last executing test programs: 5m3.723930323s ago: executing program 2 (id=1011): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x89}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0x27c, 0x21, 0x1, 0x0, 0x0, {{@in, @in6=@remote}}, [@migrate={0x219, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@empty}, {@in=@empty, @in=@private, @in6=@remote, @in6=@mcast2}, {@in=@local, @in6=@local, @in6=@empty, @in6=@private2}, {@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@private, @in=@dev}, {@in6=@mcast2, @in=@broadcast, @in6=@private2, @in6=@remote}]}, @policy_type={0xa}, @replay_esn_val={0x40, 0x17, {0x9, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @proto={0x5}, @mark={0xc}]}, 0x27c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x800, r1}, 0x38) 5m3.527581208s ago: executing program 2 (id=1015): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f00000000c0)={0xa, 0x20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000029000000360000003b000000000000001400000000000000290000000b000000000000020000000028"], 0x58}}], 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000340)={r0, &(0x7f0000000140)='GPL\x00', 0x200000, &(0x7f0000000180)={@align=0x5, {0x0, 0x2, 0x0, 0x8}}, 0xfffffff8, &(0x7f00000001c0), &(0x7f0000000200)}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20, 0xfffffffffffffff0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r1) 5m3.400225837s ago: executing program 2 (id=1018): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m3.144961767s ago: executing program 2 (id=1020): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newsa={0x154, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@remote, @in=@empty, 0x0, 0x5, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d3, 0x32}, @in6=@loopback, {0x1, 0x3, 0x9, 0x9, 0x10001, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1, 0xc0000000}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x4e23, 0x4e22, @in=@empty}}]}, 0x154}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0x0, 0x2, 0x5}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00cbd91cb800"/25], 0x48) mmap(&(0x7f00008b8000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) 5m3.035400019s ago: executing program 2 (id=1022): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001600), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="024c0004", @ANYRES16=r0, @ANYBLOB="01042cbd7000fddbdf251d0000000c000600010000000100000034002f800800010097220000080003800400038014000380080001000000000008000100010000000c0002000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x40c00c0}, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) mmap(&(0x7f0000b02000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r2, 0x3000) 5m0.920574168s ago: executing program 2 (id=1024): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b80)=@newtaction={0x6c, 0x30, 0x109, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x10}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @private}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 4m45.731554932s ago: executing program 32 (id=1024): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b80)=@newtaction={0x6c, 0x30, 0x109, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x10}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @private}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 2m38.007637105s ago: executing program 3 (id=2510): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000000)=0x1) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x1}, 0x1c) sendmsg$OSF_MSG_ADD(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 2m37.769082341s ago: executing program 3 (id=2513): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) (async, rerun: 64) r5 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r4, &(0x7f0000000800), &(0x7f00000001c0)=@tcp=r5, 0x2}, 0x20) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000044) 2m37.523387018s ago: executing program 3 (id=2515): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000180), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x4000) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x34000, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3d0, 0x160, 0x200, 0x160, 0x98, 0x98, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, &(0x7f00000000c0), {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x42}, 0xff000000, 0xffffff00, 'batadv_slave_1\x00', 'dvmrp1\x00', {}, {}, 0x6c, 0x3, 0x40}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2}}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff000000, 'pimreg1\x00', 'ip6gretap0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x49, 0x48, 0x1, 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x5}}}, {{@ip={@local, @remote, 0xff, 0xffffffff, 'nicvf0\x00', 'veth1\x00', {}, {}, 0x11, 0x1, 0x47}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x6, 0x80000001, @rand_addr=0x64010102, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8, 0x8, @multicast2, 0x4e21}}}, {{@ip={@rand_addr=0x64010102, @private=0xa010101, 0xff000000, 0xffffff00, 'pim6reg\x00', 'ip6tnl0\x00', {}, {0xff}, 0x4, 0x3, 0x4}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) 2m37.342450619s ago: executing program 3 (id=2521): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32=r2, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000130005000b00"/20, @ANYRES32=r2, @ANYBLOB="11e8efb61fbda94fdd2dfe67180420ec8e67e2e964b35d2d5aacac988026773c636fdbe0eb04fa1552b017c9b86dda7c92bba5"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 2m37.137688059s ago: executing program 3 (id=2525): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x34, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @typed={0x8, 0xf6, 0x0, 0x0, @pid=r1}, @nested={0xc, 0x12c, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r0}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 2m37.066592083s ago: executing program 3 (id=2527): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002700010000000000000000000e000000100001800b0002"], 