, 0x320, 0x440, 0x440, 0xe8, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, &(0x7f0000000000), {[{{@ipv6={@local, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0xff000000, 0xa348fa5a8cffd889], 'vcan0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x4, 0x1, 0x3, 0x6a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x644, 0x7f, @ipv6=@mcast2, 0x4e22}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x101, 0xffffffff, 0xffffffff, 0xffffffff], [0xffff7f, 0xff000000, 0x0, 0xff], 'veth0_vlan\x00', '\x00', {}, {0xff}, 0x3a, 0xf7, 0x4, 0x18}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x28, 0x1, 0x7fff}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3d}, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xa02529c283c5d53b, 0xff000000, 0xffffffff], [0xffffffff, 0xff0000ff, 0xffffff00], 'vlan0\x00', 'veth1\x00', {}, {0xff}, 0x84, 0x4, 0x1, 0x14}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x5, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xd}, @private0, [0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 'nicvf0\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x2c, 0xfb, 0x4}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x32}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [0x0, 0x0, 0x1fffffffe], [0xff000000, 0xffffffff, 0xffffff00, 0xffffff00], 'veth1_to_hsr\x00', 'erspan0\x00', {}, {0xff}, 0x87, 0x9, 0x3, 0x44}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x2c, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) getsockopt$sock_buf(r6, 0x1, 0x1f, 0x0, &(0x7f0000001000)=0x1e) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r8 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r9, 0x5452, &(0x7f0000000000)=0xf) 9.47598652s ago: executing program 3 (id=2773): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1c, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0xb, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) pipe(&(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) unshare(0x62040200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000000}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r8, 0x1, 0x0, 0x0, {{}, {0x0, 0x4102}}}, 0x1c}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet6_tcp_buf(r9, 0x6, 0x12, 0x0, &(0x7f00000000c0)) 9.034886821s ago: executing program 4 (id=2774): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1c, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0xb, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) pipe(&(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) unshare(0x62040200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000000}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r8, 0x1, 0x0, 0x0, {{}, {0x0, 0x4102}}}, 0x1c}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet6_tcp_buf(r9, 0x6, 0x12, 0x0, &(0x7f00000000c0)) 7.950749192s ago: executing program 2 (id=2776): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) listen(0xffffffffffffffff, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r1 = socket$inet(0x2, 0x801, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 7.880287433s ago: executing program 2 (id=2777): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2c, r2, 0x801, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r4}, @CGW_DST_IF={0x8, 0xa, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7ae69, 0x70bd26, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x4}}, 0x1c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x138}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b0f, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003200)={&(0x7f0000000200)=@newtaction={0x29c8, 0x30, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [{0x28d8, 0x1, [@m_mpls={0x8c, 0xb, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x96e59}]}, {0x57, 0x6, "bdbd2dfae1dd08eb5bf6db47fd51cbc9d885827dcf11c0e7d1d2a0f43a938d6955011bb195caff5c8824e12d5a72e187453df243d9cd73ca71b8464deecdd67a3171dbe224ba7d8b08ad692a162345345e9dfa"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0x94, 0x1b, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x8, 0x20000000, 0xe0000000, 0x7}, 0x1, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x2, 0x0, 0x3, 0x4}, 0x1, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x10, 0xffffffffffffffff, 0x4, 0x40}, 0x4, r4}}]}, {0x8, 0x6, "afc8366a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x60, 0x1d, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00'}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x34}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x10000}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0xa4, 0x10, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xae}]}, {0x65, 0x6, "c05305b9ea3c241eb14227b16a9880cf45f44d532b98b72d7ded744071f1ea40fd1525ecfc37a2f65b7449d2b49036710afb54f41870d1a6bde46dcea4bb6c23a3938bb77767ecaf5d30ab32882c78753ad718f17faf92c982449f868aa0a74e45"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_police={0x152c, 0x6, 0x0, 0x0, {{0xb}, {0x1500, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xceb, 0x3, 0x41, 0x7, 0x101, 0x0, 0x19f794b6, 0xc, 0xc, 0x4c15, 0x40, 0x10000, 0xfffffff8, 0x9, 0x32, 0x6, 0x800, 0x0, 0x3, 0x7, 0xed20, 0x8, 0x7, 0x9, 0x7f, 0x4, 0x3, 0x3, 0xffffffff, 0xa, 0xb, 0x8000, 0x9be, 0x4, 0x5, 0x3, 0x4cbc, 0x401, 0xce, 0x5, 0x2, 0x2, 0x7, 0x6, 0x4, 0xa296, 0x101, 0x7, 0x5, 0xfffff27b, 0xc3, 0x1, 0x80000001, 0x9, 0x0, 0x401, 0x7ff, 0x7, 0xc, 0x3, 0x3, 0x81, 0x101, 0x28, 0x315, 0x38, 0x4, 0x8, 0x9, 0xfff, 0x3f, 0x8, 0x4, 0x6, 0x10000, 0x9, 0x2e6, 0x2, 0xb, 0x5, 0x7, 0xfff, 0x9, 0x0, 0x8000, 0x40000000, 0x6, 0x1, 0x3, 0x7fff, 0x1, 0x8, 0x8, 0x2, 0x1000, 0x1, 0x6, 0x0, 0x7078f726, 0x80000000, 0x7fe0000, 0xf15, 0x3, 0x3, 0x37, 0x3, 0x5, 0x8, 0x9, 0x6, 0xffff, 0x8001, 0x7ff, 0x4, 0x1, 0x1000, 0xc, 0x6, 0x3ff, 0xd1e, 0x9, 0x12feb0a0, 0x1, 0xb, 0x10000, 0x5, 0x0, 0x100, 0xf, 0x0, 0x101, 0x8, 0x9, 0xffff8001, 0xa, 0x3877f8e9, 0xd, 0x4, 0x8, 0x0, 0xfffffff7, 0x6, 0x101, 0x1, 0xff0, 0x101, 0xb4, 0x8, 0x1200, 0x10, 0xed37, 0x3, 0x80000000, 0x80000000, 0xaa, 0x1000, 0xc5, 0x53, 0x2, 0x3, 0xaae, 0x0, 0x8, 0x0, 0x10, 0x400, 0xa, 0x1, 0x6, 0x2, 0x87, 0x1, 0x1, 0x9, 0x2, 0x7, 0x5, 0x2, 0x5, 0x3, 0x7, 0x5, 0x101, 0x6, 0x1ff, 0x8, 0x18d, 0x9, 0x6, 0x8, 0x4, 0x10000, 0x6, 0xe9b, 0x6, 0xfffffc00, 0x3, 0x317, 0x7, 0x10001, 0x4, 0x401, 0x7, 0x7, 0x3, 0x6, 0x8f0, 0x5, 0x6, 0x17a4, 0x6f, 0x0, 0xa, 0x6, 0xa, 0x0, 0x4, 0x3, 0x7fff, 0xc, 0x5, 0xffff, 0x1, 0x10, 0x5, 0x8, 0xff, 0x1, 0x8, 0x0, 0x0, 0xc, 0x2, 0x7fffffff, 0x4, 0x3ff, 0x1, 0x4, 0x4, 0x2b21, 0x0, 0xe3e, 0x9, 0x0, 0x7, 0x867, 0x2, 0x5, 0x1094, 0x1, 0x7fff, 0x7, 0x8, 0x3, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x98, 0x6, 0x7f, 0x8, 0x9, 0xfffffc01, 0x8, 0x4, 0x0, 0x2, 0x5, 0x2, 0x1, 0x4, 0x4, 0x401, 0x400, 0x8, 0xf, 0xb, 0x7ff, 0x4, 0x401, 0x7, 0x101, 0x7fff, 0x1, 0x7eb9, 0x100, 0xfff, 0x7e6, 0x1, 0x81, 0x2, 0x8, 0x1, 0x2e7, 0x88, 0xd01, 0x1, 0x4d2b, 0x7c9, 0x0, 0x0, 0x90, 0x7fff, 0x8000, 0xffff, 0x7ff, 0x2, 0x1ff, 0x9, 0x4, 0x2, 0x1, 0xd978, 0x10001, 0x4, 0x8, 0x35c, 0x5, 0x1, 0x2, 0x87, 0x2, 0x6, 0x5, 0x9, 0x1, 0x7, 0x5, 0xfff, 0x2, 0x9, 0xff0, 0x0, 0x3, 0x1, 0x0, 0x5, 0x7, 0xa2c, 0x8, 0x0, 0x800, 0x7, 0x9, 0x5, 0x0, 0x8, 0x0, 0x8, 0x8, 0x4, 0x9, 0x2, 0x6, 0xe4f4, 0x1, 0x6, 0x9, 0x4, 0x97dd, 0x8000, 0x81, 0xfffffffd, 0x8, 0x7, 0x422c, 0x44ad5936, 0xfffffffc, 0x9, 0x1, 0xcde, 0x25b, 0xfffffffc, 0x8001, 0x9, 0x1ff, 0x91, 0x4, 0xef, 0x0, 0x1000, 0x8001, 0x10000, 0x0, 0x2, 0xff, 0x3, 0xc9, 0x1ff, 0xffffff84, 0x4, 0x80000000, 0x7fffffff, 0xffff4d98, 0x0, 0x2, 0x7fff, 0x3, 0x0, 0x6, 0x3, 0xfa, 0xffffff7f, 0x6, 0x5, 0x1, 0x7, 0xe44, 0x675, 0x9, 0xcef1ae5, 0x6, 0x80000001, 0xb9, 0x94, 0x7ff, 0x27, 0x100, 0x46, 0x73, 0x2, 0x9, 0xc, 0x50, 0x0, 0x80000001, 0x10, 0x2, 0x80, 0x8, 0xa, 0x7, 0xc8e, 0x6, 0xdd35, 0x5, 0x3, 0x3, 0x1, 0x100, 0xdc07, 0x76a, 0x1, 0x100, 0x4, 0x2, 0x9, 0x0, 0x3ff, 0x0, 0x400, 0x2, 0xfffffff9, 0x10001, 0x0, 0x8, 0x0, 0x6, 0x8, 0x40, 0x59d, 0x8000, 0x2, 0x4, 0xf6, 0x9, 0x2, 0x74, 0x4, 0x0, 0x0, 0x200, 0x2, 0x2, 0x9, 0x7fffffff, 0x3, 0x6b, 0x6, 0x2, 0x9, 0x246, 0x6, 0xffffffff, 0x8, 0x4, 0xfffffffe, 0xcd5, 0xf, 0xdd, 0x2b, 0x7, 0x10f9, 0x2, 0xff, 0x0, 0xe7c1, 0x9, 0x38, 0x6, 0x8000, 0x3, 0xcb, 0x2, 0x8, 0x80000001, 0x26064240, 0x4, 0x5, 0x10, 0x10001, 0x6]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x30cb2c27}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0xfffffff4, 0x80000000, 0x34, 0xfffffff8, 0x100, 0x80000001, 0x8, 0x1, 0x80000000, 0x6, 0x24, 0xca4, 0xff, 0x3b, 0x54b6, 0x9, 0x0, 0x3, 0x7, 0x3, 0x7, 0x8, 0x400, 0x1, 0xfffffffb, 0x40, 0x5, 0x3, 0x99, 0x2, 0x2, 0x6, 0x1, 0x3, 0x8, 0x8, 0x7fff, 0x10001, 0x8, 0x9, 0x80000000, 0x6, 0x2, 0x200, 0x1, 0x6f6036bb, 0x2, 0x5, 0xfffffff7, 0x3, 0x6, 0x4800, 0x3ff, 0x100, 0x334a608f, 0xc, 0x7, 0x100, 0x10001, 0x80d, 0x3, 0x1, 0x1, 0x54144303, 0xf, 0x8, 0x2, 0xf7d, 0x89c, 0x60, 0xbc46, 0x6, 0x8, 0xeba, 0x7, 0x2, 0x0, 0xa, 0x5, 0xb, 0x0, 0x5, 0x7fffffff, 0x2, 0x2, 0xfffffeff, 0x9, 0x401, 0x41bf, 0x80000001, 0x8001, 0x101, 0x4, 0x4, 0x1, 0x6, 0x5, 0x80000000, 0x2, 0x9, 0xfffffffc, 0x8001, 0x1, 0x7fff, 0xffffffdf, 0x0, 0x9, 0x800, 0x5, 0xd, 0xfffffff8, 0xc, 0x4, 0x2, 0x5, 0x200, 0xb, 0x8, 0x7fffffff, 0x0, 0xffffff9e, 0xd, 0xfff, 0x1ff, 0x8, 0xf64b, 0x5, 0x800, 0xe, 0xfffffc00, 0x0, 0x9, 0x739, 0xf, 0x3, 0x5, 0x20000000, 0x10000, 0x2, 0x4000800, 0x4, 0x2, 0xef7b, 0xfffffffe, 0x0, 0x6, 0x8, 0x6, 0x2, 0x8, 0x6, 0x401, 0x2, 0x1, 0x10001, 0xf42, 0x564e, 0x7, 0x5, 0x7, 0x6, 0x560, 0x5, 0x2eb, 0x7ff, 0x3, 0x9, 0x90, 0x9, 0x7c6, 0x0, 0x6, 0xc, 0x7fffffff, 0x8, 0x2, 0x22a, 0x4, 0x9, 0x3, 0xf5, 0x4, 0x2, 0xf, 0x6, 0x9, 0x0, 0xab, 0x5, 0x374, 0x3, 0x1, 0x1, 0x4, 0x7, 0x3, 0x6, 0x0, 0x61, 0x5, 0x3, 0x0, 0x4, 0x3, 0x4, 0x0, 0x8, 0x400, 0xfffffff8, 0xfd7, 0x9, 0x8, 0x2, 0x4991c69b, 0x9, 0x3, 0x3, 0x22000000, 0x3, 0x8, 0x3ed72955, 0x4, 0x2733, 0x4, 0xea, 0x4, 0x4, 0x3, 0x8, 0x10, 0x1, 0xff8000, 0x6, 0xc, 0x12, 0x5, 0x8, 0x306, 0x0, 0x5, 0x8000, 0x0, 0x3, 0x5, 0x9, 0x2, 0xb, 0xc, 0x8, 0x8, 0x10001, 0x9, 0xff, 0x5, 0x7fffffff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x2, 0x2, 0x8, 0xfffffff7, {0xf7, 0x0, 0x9, 0x7f, 0x5, 0x834}, {0xc0, 0x1, 0x2, 0xc2, 0x4, 0xbf}, 0x0, 0x2}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xb}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x42}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0xffff, 0x8001, 0x7, 0x80000000, 0x7, 0x7, 0xe7, 0xfffffeff, 0x1, 0x0, 0xfe8a, 0x3, 0x58f0, 0x4, 0x0, 0xffff7093, 0x3, 0xc, 0x7, 0x8001, 0xff, 0x6, 0xea84, 0xec4, 0xa3a0, 0x7, 0xea6, 0x401, 0x9, 0x7, 0x8, 0x0, 0xdc8, 0x1, 0x5, 0x1a, 0xf2, 0x8, 0x2, 0x24, 0x6, 0x87, 0x2, 0x1ff, 0xde1, 0x7fff, 0x1dc42c7b, 0x3, 0x1, 0x48, 0x1, 0x6, 0x3, 0x4, 0x9, 0x3, 0x5, 0x4, 0x3, 0xc7e4, 0x3, 0x8, 0x1, 0x7fff, 0x3d758685, 0x0, 0x4, 0x1ff, 0xfff, 0x7, 0x0, 0x6e, 0x6, 0x5, 0xfffff801, 0x40, 0x765a, 0xe91d, 0x2, 0x4, 0x7f, 0xd, 0x8, 0xa00, 0x9, 0xfffffff2, 0x5a, 0x2, 0x1, 0x7ff, 0x9, 0x7, 0x9, 0x5, 0xd3ed, 0x1, 0x9, 0x401, 0x10001, 0x0, 0x80000000, 0x200, 0xb, 0xdd2, 0x9, 0x92a2, 0x4c318000, 0xa, 0x2, 0x2, 0x100, 0x7ae0, 0x4, 0x6, 0x2, 0x1, 0xf2, 0x77c9, 0xff, 0x7dd, 0x9, 0x71e1, 0x4, 0x6, 0x4, 0x6, 0x71c, 0x5, 0x0, 0x7, 0x7, 0x10000, 0x5, 0x7536, 0x6, 0x1000, 0x55, 0xfffffff9, 0x7, 0x2, 0xd09b, 0x743, 0x891b, 0x9, 0x5, 0xa, 0x7ff, 0x42e, 0x5, 0x6, 0x4, 0x8, 0x3, 0x1ff, 0x4, 0x8d, 0x6, 0xdd9, 0xfff, 0xfffffc01, 0xffffffff, 0x1, 0x7, 0x3, 0xe, 0xfffffff7, 0xe, 0x1, 0x3ff, 0xf, 0x3ff, 0x0, 0x4, 0x800, 0x9, 0x1ff, 0x7, 0x6, 0x7, 0x6, 0x9, 0x2, 0x7, 0x6b82, 0x8, 0x4, 0xc80, 0x6, 0x4, 0x4bec, 0xfc67, 0xb, 0xee, 0xc, 0x7, 0x1, 0xc0000000, 0x5a2b, 0x9, 0x0, 0x1, 0x9, 0x0, 0x9, 0x7819, 0x1, 0x8, 0x4d51e54c, 0x3, 0x6, 0x1, 0x7, 0x2, 0x1, 0xffff3e26, 0x200, 0x8, 0x9, 0x8, 0x6, 0x6, 0x2, 0x7, 0x8, 0x7, 0x39, 0x76, 0x100, 0xa4, 0x4, 0x10001, 0x3, 0x9, 0x7, 0x5, 0x101, 0xee9c, 0x5, 0x4, 0x10001, 0x80000, 0x7, 0x7ff, 0x0, 0x101, 0x2, 0x0, 0xfff, 0x2, 0x9, 0x6, 0xd68, 0x7, 0x7f, 0xbc]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x6, 0x7, 0x101, 0x9, {0xec, 0x1, 0x4, 0x6, 0x2}, {0x6, 0x2, 0xff23, 0x4, 0x2, 0x8}, 0x8, 0xb, 0x5}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xf26, 0x9, 0x7fffffff, 0x19, 0x80000000, 0xb989, 0xc, 0x1, 0xe41, 0x1, 0x101, 0x0, 0xd420, 0x2, 0x5, 0x5, 0x56c, 0x6, 0x2, 0x7, 0x7, 0x1, 0x7, 0x7, 0x4, 0xb1b9, 0x6, 0x1, 0xb, 0x40, 0x80000000, 0x9, 0x51b, 0x9, 0x3, 0x6, 0x1c0000, 0x0, 0x10001, 0x6, 0x100, 0x0, 0x3, 0x5, 0x7, 0x0, 0x3, 0x1, 0xfffffffe, 0x7fffffff, 0x1, 0x3, 0x8, 0x5, 0x3, 0x400, 0x3000, 0x9, 0x9, 0x6, 0x4, 0xffffffff, 0x7, 0x4, 0x5, 0x4, 0xd3, 0x1, 0x1800000, 0x4, 0x8, 0x6, 0x7775, 0x8, 0x81, 0x4, 0x6, 0x1, 0x3, 0x8, 0xffff, 0x5, 0x3, 0x200, 0x6, 0x7b, 0x9, 0x3, 0xa5, 0xa0000000, 0x8, 0x65fb, 0x8, 0x3, 0x7ff, 0x4, 0x7, 0x9, 0x2, 0x40, 0x8, 0x200, 0x3ff8, 0x6f748928, 0x1, 0xcbc5, 0x4, 0xc000, 0x3ff4, 0x8000, 0x0, 0xfffffff8, 0x10000, 0x6, 0x7, 0x0, 0xffffffff, 0x401, 0x40, 0x0, 0x2, 0x8c0, 0x5, 0x1, 0x3, 0x0, 0x1, 0xf28, 0x10, 0xe0c, 0x400, 0x4be, 0x800, 0x6, 0xea88, 0xfffffffb, 0xd4, 0x0, 0x7, 0xffffffff, 0x4, 0xec, 0x10000, 0xa, 0x7, 0x1, 0x800, 0x80000000, 0x60, 0xf6c, 0x4000, 0x2, 0xfffffffb, 0xd, 0xa425, 0xfffffffa, 0x0, 0x1, 0x0, 0x1ff, 0x3, 0x3, 0x1, 0x0, 0xb, 0x6, 0x6, 0x5, 0xff, 0x9, 0x0, 0x101, 0x200, 0x0, 0x8, 0x6, 0x0, 0x0, 0x26, 0x7, 0x0, 0x93, 0x849, 0x5, 0x0, 0x5, 0x5, 0x1, 0x8, 0x6, 0x7, 0x244, 0x1, 0xfffffff9, 0x2, 0x5, 0x3, 0x2, 0x4, 0x8, 0x4, 0xc, 0x2, 0x0, 0x4, 0x2, 0x2, 0x4c6e8e0e, 0x0, 0x6, 0x80000001, 0x4, 0xffffff44, 0x4, 0x1, 0x1f20, 0xffffffff, 0xc41a, 0x7, 0x20, 0x7, 0x200, 0x9, 0x7, 0x5, 0xffffffff, 0xfffff908, 0x2, 0x5, 0x80000000, 0x8000, 0x1ff, 0x9, 0x0, 0x3ff, 0x1ca0decb, 0x7fffffff, 0x0, 0x3, 0x200, 0x82, 0x1, 0x6796, 0x7, 0x8, 0x1, 0x2, 0x1ff, 0x9, 0xf2b, 0xfffff000, 0xeef, 0x9, 0x1, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbedit={0x1038, 0x14, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}]}, {0x1004, 0x6, "9828da98f35b3d5d2891c8daa4c02151bb4ae5baecb8615bed3c42f1251fe38a9a1a30425b82cf08cf254b5bf6f3f3bdd9ab35c3eee02451999a6d4ecc6f62e8a74684cfbdbfd276362f9511a543e5b5de6d5822d9cce53d9cf79ce6e7f52627ec982f5d651ea85cfd812fa0160cf0f8958d8bf75f2c837c47425fafe83cb7347bbb850c477760119c2dc20f86adf5f30351ff962d454247579a54e9cf717a859dd4a0662167ab5ec3065b71aa3ddc8d4327254a8d49cb4bea5916134436edcc85c5aa72dede991a4bb06bca25d91bdec9ac26e9a412b45cf0ecb39ac7b8a6de082c864e4ebd1d5a7d29ddc4632d303c676a960256d28cef6f739d557a2ccee42beb20ee7341c2b80a0982c73c05fde52e10a17d35e27fb8baf4dd78ffd8642ea1bdafec24a94c1aad4ace0ce20062b655fa83f7ebaee68b857446b9efcfdff5a36cc203df8f153a2a1184a3baaa8f219334e533853b602c63c7b1f39a191e4b60338988b3088035d3f3e456a403ef3445bac2b147c519b8f1f594f5760ad218d36c9071c07cd79da9255d4e403879d99d504dba863cf56e7e2e8031e97806aa6aa93da68244036ae2d5cfb4fe8c158b2b790892d2ba7d48d1e99eec86158c95b5d35c2525dc1891cc66ba1e0e36ed0bc147d9b00e33e3ae8ef35224920dfac58e7094ad14b278bf4907737057526c7f10fc206a8478636ecf2422e013b4b3428388e8c9a01a8e04afcd1928c36117281fa21708e952abb723c9562dd59359024c85dc616f8e569a551071dac3c51c28fdc177c9d1ed3c75a6c113acda0ab2afa584fe059e1c9e4f26d5489aec140da89870340e1f730fe77f88f0cde8a7ee27496eccd88fc39988be2ba255b4bb6ada9646ee764114646d7216e40a76888e8a4e76fd1d3417cee9dd3d518ae969c7acc3092f7f52e5cd713817732abda321201f211f0b7a58b22c9e133f2575ce2ee417c3cc16726881a0627ebcb7aa25b302245bd76eb17a177ac90189b5f9760d212241cbbc52a9585fd32b15a35ac66b69c7475420286e457fdc5002d9d28701fd168e06c2f357f9cf5a9df143e1d1d70953b06242d12fd626752b95cd1df041f769a9d275136c65795ec6e05d5fb12d9deeca14f5e6826df7678f947b07f07222af726f807324eb468608aa39926aa32554830fc687ef47ba9f838676d90a4619193c8654d72b0b0dc3c32ac2c7bbf83994b85fa750e12b1af0024f2cd3e58c1d37ebeb02ba0e7b547c9ba3a12e19ea0b974632121f8e2f11b84122c60bd83ee385d26de8cb1aa2535d23f6405ac85e6a18860c0e0e671ff782bdba2ed54cc5b4550455a546da8515f44f06d93f931a8f17a14c7f1ff29e559347d560ba9959f9bce60d1e33ca3208705ef7ffbfcb8fe18db2b28b382a460284317a56dbd49f08b91502da5d1ddcc3ad5d82ec52d8326ba754348906f6c1dca42a52f0cff75d03835b4235fd4e78a80f13171ce3a985f7cbc6cef8522bfd32df19e4ef944cbcefe4c77a2329ca31fbeabab3268801b5019244208333ece4354efa79018bffe9b32175ed933eea5d17dfc163992a8d4dcaa20105276f6530bbdbdcebee23dfe318dbabc048f9fc984ee4462f24c02ce8d9a3144c5a9010a9d164ee7567674b41e7cc0f0f04005c04d5d2cbedfcd1bd87e46783d70b04696ac828a6bee3546871f7db4d952b811e4f9f7f738aa3d6c4740e2222dde569e063434196a4ba95aa6eb0d506178d938360116b77514ce84924a86fb904413602b31046c1e8e068867752eabc320471059b7f19f85b37fafdf4bf2ad9207c330f4a7ad7ed83f7bb80bc492f736ba6f28897245a60e1fc1583f9815e5ac9f4af15c842aa98c81093f1caa838968221a1aa8ad15df4bc3eb5ffb6833639e8a3916f490d4bed9385ad8affcc8f990613db2cbb3ed3403d5bd363093d6484b8bfc31510d242758f80896c85b77374761994d4de8e81bc3a4a9f517cd1e2f0a1a7ca67f300dd78c23714334e984c1394c07e7c5730d90f2708d20a70966adbd596f34817a3585842c70718d7a120eed8af3710772d8c5268859e4da105af3af4e50dac393fa1cfa05d8863e1acf90e2497f3e435e0dfe438d3d380b505f60718371cc29418528d3e5d25272ca97adda2d05cd85511343c0143a9c7f190d8f7cb406c91fd1d3cd4263184bfb249c37f7f6757b9253ec9ddc7c28bd50fd4eb7bf28a9990dd2b6b30c19b966f7cb6686b79fdbee21e39a0a19887dc22d2585beb22bb4be8ad0f03d84b981355086f98391445c16e32f76bced9e55ee0f6a620c4230c0a9c08606825300d5331668c98a7b9b50d3bbe20e65a9172290f63507d426cc9449107bea766accf975b4161995d13ca72fb62deba919e4b38ca35e1dc6c96c7ac63b1a62b5310b307bcbe920b586f1481515ff665bcf26c5554e279a22616471467cc530a77418c6482657db17082eee1a6fb1d86d1f46089713c85c04669b4a89db599ce554c9f1e15678215060c1994209867e3408a101aad0c942c52e9a63ac6a07eb7f21f56ab1abeccdd6d234c5fbc307d90c777fdf5f9ced46ca064e847bafc67d46e985d6cf986e4db0309860ef9a149a3bd7caae4ba17ec706dadafff71f364fa8982000e5474bd158def93c1e667c6075f0f459507143249b8b547550be909e4efc594661b2a251a8b6a1595a2c163c1492245904db3c5e6629b69cad67d69b9ae6b2463f4b79ce700630d73cf6365b364a461cf4edf789a8100a53abb09aecb4e174cd53896c47be28071f468a184e668afe41610f92216c317322a9123a26bf43c7cd9da0b56ee193faa1cf3f64e0f45c2e0dee153486d52184d55d5a6d99549080894d80988985506e73100ce8fa8f65d1eaa8eabd25eea9d0061abc3f0c025079128f14e2d83050120b7b1f42cd02078bda34c206d06d25331f899fcd24c31240060d7a5c8e3903858cc7c9bdc4c0c426bdd22ff7decf33a2549a311f4d6e21aa1d1116392ca123e0987558327a0fccc2bc8ffe44db5e0cd5c24be04a49b2e9093054751d8b1c8200c017a49b3e7abb1516975f015a10c1604a672ce2c9382e5b9b40d041c315f5f594ce90f1e0a51364746364d128709bbaef620de663dfefcb7b6d7be78b1aec6c1136cb2757ca433752ccbdfb7899eef8b0efdc809aa177503157d9d91c9d079246ee8b20afdfd66668b3d2b89985be2843c23b29db4bb145a3c2043eca5811d8a49b7b3606a339441d3c9bae5f52f1db24ae2a7f9e3b9a965da6820b72acdff1e51c0a228adb2925ce50b6bf053994d16888305ffa412addc3f09c9d1de89c035d7f4b682a44192ae729c5c660e4c44e1f68216693198ac608144a51483f90ccf45e10af43460f2344edea690e4b3b978d028d33a1abf52774686ccc2bad82d2d18553c956b132c858dd31cbd7916b067c7fee21e227f081e4af05acb18aa9324fd48bc71e90f2cca73ccf97489de0e5fcb3f4d0aa78c52449bbaf3639f779d7c955de7e6c64c4491bfcb09073167f61bccfd76976442389a9056f1f942f4b3842ecf618a53cc5d0650c84383f4643a44fbeb516bb86821ca5b43d91289fc6956539f896501581de3a81c99dd6ea626574553667fae82806a79698e35c876a0111aec668e62929ec076d48a377b410029b075630e1dea2f6b36f161590a9343690a7ed1154467f28cbe93513724f6d7150a7dcd4ccbad4a26867b25f4bb143475e1c412bf608eb656ee2d1604ff20f96d7b09d2ca1a3bf21a269c0b2