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0xd}, [{0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x6}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5efd3e9c}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0xfffffffa}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900040c01010000808009000100626f6e64000000000c00028008000900030000007edaf72577549a17798e8c0232392d88b34cf20511592eb4676a09a29dd03200dfd50e3da243dd01717c8962ae3db06c95d04e9a0b8524717953e9efb82765f2d4994c9443ba9931447cdf4d2d7450127beab3e51b760602c743c6693247a4472c964036d04b493ab6c2ccfd95521f2fe4f61d6ef3a874065d1858001644cb5ddac0b5eec885c4afe5736e33f4b55361be1c0f69122f57fcabf405280085cf86c93c4ca85c15fbd84ec70f8e273607ada39ba1001e0367"], 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x2404c050) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001680)=ANY=[@ANYBLOB="4c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e00000000a5fe0280060001000000000008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="5c95b8df33b5c72af32adb3b1738ece5cd85e2d36eb4ed8fccf17a8d2a55f8485b72c6d9e32726cd7c822615be65538ebfafd6c64fb4fd784ff0a299490a56c9a3b16eb033712a30b88fa5fd38167bc294efa2580a9f824746e1aa90f09449e16b259c31b072ec8bb7cd2f15281a54ee06ba1ed9411a4a9d182f540428999d773320b2eadff7673307dd3ffbbbeda915c49e31325176c9bc646aed6364f99cf593fc"], 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c900000014003100fc010000000000000000000000000001ef948c95c530b78d405e13e70f8c004507df7200ccf002d2b87459afe968b1615070db6d58f2a45b89f70631a569c8aa967c896faea9929fecc4f188a871b2ca6ed36f479037b685fc0657f5a18a5202beb92193b4e8b4824bff2a0759fd4d817ead03fe1f9ee34d6ee1d113"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@u, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f580000000c0a0101000000000000000001001b000900020073797a32000000002c0003802800008008000340000000021c000b80360001800e000100636f6e6e6c696d69740c0000040002800900010073797a3000"], 0xdc}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r11) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r11) sendmsg$NL802154_CMD_NEW_INTERFACE(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="01002cbd7000fbdbdf25070031f70800010003000000191b5029669f997dffe2a96440000fe859598b034b1392e9884594242e6e3df8949dbb30d99b5327371a66c4465baf3dda0b34977af811eed8f67895ad2d0de658e55aa28907b0a0f9845025cda8e1f41ef434926a5d87c32c03b36a36ffc7fb2f55a671a2cec99e5a00"/140], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x26000000) 2m21.769003406s ago: executing program 33 (id=2527): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002700010000000000000000000e000000100001800b0002"], 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0xd}, [{0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x6}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5efd3e9c}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0xfffffffa}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900040c01010000808009000100626f6e64000000000c00028008000900030000007edaf72577549a17798e8c0232392d88b34cf20511592eb4676a09a29dd03200dfd50e3da243dd01717c8962ae3db06c95d04e9a0b8524717953e9efb82765f2d4994c9443ba9931447cdf4d2d7450127beab3e51b760602c743c6693247a4472c964036d04b493ab6c2ccfd95521f2fe4f61d6ef3a874065d1858001644cb5ddac0b5eec885c4afe5736e33f4b55361be1c0f69122f57fcabf405280085cf86c93c4ca85c15fbd84ec70f8e273607ada39ba1001e0367"], 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x2404c050) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001680)=ANY=[@ANYBLOB="4c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e00000000a5fe0280060001000000000008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="5c95b8df33b5c72af32adb3b1738ece5cd85e2d36eb4ed8fccf17a8d2a55f8485b72c6d9e32726cd7c822615be65538ebfafd6c64fb4fd784ff0a299490a56c9a3b16eb033712a30b88fa5fd38167bc294efa2580a9f824746e1aa90f09449e16b259c31b072ec8bb7cd2f15281a54ee06ba1ed9411a4a9d182f540428999d773320b2eadff7673307dd3ffbbbeda915c49e31325176c9bc646aed6364f99cf593fc"], 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c900000014003100fc010000000000000000000000000001ef948c95c530b78d405e13e70f8c004507df7200ccf002d2b87459afe968b1615070db6d58f2a45b89f70631a569c8aa967c896faea9929fecc4f188a871b2ca6ed36f479037b685fc0657f5a18a5202beb92193b4e8b4824bff2a0759fd4d817ead03fe1f9ee34d6ee1d113"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@u, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f580000000c0a0101000000000000000001001b000900020073797a32000000002c0003802800008008000340000000021c000b80360001800e000100636f6e6e6c696d69740c0000040002800900010073797a3000"], 0xdc}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r11) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r11) sendmsg$NL802154_CMD_NEW_INTERFACE(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="01002cbd7000fbdbdf25070031f70800010003000000191b5029669f997dffe2a96440000fe859598b034b1392e9884594242e6e3df8949dbb30d99b5327371a66c4465baf3dda0b34977af811eed8f67895ad2d0de658e55aa28907b0a0f9845025cda8e1f41ef434926a5d87c32c03b36a36ffc7fb2f55a671a2cec99e5a00"/140], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x26000000) 1m26.523156624s ago: executing program 4 (id=3288): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100001080000e3015b08162335a00000", @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r2, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r3, &(0x7f0000000480)={@void, @val, @ipv6=@dccp_packet={0x0, 0x6, "492216", 0xfcf, 0x21, 0x0, @dev, @private2, {[@fragment, @routing={0x0, 0xc, 0x0, 0x0, 0x0, [@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @empty]}, @hopopts={0x0, 0x1e0, '\x00', [@generic={0x0, 0xeff, "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"}]}], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "85b36f", 0x0, "63f226"}, "6927155de4155953418064938630a61736c5e9f80d756280b0d28fd858ebabd2c7d30f6e3cc7f93d294c6275d3420ce5ba199ec804b4ec9ab7cb4384532cc3"}}}}, 0x1001) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x541b, &(0x7f0000000040)) ioctl$OCFS2_IOC_MOVE_EXT(r3, 0x40406f06, &(0x7f0000000080)={0x100000001, 0x5c5dc2bc, 0x0, 0xe1d, 0x6}) 1m26.222652457s ago: executing program 4 (id=3293): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x1b, @val=@iter={0x0}}, 0x20) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x1b, @val=@iter={0x0}}, 0x20) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newneigh={0x28, 0x1c, 0x401, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, [@NDA_DST_MAC={0xa, 0x1, @link_local}]}, 0x28}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newneigh={0x28, 0x1c, 0x401, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, [@NDA_DST_MAC={0xa, 0x1, @link_local}]}, 0x28}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b0001007461726765740000400002802c000300000000000455afb9fdd672bad09dfb78c7699c74e891a0c7fffffff50000000000000000000000000800024000000000080001004c4544000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000a00)=[@in6={0xa, 0x4e20, 0xffeffffa, @mcast1, 0x1}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x38) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000a00)=[@in6={0xa, 0x4e20, 0xffeffffa, @mcast1, 0x1}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x38) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f00000009c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x60}, 0xc, &(0x7f0000000980)={&(0x7f0000000380)={0x14, r6, 0x10, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x40010) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@eui64={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x1, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'pim6reg\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d8) sendto$inet6(r5, &(0x7f0000000080)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) (async) sendto$inet6(r5, &(0x7f0000000080)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4) recvmmsg(r5, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/167, 0xa7}, 0x5}], 0x1, 0x102, 0x0) (async) recvmmsg(r5, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/167, 0xa7}, 0x5}], 0x1, 0x102, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x2, 0x1000000000000005, 0x0) (async) r9 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r9, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0xfffd, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000a40)="9381dd0fdd1be26bd0420e97d84794db2f133610dba811cce192ef639a2209750c56874136ad4288ac79370415f966e828893e07c193a72c8306eb388e17ed6c7a454bc7f3b26f4ef38a0a2f1eec84c8fceae6a7aa22c11b0c620ed40b03d37e334f881822c739142c382d6fe28b9a5bc3e489d559ed34d44771da72c4ed52c3f3ae1bb1022cba876d3887bdeb1b3a6cbda224ca7ffd1527eb3b07ba80d44341342ba9f8f7727a49163e566dd7583dd6494477dddecda870c264", 0xba}], 0x1, &(0x7f0000000b80)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_retopts={{0x10, 0x84}}], 0x28}, 0x4dc) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="4401000010000100fdffffbffe000800e000000200000000000000000000ffffffff000000000000000000000000000307944e230020020020003c0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r3], 0x144}, 0x1, 0x0, 0x0, 0xc801}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0xe599, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x400}, {0xfffffffffffffffc, 0x3}, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x41}, 0x4d6, 0x6c}, 0x2, @in6=@mcast2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400100}}, 0xe8) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x3a00, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r11 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYRESDEC=r0], 0x60}}, 0x0) 1m25.721339457s ago: executing program 4 (id=3301): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xe, 0x50, r0, 0x4b838000) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000ec0)='%){:-\x00', 0x6) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$sock_int(r2, 0x1, 0x4, &(0x7f0000000040)=0xac0d, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0108000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0xccd21cca, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r9 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x7, 0xfff2}, {0xa, 0xffff}, {0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xd7, 0xd782, 0x8, 0x704, 0x4}, 0x10}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) write$tun(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="000186dd06aa"], 0xfdef) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESDEC], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000003800)={0x0, 0x0, 0x0, 0x0, 0x1, r11}, 0x38) 1m25.199198246s ago: executing program 4 (id=3311): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000003c00010025bd700000000000030100000f00000006000100001100002d4197ea43fe75dd7d5b9e5fa5038b7c5d82909049a1ded61d0b1e5693d8e240c6b92d82546fc7fcba80df7be24ce5f63e7f123bc147861321bbdfb5885123a9052a87438dcd4192b3a6093609d385df6064e961d1ca0eabc3827c0573da55c1f473bd6a635f069f8a339e27d6b0d17b693a202c90e6b5afa5c8f63632d7e523cdfb30509bb339d02230"], 0x20}}, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0500000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB="010000000000000000000000000000000000000027eed3e4751a43d2b3c0921117b2deb0a1ed6640c58c3968db876435d9abe80aa7b4242d37c8592e6d704f4bd418cf9e450aa442899ce37a1a969769a569367131cdb526f4ea52a4a7eb23bb6d815aef0f643c3711a22d56c7105f929fb9885c99565861a9e7f07145398a7ac62ff23b40b1a7286dd29c6002ace8f79800960f912e068026bf412eae6ba356a3f56c6600a97188aa371caca27f2080573c952c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8=r0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) (async, rerun: 32) r4 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000140), &(0x7f0000000180)=r3}, 0x20) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) (async) sendmmsg$inet(r4, 0x0, 0x0, 0x4000084) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) (async) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r12, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r13}]}}}, @IFLA_TXQLEN={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x4c}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000f00)=ANY=[@ANYBLOB="0c020000", @ANYRES16=r10, @ANYBLOB="08002bbd7000fbdbdf250000000008000100", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r13, @ANYBLOB="4000010024000137d372b4a4b000616374697665706f727400000000bd0000000c980000001f7d0000000000000005000300cc3766e1fa7af91c030000000800040047a3c5a6145a74d31c25a8a20272e6a9ff443936d22ccbadaf5e903a2c22a698c20406ed80909f937ada7442607cf4dde427688afc6ae47320b6c1bd1fff9b45405ae77fea71833122bfd4bbd9c5eeb21f83f8f4dad758c7693a8a56003e7d5d6baa14ce150d9222b36165291873ea87d5e413fde619683c882e49f5594ed557663b49c030ec4e072f5bb7978d6bde971d9eb36c7810b63fa9000000000000000000", @ANYRES32=r7, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=r7, @ANYBLOB], 