996e6d4702ac555a45a927df6c466f4d3940e0a26c6142889c690138c5c329bff4eb16f7de463da2e2b64ebe5414a6d47be53d0dcc80e3c935303b1fedcd75fc487c7e896b44e67ed0673b81a447f08a9436dd3c13b9a02821556e049d911a3bbd05174f79616b05e421693a210806b920659f85af7fcfcf40c3886121354e474e253bd862d0b0a5cbcefaf6800a955601c44ab5f773206c663fe10d4bb66944a8c34683ac4f8c8e223e2f7ac35582017d3b701af0fe3f510a5d895b33e13665407f4666e12627f600b8351baa8627afab4ec187f8dbc1c85d159c12fac0180f7b8418020cdbede378060ee1df040611a23d8c77f5888bdf57909f491bf0fe440d1fe3e4a2e1d317f7dac98d825918d5ec2e3fc5cf42fc4fab6086fbdff8e38d25c5443e11a7d97ccca583e8529b899aa4c92926600fbcd0bc6d7c46c2ae65ef040cb2216bdd20370f44638ffdc82684377413fb9be878881ad59ebfea01042c282719aec17772f6e9541dc6d1cf5cf1dd281b93cf57834d2dd4b34de936a4b833c997ef5a2b36ee6043903fade0dc96e53f1b389c67a15b1e90e334a23f40cf5d8b9c141bd5f19cc13a890d09fc56ec5b2835035383b8f2c245c7c88022652630b873b307f706d48dd02dee67c81965ab84139625a64cd38c82d4eacfd827403f71d436c1f16211edeee3c6a4b45dfee9ddf99c573333d8dba00ca68877e752a90c4eae26bbf161f8817c96a6549465f82d227eebf922b4f69ac18cfc987eb97f2064d06dbc5440961a8942d5051c55cc8336a4d5ee7ca637a147ec4014ead55bf8008742a12ba2d9a7d2eb29940ea5e103a399d1f909d1eace6615f9ce7abfe294cb26a7f142be3132a4fb06495e4d6d08c9761014000f5fea9ce38a0b8f51dcf42fe9d9fd0a75f37c930762800b20ad60d764604de46c2eab637dfd13dd151363b8767d72d681b25a12978ca2b9d5062ac7bfcdbbfe22f23f4f169e243803e17267be74be899d142b7ff8c096eb958bc03e2322c7c647a816315f13b61f579ae76c8666d64c08a2778954e5653e39048a27dba9f26dd851cefc3f8d1df906c23061a5dbe3b16606fb1ad00c1a89649e19274f9c561d0bcf71ecb077ecb9e4d54e84139513ff337d2ba67c1314481a0840b86dbc2f74a166223d7402fd1487e9d4854380b3c1f4ac368316f056369d02e86ff61fde80733368e0fedc27e81bc5c4f8468bb510f1aca45be87f129466ee226a8a699430ee1eb82e84f3e9c68412b146db1de990dca4e3d2ff7f1396341b062a8ff986cdb6d37fb365a5d87f0f3d6f9233418074f3a0822b514613a81499376f546ef60ae1674119fca890cee1fc1fd9993740a2d7871ff620e5fb26053c0d062716080bb771d779692f755f2f6f23bf984e59a6269b3845ef3ff04d0486a61ff8fe18216a9995bc2b8426248bb4a09e33a19b8f3f02dacc063bd3fa542ef733b52994d683bbdec3ab027130ba2d11dc3f36933aaaebfd60447891526578f8d4b9b9d1e77bb6421676544a64878bec877a6f1e41529059f8d23860ec0e65e360ec76c49cad94b8ed1b8ed7b8dfa9518686b201308904b00f9743708de038f843e44fae7a079c7e314870edcc139752f2c836bde4d6f8a80b039a004f930759661cc98a8fc87decd0231459f8f22c2b9d6d311539976eb65aed09b48e5012d0f9643c4b525fc20698252fc0d39ab9545e0745a1b44c241c4c1045f6de3bfab585e9ad375002c213f3802c754d02f95bf6e024107dff2414eeebe92aa60c9036881fd622c5d4c1feb642f31d0560684f2c9d7bd4a9d3b4ac2d38de4dfb3aa67c506bff9fbe816e41f16a2a63e7ebd696a5b863b321fabf3bc79441ee06cc8a6b34fef70cead2b11d4c73fa97e8ed4cd58f4b8005ea99e33fa6fbdb82737901b3b8317cccf6a3218c8975e03167ae3ec7894cc0382aa398bf88f926084c46f8c09122eccf0cfffae16087740d55632ecd0bd8f83ed1e73342ea446cc8f7d46"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x78, 0x8, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xb25}]}, {0x42, 0x6, "eb7ab768fd30452913ffa1c7ae0ed3180a3d34e03f4f6951362a3c2a9680913ebe076e1d7517ee77a84b46839d36c2269c9a05b266656fd500c56ab319e9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xd4, 0x16, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x346}]}, {0xa0, 0x6, "2000e3819aff759cd0c0bf97ded82b549ea8596a5727cb2d1a6bbd6726c5a8b6a56c26968c50fc7b61779e8ed5b25e918c662ce6c0376b5baefaa983949b93e8ec14083b0ebca2fcd490dff94e208547eecad0e0cd88913bb7d3913e4fc0c82a8222a804d5122d3be7c3a9d2d1ff6f89782d2094c68ff67239354d98d45666ff503d7cf14bfec1575805d888b0f662b4039af823a435e4a2e631671e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0xdc, 0x1, [@m_mirred={0xd8, 0x16, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x40, 0x3, 0x7, 0xcd}, 0x1, r4}}]}, {0x89, 0x6, "b8d7a4b7f57bd2931c66c2d4b2ae06603916b1249f09c7961234cc4adc3f6c4a0fa3b0639df207101b3bfa3eb5ef6cb95899dc7d04594c1023a5237691d36fcc3ec2f8c2e67f885d69adbc59625494bd610d1c37de5329ae4791350de740fa2cb7c358e9d977b05fcf5f0c65841f7a5f57a881c6789c338fcd83c1ed56ee3c0d4db46bea71"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x29c8}, 0x1, 0x0, 0x0, 0x1}, 0x24000005) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xfe}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r8, 0x8912, &(0x7f00000033c0)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r9, 0x9c3fa077fa966179, 0x70bd29, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB, @ANYBLOB], 0x24}}, 0x0) 7.748820655s ago: executing program 2 (id=2778): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) write$tun(0xffffffffffffffff, 0x0, 0x3e) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5452, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x11, 0x6, @broadcast}, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000080)='veth0_to_bond\x00') sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0xffea, &(0x7f00000001c0)={&(0x7f0000001b00)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) unshare(0x22020600) unshare(0x2a020400) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000140)=ANY=[@ANYRES16=r4, @ANYRESOCT=r2, @ANYRESDEC=r3], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x30}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb50000000000", 0xcb}], 0x1, 0x0, 0x0, 0x2663}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x600, 0xe8, 0x320, 0x440, 0x440, 0xe8, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, &(0x7f0000000000), {[{{@ipv6={@local, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0xff000000, 0xa348fa5a8cffd889], 'vcan0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x4, 0x1, 0x3, 0x6a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x644, 0x7f, @ipv6=@mcast2, 0x4e22}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x101, 0xffffffff, 0xffffffff, 0xffffffff], [0xffff7f, 0xff000000, 0x0, 0xff], 'veth0_vlan\x00', '\x00', {}, {0xff}, 0x3a, 0xf7, 0x4, 0x18}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x28, 0x1, 0x7fff}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3d}, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xa02529c283c5d53b, 0xff000000, 0xffffffff], [0xffffffff, 0xff0000ff, 0xffffff00], 'vlan0\x00', 'veth1\x00', {}, {0xff}, 0x84, 0x4, 0x1, 0x14}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x5, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xd}, @private0, [0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 'nicvf0\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x2c, 0xfb, 0x4}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x32}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [0x0, 0x0, 0x1fffffffe], [0xff000000, 0xffffffff, 0xffffff00, 0xffffff00], 'veth1_to_hsr\x00', 'erspan0\x00', {}, {0xff}, 0x87, 0x9, 0x3, 0x44}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x2c, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) getsockopt$sock_buf(r6, 0x1, 0x1f, 0x0, &(0x7f0000001000)=0x1e) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r8 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r9, 0x5452, &(0x7f0000000000)=0xf) 6.946119835s ago: executing program 0 (id=2779): socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) close(0x3) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) close(0x3) 6.03127077s ago: executing program 0 (id=2780): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)}], 0x1}}], 0x2, 0x24000045) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000d80)=[r3, r3, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r5, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)={0xe8, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0xa0, 0x51, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "fa06ba7b11"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "52de00e117a7a8bb12d1321188"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "7884a30641869be29c535d13c3"}]}, {0x4}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "d7f78bf48e6d00033b3312d710"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x87a03}]}]}]}, 0xe8}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000000580)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void}, 0x26) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f0000000240)=@broadcast, &(0x7f0000000500)=ANY=[], 0x28) 4.975209818s ago: executing program 0 (id=2781): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)}], 0x1}}], 0x2, 0x24000045) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r2 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 4.427293072s ago: executing program 0 (id=2782): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)}], 0x1}}], 0x2, 0x24000045) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feff", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138a"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000d80)=[r3, r3, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x5, 0x4, 0x4, 0x7}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r5, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)={0x114, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0xcc, 0x51, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "fa06ba7b11"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "52de00e117a7a8bb12d1321188"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_SEQ={0xd, 0x4, "147a3a26423bfae265"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "21dc7a8c3b178f6374b4c0c9d6"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "7884a30641869be29c535d13c3"}]}, {0x4}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "d7f78bf48e6d00033b3312d710"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x87a03}]}]}]}, 0x114}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000000580)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void}, 0x26) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f0000000240)=@broadcast, &(0x7f0000000500)=ANY=[], 0x28) 4.087223556s ago: executing program 3 (id=2783): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r1, 0x0, 0x4804) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e00000000001010400000000000000000a000000440001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280050001000000000006000340000200003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000070000000000000000010c00028005000100000000000800074000000000440010800800024000000fff"], 0xe0}}, 0x0) syz_genetlink_get_family_id$smc(0x0, r1) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x40, 0x0, 0x1, 0x10000000000000], 0x0, 0x0}, 0x78) write(r1, &(0x7f0000000000)='\"', 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r4) recvmmsg(r1, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 4.044062946s ago: executing program 4 (id=2784): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)}], 0x1}}], 0x2, 0x24000045) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feff", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138a"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[r3, r3, 0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r5, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)={0x114, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0xcc, 0x51, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "fa06ba7b11"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "52de00e117a7a8bb12d1321188"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_SEQ={0xd, 0x4, "147a3a26423bfae265"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "21dc7a8c3b178f6374b4c0c9d6"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "7884a30641869be29c535d13c3"}]}, {0x4}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "d7f78bf48e6d00033b3312d710"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x87a03}]}]}]}, 0x114}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000000580)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void}, 0x26) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f0000000240)=@broadcast, &(0x7f0000000500)=ANY=[], 0x28) 3.919525855s ago: executing program 1 (id=2785): unshare(0x68040200) 3.430068504s ago: executing program 0 (id=2786): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.091225927s ago: executing program 0 (id=2787): mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c00000000000000", @ANYBLOB="ff5aa60e942f7e22ac2975d519fc3b96d7f99b5b54d0744297a39ac23d76df3129a825cc88883049a3b2ed47ba073f390acce2b9b412a70e23e50500ff25e40de8", @ANYRES32, @ANYRES64=0x0], 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x448c1}, 0x24004050) unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001014000806bd7000fddbdf2508004c0000000000080001000100000008000300040000000800150000000000"], 0x30}, 0x1, 0x0, 0x0, 0x48}, 0x4000) r1 = socket$inet6(0xa, 0x3, 0xc) sendmmsg$inet6(r1, 0x0, 0x0, 0x90) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) socket$kcm(0x28, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) 3.021214198s ago: executing program 4 (id=2788): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) write$tun(0xffffffffffffffff, 0x0, 0x3e) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5452, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x11, 0x6, @broadcast}, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000080)='veth0_to_bond\x00') sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0xffea, &(0x7f00000001c0)={&(0x7f0000001b00)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) unshare(0x22020600) unshare(0x2a020400) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002580), 0x0, 0x0, 0x0, 0x400048c0}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x30}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x600, 0xe8, 0x320, 0x440, 0x440, 0xe8, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, &(0x7f0000000000), {[{{@ipv6={@local, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0xff000000, 0xa348fa5a8cffd889], 'vcan0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x4, 0x1, 0x3, 0x6a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x644, 0x7f, @ipv6=@mcast2, 0x4e22}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x101, 0xffffffff, 0xffffffff, 0xffffffff], [0xffff7f, 0xff000000, 0x0, 0xff], 'veth0_vlan\x00', '\x00', {}, {0xff}, 0x3a, 0xf7, 0x4, 0x18}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x28, 0x1, 0x7fff}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3d}, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xa02529c283c5d53b, 0xff000000, 0xffffffff], [0xffffffff, 0xff0000ff, 0xffffff00], 'vlan0\x00', 'veth1\x00', {}, {0xff}, 0x84, 0x4, 0x1, 0x14}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x5, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xd}, @private0, [0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 'nicvf0\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x2c, 0xfb, 0x4}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x32}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [0x0, 0x0, 0x1fffffffe], [0xff000000, 0xffffffff, 0xffffff00, 0xffffff00], 'veth1_to_hsr\x00', 'erspan0\x00', {}, {0xff}, 0x87, 0x9, 0x3, 0x44}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x2c, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) getsockopt$sock_buf(r6, 0x1, 0x1f, 0x0, &(0x7f0000001000)=0x1e) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r8 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r9, 0x5452, &(0x7f0000000000)=0xf) 2.964627257s ago: executing program 2 (id=2789): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) write$tun(0xffffffffffffffff, 0x0, 0x3e) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5452, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x11, 0x6, @broadcast}, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000080)='veth0_to_bond\x00') sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0xffea, &(0x7f00000001c0)={&(0x7f0000001b00)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) unshare(0x22020600) unshare(0x2a020400) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000140)=ANY=[@ANYRES16=r4, @ANYRESOCT=r2], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x30}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x600, 0xe8, 0x320, 0x440, 0x440, 0xe8, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, &(0x7f0000000000), {[{{@ipv6={@local, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0xff000000, 0xa348fa5a8cffd889], 'vcan0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x4, 0x1, 0x3, 0x6a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x644, 0x7f, @ipv6=@mcast2, 0x4e22}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x101, 0xffffffff, 0xffffffff, 0xffffffff], [0xffff7f, 0xff000000, 0x0, 0xff], 'veth0_vlan\x00', '\x00', {}, {0xff}, 0x3a, 0xf7, 0x4, 0x18}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x28, 0x1, 0x7fff}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3d}, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xa02529c283c5d53b, 0xff000000, 0xffffffff], [0xffffffff, 0xff0000ff, 0xffffff00], 'vlan0\x00', 'veth1\x00', {}, {0xff}, 0x84, 0x4, 0x1, 0x14}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x5, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xd}, @private0, [0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 'nicvf0\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x2c, 0xfb, 0x4}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x32}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [0x0, 0x0, 0x1fffffffe], [0xff000000, 0xffffffff, 0xffffff00, 0xffffff00], 'veth1_to_hsr\x00', 'erspan0\x00', {}, {0xff}, 0x87, 0x9, 0x3, 0x44}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x2c, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) getsockopt$sock_buf(r6, 0x1, 0x1f, 0x0, &(0x7f0000001000)=0x1e) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r8 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r9, 0x5452, &(0x7f0000000000)=0xf) 0s ago: executing program 3 (id=2790): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000300), 0x8) r4 = socket(0x25, 0x80805, 0x5) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r5}, 0x20) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x5, 0xcf) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000175ea8bffcf4f7376eec6979e26e179bc400bed3d2a9e90dca335b83f56d3a246a289db79c", @ANYRES16=r7], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) kernel console output (not intermixed with test programs): ibute type 13 has an invalid length. [ 613.797773][T15237] netlink: 'syz.4.2468': attribute type 17 has an invalid length. [ 613.834524][T15237] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 613.890103][T15236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.999842][T15236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.050861][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 614.080397][T15236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.339786][T15225] vxcan1 speed is unknown, defaulting to 1000 [ 614.555724][T15219] vxcan1 speed is unknown, defaulting to 1000 [ 614.831373][T15242] netlink: 'syz.4.2469': attribute type 13 has an invalid length. [ 614.839651][T15242] netlink: 'syz.4.2469': attribute type 17 has an invalid length. [ 614.863758][T15242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 614.932524][T15240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.945072][T15244] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2470'. [ 