0x20c}, 0x1, 0x0, 0x0, 0x40}, 0x4041) (async) sendmsg$inet6(r9, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7fffffff, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="3000000000000000290000000400000084020004003f01f40402000304"], 0x30}, 0x40) (async) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x11, &(0x7f00000007c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x6}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffeb}}], &(0x7f0000000880)='syzkaller\x00', 0xbce7, 0xf6, &(0x7f00000008c0)=""/246, 0x40f00, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000a00)={0x3, 0xa, 0x29, 0x9}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000a40)=[r0, 0xffffffffffffffff, r1, r0, r0, r5, r5, r1], &(0x7f0000000a80)=[{0x4, 0x2, 0xf, 0x7}, {0x3, 0x5, 0xa, 0x9}, {0x3, 0x2, 0x4}, {0x3, 0x3, 0x5, 0xa}, {0x4, 0x1, 0x5, 0x538968c1321da2c1}, {0x4, 0x5, 0x8, 0x2}, {0x4, 0x5, 0x1, 0x9}, {0x1, 0x4, 0x6, 0xa}, {0x5, 0x4, 0x10, 0x1}, {0x4, 0x3, 0x8, 0x6}], 0x10, 0xc}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c00)={r14, r7, 0x25, 0x0, @void}, 0x10) 1m24.038448144s ago: executing program 4 (id=3323): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000280)=0x7fff) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) recvmmsg(r4, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010000, 0x0) bind$can_j1939(r2, &(0x7f00000001c0)={0x1d, r3, 0x102030405060708, {0x0, 0x0, 0x4}, 0xff}, 0x18) connect$can_j1939(r2, &(0x7f0000000180)={0x1d, r3, 0x0, {0x0, 0xee}, 0x2}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20048804}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0xc0189436, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local, 0x3c9}}) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x44}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r5, 0x80286722, &(0x7f0000000500)={&(0x7f0000000440)=""/168, 0xa8, 0x1, 0x7}) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r9 = socket$inet6(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, 0x0, 0x4000) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_int(r7, 0x29, 0xce, &(0x7f00000002c0)=0xa1, 0x4) 1m23.72280658s ago: executing program 4 (id=3328): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x3ff, 0x89, 0x10, 0x89}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={0x14, 0x27, 0x1, 0x7fffd, 0x25dfdbfd, {0x6}}, 0x14}}, 0x4008090) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x2, 0x5, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000080)) r2 = socket$inet(0x2, 0x800, 0x10001) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000006c0)={'filter\x00', 0x7, 0x4, 0x3d0, 0x200, 0x200, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000100), {[{{@arp={@empty, @loopback, 0xff000000, 0x0, 0x7, 0x5, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff]}}, 0x0, 0xda, 0x90, 0x0, 0x4, 0x7ff, 'pim6reg0\x00', 'wg2\x00', {0xff}, {}, 0x0, 0x14}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xb, 0x9, 0x8, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @empty, @broadcast, 0xf, 0x1}}}, {{@arp={@rand_addr=0x64010102, @local, 0xff, 0xff000000, 0x4, 0x0, {@empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0xff, 0xff]}}, 0xb, 0x1, 0x2, 0x2, 0x1, 0x9, 'veth1_vlan\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x0, 0x18}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xbf, 0xaa}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) 1m8.62256895s ago: executing program 34 (id=3328): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x3ff, 0x89, 0x10, 0x89}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={0x14, 0x27, 0x1, 0x7fffd, 0x25dfdbfd, {0x6}}, 0x14}}, 0x4008090) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x2, 0x5, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000080)) r2 = socket$inet(0x2, 0x800, 0x10001) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000006c0)={'filter\x00', 0x7, 0x4, 0x3d0, 0x200, 0x200, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000100), {[{{@arp={@empty, @loopback, 0xff000000, 0x0, 0x7, 0x5, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff]}}, 0x0, 0xda, 0x90, 0x0, 0x4, 0x7ff, 'pim6reg0\x00', 'wg2\x00', {0xff}, {}, 0x0, 0x14}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xb, 0x9, 0x8, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @empty, @broadcast, 0xf, 0x1}}}, {{@arp={@rand_addr=0x64010102, @local, 0xff, 0xff000000, 0x4, 0x0, {@empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0xff, 0xff]}}, 0xb, 0x1, 0x2, 0x2, 0x1, 0x9, 'veth1_vlan\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x0, 0x18}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xbf, 0xaa}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) 5.675318585s ago: executing program 1 (id=4270): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000000)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) 5.262675035s ago: executing program 1 (id=4272): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@typedef={0x5, 0x0, 0x0, 0x8, 0x5}, @float={0xd, 0x0, 0x0, 0x10, 0xc}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x76, 0x0, 0x79, 0x6}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x1}]}]}}, 0x0, 0x56, 0x0, 0x0, 0xc4}, 0x28) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) (async) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000140)='./file0\x00', r2, 0x4000, r0}, 0x18) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a3, &(0x7f0000000200)='bridge0\x00') (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0xa, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x27}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x43}, 0x40044) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={&(0x7f0000000000)="bb96b96125f1f346d51b245d95e2bd53332434427bcf0b3fcbf1dafd15a418790bb0d7fc633a6f195d914edad863204fba6910dcf7eca3d90cc0eea1b321089bd3325ce16749784d9be6a5e9127ed483dc8d37b931988cc1e7e8ada4a5b26714dde9d5d93442de833b6d0302df54c45c735e2a", &(0x7f0000000080)=""/171, &(0x7f0000000240)="dd822af4112d60f89d38fb9c7128b83f3b70fe851970ba712163f4a5f83199d68c05c491d0876dc152d212d3e176b7451b87cde5f4a9f75cc4f3a43f7d9d1eacf47078ac7eefd8862b69f45b149530e2c9ce2f44ce05363a38845db22a44fb2a2228671311f79ebc78fe1c8c7b92dc8b1b7d7f2f989ca227690170e77ae625f46d78", &(0x7f00000003c0)="71625e0d8326ae97da19e2b74de07baed843c7aef99d4bf643c2116f8996f99feb6ebe53a85b6a1c706c8e920d13f19dcea44cfd3fc97c0b645768bf138c9185d5fa15d8793cf1cb8d9a4fec7367bfb30159968158723c12e9dd0d4e995d775ff88c0b0d1b6df205093b3336f9f18d1a7d6bfab6d596de2eafe58359d627c673cc9e0d2ff314786171119f8169d4599ccf03ebddeb1d7982f78cb56cadb67ce26cbcb2ba290c188a328091bd41a84dc54db5c4fac58c2e2a624c9bb28a8a2e42c3a497b74c95e6660b5477a33a206e706cefab659b179de4f58ed2b0c9dbd7d0fc1283a6cd5c234db5", 0x5, 0x1, 0x4}, 0x38) 4.891103007s ago: executing program 1 (id=4277): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='{)\x00', 0x440, &(0x7f0000000040)={@align=0x7, {0x5f, 0xdab8, 0x9, 0x1ff}}, 0x40, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x5a7}) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000140)=0x3, 0x4) (async) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000180)={@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x23}, 0x1, "db62471d0c0c138328d2b0d9e10d003dcd26764cf6863277de36ade7588c48c3", 0x44, 0x9, 0x8, 0xa70}, 0x3c) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f00000001c0)) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000200)={'sit0\x00', {0x2, 0x4e23, @private=0xa010101}}) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={0x0, @multicast2, @remote}, &(0x7f0000000280)=0xc) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x1, 0x9, 0x2, @vifc_lcl_ifindex=r1, @local}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000300)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000340)=0x20) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000380)=r4, 0x4) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000003c0)={r3, 0x9, 0x9, 0x5}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000440)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000480)=0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r6, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x22}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r7) (async) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r7, 0x4058587a, &(0x7f0000000880)={{r7, &(0x7f0000000740)='nl80211\x00', 0x68001, &(0x7f0000000780)={@_ha_fsid={[0xd1, 0x8]}, {0x2, 0x1, 0x6, 0x1}}, 0x1, &(0x7f00000007c0)={@_ha_fsid}, &(0x7f0000000800)=0x80}, {[0x4, 0xfff, 0x1, 0x7ff]}, 0x6, 0x28, &(0x7f0000000840)=""/40}) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000900)={r2, @in6={{0xa, 0x4e24, 0x7fff, @loopback, 0xe1b}}, 0x6, 0x766}, 0x90) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r9, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfa}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}]}, 0x38}}, 0xdfb1dc25f1e9c7b2) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MAC_ACL(r10, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, r6, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x80040) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000c00)={r5, 0x8}, &(0x7f0000000c40)=0x8) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80), r0) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000cc0), r12) (async) sendmsg$sock(r12, &(0x7f0000000f00)={&(0x7f0000000d00)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x2, 0x2}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000d80)="f77c8b93b90311ea0b96c4f999d47415a0dc14b5305882e08038527393aac275c7651a2d78eadb3ea1050ac26d9d34f5d505056a74fa2b2b4f2dae67d0a99a2d5ca86b5aa1b541d21b9a3c66901adc7d39f37c3f7439ae27bcba0fe04c15c1a969e7880eb32cd436f3d66a4ec53a7c", 0x6f}], 0x1, &(0x7f0000000e40)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0xe2}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x90}, 0x4) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000f40)={0x0, 0x0, {}, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r7, 0xd000941e, &(0x7f0000001340)={r13, "3ac09f4d59a74c706c1b7421fada009e"}) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000002340)=@assoc_value={r11, 0xffff9154}, 0x8) 4.777062591s ago: executing program 1 (id=4278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x8001, 0x0, r1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x1d, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @alu={0x7, 0x0, 0x0, 0x7, 0x3, 0x1}, @jmp={0x5, 0x0, 0xc, 0xb, 0x1, 0xffffffffffffffe0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xffff, 0xfff2}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async, rerun: 32) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, r8}, 0x90) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0x2, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x100}], &(0x7f00000003c0)='syzkaller\x00', 0xf95, 0x0, 0x0, 0x40f00, 0x14, '\x00', r6, @fallback=0x1e, r7, 0x8, &(0x7f0000000480)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0x1, 0x7, 0x4}, 0x10, r9, r3, 0x3, &(0x7f0000000540)=[r1, r1, r2], &(0x7f0000000580)=[{0x5, 0x5, 0x10, 0xc}, {0x2, 0x2, 0x7, 0xb}, {0x4, 0x5, 0x4, 0x4}], 0x10, 0x7985}, 0x94) (async, rerun: 32) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2800000013"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.12241055s ago: executing program 6 (id=4286): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x20040010) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x15, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x8}]}, 0x140}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd27, 0x800001, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x7ffc, 0x3, 0x5, 0xfffffff8}, @loopback, @multicast1, 0xffffffff, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x20040010) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x15, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x8}]}, 0x140}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd27, 0x800001, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x7ffc, 0x3, 0x5, 0xfffffff8}, @loopback, @multicast1, 