614.997444][T15240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.084029][T15240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.100966][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 615.837651][T15251] netlink: zone id is out of range [ 615.844232][T15251] netlink: zone id is out of range [ 615.849416][T15251] netlink: set zone limit has 4 unknown bytes [ 616.131020][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 616.418690][T15257] syzkaller0: entered promiscuous mode [ 616.440927][T15257] syzkaller0: entered allmulticast mode [ 617.170844][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 617.934993][T15246] vxcan1 speed is unknown, defaulting to 1000 [ 618.211364][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 618.652369][T15261] vxcan1 speed is unknown, defaulting to 1000 [ 619.149182][T15259] vxcan1 speed is unknown, defaulting to 1000 [ 619.250853][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 619.479356][T15274] vxcan1 speed is unknown, defaulting to 1000 [ 620.290873][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 620.347706][T15289] vxcan1 speed is unknown, defaulting to 1000 [ 620.546483][T15291] vxcan1 speed is unknown, defaulting to 1000 [ 620.963704][T15283] vxcan1 speed is unknown, defaulting to 1000 [ 621.200268][T15285] vxcan1 speed is unknown, defaulting to 1000 [ 621.340888][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 621.459188][T15272] vxcan1 speed is unknown, defaulting to 1000 [ 621.834206][ T5209] udevd[5209]: worker [6127] /devices/virtual/block/nbd1 timeout; kill it [ 621.865440][ T5209] udevd[5209]: seq 17474 '/devices/virtual/block/nbd1' killed [ 622.371130][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 623.410846][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 624.461028][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 624.857618][T15307] netlink: 'syz.2.2482': attribute type 13 has an invalid length. [ 624.866159][T15307] netlink: 'syz.2.2482': attribute type 17 has an invalid length. [ 624.912404][T15307] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 625.023525][T15307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.092846][T15307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.183743][T15316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2484'. [ 625.224115][T15315] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2485'. [ 625.286622][T15316] IPv6: Can't replace route, no match found [ 625.483207][T15322] netlink: 'syz.0.2486': attribute type 13 has an invalid length. [ 625.491436][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 625.513707][T15323] netlink: 'syz.1.2487': attribute type 13 has an invalid length. [ 625.523582][T15322] netlink: 'syz.0.2486': attribute type 17 has an invalid length. [ 625.525675][T15323] netlink: 'syz.1.2487': attribute type 17 has an invalid length. [ 625.625434][T15323] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.659208][T15323] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 625.735197][T15321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.756560][T15322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.773728][T15322] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.787711][T15322] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 625.888579][T15306] vxcan1 speed is unknown, defaulting to 1000 [ 625.897853][T15319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.316378][T15329] netlink: 'syz.2.2488': attribute type 13 has an invalid length. [ 626.340579][T15329] netlink: 'syz.2.2488': attribute type 17 has an invalid length. [ 626.414251][T15329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 626.486575][T15337] netlink: zone id is out of range [ 626.491926][T15337] netlink: zone id is out of range [ 626.497236][T15337] netlink: set zone limit has 4 unknown bytes [ 626.517067][T15329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.531113][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 626.618166][T15329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.638410][T15311] vxcan1 speed is unknown, defaulting to 1000 [ 626.649082][T15340] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2490'. [ 626.718673][T15329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.098616][T15346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2491'. [ 627.126668][T15346] IPv6: Can't replace route, no match found [ 627.297401][T15351] netlink: 'syz.0.2492': attribute type 13 has an invalid length. [ 627.315515][T15351] netlink: 'syz.0.2492': attribute type 17 has an invalid length. [ 627.498657][T15351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.517844][T15351] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.566777][T15351] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 627.591040][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 627.627044][T15350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.680215][T15361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2493'. [ 627.790606][T15356] IPv6: Can't replace route, no match found [ 627.848355][T15350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.966797][T15350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.211919][T15343] vxcan1 speed is unknown, defaulting to 1000 [ 628.813194][T15367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2494'. [ 628.890189][T15367] IPv6: Can't replace route, no match found [ 629.122255][T15354] vxcan1 speed is unknown, defaulting to 1000 [ 630.270551][T15379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2496'. [ 630.700953][ C0] net_ratelimit: 5 callbacks suppressed [ 630.700983][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 630.745823][T15388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2497'. [ 630.766838][T15387] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2498'. [ 630.793247][T15388] IPv6: Can't replace route, no match found [ 631.325611][T15364] vxcan1 speed is unknown, defaulting to 1000 [ 631.614813][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.626480][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.731065][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 631.772670][T15378] vxcan1 speed is unknown, defaulting to 1000 [ 632.029240][T15383] vxcan1 speed is unknown, defaulting to 1000 [ 632.687623][T15400] netlink: 'syz.1.2500': attribute type 13 has an invalid length. [ 632.696558][T15400] netlink: 'syz.1.2500': attribute type 17 has an invalid length. [ 632.702962][T15401] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2501'. [ 632.781070][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 632.912898][T15400] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.966032][T15400] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 633.811023][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 633.827390][T15400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 633.880190][T15398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.580066][T15413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2502'. [ 634.770383][T15413] IPv6: Can't replace route, no match found [ 634.783779][T15420] netlink: 'syz.1.2503': attribute type 13 has an invalid length. [ 634.816076][T15420] netlink: 'syz.1.2503': attribute type 17 has an invalid length. [ 634.851501][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 634.899496][T15418] syz.3.2504: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 634.915838][T15420] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 634.965657][T15418] CPU: 0 UID: 0 PID: 15418 Comm: syz.3.2504 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 634.965692][T15418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 634.965707][T15418] Call Trace: [ 634.965717][T15418] [ 634.965729][T15418] dump_stack_lvl+0x189/0x250 [ 634.965764][T15418] ? __pfx_dump_stack_lvl+0x10/0x10 [ 634.965788][T15418] ? __pfx__printk+0x10/0x10 [ 634.965816][T15418] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 634.965843][T15418] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 634.965870][T15418] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 634.965898][T15418] warn_alloc+0x214/0x310 [ 634.965931][T15418] ? stack_depot_save_flags+0x40/0x900 [ 634.965959][T15418] ? __pfx_warn_alloc+0x10/0x10 [ 634.965984][T15418] ? kasan_save_track+0x4f/0x80 [ 634.966017][T15418] ? xskq_create+0x56/0x170 [ 634.966046][T15418] ? xsk_init_queue+0xb0/0x110 [ 634.966072][T15418] ? xsk_setsockopt+0x4dc/0x8d0 [ 634.966097][T15418] ? do_sock_setsockopt+0x17c/0x1b0 [ 634.966116][T15418] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 634.966135][T15418] ? do_syscall_64+0xfa/0x3b0 [ 634.966165][T15418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.966196][T15418] __vmalloc_node_range_noprof+0x125/0x12f0 [ 634.966254][T15418] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 634.966285][T15418] ? __kasan_kmalloc+0x93/0xb0 [ 634.966321][T15418] vmalloc_user_noprof+0xad/0xf0 [ 634.966344][T15418] ? xskq_create+0xbf/0x170 [ 634.966375][T15418] xskq_create+0xbf/0x170 [ 634.966410][T15418] xsk_init_queue+0xb0/0x110 [ 634.966443][T15418] xsk_setsockopt+0x4dc/0x8d0 [ 634.966474][T15418] ? __pfx_xsk_setsockopt+0x10/0x10 [ 634.966501][T15418] ? __pfx_aa_sk_perm+0x10/0x10 [ 634.966533][T15418] ? aa_sock_opt_perm+0x74/0x110 [ 634.966565][T15418] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 634.966589][T15418] ? __pfx_xsk_setsockopt+0x10/0x10 [ 634.966618][T15418] do_sock_setsockopt+0x17c/0x1b0 [ 634.966663][T15418] __x64_sys_setsockopt+0x13f/0x1b0 [ 634.966692][T15418] do_syscall_64+0xfa/0x3b0 [ 634.966725][T15418] ? lockdep_hardirqs_on+0x9c/0x150 [ 634.966756][T15418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.966777][T15418] ? clear_bhb_loop+0x60/0xb0 [ 634.966804][T15418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.966826][T15418] RIP: 0033:0x7f481a58eb69 [ 634.966847][T15418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.966868][T15418] RSP: 002b:00007f481b3ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 634.966893][T15418] RAX: ffffffffffffffda RBX: 00007f481a7b5fa0 RCX: 00007f481a58eb69 [ 634.966909][T15418] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 634.966932][T15418] RBP: 00007f481a611df1 R08: 0000000000000004 R09: 0000000000000000 [ 634.966945][T15418] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 634.966958][T15418] R13: 0000000000000000 R14: 00007f481a7b5fa0 R15: 00007ffd3de9d318 [ 634.966993][T15418] [ 634.967002][T15418] Mem-Info: [ 635.280429][T15420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.311437][T15418] active_anon:9961 inactive_anon:0 isolated_anon:0 [ 635.311437][T15418] active_file:1710 inactive_file:40071 isolated_file:0 [ 635.311437][T15418] unevictable:768 dirty:231 writeback:0 [ 635.311437][T15418] slab_reclaimable:12238 slab_unreclaimable:209148 [ 635.311437][T15418] mapped:37714 shmem:4231 pagetables:1239 [ 635.311437][T15418] sec_pagetables:0 bounce:0 [ 635.311437][T15418] kernel_misc_reclaimable:0 [ 635.311437][T15418] free:1209337 free_pcp:13024 free_cma:0 [ 635.317005][T15422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.411825][T15418] Node 0 active_anon:39844kB inactive_anon:0kB active_file:6840kB inactive_file:160084kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:150856kB dirty:924kB writeback:0kB shmem:15388kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12884kB pagetables:4824kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 635.482309][T15418] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 635.521772][T15418] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 635.571443][T15418] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 635.578006][T15418] Node 0 DMA32 free:925436kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39800kB inactive_anon:0kB active_file:6840kB inactive_file:158240kB unevictable:1536kB writepending:924kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:30296kB local_pcp:10780kB free_cma:0kB [ 635.707289][T15418] lowmem_reserve[]: 0 0 1 1 1 [ 635.718114][T15418] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1844kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 635.794179][T15418] lowmem_reserve[]: 0 0 0 0 0 [ 635.807162][T15418] Node 1 Normal free:3896292kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21876kB local_pcp:10944kB free_cma:0kB [ 635.849838][T15418] lowmem_reserve[]: 0 0 0 0 0 [ 635.855467][T15418] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 635.873461][T15418] Node 0 DMA32: 879*4kB (U) 76*8kB (U) 0*16kB 981*32kB (U) 235*64kB (UME) 69*128kB (UME) 31*256kB (UM) 20*512kB (UM) 12*1024kB (UM) 6*2048kB (UME) 201*4096kB (UM) = 925436kB [ 635.891453][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 635.903668][T15418] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 635.918301][T15418] Node 1 Normal: 181*4kB (UE) 46*8kB (UME) 40*16kB (UME) 67*32kB (UME) 19*64kB (UME) 4*128kB (UM) 4*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3896292kB [ 635.940531][T15418] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 635.954352][T15418] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 635.964677][T15418] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 635.979290][T15418] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 635.990210][T15418] 46010 total pagecache pages [ 636.000497][T15418] 0 pages in swap cache [ 636.005964][T15418] Free swap = 124996kB [ 636.015534][T15418] Total swap = 124996kB [ 636.019769][T15418] 2097051 pages RAM [ 636.024876][T15418] 0 pages HighMem/MovableOnly [ 636.029776][T15418] 424872 pages reserved [ 636.040387][T15418] 0 pages cma reserved [ 636.094735][T15410] vxcan1 speed is unknown, defaulting to 1000 [ 636.112138][T15429] tipc: Enabled bearer , priority 0 [ 636.138393][T15427] tipc: Resetting bearer [ 636.324163][T15426] tipc: Disabling bearer [ 636.402830][T15438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2506'. [ 636.607978][T15438] IPv6: Can't replace route, no match found [ 636.930882][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 637.093189][T15435] vxcan1 speed is unknown, defaulting to 1000 [ 637.620284][T15458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.689154][T15458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.780908][T15462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.942731][T15440] vxcan1 speed is unknown, defaulting to 1000 [ 637.980841][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 638.145062][T15442] vxcan1 speed is unknown, defaulting to 1000 [ 638.640887][T15470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.704875][T15470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.787315][T15473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.867438][T15474] syzkaller0: entered promiscuous mode [ 638.886674][T15474] syzkaller0: entered allmulticast mode [ 639.014041][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 640.050836][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 640.067523][T15486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 640.115521][T15485] openvswitch: netlink: IP tunnel TTL not specified. [ 640.134840][T15486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 640.199801][T15486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 640.503314][T15498] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2519'. [ 640.692538][T15500] IPv6: Can't replace route, no match found [ 641.090991][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 641.246675][T15512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2521'. [ 641.461670][T15512] IPv6: Can't replace route, no match found [ 641.470654][T15494] vxcan1 speed is unknown, defaulting to 1000 [ 641.896774][T15522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2523'. [ 641.981251][T15522] IPv6: Can't replace route, no match found [ 642.130992][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 643.170948][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 643.178524][ T94] block nbd1: Possible stuck request ffff888025777000: control (read@0,1024B). Runtime 390 seconds [ 643.189536][ T94] block nbd1: Possible stuck request ffff8880257771c0: control (read@1024,1024B). Runtime 390 seconds [ 643.201019][ T94] block nbd1: Possible stuck request ffff888025777380: control (read@2048,1024B). Runtime 390 seconds [ 643.212483][ T94] block nbd1: Possible stuck request ffff888025777540: control (read@3072,1024B). Runtime 390 seconds [ 643.233119][T15519] vxcan1 speed is unknown, defaulting to 1000 [ 643.545704][T15509] vxcan1 speed is unknown, defaulting to 1000 [ 644.210888][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 644.272580][T15503] vxcan1 speed is unknown, defaulting to 1000 [ 644.716777][T15527] vxcan1 speed is unknown, defaulting to 1000 [ 645.114674][T15543] netlink: 'syz.0.2527': attribute type 13 has an invalid length. [ 645.122885][T15543] netlink: 'syz.0.2527': attribute type 17 has an invalid length. [ 645.135922][T15543] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 645.193329][T15540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 645.250897][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 645.261477][T15543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 645.338428][T15540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 645.422346][T15549] openvswitch: netlink: IP tunnel TTL not specified. [ 646.255664][T15562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2532'. [ 646.290959][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 646.458575][T15562] IPv6: Can't replace route, no match found [ 647.287977][T15572] syzkaller1: entered promiscuous mode [ 647.297693][T15572] syzkaller1: entered allmulticast mode [ 647.330851][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 647.512675][T15559] vxcan1 speed is unknown, defaulting to 1000 [ 647.612344][T15581] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2536'. [ 647.696794][T15582] netlink: 'syz.1.2537': attribute type 13 has an invalid length. [ 647.735436][T15582] netlink: 'syz.1.2537': attribute type 17 has an invalid length. [ 647.831508][T15582] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 648.073713][T15585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.124896][T15589] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2538'. [ 648.169348][T15582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.370986][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 648.657726][T15593] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2539'. [ 648.815511][T15571] vxcan1 speed is unknown, defaulting to 1000 [ 648.960654][T15595] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2540'. [ 649.411002][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 649.768338][T15583] vxcan1 speed is unknown, defaulting to 1000 [ 650.267905][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.299245][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.451007][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 650.978396][T15622] syzkaller1: entered promiscuous mode [ 650.992128][T15622] syzkaller1: entered allmulticast mode [ 651.229718][T15603] vxcan1 