0xffffffff, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x4) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 3.873448111s ago: executing program 6 (id=4290): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000200)=@framed={{0x5, 0x0, 0x0, 0x0, 0x8000, 0x69, 0x11, 0xb6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @ldst={0x2, 0x0, 0x4, 0xa, 0xb, 0x30, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x14, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000005000000000800040001000000", 0x24) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e22, 0x8, @loopback, 0x40}}, 0x8, 0x4}, &(0x7f0000000140)=0x90) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r2, 0xfc000000}, 0x8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'fo\x00', 0x4, 0x1ffc, 0x3a}, 0x2c) 3.779586962s ago: executing program 1 (id=4292): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000611177000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = socket$inet6(0xa, 0xd, 0x7) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@fallback=r0, 0x0, 0x1, 0x7, &(0x7f00000003c0)=[0x0], 0x1, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0]}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000ddff370001001000000095"], &(0x7f0000000000)='GPL\x00', 0x7}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2, 0x80805, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3}, 0x50) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r4, 0x58, &(0x7f0000000600)}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'macvlan0\x00', 0x800}) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000054000104000000000000000007000000", @ANYRES32=r9, @ANYBLOB="20000100", @ANYRES32=r10, @ANYBLOB="01000000ef0101010000000000"], 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r7, 0x891b, &(0x7f0000000180)={'wg0\x00', {0x2, 0x0, @multicast2}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)={0x84, r5, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20040080}, 0x8800) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) 3.647067547s ago: executing program 5 (id=4295): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) connect$can_j1939(r0, &(0x7f0000000140), 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$x25(r2, &(0x7f0000000080), 0x12) bind$packet(r6, &(0x7f0000000300)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(r6, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0xbe}, 0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r5}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000200025a726bd7000fddbdf25000100000000000002000100080006000000d2e5e80c5e81ed67000000000000000000000000003c0500150002000000"], 0x40}, 0x1, 0x0, 0x0, 0x20008081}, 0xc000) 3.619396102s ago: executing program 6 (id=4296): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x8050) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='vlan0\x00', 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="010000000000220010000000000000010000000000020800450000740001400040063c817f0000017f00000104d204d200000001000000005010000000000000", 0x40}, {&(0x7f0000000300)='\x00'/76, 0x4c}], 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@empty, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x4040, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, {0xbe00, 0x88be, 0x8}}}}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d0000000080211000001", @ANYRES32=r6, @ANYRESDEC], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x20000010) 3.329222261s ago: executing program 5 (id=4299): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r1, 0x29, 0xc8, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@getchain={0x24, 0x66, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 3.268872261s ago: executing program 1 (id=4300): socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000004c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x840) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r3, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0xc004) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef) 3.249483374s ago: executing program 5 (id=4301): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x1, &(0x7f00000001c0)="1a0000000200000007a2d465d4c37889f5cc51297ca57381198596ac1f1c83a195860384b39a5d57185336a14973eb814727bde100c4dbc99776bbb5beb9c2ee49dbc77927882dbc049921937ac7809bb603ee16611285f966f762c102c0ccb37922fed0a58657e3c6de8a7eb458c5b0ed02e06c77b8b65a1e8f525d4f9ba30180b5eb0da683cff4969556369f90022b9ba61a0220901c46e1819d2e08d30000000000000000cac9c4c7503c6219a2e41e1fa9a3d21b59f2c2b0226c175e0e73096d39ab888c2cdcd517c95a5afc4c71cbc61c68ca28e799bc3938b9272d393e2e7c45eba78bbddc41162089dbc1366cec119bbe753187e96ad3c052062c94dd9d2b1d9a6016a5343c6405738b50172cb85d8a2b1eddb057e87bf72bb182f3261493cb2bbcc0befbc3f257b4f74f5bfaba3c458d0fa839eff7dfb8", 0xfffffffffffffe75) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000000c0)={0x0, 0x9}, 0x8) 3.248022153s ago: executing program 6 (id=4302): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0], 0x68}, 0x1, 0x0, 0x0, 0xae70693d92872c24}, 0xc000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000440)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x2}}) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0], 0x68}, 0x1, 0x0, 0x0, 0xae70693d92872c24}, 0xc000) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000440)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x2}}) (async) socket$kcm(0x29, 0x2, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)) (async) 3.095809251s ago: executing program 5 (id=4305): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b000020000280140007002001000000000000000000000000000008000100"/52, @ANYRES8=r1], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.007396056s ago: executing program 0 (id=4306): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="89000000120081ae08061cdc030ec080000000040000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @local}}, 0x40000000, 0x9, 0x7, 0x3, 0x11, 0x5, 0x5}, &(0x7f00000004c0)=0x9c) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000500)={r5, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84) sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201c5", 