speed is unknown, defaulting to 1000 [ 651.491053][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 652.159750][T15616] vxcan1 speed is unknown, defaulting to 1000 [ 652.412288][T15605] vxcan1 speed is unknown, defaulting to 1000 [ 652.518932][T15635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2548'. [ 652.531220][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 653.005535][T15613] vxcan1 speed is unknown, defaulting to 1000 [ 653.437410][T15626] vxcan1 speed is unknown, defaulting to 1000 [ 653.571023][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 654.255710][T15624] vxcan1 speed is unknown, defaulting to 1000 [ 654.501559][T15632] vxcan1 speed is unknown, defaulting to 1000 [ 654.611022][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 655.650993][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 655.826312][T15650] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2550'. [ 655.914657][T15651] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 656.422985][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.447319][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.690934][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 656.879674][T15663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2552'. [ 656.963244][T15663] IPv6: Can't replace route, no match found [ 657.313491][T15667] netlink: 'syz.1.2553': attribute type 13 has an invalid length. [ 657.324942][T15667] netlink: 'syz.1.2553': attribute type 17 has an invalid length. [ 657.365199][T15667] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 657.505614][T15671] netlink: 'syz.2.2554': attribute type 13 has an invalid length. [ 657.516445][T15671] netlink: 'syz.2.2554': attribute type 17 has an invalid length. [ 657.534579][T15667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.545052][T15671] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 657.596976][T15646] vxcan1 speed is unknown, defaulting to 1000 [ 657.616335][T15669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.628073][T15666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.731075][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 657.818531][T15644] vxcan1 speed is unknown, defaulting to 1000 [ 658.367823][T15677] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2555'. [ 658.543446][T15660] vxcan1 speed is unknown, defaulting to 1000 [ 658.771005][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 658.823264][T15685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2557'. [ 658.912083][T15680] IPv6: Can't replace route, no match found [ 659.811613][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 660.121561][T15679] vxcan1 speed is unknown, defaulting to 1000 [ 660.650464][T15696] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2560'. [ 660.851011][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 661.630090][T15706] warn_alloc: 1 callbacks suppressed [ 661.630113][T15706] syz.3.2562: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 661.726129][T15706] CPU: 1 UID: 0 PID: 15706 Comm: syz.3.2562 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 661.726166][T15706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 661.726182][T15706] Call Trace: [ 661.726192][T15706] [ 661.726203][T15706] dump_stack_lvl+0x189/0x250 [ 661.726237][T15706] ? __pfx_dump_stack_lvl+0x10/0x10 [ 661.726262][T15706] ? __pfx__printk+0x10/0x10 [ 661.726292][T15706] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 661.726318][T15706] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 661.726347][T15706] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 661.726376][T15706] warn_alloc+0x214/0x310 [ 661.726400][T15706] ? stack_depot_save_flags+0x40/0x900 [ 661.726428][T15706] ? __pfx_warn_alloc+0x10/0x10 [ 661.726454][T15706] ? kasan_save_track+0x4f/0x80 [ 661.726486][T15706] ? xskq_create+0x56/0x170 [ 661.726515][T15706] ? xsk_init_queue+0xb0/0x110 [ 661.726542][T15706] ? xsk_setsockopt+0x4dc/0x8d0 [ 661.726567][T15706] ? do_sock_setsockopt+0x17c/0x1b0 [ 661.726588][T15706] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 661.726609][T15706] ? do_syscall_64+0xfa/0x3b0 [ 661.726640][T15706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.726672][T15706] __vmalloc_node_range_noprof+0x125/0x12f0 [ 661.726730][T15706] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 661.726760][T15706] ? __kasan_kmalloc+0x93/0xb0 [ 661.726797][T15706] vmalloc_user_noprof+0xad/0xf0 [ 661.726820][T15706] ? xskq_create+0xbf/0x170 [ 661.726852][T15706] xskq_create+0xbf/0x170 [ 661.726885][T15706] xsk_init_queue+0xb0/0x110 [ 661.726919][T15706] xsk_setsockopt+0x4dc/0x8d0 [ 661.726952][T15706] ? __pfx_xsk_setsockopt+0x10/0x10 [ 661.726989][T15706] ? __pfx_aa_sk_perm+0x10/0x10 [ 661.727023][T15706] ? aa_sock_opt_perm+0x74/0x110 [ 661.727056][T15706] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 661.727080][T15706] ? __pfx_xsk_setsockopt+0x10/0x10 [ 661.727109][T15706] do_sock_setsockopt+0x17c/0x1b0 [ 661.727136][T15706] __x64_sys_setsockopt+0x13f/0x1b0 [ 661.727165][T15706] do_syscall_64+0xfa/0x3b0 [ 661.727196][T15706] ? lockdep_hardirqs_on+0x9c/0x150 [ 661.727227][T15706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.727249][T15706] ? clear_bhb_loop+0x60/0xb0 [ 661.727278][T15706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.727299][T15706] RIP: 0033:0x7f481a58eb69 [ 661.727320][T15706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.727340][T15706] RSP: 002b:00007f481b3cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 661.727366][T15706] RAX: ffffffffffffffda RBX: 00007f481a7b6080 RCX: 00007f481a58eb69 [ 661.727384][T15706] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 661.727398][T15706] RBP: 00007f481a611df1 R08: 0000000000000004 R09: 0000000000000000 [ 661.727412][T15706] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.727427][T15706] R13: 0000000000000000 R14: 00007f481a7b6080 R15: 00007ffd3de9d318 [ 661.727463][T15706] [ 661.727473][T15706] Mem-Info: [ 661.891089][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 661.997204][T15706] active_anon:12860 inactive_anon:0 isolated_anon:0 [ 661.997204][T15706] active_file:1710 inactive_file:40083 isolated_file:0 [ 661.997204][T15706] unevictable:768 dirty:342 writeback:0 [ 661.997204][T15706] slab_reclaimable:12149 slab_unreclaimable:210577 [ 661.997204][T15706] mapped:36460 shmem:7084 pagetables:1241 [ 661.997204][T15706] sec_pagetables:0 bounce:0 [ 661.997204][T15706] kernel_misc_reclaimable:0 [ 661.997204][T15706] free:1204882 free_pcp:15134 free_cma:0 [ 662.116435][T15706] Node 0 active_anon:51440kB inactive_anon:0kB active_file:6840kB inactive_file:160132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:145840kB dirty:1368kB writeback:0kB shmem:26800kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12756kB pagetables:4832kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 662.155068][T15710] netlink: 'syz.1.2563': attribute type 13 has an invalid length. [ 662.191108][T15710] netlink: 'syz.1.2563': attribute type 17 has an invalid length. [ 662.198521][T15706] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 662.288723][T15706] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 662.324992][T15706] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 662.347078][T15706] Node 0 DMA32 free:908064kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:51456kB inactive_anon:0kB active_file:6840kB inactive_file:158288kB unevictable:1536kB writepending:1436kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:30828kB local_pcp:17008kB free_cma:0kB [ 662.392039][T15706] lowmem_reserve[]: 0 0 1 1 1 [ 662.409580][T15706] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1844kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 662.445179][T15714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 662.501887][T15710] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 662.532472][T15714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 662.543823][T15706] lowmem_reserve[]: 0 0 0 0 0 [ 662.548747][T15706] Node 1 Normal free:3896292kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21888kB local_pcp:10940kB free_cma:0kB [ 662.623923][T15706] lowmem_reserve[]: 0 0 0 0 0 [ 662.631580][T15706] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 662.647461][T15709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 662.673420][T15706] Node 0 DMA32: 2054*4kB (UM) 149*8kB (UM) 2*16kB (UM) 664*32kB (UM) 179*64kB (UE) 20*128kB (UE) 20*256kB (UM) 20*512kB (UM) 12*1024kB (UM) 8*2048kB (UME) 200*4096kB (UM) = 907936kB [ 662.699235][T15706] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 662.722372][T15706] Node 1 Normal: 181*4kB (UE) 46*8kB (UME) 40*16kB (UME) 67*32kB (UME) 19*64kB (UME) 4*128kB (UM) 4*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3896292kB [ 662.752081][T15706] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 662.771756][T15706] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 662.791566][T15706] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 662.802311][T15706] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 662.821891][T15706] 48890 total pagecache pages [ 662.826655][T15706] 0 pages in swap cache [ 662.831608][T15706] Free swap = 124996kB [ 662.836254][T15706] Total swap = 124996kB [ 662.840461][T15706] 2097051 pages RAM [ 662.845401][T15706] 0 pages HighMem/MovableOnly [ 662.850136][T15706] 424872 pages reserved [ 662.861750][T15706] 0 pages cma reserved [ 662.930957][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 662.938993][T15697] vxcan1 speed is unknown, defaulting to 1000 [ 663.482172][T15727] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2567'. [ 663.971017][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 664.305830][T15687] vxcan1 speed is unknown, defaulting to 1000 [ 664.902916][T15739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2569'. [ 664.990511][T15726] vxcan1 speed is unknown, defaulting to 1000 [ 665.011004][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 665.237385][T15742] openvswitch: netlink: IP tunnel TTL not specified. [ 665.726332][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.736363][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.920053][T15754] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2572'. [ 666.050840][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 666.586532][T15736] vxcan1 speed is unknown, defaulting to 1000 [ 666.616709][T15764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2573'. [ 666.809189][T15730] vxcan1 speed is unknown, defaulting to 1000 [ 667.021445][T15769] netlink: 'syz.1.2574': attribute type 13 has an invalid length. [ 667.029517][T15769] netlink: 'syz.1.2574': attribute type 17 has an invalid length. [ 667.090954][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 667.109969][T15769] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.124992][T15769] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 667.243933][T15768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.325632][T15768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.482439][T15717] vxcan1 speed is unknown, defaulting to 1000 [ 667.692268][T15761] vxcan1 speed is unknown, defaulting to 1000 [ 668.131090][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 668.351977][T15783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2576'. [ 668.905172][T15775] vxcan1 speed is unknown, defaulting to 1000 [ 669.058421][T15787] netlink: 'syz.2.2577': attribute type 13 has an invalid length. [ 669.081545][T15787] netlink: 'syz.2.2577': attribute type 17 has an invalid length. [ 669.170834][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 669.209844][T15787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.226766][T15787] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.258091][T15787] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 669.323442][T15787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 669.424597][T15787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 669.503309][T15788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 669.823288][T15794] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2578'. [ 669.868224][T15780] vxcan1 speed is unknown, defaulting to 1000 [ 670.210836][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 670.304596][T15796] openvswitch: netlink: IP tunnel TTL not specified. [ 670.423786][T15806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2580'. [ 671.250915][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 671.921023][T15821] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2583'. [ 672.134964][T15826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2584'. [ 672.290870][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 672.314982][T15830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.391109][T15830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.469497][T15831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.759842][T15833] tipc: Enabled bearer , priority 0 [ 672.772785][T15833] tipc: Resetting bearer [ 673.128363][T15823] vxcan1 speed is unknown, defaulting to 1000 [ 673.251062][ T94] block nbd1: Possible stuck request ffff888025777000: control (read@0,1024B). Runtime 420 seconds [ 673.261961][ T94] block nbd1: Possible stuck request ffff8880257771c0: control (read@1024,1024B). Runtime 420 seconds [ 673.273055][ T94] block nbd1: Possible stuck request ffff888025777380: control (read@2048,1024B). Runtime 420 seconds [ 673.284248][ T94] block nbd1: Possible stuck request ffff888025777540: control (read@3072,1024B). Runtime 420 seconds [ 673.316271][T15816] vxcan1 speed is unknown, defaulting to 1000 [ 673.330859][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 673.686081][T10569] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 673.751232][ T8634] tipc: Node number set to 484400095 [ 673.783254][T15800] vxcan1 speed is unknown, defaulting to 1000 [ 674.208751][T15814] vxcan1 speed is unknown, defaulting to 1000 [ 674.370837][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 674.484941][T15835] vxcan1 speed is unknown, defaulting to 1000 [ 674.615882][T15845] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2589'. [ 675.233231][T15848] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2590'. [ 675.411995][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 675.878568][T15855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2591'. [ 676.450830][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 676.990710][T15862] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2593'. [ 677.006632][T15864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2592'. [ 677.078259][T15864] IPv6: Can't replace route, no match found [ 677.189298][T15852] vxcan1 speed is unknown, defaulting to 1000 [ 677.236327][T15867] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2594'. [ 677.417424][T15869] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2595'. [ 677.490862][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 678.051700][T15878] syzkaller1: entered promiscuous mode [ 678.057475][T15878] syzkaller1: entered allmulticast mode [ 678.511904][T15885] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2598'. [ 678.522010][T15885] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2598'. [ 678.531861][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 678.539590][T15885] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2598'. [ 678.551813][T15885] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2598'. [ 678.692017][T15859] vxcan1 speed is unknown, defaulting to 1000 [ 678.756558][T15888] netlink: 'syz.2.2599': attribute type 13 has an invalid length. [ 678.764839][T15888] netlink: 'syz.2.2599': attribute type 17 has an invalid length. [ 678.866250][T15888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.875876][T15888] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.904849][T15888] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 679.010703][T15888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 679.089702][T15888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 679.167755][T15888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 679.269008][T15875] vxcan1 speed is unknown, defaulting to 1000 [ 679.532291][T15871] vxcan1 speed is unknown, defaulting to 1000 [ 679.570830][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 679.793400][T15883] vxcan1 speed is unknown, defaulting to 1000 [ 679.911867][T15895] warn_alloc: 1 callbacks suppressed [ 679.911889][T15895] syz.2.2600: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 679.952735][T15895] CPU: 0 UID: 0 PID: 15895 Comm: syz.2.2600 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 679.952781][T15895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 679.952796][T15895] Call Trace: [ 679.952806][T15895] [ 679.952817][T15895] dump_stack_lvl+0x189/0x250 [ 679.952851][T15895] ? __pfx_dump_stack_lvl+0x10/0x10 [ 679.952876][T15895] ? __pfx__printk+0x10/0x10 [ 679.952906][T15895] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 679.952933][T15895] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 679.952961][T15895] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 679.952990][T15895] warn_alloc+0x214/0x310 [ 679.953015][T15895] ? stack_depot_save_flags+0x40/0x900 [ 679.953043][T15895] ? __pfx_warn_alloc+0x10/0x10 [ 679.953069][T15895] ? kasan_save_track+0x4f/0x80 [ 679.953102][T15895] ? xskq_create+0x56/0x170 [ 679.953130][T15895] ? xsk_init_queue+0xb0/0x110 [ 679.953157][T15895] ? xsk_setsockopt+0x4dc/0x8d0 [ 679.953183][T15895] ? do_sock_setsockopt+0x17c/0x1b0 [ 679.953203][T15895] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 679.953223][T15895] ? do_syscall_64+0xfa/0x3b0 [ 679.953254][T15895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.953286][T15895] __vmalloc_node_range_noprof+0x125/0x12f0 [ 679.953349][T15895] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 679.953387][T15895] ? __kasan_kmalloc+0x93/0xb0 [ 679.953425][T15895] vmalloc_user_noprof+0xad/0xf0 [ 679.953448][T15895] ? xskq_create+0xbf/0x170 [ 679.953480][T15895] xskq_create+0xbf/0x170 [ 679.953515][T15895] xsk_init_queue+0xb0/0x110 [ 679.953548][T15895] xsk_setsockopt+0x4dc/0x8d0 [ 679.953580][T15895] ? __pfx_xsk_setsockopt+0x10/0x10 [ 679.953609][T15895] ? __pfx_aa_sk_perm+0x10/0x10 [ 679.953644][T15895] ? aa_sock_opt_perm+0x74/0x110 [ 679.953676][T15895] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 679.953701][T15895] ? __pfx_xsk_setsockopt+0x10/0x10 [ 679.953732][T15895] do_sock_setsockopt+0x17c/0x1b0 [ 679.953760][T15895] __x64_sys_setsockopt+0x13f/0x1b0 [ 679.953790][T15895] do_syscall_64+0xfa/0x3b0 [ 679.953821][T15895] ? lockdep_hardirqs_on+0x9c/0x150 [ 679.953852][T15895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.953873][T15895] ? clear_bhb_loop+0x60/0xb0 [ 679.953901][T15895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.953924][T15895] RIP: 0033:0x7f3ef2d8eb69 [ 679.953944][T15895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.953964][T15895] RSP: 002b:00007f3ef3c32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 679.953990][T15895] RAX: ffffffffffffffda RBX: 00007f3ef2fb6080 RCX: 00007f3ef2d8eb69 [ 679.954007][T15895] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 679.954021][T15895] RBP: 00007f3ef2e11df1 R08: 0000000000000004 R09: 0000000000000000 [ 679.954036][T15895] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.954050][T15895] R13: 0000000000000000 R14: 00007f3ef2fb6080 R15: 00007ffc91d6b298 [ 679.954086][T15895] [ 679.954282][T15895] Mem-Info: [ 680.267659][T15895] active_anon:7143 inactive_anon:0 isolated_anon:0 [ 680.267659][T15895] active_file:1710 inactive_file:40089 isolated_file:0 [ 680.267659][T15895] unevictable:768 dirty:392 writeback:0 [ 680.267659][T15895] slab_reclaimable:12145 slab_unreclaimable:210529 [ 680.267659][T15895] mapped:31772 shmem:1361 pagetables:1228 [ 680.267659][T15895] sec_pagetables:0 bounce:0 [ 680.267659][T15895] kernel_misc_reclaimable:0 [ 680.267659][T15895] free:1211281 free_pcp:14447 free_cma:0 [ 680.320543][T15895] Node 0 active_anon:28572kB inactive_anon:0kB active_file:6840kB inactive_file:160156kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127088kB dirty:1368kB writeback:200kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12908kB pagetables:4780kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 680.403083][T15895] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 680.454078][T15895] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 680.484723][T15895] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 680.492583][T15895] Node 0 DMA32 free:933084kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28528kB inactive_anon:0kB active_file:6840kB inactive_file:158312kB unevictable:1536kB writepending:1368kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:35840kB local_pcp:18996kB free_cma:0kB [ 680.527148][T15895] lowmem_reserve[]: 0 0 1 1 1 [ 680.534293][T15895] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1844kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 680.567032][T15895] lowmem_reserve[]: 0 0 0 0 0 [ 680.579823][T15895] Node 1 Normal free:3896292kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21892kB local_pcp:10940kB free_cma:0kB [ 680.620501][T15895] lowmem_reserve[]: 0 0 0 0 0 [ 680.625707][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 680.646582][T15895] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 680.678674][T15895] Node 0 DMA32: 2120*4kB (UM) 856*8kB (UM) 314*16kB (UM) 831*32kB (UM) 247*64kB (UME) 35*128kB (UME) 9*256kB (UM) 16*512kB (UM) 13*1024kB (UM) 7*2048kB (UME) 202*4096kB (UM) = 932768kB [ 680.698796][T15895] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 680.713741][T15895] Node 1 Normal: 181*4kB (UE) 46*8kB (UME) 40*16kB (UME) 67*32kB (UME) 19*64kB (UME) 4*128kB (UM) 4*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3896292kB [ 680.739733][T15895] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 680.750330][T15895] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 680.805780][T15895] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 680.827382][T15895] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 680.857019][T15895] 43156 total pagecache pages [ 680.863605][T15895] 0 pages in swap cache [ 680.867849][T15895] Free swap = 124996kB [ 680.873487][T15895] Total swap = 124996kB [ 680.877817][T15895] 2097051 pages RAM [ 680.883352][T15895] 0 pages HighMem/MovableOnly [ 680.888398][T15895] 424872 pages reserved [ 680.894399][T15895] 0 pages cma reserved [ 681.069523][T15903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2601'. [ 681.650902][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 681.911872][T15911] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2603'. [ 682.470194][T15919] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2604'. [ 682.488893][T15919] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2604'. [ 682.519465][T15919] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2604'. [ 682.562538][T15919] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2604'. [ 682.601204][T15900] vxcan1 speed is unknown, defaulting to 1000 [ 682.690841][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 682.733682][T15925] syzkaller1: entered promiscuous mode [ 682.739245][T15925] syzkaller1: entered allmulticast mode [ 683.144029][T15932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2608'. [ 683.369943][T15918] vxcan1 speed is unknown, defaulting to 1000 [ 683.730883][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 684.357500][T15929] vxcan1 speed is unknown, defaulting to 1000 [ 684.605794][T15922] vxcan1 speed is unknown, defaulting to 1000 [ 684.770842][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 685.039364][T15913] vxcan1 speed is unknown, defaulting to 1000 [ 685.357779][T15948] netlink: 'syz.3.2613': attribute type 13 has an invalid length. [ 685.370312][T15948] netlink: 'syz.3.2613': attribute type 17 has an invalid length. [ 685.496779][T15948] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.524383][T15948] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 685.610331][T15948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.697657][T15947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.783992][T15947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.810827][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 686.850838][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 687.285951][T15968] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2617'. [ 687.455620][T15958] vxcan1 speed is unknown, defaulting to 1000 [ 687.890862][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 688.138226][T15966] vxcan1 speed is unknown, defaulting to 1000 [ 688.717290][T15974] vxcan1 speed is unknown, defaulting to 1000 [ 688.930955][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 689.229174][T15978] vxcan1 speed is unknown, defaulting to 1000 [ 689.980913][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 690.123831][T15961] vxcan1 speed is unknown, defaulting to 1000 [ 690.498706][T15977] vxcan1 speed is unknown, defaulting to 1000 [ 690.888489][T15953] vxcan1 speed is unknown, defaulting to 1000 [ 691.020944][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 691.127639][T15972] vxcan1 speed is unknown, defaulting to 1000 [ 692.050907][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 693.090911][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 694.131256][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 694.157957][T16004] netlink: 'syz.3.2623': attribute type 13 has an invalid length. [ 694.179932][T16004] netlink: 'syz.3.2623': attribute type 17 has an invalid length. [ 694.211044][T16004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 694.443884][T15996] vxcan1 speed is unknown, defaulting to 1000 [ 694.475980][T15999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 694.589120][T15999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 694.663551][T16010] netlink: 'syz.4.2625': attribute type 13 has an invalid length. [ 694.680636][T16010] netlink: 'syz.4.2625': attribute type 17 has an invalid length. [ 694.683491][T15999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 694.841948][T16010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.859830][T16010] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.914794][T16010] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 694.922962][T16018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2626'. [ 694.991059][T16006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 695.149624][T16000] vxcan1 speed is unknown, defaulting to 1000 [ 695.170826][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 695.544755][T16024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2627'. [ 695.617113][T16024] IPv6: Can't replace route, no match found [ 695.710077][T16009] vxcan1 speed is unknown, defaulting to 1000 [ 695.853332][T16030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2628'. [ 695.969882][T16030] IPv6: Can't replace route, no match found [ 696.210871][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 696.907868][T16027] vxcan1 speed is unknown, defaulting to 1000 [ 697.011706][T16035] syzkaller0: entered promiscuous mode [ 697.017726][T16035] syzkaller0: entered allmulticast mode [ 697.225078][T16021] vxcan1 speed is unknown, defaulting to 1000 [ 697.251025][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 697.314979][T16037] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2630'. [ 698.291032][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 698.508007][T16039] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2631'. [ 698.867756][T16049] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2633'. [ 699.330938][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 700.152345][T16062] netlink: 'syz.4.2635': attribute type 13 has an invalid length. [ 700.160411][T16062] netlink: 'syz.4.2635': attribute type 17 has an invalid length. [ 700.228484][T16062] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 700.293384][T16063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 700.326583][T16048] vxcan1 speed is unknown, defaulting to 1000 [ 700.357999][T16062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 700.370990][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 700.453492][T16062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 700.970840][T16053] vxcan1 speed is unknown, defaulting to 1000 [ 701.187411][T16073] netlink: 'syz.4.2637': attribute type 13 has an invalid length. [ 701.195663][T16073] netlink: 'syz.4.2637': attribute type 17 has an invalid length. [ 701.215934][T16073] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 701.268251][T16072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 701.332011][T16072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 701.395526][T16073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 701.410833][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 702.125305][T16079] netlink: 'syz.4.2638': attribute type 13 has an invalid length. [ 702.133620][T16079] netlink: 'syz.4.2638': attribute type 17 has an invalid length. [ 702.155356][T16079] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 702.206964][T16078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 702.269357][T16078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 702.331972][T16078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 702.404566][T16065] vxcan1 speed is unknown, defaulting to 1000 [ 702.450807][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 702.706975][T16057] vxcan1 speed is unknown, defaulting to 1000 [ 702.766808][T16082] warn_alloc: 2 callbacks suppressed [ 702.766829][T16082] syz.0.2639: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 702.872727][T16082] CPU: 1 UID: 0 PID: 16082 Comm: syz.0.2639 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 702.872764][T16082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 702.872778][T16082] Call Trace: [ 702.872789][T16082] [ 702.872800][T16082] dump_stack_lvl+0x189/0x250 [ 702.872834][T16082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 702.872858][T16082] ? __pfx__printk+0x10/0x10 [ 702.872887][T16082] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 702.872914][T16082] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 702.872943][T16082] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 702.872980][T16082] warn_alloc+0x214/0x310 [ 702.873003][T16082] ? stack_depot_save_flags+0x40/0x900 [ 702.873031][T16082] ? __pfx_warn_alloc+0x10/0x10 [ 702.873058][T16082] ? kasan_save_track+0x4f/0x80 [ 702.873088][T16082] ? xskq_create+0x56/0x170 [ 702.873118][T16082] ? xsk_init_queue+0xb0/0x110 [ 702.873145][T16082] ? xsk_setsockopt+0x4dc/0x8d0 [ 702.873170][T16082] ? do_sock_setsockopt+0x17c/0x1b0 [ 702.873190][T16082] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 702.873210][T16082] ? do_syscall_64+0xfa/0x3b0 [ 702.873241][T16082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.873273][T16082] __vmalloc_node_range_noprof+0x125/0x12f0 [ 702.873331][T16082] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 702.873362][T16082] ? __kasan_kmalloc+0x93/0xb0 [ 702.873398][T16082] vmalloc_user_noprof+0xad/0xf0 [ 702.873420][T16082] ? xskq_create+0xbf/0x170 [ 702.873452][T16082] xskq_create+0xbf/0x170 [ 702.873486][T16082] xsk_init_queue+0xb0/0x110 [ 702.873519][T16082] xsk_setsockopt+0x4dc/0x8d0 [ 702.873551][T16082] ? __pfx_xsk_setsockopt+0x10/0x10 [ 702.873580][T16082] ? __pfx_aa_sk_perm+0x10/0x10 [ 702.873614][T16082] ? aa_sock_opt_perm+0x74/0x110 [ 702.873646][T16082] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 702.873671][T16082] ? __pfx_xsk_setsockopt+0x10/0x10 [ 702.873702][T16082] do_sock_setsockopt+0x17c/0x1b0 [ 702.873731][T16082] __x64_sys_setsockopt+0x13f/0x1b0 [ 702.873759][T16082] do_syscall_64+0xfa/0x3b0 [ 702.873790][T16082] ? lockdep_hardirqs_on+0x9c/0x150 [ 702.873822][T16082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.873844][T16082] ? clear_bhb_loop+0x60/0xb0 [ 702.873871][T16082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.873893][T16082] RIP: 0033:0x7f671e38eb69 [ 702.873914][T16082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 702.873933][T16082] RSP: 002b:00007f671f195038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 702.873966][T16082] RAX: ffffffffffffffda RBX: 00007f671e5b6080 RCX: 00007f671e38eb69 [ 702.873983][T16082] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 702.873996][T16082] RBP: 00007f671e411df1 R08: 0000000000000004 R09: 0000000000000000 [ 702.874010][T16082] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 702.874025][T16082] R13: 0000000000000000 R14: 00007f671e5b6080 R15: 00007ffd46276348 [ 702.874061][T16082] [ 702.874070][T16082] Mem-Info: [ 703.228704][T16082] active_anon:9966 inactive_anon:0 isolated_anon:0 [ 703.228704][T16082] active_file:1710 inactive_file:40099 isolated_file:0 [ 703.228704][T16082] unevictable:768 dirty:213 writeback:0 [ 703.228704][T16082] slab_reclaimable:12156 slab_unreclaimable:210664 [ 703.228704][T16082] mapped:33616 shmem:4231 pagetables:1286 [ 703.228704][T16082] sec_pagetables:0 bounce:0 [ 703.228704][T16082] kernel_misc_reclaimable:0 [ 703.228704][T16082] free:1204470 free_pcp:18083 free_cma:0 [ 703.278438][T16082] Node 0 active_anon:40064kB inactive_anon:0kB active_file:6840kB inactive_file:160196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134464kB dirty:852kB writeback:0kB shmem:15388kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12936kB pagetables:4912kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 703.340605][ T94] block nbd1: Possible stuck request ffff888025777000: control (read@0,1024B). Runtime 450 seconds [ 703.351850][ T94] block nbd1: Possible stuck request ffff8880257771c0: control (read@1024,1024B). Runtime 450 seconds [ 703.363249][ T94] block nbd1: Possible stuck request ffff888025777380: control (read@2048,1024B). Runtime 450 seconds [ 703.367484][T16082] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 703.374403][ T94] block nbd1: Possible stuck request ffff888025777540: control (read@3072,1024B). Runtime 450 seconds [ 703.454446][T16082] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 703.485394][T16082] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 703.491481][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 703.503059][T16094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2641'. [ 703.541463][T16082] Node 0 DMA32 free:906096kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40120kB inactive_anon:0kB active_file:6840kB inactive_file:158352kB unevictable:1536kB writepending:852kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:50428kB local_pcp:25728kB free_cma:0kB [ 703.640326][T16094] IPv6: Can't replace route, no match found [ 703.657539][T16082] lowmem_reserve[]: 0 0 1 1 1 [ 703.681053][T16082] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1844kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 703.747610][T16082] lowmem_reserve[]: 0 0 0 0 0 [ 703.754149][T16082] Node 1 Normal free:3896292kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21892kB local_pcp:10952kB free_cma:0kB [ 703.789859][T16082] lowmem_reserve[]: 0 0 0 0 0 [ 703.795478][T16082] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 703.809080][T16082] Node 0 DMA32: 710*4kB (UM) 625*8kB (UM) 207*16kB (UM) 673*32kB (UM) 191*64kB (UME) 24*128kB (UME) 12*256kB (UM) 14*512kB (U) 12*1024kB (UM) 6*2048kB (UME) 201*4096kB (UM) = 906096kB [ 703.835131][T16082] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 703.849436][T16082] Node 1 Normal: 181*4kB (UE) 46*8kB (UME) 40*16kB (UME) 67*32kB (UME) 19*64kB (UME) 4*128kB (UM) 4*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3896292kB [ 703.869605][T16082] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 703.880367][T16082] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 703.892033][T16082] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 703.902580][T16082] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 703.912832][T16082] 46036 total pagecache pages [ 703.917613][T16082] 0 pages in swap cache [ 703.922562][T16082] Free swap = 124996kB [ 703.926806][T16082] Total swap = 124996kB [ 703.932096][T16082] 2097051 pages RAM [ 703.936405][T16082] 0 pages HighMem/MovableOnly [ 703.942207][T16082] 424872 pages reserved [ 703.946803][T16082] 0 pages cma reserved [ 703.969902][T16051] vxcan1 speed is unknown, defaulting to 1000 [ 704.261883][T16103] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2643'. [ 704.523799][T16105] syzkaller0: entered promiscuous mode [ 704.529549][T16105] syzkaller0: entered allmulticast mode [ 704.540870][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 705.580890][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 705.641837][T16095] vxcan1 speed is unknown, defaulting to 1000 [ 705.838915][T16088] vxcan1 speed is unknown, defaulting to 1000 [ 706.500586][T16091] vxcan1 speed is unknown, defaulting to 1000 [ 706.610884][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 706.863626][T16118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2646'. [ 706.974692][T16114] IPv6: Can't replace route, no match found [ 707.058425][T16107] vxcan1 speed is unknown, defaulting to 1000 [ 707.650875][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 707.967334][T16122] netlink: 'syz.1.2647': attribute type 13 has an invalid length. [ 707.998548][T16122] netlink: 'syz.1.2647': attribute type 17 has an invalid length. [ 708.177011][T16122] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.217573][T16127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 708.229190][T16122] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 708.261816][T16113] vxcan1 speed is unknown, defaulting to 1000 [ 708.336212][T16122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 708.406741][T16121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 708.509686][T16128] syzkaller1: entered promiscuous mode [ 708.515606][T16128] syzkaller1: entered allmulticast mode [ 708.690986][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 708.961776][T16135] netlink: 'syz.2.2650': attribute type 13 has an