0x2f}], 0x1}, 0x4000804) 2.907416237s ago: executing program 6 (id=4307): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000280)=0x1, 0x4) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r7, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8840) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001840)=@newtfilter={0x40, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r8, {0x9}, {0xffff}, {0x10, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0xfff2}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1e, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x101}, [@map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x9}, @ldst={0x0, 0x3, 0x4, 0xb, 0x7, 0xffffffffffffffff, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, @exit, @alu={0x4, 0x0, 0x4, 0xa, 0xb, 0xfffffffffffffffa, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @ldst={0x3, 0x2, 0x2, 0x8, 0xb, 0x50, 0x4}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0xdb, &(0x7f00000002c0)=""/219, 0x40f00, 0x52, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x6, 0x5, 0xc7}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000440)=[0xffffffffffffffff], &(0x7f0000000480)=[{0x3, 0x4, 0xc, 0x3}, {0x2, 0x1, 0xe}, {0x4, 0x1, 0x3, 0xc}, {0x5, 0x4, 0x4, 0x2}, {0x5, 0x5, 0xf, 0x7}, {0x0, 0x2, 0xd}, {0x0, 0x2, 0x9, 0x8}, {0x5, 0x1, 0xf, 0x1}, {0x0, 0x4, 0xb}, {0x0, 0x4, 0xa, 0x8}], 0x10, 0x3b}, 0x94) 2.905750959s ago: executing program 5 (id=4308): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="4001003dd55f35", @ANYRES32=0x0, @ANYBLOB="0b440400000000002000128008000100736974001400028008000300ffffffff08000c0000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x5e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4000101}, 0x1c) getsockname$packet(r1, 0x0, &(0x7f0000000240)) getsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x3d) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x7, [@func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4}}, @var={0x5, 0x0, 0x0, 0x11}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x6b, 0x0, 0x1}, 0x28) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x18, 0x1404, 0x200, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0xc0}, 0x1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, r6, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0xa0001f98, 0x15, 0x0, &(0x7f0000000280)="4c1b84bdac37f4451b20a3066494677ee389d422a1", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.619979063s ago: executing program 0 (id=4311): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x75}, &(0x7f0000000080)=0x8) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) socket$kcm(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x61, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES8=r3], 0x38}}, 0xc000) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r1, 0x7fff, 0x10}, &(0x7f0000000100)=0xc) 2.575556079s ago: executing program 0 (id=4312): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x20, 0xfffff7b6, 0x3, 0x7ff, 0x1000, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x50) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a30000000002c000000030a01010000000000000000010000000900030073797a30000000000900010073797a300000000054000000060a01040000000000000000010000002c0004802800018007000100637400001c00028005000300010000000800014000000012080002400000000e08000b40000000000900010073797a30"], 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r1, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r3, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.40360905s ago: executing program 0 (id=4314): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="700000000506010100000000000000000700000705000100070000000900030073797a320000000005000100070000000900030073797a31000000000900020073797a"], 0x70}}, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10004030) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000000), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x894b, &(0x7f0000000140)) 2.380032902s ago: executing program 0 (id=4315): sendto$x25(0xffffffffffffffff, &(0x7f0000000000)="275cda8ff0bcb4055911bd00225a109d7ed516e06e052632b85fc3da237f8b28666042e0850d575e9b866a07b9cc6100981a94984e0fadbc0def3d12159aca25c153d798090b2277e421f367b32c2d65492624e6b2ac2dae4ac46844c6d5386f3b561234258c85fd05fae811e9b2b594c98a8bf6fb4991cf5d7fb59d5ba8e93d3eca98e0ececf9578b4764db65ac436d59e379b3691b5ce418bddd1c81f001a9c0b1eef315", 0xa5, 0x1011, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) ioctl$XFS_IOC_FSGEOMETRY_V1(0xffffffffffffffff, 0x80705864, &(0x7f0000000100)) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000180)={0x0, 0x8e, "593c876016b08206fff1dbe1799a08bf5dd972d16bac2cb15147dd55b0f19ed5256c07bbb60049765ed773b98c96964147fe29347af86a5bd6194d536b91524ff93d02cfe3218c3202d3cca86bacf90e45fdc6630250c762d12f6c2d7fa8e57f6935c023d9416e66020c12e12987eb376d30c48a4fc5baa99fd8e2e3cf5a6e7c137736fcf8af6b0c2adbfe8149cb"}) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000000240)="6dfda88b8f10a9487a02bf083ebdfb27787a3d8c235795a70d9477fa6a896a07132f53bb3c259e97775191027803f9fa7de3d0bcc64aa10826472869d80eceb793e1a65859d3e77ce8583da5070bd58cc8bc51c71e901839bd559e7a7e7b226a7bc847ef651548dbeb81a9388b9486ef8130de683f6a947911bf846888bbb00af710465e2c2ff76633d1985a05ecfe515b0e387e43e3ff7a79f6bad170e13de85ac8884e08", 0xa5}, {&(0x7f0000000300)="c5107f32d79829a7b5ed3ace1770b169f23cbb1cc058dc5abbfbb267a37bfc195cc26538d1997992dbcb41c319d895a0671e6596ba9dae25baa006c8b45916c68c9828ee5a", 0x45}], 0x2, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x422400, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540)={0x0}, &(0x7f0000000580)=0xc) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r3, 0x12) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000600), 0x4) r5 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000640)=@id, &(0x7f0000000680)=0x10, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000006c0)=0x2000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000a, 0x8010, r0, 0x5bddb000) socket$inet6(0xa, 0x5, 0x8) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000700)=[@timestamp, @window={0x3, 