invalid length. [ 708.969678][T16135] netlink: 'syz.2.2650': attribute type 17 has an invalid length. [ 709.158223][T16135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.186400][T16135] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.208816][T16135] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 709.705476][T16133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 709.730927][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 710.362194][T16142] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2652'. [ 710.770818][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 711.094826][T16138] vxcan1 speed is unknown, defaulting to 1000 [ 711.122301][T16157] tipc: Enabling of bearer rejected, already enabled [ 711.192959][T16157] syzkaller0: entered promiscuous mode [ 711.210459][T16157] syzkaller0: entered allmulticast mode [ 711.264004][T16162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2657'. [ 711.355477][T16165] netlink: 'syz.4.2658': attribute type 13 has an invalid length. [ 711.401244][T16165] netlink: 'syz.4.2658': attribute type 17 has an invalid length. [ 711.481997][T16168] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2659'. [ 711.508127][T16165] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 711.593216][T16165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 711.651706][T16168] tipc: Resetting bearer [ 711.659777][T16168] syzkaller0: left promiscuous mode [ 711.688147][T16165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 711.762127][T16163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 711.776245][T16146] vxcan1 speed is unknown, defaulting to 1000 [ 711.810875][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 712.199344][T16144] vxcan1 speed is unknown, defaulting to 1000 [ 712.494335][T16178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2661'. [ 712.529195][T16178] IPv6: Can't replace route, no match found [ 712.640551][T16156] vxcan1 speed is unknown, defaulting to 1000 [ 712.850924][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 712.907416][T16180] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2662'. [ 713.246252][T16186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2663'. [ 713.455814][T16177] vxcan1 speed is unknown, defaulting to 1000 [ 713.891013][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 714.598555][T16183] vxcan1 speed is unknown, defaulting to 1000 [ 714.930868][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 715.393585][T16195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2665'. [ 715.970932][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 716.383444][T16203] netlink: 'syz.4.2667': attribute type 13 has an invalid length. [ 716.396456][T16204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2666'. [ 716.401633][T16203] netlink: 'syz.4.2667': attribute type 17 has an invalid length. [ 716.433137][T16203] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 716.508982][T16200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 716.576299][T16200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 716.584420][T16194] vxcan1 speed is unknown, defaulting to 1000 [ 716.643735][T16200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 716.764725][T16190] vxcan1 speed is unknown, defaulting to 1000 [ 717.010844][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 717.272571][T16209] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2668'. [ 717.876289][T16198] vxcan1 speed is unknown, defaulting to 1000 [ 718.050880][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 718.244871][T16213] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2670'. [ 718.778852][T16222] syzkaller1: entered promiscuous mode [ 718.784643][T16222] syzkaller1: entered allmulticast mode [ 719.090857][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 719.138595][T16226] netlink: 'syz.3.2673': attribute type 13 has an invalid length. [ 719.156769][T16226] netlink: 'syz.3.2673': attribute type 17 has an invalid length. [ 719.228255][T16226] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.256409][T16226] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 719.329781][T16226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 719.368803][T16233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2674'. [ 719.406306][T16226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 719.490435][T16228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 719.693141][T16215] vxcan1 speed is unknown, defaulting to 1000 [ 720.130872][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 720.393262][T16219] vxcan1 speed is unknown, defaulting to 1000 [ 720.844713][T16229] vxcan1 speed is unknown, defaulting to 1000 [ 721.170796][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 721.304978][T16236] vxcan1 speed is unknown, defaulting to 1000 [ 722.074638][T16255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2679'. [ 722.106672][T16246] vxcan1 speed is unknown, defaulting to 1000 [ 722.210904][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 722.320651][T16238] vxcan1 speed is unknown, defaulting to 1000 [ 722.899084][T16248] vxcan1 speed is unknown, defaulting to 1000 [ 723.237764][T16254] vxcan1 speed is unknown, defaulting to 1000 [ 723.250827][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 724.292134][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 725.330799][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 726.062184][T16269] warn_alloc: 3 callbacks suppressed [ 726.062206][T16269] syz.2.2680: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 726.166719][T16269] CPU: 1 UID: 0 PID: 16269 Comm: syz.2.2680 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 726.166755][T16269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 726.166770][T16269] Call Trace: [ 726.166780][T16269] [ 726.166791][T16269] dump_stack_lvl+0x189/0x250 [ 726.166825][T16269] ? __pfx_dump_stack_lvl+0x10/0x10 [ 726.166849][T16269] ? __pfx__printk+0x10/0x10 [ 726.166878][T16269] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 726.166904][T16269] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 726.166933][T16269] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 726.166962][T16269] warn_alloc+0x214/0x310 [ 726.166985][T16269] ? stack_depot_save_flags+0x40/0x900 [ 726.167013][T16269] ? __pfx_warn_alloc+0x10/0x10 [ 726.167039][T16269] ? kasan_save_track+0x4f/0x80 [ 726.167072][T16269] ? xskq_create+0x56/0x170 [ 726.167100][T16269] ? xsk_init_queue+0xb0/0x110 [ 726.167126][T16269] ? xsk_setsockopt+0x4dc/0x8d0 [ 726.167152][T16269] ? do_sock_setsockopt+0x17c/0x1b0 [ 726.167173][T16269] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 726.167193][T16269] ? do_syscall_64+0xfa/0x3b0 [ 726.167224][T16269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.167267][T16269] __vmalloc_node_range_noprof+0x125/0x12f0 [ 726.167325][T16269] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 726.167356][T16269] ? __kasan_kmalloc+0x93/0xb0 [ 726.167394][T16269] vmalloc_user_noprof+0xad/0xf0 [ 726.167417][T16269] ? xskq_create+0xbf/0x170 [ 726.167450][T16269] xskq_create+0xbf/0x170 [ 726.167484][T16269] xsk_init_queue+0xb0/0x110 [ 726.167519][T16269] xsk_setsockopt+0x4dc/0x8d0 [ 726.167551][T16269] ? __pfx_xsk_setsockopt+0x10/0x10 [ 726.167580][T16269] ? __pfx_aa_sk_perm+0x10/0x10 [ 726.167614][T16269] ? aa_sock_opt_perm+0x74/0x110 [ 726.167646][T16269] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 726.167672][T16269] ? __pfx_xsk_setsockopt+0x10/0x10 [ 726.167703][T16269] do_sock_setsockopt+0x17c/0x1b0 [ 726.167731][T16269] __x64_sys_setsockopt+0x13f/0x1b0 [ 726.167760][T16269] do_syscall_64+0xfa/0x3b0 [ 726.167791][T16269] ? lockdep_hardirqs_on+0x9c/0x150 [ 726.167822][T16269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.167844][T16269] ? clear_bhb_loop+0x60/0xb0 [ 726.167872][T16269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.167894][T16269] RIP: 0033:0x7f3ef2d8eb69 [ 726.167914][T16269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 726.167933][T16269] RSP: 002b:00007f3ef3c32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 726.167958][T16269] RAX: ffffffffffffffda RBX: 00007f3ef2fb6080 RCX: 00007f3ef2d8eb69 [ 726.167975][T16269] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 726.167989][T16269] RBP: 00007f3ef2e11df1 R08: 0000000000000004 R09: 0000000000000000 [ 726.168003][T16269] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 726.168018][T16269] R13: 0000000000000000 R14: 00007f3ef2fb6080 R15: 00007ffc91d6b298 [ 726.168053][T16269] [ 726.168201][T16269] Mem-Info: [ 726.370844][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 726.411509][T16269] active_anon:8927 inactive_anon:0 isolated_anon:0 [ 726.411509][T16269] active_file:1710 inactive_file:40107 isolated_file:0 [ 726.411509][T16269] unevictable:768 dirty:260 writeback:0 [ 726.411509][T16269] slab_reclaimable:12203 slab_unreclaimable:208144 [ 726.411509][T16269] mapped:32512 shmem:3163 pagetables:1227 [ 726.411509][T16269] sec_pagetables:0 bounce:0 [ 726.411509][T16269] kernel_misc_reclaimable:0 [ 726.411509][T16269] free:1212261 free_pcp:13726 free_cma:0 [ 726.616587][T16269] Node 0 active_anon:40108kB inactive_anon:0kB active_file:6840kB inactive_file:160228kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142448kB dirty:1040kB writeback:0kB shmem:15216kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13104kB pagetables:4876kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 726.685496][T16269] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 726.733888][T16285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2683'. [ 726.775211][T16269] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 726.889462][T16269] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 726.908206][T16269] Node 0 DMA32 free:936132kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40164kB inactive_anon:0kB active_file:6840kB inactive_file:158384kB unevictable:1536kB writepending:1040kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:29564kB local_pcp:10628kB free_cma:0kB [ 726.945817][T16269] lowmem_reserve[]: 0 0 1 1 1 [ 726.950877][T16269] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1844kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 726.981206][T16269] lowmem_reserve[]: 0 0 0 0 0 [ 726.986037][T16269] Node 1 Normal free:3896292kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21892kB local_pcp:10952kB free_cma:0kB [ 727.036141][T16269] lowmem_reserve[]: 0 0 0 0 0 [ 727.052586][T16269] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 727.073916][T16269] Node 0 DMA32: 671*4kB (UME) 32*8kB (UME) 330*16kB (UME) 971*32kB (UME) 302*64kB (UME) 59*128kB (UME) 29*256kB (UME) 18*512kB (UME) 11*1024kB (U) 7*2048kB (UME) 202*4096kB (UM) = 935804kB [ 727.100968][T16269] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 727.113395][T16269] Node 1 Normal: 181*4kB (UE) 46*8kB (UME) 40*16kB (UME) 67*32kB (UME) 19*64kB (UME) 4*128kB (UM) 4*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3896292kB [ 727.132277][T16269] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 727.142241][T16269] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 727.152124][T16269] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 727.180812][T16269] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 727.190285][T16269] 46044 total pagecache pages [ 727.198647][T16269] 0 pages in swap cache [ 727.203232][T16269] Free swap = 124996kB [ 727.207443][T16269] Total swap = 124996kB [ 727.212316][T16269] 2097051 pages RAM [ 727.216163][T16269] 0 pages HighMem/MovableOnly [ 727.222390][T16269] 424872 pages reserved [ 727.226571][T16269] 0 pages cma reserved [ 727.241590][T16268] vxcan1 speed is unknown, defaulting to 1000 [ 727.410800][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 727.447172][T16293] netlink: 'syz.2.2684': attribute type 13 has an invalid length. [ 727.471545][T16293] netlink: 'syz.2.2684': attribute type 17 has an invalid length. [ 727.598928][T16293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.623365][T16293] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.641106][T16297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 727.679165][T16293] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 727.738818][T16280] vxcan1 speed is unknown, defaulting to 1000 [ 727.815261][T16290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 727.916429][T16290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.454394][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 728.606107][T16303] netlink: 'syz.2.2686': attribute type 13 has an invalid length. [ 728.614406][T16303] netlink: 'syz.2.2686': attribute type 17 has an invalid length. [ 728.620195][T16277] vxcan1 speed is unknown, defaulting to 1000 [ 728.628966][T16303] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 728.739941][T16303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.811186][T16302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.964134][T16275] vxcan1 speed is unknown, defaulting to 1000 [ 729.217337][T16292] vxcan1 speed is unknown, defaulting to 1000 [ 729.449636][T16306] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2687'. [ 729.491408][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 730.030501][T16308] syzkaller0: entered promiscuous mode [ 730.040603][T16308] syzkaller0: entered allmulticast mode [ 730.530811][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 730.621441][T10569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.629330][T10569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.807530][T16314] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2690'. [ 731.494739][T16322] netlink: 'syz.3.2693': attribute type 13 has an invalid length. [ 731.503689][T16322] netlink: 'syz.3.2693': attribute type 17 has an invalid length. [ 731.559391][T16322] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 731.575175][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 731.635933][T16322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 731.700289][T16323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 731.774923][T16322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 731.787000][T16326] netlink: 'syz.4.2694': attribute type 13 has an invalid length. [ 731.817111][T16326] netlink: 'syz.4.2694': attribute type 17 has an invalid length. [ 731.925709][T16326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.963953][T16326] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.001127][T16326] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 732.085993][T16330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2695'. [ 732.105049][T16333] tipc: Enabled bearer , priority 0 [ 732.111715][T16324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.144967][T16333] syzkaller0: entered promiscuous mode [ 732.154299][T16333] syzkaller0: entered allmulticast mode [ 732.193586][T16333] tipc: Resetting bearer [ 732.207483][T16331] tipc: Resetting bearer [ 732.227556][T16331] tipc: Disabling bearer [ 732.243069][T16319] vxcan1 speed is unknown, defaulting to 1000 [ 732.610933][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 732.626769][T10569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.684123][T10569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.926623][T16352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2699'. [ 732.995552][T16349] IPv6: Can't replace route, no match found [ 733.009201][T16329] vxcan1 speed is unknown, defaulting to 1000 [ 733.411103][ T94] block nbd1: Possible stuck request ffff888025777000: control (read@0,1024B). Runtime 480 seconds [ 733.422334][ T94] block nbd1: Possible stuck request ffff8880257771c0: control (read@1024,1024B). Runtime 480 seconds [ 733.435966][ T94] block nbd1: Possible stuck request ffff888025777380: control (read@2048,1024B). Runtime 480 seconds [ 733.447174][ T94] block nbd1: Possible stuck request ffff888025777540: control (read@3072,1024B). Runtime 480 seconds [ 733.585636][T16356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2700'. [ 733.658933][T16356] IPv6: Can't replace route, no match found [ 733.660843][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 733.912830][T16348] vxcan1 speed is unknown, defaulting to 1000 [ 734.100046][T16344] vxcan1 speed is unknown, defaulting to 1000 [ 734.669258][T16340] vxcan1 speed is unknown, defaulting to 1000 [ 734.690804][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 734.927036][T16355] vxcan1 speed is unknown, defaulting to 1000 [ 735.730790][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 736.019078][T16362] netlink: 'syz.1.2701': attribute type 13 has an invalid length. [ 736.034790][T16362] netlink: 'syz.1.2701': attribute type 17 has an invalid length. [ 736.060491][T16362] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 736.266133][T16364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.358069][T16365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.425088][T16364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.780923][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 737.073043][T16377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2703'. [ 737.120486][T16372] IPv6: Can't replace route, no match found [ 737.393209][T16380] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2704'. [ 737.810957][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 738.091807][T16367] vxcan1 speed is unknown, defaulting to 1000 [ 738.709022][T16370] vxcan1 speed is unknown, defaulting to 1000 [ 738.850920][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 738.988406][T16396] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2708'. [ 739.537399][T16382] vxcan1 speed is unknown, defaulting to 1000 [ 739.629764][T16403] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2710'. [ 739.890791][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 740.187066][T16415] syz.4.2713: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 740.260144][T16415] CPU: 0 UID: 0 PID: 16415 Comm: syz.4.2713 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 740.260178][T16415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 740.260192][T16415] Call Trace: [ 740.260202][T16415] [ 740.260212][T16415] dump_stack_lvl+0x189/0x250 [ 740.260252][T16415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 740.260277][T16415] ? __pfx__printk+0x10/0x10 [ 740.260306][T16415] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 740.260333][T16415] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 740.260361][T16415] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 740.260390][T16415] warn_alloc+0x214/0x310 [ 740.260414][T16415] ? stack_depot_save_flags+0x40/0x900 [ 740.260441][T16415] ? __pfx_warn_alloc+0x10/0x10 [ 740.260466][T16415] ? kasan_save_track+0x4f/0x80 [ 740.260496][T16415] ? xskq_create+0x56/0x170 [ 740.260524][T16415] ? xsk_init_queue+0xb0/0x110 [ 740.260550][T16415] ? xsk_setsockopt+0x4dc/0x8d0 [ 740.260576][T16415] ? do_sock_setsockopt+0x17c/0x1b0 [ 740.260595][T16415] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 740.260616][T16415] ? do_syscall_64+0xfa/0x3b0 [ 740.260647][T16415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.260678][T16415] __vmalloc_node_range_noprof+0x125/0x12f0 [ 740.260740][T16415] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 740.260772][T16415] ? __kasan_kmalloc+0x93/0xb0 [ 740.260808][T16415] vmalloc_user_noprof+0xad/0xf0 [ 740.260831][T16415] ? xskq_create+0xbf/0x170 [ 740.260862][T16415] xskq_create+0xbf/0x170 [ 740.260896][T16415] xsk_init_queue+0xb0/0x110 [ 740.260929][T16415] xsk_setsockopt+0x4dc/0x8d0 [ 740.260961][T16415] ? __pfx_xsk_setsockopt+0x10/0x10 [ 740.260991][T16415] ? __pfx_aa_sk_perm+0x10/0x10 [ 740.261024][T16415] ? aa_sock_opt_perm+0x74/0x110 [ 740.261056][T16415] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 740.261081][T16415] ? __pfx_xsk_setsockopt+0x10/0x10 [ 740.261111][T16415] do_sock_setsockopt+0x17c/0x1b0 [ 740.261139][T16415] __x64_sys_setsockopt+0x13f/0x1b0 [ 740.261169][T16415] do_syscall_64+0xfa/0x3b0 [ 740.261200][T16415] ? lockdep_hardirqs_on+0x9c/0x150 [ 740.261238][T16415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.261260][T16415] ? clear_bhb_loop+0x60/0xb0 [ 740.261289][T16415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.261310][T16415] RIP: 0033:0x7f1d78b8eb69 [ 740.261331][T16415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.261351][T16415] RSP: 002b:00007f1d79954038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 740.261376][T16415] RAX: ffffffffffffffda RBX: 00007f1d78db6080 RCX: 00007f1d78b8eb69 [ 740.261393][T16415] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 740.261406][T16415] RBP: 00007f1d78c11df1 R08: 0000000000000004 R09: 0000000000000000 [ 740.261421][T16415] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 740.261435][T16415] R13: 0000000000000000 R14: 00007f1d78db6080 R15: 00007ffe32b7df48 [ 740.261469][T16415] [ 740.560469][T16415] Mem-Info: [ 740.564597][T16415] active_anon:9951 inactive_anon:0 isolated_anon:0 [ 740.564597][T16415] active_file:1710 inactive_file:40113 isolated_file:0 [ 740.564597][T16415] unevictable:768 dirty:331 writeback:0 [ 740.564597][T16415] slab_reclaimable:12173 slab_unreclaimable:209876 [ 740.564597][T16415] mapped:32618 shmem:4232 pagetables:1217 [ 740.564597][T16415] sec_pagetables:0 bounce:0 [ 740.564597][T16415] kernel_misc_reclaimable:0 [ 740.564597][T16415] free:1211545 free_pcp:11727 free_cma:0 [ 740.678336][T16421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2714'. [ 740.683472][T16391] vxcan1 speed is unknown, defaulting to 1000 [ 740.719860][T16415] Node 0 active_anon:39904kB inactive_anon:0kB active_file:6840kB inactive_file:160252kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130472kB dirty:1324kB writeback:0kB shmem:15392kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12952kB pagetables:4736kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 740.753613][T16415] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 740.785300][T16415] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 740.814645][T16415] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 740.820563][T16415] Node 0 DMA32 free:934396kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39960kB inactive_anon:0kB active_file:6840kB inactive_file:158408kB unevictable:1536kB writepending:1324kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:24120kB local_pcp:10304kB free_cma:0kB [ 740.853287][T16415] lowmem_reserve[]: 0 0 1 1 1 [ 740.858223][T16415] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1844kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 740.907510][T16415] lowmem_reserve[]: 0 0 0 0 0 [ 740.940857][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 740.951358][T16415] Node 1 Normal free:3896292kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21892kB local_pcp:10952kB free_cma:0kB [ 740.995793][T16415] lowmem_reserve[]: 0 0 0 0 0 [ 741.003078][T16415] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 741.025238][T16415] Node 0 DMA32: 699*4kB (UE) 54*8kB (UME) 146*16kB (UME) 926*32kB (UME) 318*64kB (UME) 62*128kB (UME) 23*256kB (UME) 19*512kB (UME) 11*1024kB (U) 8*2048kB (UME) 202*4096kB (UM) = 934140kB [ 741.060656][T16415] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 741.077146][T16415] Node 1 Normal: 181*4kB (UE) 46*8kB (UME) 40*16kB (UME) 67*32kB (UME) 19*64kB (UME) 4*128kB (UM) 4*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3896292kB [ 741.107377][T16415] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 741.131154][T16415] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 741.155325][T16415] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 741.169642][T16415] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 741.185287][T16415] 46050 total pagecache pages [ 741.190028][T16415] 0 pages in swap cache [ 741.196415][T16415] Free swap = 124996kB [ 741.200620][T16415] Total swap = 124996kB [ 741.209258][T16415] 2097051 pages RAM [ 741.215771][T16415] 0 pages HighMem/MovableOnly [ 741.224479][T16415] 424872 pages reserved [ 741.228684][T16415] 0 pages cma reserved [ 741.419877][T16390] vxcan1 speed is unknown, defaulting to 1000 [ 741.970835][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 742.231349][T16417] vxcan1 speed is unknown, defaulting to 1000 [ 742.724927][T16438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2716'. [ 742.785266][T16438] IPv6: Can't replace route, no match found [ 743.010985][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 743.382690][T16426] vxcan1 speed is unknown, defaulting to 1000 [ 743.794480][T16450] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2719'. [ 744.050993][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 744.183306][T16435] vxcan1 speed is unknown, defaulting to 1000 [ 744.490607][T16461] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2721'. [ 744.648339][T16464] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2722'. [ 744.899127][T16467] netlink: 'syz.1.2723': attribute type 13 has an invalid length. [ 744.909634][T16467] netlink: 'syz.1.2723': attribute type 17 has an invalid length. [ 745.024882][T16467] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.045673][T16467] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 745.100910][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 745.213536][T16469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.286179][T16466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.357587][T16467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.578641][T16458] vxcan1 speed is unknown, defaulting to 1000 [ 745.745023][T16446] vxcan1 speed is unknown, defaulting to 1000 [ 746.119366][T16471] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2724'. [ 746.130868][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 746.461824][T16456] vxcan1 speed is unknown, defaulting to 1000 [ 746.675577][T16476] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2725'. [ 746.886302][T16479] netlink: 'syz.1.2726': attribute type 13 has an invalid length. [ 746.908311][T16479] netlink: 'syz.1.2726': attribute type 17 has an invalid length. [ 747.006987][T16479] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.057518][T16479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 747.170917][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 747.178071][T16479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.247197][T16479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.320373][T16478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 748.210811][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 748.273888][T16484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2727'. [ 749.221485][T16483] vxcan1 speed is unknown, defaulting to 1000 [ 749.250799][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 750.258149][T16508] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2731'. [ 750.290897][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 750.556079][T16498] vxcan1 speed is unknown, defaulting to 1000 [ 750.975937][T16515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2733'. [ 751.146691][T16519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2734'. [ 751.178439][T16491] vxcan1 speed is unknown, defaulting to 1000 [ 751.331010][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 751.827570][T16495] vxcan1 speed is unknown, defaulting to 1000 [ 752.256186][T16500] vxcan1 speed is unknown, defaulting to 1000 [ 752.370785][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 752.987901][T16512] vxcan1 speed is unknown, defaulting to 1000 [ 753.410798][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 753.665496][T16530] vxcan1 speed is unknown, defaulting to 1000 [ 753.831810][T16517] vxcan1 speed is unknown, defaulting to 1000 [ 754.175269][T16526] vxcan1 speed is unknown, defaulting to 1000 [ 754.450784][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 755.490797][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 756.317949][T16541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2738'. [ 756.352086][T16542] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2737'. [ 756.372671][T16542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2737'. [ 756.441453][T16542] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2737'. [ 756.450541][T16542] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2737'. [ 756.530783][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 756.619478][T16551] netlink: 'syz.2.2739': attribute type 13 has an invalid length. [ 756.623416][T16548] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2741'. [ 756.660930][T16551] netlink: 'syz.2.2739': attribute type 17 has an invalid length. [ 756.872247][T16559] IPv6: Can't replace route, no match found [ 756.946534][T16560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 756.996467][T16551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 757.029056][T16551] 8021q: adding VLAN 0 to HW filter on device team0 [ 757.043661][T16560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 757.109081][T16551] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 757.215737][T16545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 757.424534][T16563] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2742'. [ 757.570814][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 757.772394][T16573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2744'. [ 757.960488][T16549] vxcan1 speed is unknown, defaulting to 1000 [ 757.968539][T16577] syz.2.2745: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 757.985621][T16577] CPU: 1 UID: 0 PID: 16577 Comm: syz.2.2745 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 757.985654][T16577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 757.985670][T16577] Call Trace: [ 757.985681][T16577] [ 757.985692][T16577] dump_stack_lvl+0x189/0x250 [ 757.985727][T16577] ? __pfx_dump_stack_lvl+0x10/0x10 [ 757.985752][T16577] ? __pfx__printk+0x10/0x10 [ 757.985781][T16577] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 757.985808][T16577] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 757.985837][T16577] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 757.985868][T16577] warn_alloc+0x214/0x310 [ 757.985890][T16577] ? stack_depot_save_flags+0x40/0x900 [ 757.985918][T16577] ? __pfx_warn_alloc+0x10/0x10 [ 757.985943][T16577] ? kasan_save_track+0x4f/0x80 [ 757.985982][T16577] ? xskq_create+0x56/0x170 [ 757.986012][T16577] ? xsk_init_queue+0xb0/0x110 [ 757.986039][T16577] ? xsk_setsockopt+0x4dc/0x8d0 [ 757.986063][T16577] ? do_sock_setsockopt+0x17c/0x1b0 [ 757.986083][T16577] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 757.986101][T16577] ? do_syscall_64+0xfa/0x3b0 [ 757.986132][T16577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.986163][T16577] __vmalloc_node_range_noprof+0x125/0x12f0 [ 757.986219][T16577] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 757.986249][T16577] ? __kasan_kmalloc+0x93/0xb0 [ 757.986287][T16577] vmalloc_user_noprof+0xad/0xf0 [ 757.986309][T16577] ? xskq_create+0xbf/0x170 [ 757.986341][T16577] xskq_create+0xbf/0x170 [ 757.986375][T16577] xsk_init_queue+0xb0/0x110 [ 757.986408][T16577] xsk_setsockopt+0x4dc/0x8d0 [ 757.986440][T16577] ? __pfx_xsk_setsockopt+0x10/0x10 [ 757.986477][T16577] ? __pfx_aa_sk_perm+0x10/0x10 [ 757.986511][T16577] ? aa_sock_opt_perm+0x74/0x110 [ 757.986543][T16577] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 757.986568][T16577] ? __pfx_xsk_setsockopt+0x10/0x10 [ 757.986598][T16577] do_sock_setsockopt+0x17c/0x1b0 [ 757.986625][T16577] __x64_sys_setsockopt+0x13f/0x1b0 [ 757.986653][T16577] do_syscall_64+0xfa/0x3b0 [ 757.986684][T16577] ? lockdep_hardirqs_on+0x9c/0x150 [ 757.986715][T16577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.986736][T16577] ? clear_bhb_loop+0x60/0xb0 [ 757.986763][T16577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.986783][T16577] RIP: 0033:0x7f3ef2d8eb69 [ 757.986804][T16577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 757.986824][T16577] RSP: 002b:00007f3ef3c53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 757.986851][T16577] RAX: ffffffffffffffda RBX: 00007f3ef2fb5fa0 RCX: 00007f3ef2d8eb69 [ 757.986868][T16577] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 757.986882][T16577] RBP: 00007f3ef2e11df1 R08: 0000000000000004 R09: 0000000000000000 [ 757.986897][T16577] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.986911][T16577] R13: 0000000000000000 R14: 00007f3ef2fb5fa0 R15: 00007ffc91d6b298 [ 757.986948][T16577] [ 757.986967][T16577] Mem-Info: [ 758.313167][T16577] active_anon:7066 inactive_anon:0 isolated_anon:0 [ 758.313167][T16577] active_file:1710 inactive_file:40119 isolated_file:0 [ 758.313167][T16577] unevictable:768 dirty:295 writeback:0 [ 758.313167][T16577] slab_reclaimable:12144 slab_unreclaimable:210536 [ 758.313167][T16577] mapped:32820 shmem:1361 pagetables:1234 [ 758.313167][T16577] sec_pagetables:0 bounce:0 [ 758.313167][T16577] kernel_misc_reclaimable:0 [ 758.313167][T16577] free:1210515 free_pcp:14909 free_cma:0 [ 758.359824][T16577] Node 0 active_anon:28264kB inactive_anon:0kB active_file:6840kB inactive_file:160276kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131280kB dirty:1180kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12976kB pagetables:4804kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 758.408330][T16577] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 758.445333][T16577] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 758.485661][T16577] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 758.496451][T16577] Node 0 DMA32 free:930404kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28220kB inactive_anon:0kB active_file:6840kB inactive_file:158432kB unevictable:1536kB writepending:1180kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:37364kB local_pcp:20160kB free_cma:0kB [ 758.530930][T16538] vxcan1 speed is unknown, defaulting to 1000 [ 758.540094][T16577] lowmem_reserve[]: 0 0 1 1 1 [ 758.548318][T16577] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1844kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 758.583243][T16577] lowmem_reserve[]: 0 0 0 0 0 [ 758.588198][T16577] Node 1 Normal free:3896292kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21892kB local_pcp:10944kB free_cma:0kB [ 758.620811][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 758.628428][T16577] lowmem_reserve[]: 0 0 0 0 0 [ 758.634815][T16577] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 758.653124][T16577] Node 0 DMA32: 1181*4kB (UM) 602*8kB (UM) 262*16kB (UM) 650*32kB (UME) 318*64kB (UME) 62*128kB (UME) 26*256kB (UME) 19*512kB (UME) 11*1024kB (U) 8*2048kB (UME) 201*4096kB (UM) = 930148kB [ 758.691969][T16577] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 758.704239][T16577] Node 1 Normal: 181*4kB (UE) 46*8kB (UME) 40*16kB (UME) 67*32kB (UME) 19*64kB (UME) 4*128kB (UM) 4*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3896292kB [ 758.742566][T16577] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 758.763285][T16577] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 758.793501][T16577] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 758.817084][T16577] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 758.861390][T16577] 43186 total pagecache pages [ 758.866361][T16577] 0 pages in swap cache [ 758.871828][T16577] Free swap = 124996kB [ 758.881935][T16577] Total swap = 124996kB [ 758.886150][T16577] 2097051 pages RAM [ 758.889982][T16577] 0 pages HighMem/MovableOnly [ 758.895172][T16577] 424872 pages reserved [ 758.899375][T16577] 0 pages cma reserved [ 759.650822][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 759.996049][T16568] vxcan1 speed is unknown, defaulting to 1000 [ 760.177180][T16569] vxcan1 speed is unknown, defaulting to 1000 [ 760.352582][T16588] syzkaller1: entered promiscuous mode [ 760.361248][T16588] syzkaller1: entered allmulticast mode [ 760.531566][T16565] vxcan1 speed is unknown, defaulting to 1000 [ 760.690785][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 761.045451][T16582] vxcan1 speed is unknown, defaulting to 1000 [ 761.730790][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 761.756703][T16590] vxcan1 speed is unknown, defaulting to 1000 [ 762.375903][ T3543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.402816][ T3543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.584962][T16601] netlink: 'syz.2.2750': attribute type 13 has an invalid length. [ 762.620519][T16601] netlink: 'syz.2.2750': attribute type 17 has an invalid length. [ 762.770904][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 762.836220][T16613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 762.838626][T16614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2751'. [ 762.943248][T16613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 762.960165][T16605] IPv6: Can't replace route, no match found [ 763.031548][T16601] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 763.124770][T16601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 763.492282][ T94] block nbd1: Possible stuck request ffff888025777000: control (read@0,1024B). Runtime 510 seconds [ 763.503514][ T94] block nbd1: Possible stuck request ffff8880257771c0: control (read@1024,1024B). Runtime 510 seconds [ 763.514746][ T94] block nbd1: Possible stuck request ffff888025777380: control (read@2048,1024B). Runtime 510 seconds [ 763.526278][ T94] block nbd1: Possible stuck request ffff888025777540: control (read@3072,1024B). Runtime 510 seconds [ 763.810996][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 763.992367][T16624] netlink: 'syz.2.2754': attribute type 13 has an invalid length. [ 764.000299][T16624] netlink: 'syz.2.2754': attribute type 17 has an invalid length. [ 764.178914][T16624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 764.235994][T16628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 764.317032][T16625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 764.397620][T16624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 764.515795][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.528103][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.674704][T16633] netlink: 'syz.0.2756': attribute type 13 has an invalid length. [ 764.686192][T16633] netlink: 'syz.0.2756': attribute type 17 has an invalid length. [ 764.734559][T16633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.744043][T16633] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.755796][T16633] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 764.776999][T16618] vxcan1 speed is unknown, defaulting to 1000 [ 764.804090][T16631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 764.850867][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 764.988909][T16600] vxcan1 speed is unknown, defaulting to 1000 [ 765.402212][T16642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2757'. [ 765.474278][T16639] IPv6: Can't replace route, no match found [ 765.785505][T16645] syzkaller1: entered promiscuous mode [ 765.799267][T16645] syzkaller1: entered allmulticast mode [ 765.890960][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 766.478455][T16636] vxcan1 speed is unknown, defaulting to 1000 [ 766.725684][T16659] netlink: 'syz.0.2761': attribute type 13 has an invalid length. [ 766.755175][T16659] netlink: 'syz.0.2761': attribute type 17 has an invalid length. [ 766.803073][T16659] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 766.889699][T16659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 766.940793][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 766.958079][T16659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 767.103963][T16659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 767.981404][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 768.402612][T16662] vxcan1 speed is unknown, defaulting to 1000 [ 768.549802][T16678] netlink: 'syz.3.2766': attribute type 13 has an invalid length. [ 768.556102][T16679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2765'. [ 768.590048][T16678] netlink: 'syz.3.2766': attribute type 17 has an invalid length. [ 768.635176][T16678] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 768.748342][T16676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 768.818115][T16676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 768.885101][T16676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 768.928973][T16683] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2767'. [ 769.010944][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 769.173470][T16686] netlink: 'syz.1.2768': attribute type 13 has an invalid length. [ 769.194555][T16686] netlink: 'syz.1.2768': attribute type 17 has an invalid length. [ 769.205239][T16673] vxcan1 speed is unknown, defaulting to 1000 [ 769.279964][T16686] 8021q: adding VLAN 0 to HW filter on device team0 [ 769.303583][T16686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 769.390357][T16684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 769.587961][T16690] netlink: 'syz.3.2769': attribute type 13 has an invalid length. [ 769.599901][T16690] netlink: 'syz.3.2769': attribute type 17 has an invalid length. [ 769.616401][T16690] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 769.699906][T16689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 769.766673][T16689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 769.826120][T16693] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2770'. [ 769.875282][T16689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 770.050911][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 770.341648][T16705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2772'. [ 770.415527][T16705] IPv6: Can't replace route, no match found [ 770.732114][T16711] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2773'. [ 770.752178][T16711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2773'. [ 770.781612][T16711] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2773'. [ 770.811292][T16711] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2773'. [ 771.090780][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 771.146651][T16715] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2774'. [ 771.161494][T16715] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2774'. [ 771.211704][T16698] vxcan1 speed is unknown, defaulting to 1000 [ 771.561828][T16700] vxcan1 speed is unknown, defaulting to 1000 [ 772.130875][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 772.586278][T16717] vxcan1 speed is unknown, defaulting to 1000 [ 772.801949][T16696] vxcan1 speed is unknown, defaulting to 1000 [ 773.170828][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 773.344510][T16709] vxcan1 speed is unknown, defaulting to 1000 [ 773.590210][T16714] vxcan1 speed is unknown, defaulting to 1000 [ 773.843463][T16726] vxcan1 speed is unknown, defaulting to 1000 [ 774.106372][T16741] netlink: 'syz.0.2780': attribute type 13 has an invalid length. [ 774.116490][T16741] netlink: 'syz.0.2780': attribute type 17 has an invalid length. [ 774.203770][T16741] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 774.220822][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 774.263319][T16741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 774.335886][T16741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 774.415740][T16741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 775.038683][T16745] netlink: 'syz.0.2781': attribute type 13 has an invalid length. [ 775.059503][T16745] netlink: 'syz.0.2781': attribute type 17 has an invalid length. [ 775.250874][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 775.474419][T16745] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 775.679678][T16748] netlink: 'syz.0.2782': attribute type 13 has an invalid length. [ 775.698006][T16748] netlink: 'syz.0.2782': attribute type 17 has an invalid length. [ 775.767783][T16748] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 775.833096][T16748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 775.897921][T16748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 775.964294][T16748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 776.069415][T16751] __nla_validate_parse: 7 callbacks suppressed [ 776.069436][T16751] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2783'. [ 776.117569][T16754] netlink: 'syz.4.2784': attribute type 13 has an invalid length. [ 776.129083][T16754] netlink: 'syz.4.2784': attribute type 17 has an invalid length. [ 776.228570][T16754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.266759][T16754] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.291303][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 776.309465][T16754] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 776.377522][T16752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 776.709248][T16760] tipc: Enabled bearer , priority 0 [ 776.745234][T16760] tipc: Resetting bearer [ 776.766497][T16759] tipc: Disabling bearer [ 777.273246][T16772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2788'. [ 777.337085][T16757] vxcan1 speed is unknown, defaulting to 1000 [ 777.340902][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 777.377267][T16779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2789'. [ 777.502567][T16768] IPv6: Can't replace route, no match found [ 777.508146][T16779] IPv6: Can't replace route, no match found [ 778.370829][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 778.569663][T16765] vxcan1 speed is unknown, defaulting to 1000 [ 779.410837][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 779.615084][T16769] vxcan1 speed is unknown, defaulting to 1000 [ 780.051671][T16766] vxcan1 speed is unknown, defaulting to 1000 [ 780.141184][ T31] INFO: task udevd:6127 blocked for more than 143 seconds. [ 780.161031][ T31] Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 [ 780.169614][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 780.185595][ T31] task:udevd state:D stack:22584 pid:6127 tgid:6127 ppid:5209 task_flags:0x400140 flags:0x00004006 [ 780.212688][ T31] Call Trace: [ 780.216166][ T31] [ 780.222598][ T31] __schedule+0x1737/0x4d30 [ 780.235090][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 780.248448][ T31] ? schedule+0x165/0x360 [ 780.259300][ T31] ? __pfx___schedule+0x10/0x10 [ 780.268928][ T31] ? schedule+0x91/0x360 [ 780.278064][ T31] schedule+0x165/0x360 [ 780.286913][ T31] io_schedule+0x80/0xd0 [ 780.294913][ T31] folio_wait_bit_common+0x6b0/0xb90 [ 780.310820][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 780.316801][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 780.328155][ T31] ? __filemap_get_folio+0x6e0/0xaf0 [ 780.339218][ T31] ? do_read_cache_folio+0x4e9/0x590 [ 780.350322][ T31] do_read_cache_folio+0x1aa/0x590 [ 780.355790][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 780.361441][ T31] read_part_sector+0xb6/0x2b0 [ 780.366340][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 780.372084][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 780.378355][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 780.384886][ T31] bdev_disk_changed+0x75c/0x14b0 [ 780.390071][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 780.400833][ T31] ? wait_on_inode+0xc0/0x230 [ 780.405688][ T31] blkdev_get_whole+0x380/0x510 [ 780.410865][ T31] bdev_open+0x31e/0xd30 [ 780.439751][ T31] blkdev_open+0x3a8/0x510 [ 780.450827][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 780.461120][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 780.466466][T16773] vxcan1 speed is unknown, defaulting to 1000 [ 780.472780][ T31] do_dentry_open+0xdf3/0x1970 [ 780.478817][ T31] vfs_open+0x3b/0x340 [ 780.488632][ T31] ? path_openat+0x2ecd/0x3830 [ 780.495171][ T31] path_openat+0x2ee5/0x3830 [ 780.500093][ T31] ? arch_stack_walk+0xfc/0x150 [ 780.505313][ T31] ? __pfx_path_openat+0x10/0x10 [ 780.510392][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.521382][ T31] do_filp_open+0x1fa/0x410 [ 780.526225][ T31] ? __lock_acquire+0xab9/0xd20 [ 780.540834][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 780.558980][ T31] ? _raw_spin_unlock+0x28/0x50 [ 780.569865][ T31] ? alloc_fd+0x64c/0x6c0 [ 780.577304][ T31] do_sys_openat2+0x121/0x1c0 [ 780.584452][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 780.592651][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 780.598236][ T31] ? rcu_is_watching+0x15/0xb0 [ 780.605117][ T31] __x64_sys_openat+0x138/0x170 [ 780.614645][ T31] do_syscall_64+0xfa/0x3b0 [ 780.619252][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.630490][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 780.639785][ T31] ? clear_bhb_loop+0x60/0xb0 [ 780.647737][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.657423][ T31] RIP: 0033:0x7fca4a5ce407 [ 780.666145][ T31] RSP: 002b:00007ffe6aeefd50 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 780.704535][ T31] RAX: ffffffffffffffda RBX: 00007fca4a542880 RCX: 00007fca4a5ce407 [ 780.734511][ T31] RDX: 00000000000a0800 RSI: 0000557b364b24f0 RDI: ffffffffffffff9c [ 780.747796][ T31] RBP: 0000557b364b1910 R08: 0000000000000000 R09: 0000000000000000 [ 780.767833][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000557b364c4e40 [ 780.795516][ T31] R13: 0000557b364c9430 R14: 0000000000000000 R15: 0000557b364c4e40 [ 780.807224][ T31] [ 780.811993][ T31] [ 780.811993][ T31] Showing all locks held in the system: [ 780.823897][ T31] 1 lock held by khungtaskd/31: [ 780.828851][ T31] #0: ffffffff8e13c4e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 780.840440][ T31] 2 locks held by getty/5599: [ 780.863660][ T31] #0: ffff8880343ac0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 780.877740][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 780.890991][ T31] 1 lock held by udevd/6127: [ 780.895686][ T31] #0: ffff8880256d3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 780.906439][ T31] 2 locks held by syz.1.2785/16757: [ 780.914431][ T31] 2 locks held by syz.0.2787/16766: [ 780.920212][ T31] #0: ffffffff8f4fc190 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 780.932340][ T31] #1: ffffffff8f509008 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 780.942796][ T31] 5 locks held by syz.0.2787/16773: [ 780.948076][ T31] #0: ffffffff8f4fc190 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 780.959421][ T31] #1: ffffffff8f274a90 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 780.972535][ T31] #2: ffffffff8f274c50 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 780.991522][ T31] #3: ffff888057fd8f68 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xee/0x5c0 [ 781.003145][ T31] #4: ffffffff8e13c4e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x2390 [ 781.015266][ T31] 3 locks held by syz.4.2788/16765: [ 781.020525][ T31] 3 locks held by syz.2.2789/16769: [ 781.033891][ T31] #0: ffffffff8f4fc190 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 781.046394][ T31] #1: ffffffff8f509008 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 781.062645][ T31] #2: ffffffff8e141f38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 781.079362][ T31] 5 locks held by syz.3.2790/16784: [ 781.084887][ T31] 2 locks held by syz.3.2790/16785: [ 781.090211][ T31] #0: ffff8880325178d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100 [ 781.117311][ T31] #1: ffffffff8e141f38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 781.291707][ T31] [ 781.294197][ T31] ============================================= [ 781.294197][ T31] [ 781.308548][T16783] caif:caif_disconnect_client(): nothing to disconnect [ 781.321106][ T31] NMI backtrace for cpu 0 [ 781.321129][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 781.321156][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 781.321170][ T31] Call Trace: [ 781.321179][ T31] [ 781.321190][ T31] dump_stack_lvl+0x189/0x250 [ 781.321221][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 781.321245][ T31] ? __pfx__printk+0x10/0x10 [ 781.321287][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 781.321318][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 781.321348][ T31] ? __pfx__printk+0x10/0x10 [ 781.321380][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 781.321415][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 781.321445][ T31] watchdog+0xf93/0xfe0 [ 781.321481][ T31] ? watchdog+0x1de/0xfe0 [ 781.321518][ T31] kthread+0x70e/0x8a0 [ 781.321548][ T31] ? __pfx_watchdog+0x10/0x10 [ 781.321578][ T31] ? __pfx_kthread+0x10/0x10 [ 781.321606][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 781.321636][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 781.321666][ T31] ? __pfx_kthread+0x10/0x10 [ 781.321690][ T31] ret_from_fork+0x3fc/0x770 [ 781.321724][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 781.321765][ T31] ? __switch_to_asm+0x39/0x70 [ 781.321789][ T31] ? __switch_to_asm+0x33/0x70 [ 781.321814][ T31] ? __pfx_kthread+0x10/0x10 [ 781.321841][ T31] ret_from_fork_asm+0x1a/0x30 [ 781.321884][ T31] [ 781.321895][ T31] Sending NMI from CPU 0 to CPUs 1: [ 781.471652][ C1] NMI backtrace for cpu 1 [ 781.471670][ C1] CPU: 1 UID: 0 PID: 10569 Comm: kworker/u8:10 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 781.471694][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 781.471707][ C1] Workqueue: bat_events batadv_nc_worker [ 781.471738][ C1] RIP: 0010:mark_lock+0x9/0x190 [ 781.471767][ C1] Code: ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 41 55 41 54 <53> 8b 46 20 89 c1 81 e1 00 00 03 00 83 f9 01 bb 09 00 00 00 83 db [ 781.471784][ C1] RSP: 0018:ffffc9000214f810 EFLAGS: 00000046 [ 781.471800][ C1] RAX: 0000000000000001 RBX: ffff888078f35a00 RCX: ffffffff934879b0 [ 781.471814][ C1] RDX: 0000000000000008 RSI: ffff888078f36540 RDI: ffff888078f35a00 [ 781.471827][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8b3dd2f7 [ 781.471839][ C1] R10: dffffc0000000000 R11: fffffbfff1f40f5f R12: 00000000ffffff05 [ 781.471852][ C1] R13: 0000000000000003 R14: ffff888078f36540 R15: 0000000000000000 [ 781.471864][ C1] FS: 0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 781.471879][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 781.471892][ C1] CR2: 0000001b30c03ff8 CR3: 000000007571c000 CR4: 00000000003526f0 [ 781.471909][ C1] Call Trace: [ 781.471916][ C1] [ 781.471926][ C1] __lock_acquire+0x6a8/0xd20 [ 781.471955][ C1] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 781.471980][ C1] lock_acquire+0x120/0x360 [ 781.472004][ C1] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 781.472031][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 781.472062][ C1] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 781.472086][ C1] _raw_spin_lock_bh+0x36/0x50 [ 781.472109][ C1] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 781.472133][ C1] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 781.472158][ C1] batadv_nc_purge_paths+0xe7/0x3b0 [ 781.472189][ C1] batadv_nc_worker+0x328/0x610 [ 781.472219][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 781.472248][ C1] process_scheduled_works+0xae1/0x17b0 [ 781.472289][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 781.472324][ C1] worker_thread+0x8a0/0xda0 [ 781.472364][ C1] kthread+0x70e/0x8a0 [ 781.472386][ C1] ? __pfx_worker_thread+0x10/0x10 [ 781.472413][ C1] ? __pfx_kthread+0x10/0x10 [ 781.472438][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 781.472461][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 781.472485][ C1] ? __pfx_kthread+0x10/0x10 [ 781.472506][ C1] ret_from_fork+0x3fc/0x770 [ 781.472535][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 781.472565][ C1] ? __switch_to_asm+0x39/0x70 [ 781.472586][ C1] ? __switch_to_asm+0x33/0x70 [ 781.472606][ C1] ? __pfx_kthread+0x10/0x10 [ 781.472627][ C1] ret_from_fork_asm+0x1a/0x30 [ 781.472655][ C1] [ 781.754144][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 781.762068][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 781.768965][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 781.780455][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 781.790549][ T31] Call Trace: [ 781.793863][ T31] [ 781.796829][ T31] dump_stack_lvl+0x99/0x250 [ 781.801459][ T31] ? __asan_memcpy+0x40/0x70 [ 781.806081][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 781.811297][ T31] ? __pfx__printk+0x10/0x10 [ 781.815922][ T31] panic+0x2db/0x790 [ 781.819836][ T31] ? __pfx_panic+0x10/0x10 [ 781.824269][ T31] ? __pfx___x2apic_send_IPI_mask+0x10/0x10 [ 781.830201][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 781.836407][ T31] watchdog+0xfd2/0xfe0 [ 781.840609][ T31] ? watchdog+0x1de/0xfe0 [ 781.844975][ T31] kthread+0x70e/0x8a0 [ 781.849072][ T31] ? __pfx_watchdog+0x10/0x10 [ 781.853788][ T31] ? __pfx_kthread+0x10/0x10 [ 781.858401][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 781.863617][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 781.868836][ T31] ? __pfx_kthread+0x10/0x10 [ 781.873458][ T31] ret_from_fork+0x3fc/0x770 [ 781.878079][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 781.883305][ T31] ? __switch_to_asm+0x39/0x70 [ 781.888094][ T31] ? __switch_to_asm+0x33/0x70 [ 781.892895][ T31] ? __pfx_kthread+0x10/0x10 [ 781.897518][ T31] ret_from_fork_asm+0x1a/0x30 [ 781.902314][ T31] [ 781.905684][ T31] Kernel Offset: disabled [ 781.910025][ T31] Rebooting in 86400 seconds..