0x2, 0x2}, @sack_perm, @timestamp], 0x4) socket$tipc(0x1e, 0x2, 0x0) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000880)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x5, [@volatile={0xa, 0x0, 0x0, 0x9, 0x1}, @var={0x2, 0x0, 0x0, 0xe, 0x4, 0x2}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x1, 0x5}, {0x2, 0x3}, {0xa, 0x4}, {0x1}, {0x4, 0x1}, {0x3, 0x3}, {0xc, 0x5}]}, @union={0x1, 0x1, 0x0, 0x5, 0x1, 0xda7a, [{0x0, 0x4, 0x1dc2}]}, @typedef={0x2}, @float={0xf, 0x0, 0x0, 0x10, 0x10}, @const={0x5, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x0, 0x0, 0x30]}}, &(0x7f0000000800)=""/61, 0xb9, 0x3d, 0x0, 0x402e, 0x10000, @value=r6}, 0x28) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000900)=@generic={&(0x7f00000008c0)='./file0\x00', 0x0, 0x14}, 0x18) ioctl$OCFS2_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000940)={0x0, 0x1, 0x8000, 0x8000000000000000, 0x9, 0x9fb}) socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r8, &(0x7f0000000b80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a00)={0x118, r9, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xac5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x11}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x75}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x100}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xd}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x755c99c1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}]}, 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x8005) ioctl$XFS_IOC_FSGROWFSRT(r7, 0x40105870, &(0x7f0000000bc0)={0x11}) socket$inet_udp(0x2, 0x2, 0x0) 1.542775167s ago: executing program 7 (id=4317): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x9b1}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x5}]}}}]}, 0x58}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {}, {0xffe0, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x2400c894) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$unix(r9, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="a72d4952962f65f76998112b", 0xc}, {&(0x7f00000002c0)="b8869dd9fb606c38b5f1e38268a108562d150070", 0x14}], 0x2, 0x0, 0x0, 0x4004001}}], 0x1, 0x4000801) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0xfffffffffffffff6}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) ioctl$FIOCLEX(r2, 0x5451) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) (async) r12 = socket$key(0xf, 0x3, 0x2) sendmmsg(r12, &(0x7f00000000c0), 0x2c8, 0x0) 1.403734282s ago: executing program 7 (id=4318): r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xfd3ee000) socket(0x2d, 0x2, 0x0) (async) r2 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(r1, 0x40285881, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xf, 0x7, 0x2}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001480)=@newtaction={0x6c, 0x30, 0x83d79f1e8021ba05, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000000}, @rand_addr, @multicast2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x24}, {0x6}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) 1.386189156s ago: executing program 7 (id=4319): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b708000002000e007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1.329678441s ago: executing program 7 (id=4320): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket(0x26, 0x6, 0x0) write(r2, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c04001e001a030700", 0x33a) sendmsg$can_raw(r2, &(0x7f0000000640)={&(0x7f0000000540), 0x10, &(0x7f0000000600)={&(0x7f0000000580)=@canfd={{0x3}, 0x29, 0x3, 0x0, 0x0, "68556b9660dfaeedf8d5fa6ad3c9e4615f235b16da688192e0d73578889f52ef94280f17e6de306692be30994fe04f6851fa4aeb89005f6a8cdcd18da4c122fe"}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x2000c000) r3 = socket(0x11, 0x3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x49, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000dc0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000000680)=ANY=[@ANYRESDEC], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x2, @fixed}, 0xe) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000000080)=0x200200, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) bind$xdp(r4, &(0x7f00000006c0)={0x2c, 0xa, r10, 0x40}, 0x10) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000500)) recvmmsg(r5, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000700)=""/151}, 0x549}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/106}, {&(0x7f0000000840)=""/244}, {&(0x7f0000000940)=""/194}, {&(0x7f0000000a40)=""/149}, {&(0x7f0000000b00)=""/215}], 0x0, &(0x7f0000000c80)=""/113}, 0x3}], 0x4000000000000a4, 0x400000c2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000400)=0x3, 0x4) bind$can_raw(r1, &(0x7f00000001c0), 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) r12 = socket$unix(0x1, 0x2, 0x0) bind$unix(r12, &(0x7f00000000c0)=@abs={0x1, 0x5c}, 0x6e) sendto$inet6(r11, &(0x7f0000000000)="8003000000000000", 0x8, 0x0, &(0x7f0000000280)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 1.187472515s ago: executing program 7 (id=4321): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x3, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000700), 0x0}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x3, 0x0, 0x0, 0x61800, 0x30, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000280)={r1, &(0x7f0000000000)='\x00', 0x10000, &(0x7f0000000080)={@align=0x1, {0xd5, 0x4, 0x0, 0x45ea}}, 0x5, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0xffff8001}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'pimreg\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000004c0)={@broadcast, @rand_addr, 0x0}, &(0x7f0000000500)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000540)={@local, @dev, 0x0}, &(0x7f0000000580)=0xc) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r11 = socket(0x10, 0x3, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x70, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xd, 0x9}, {}, {0x2, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x404c0c0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) r15 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r15, 0x6, 0x18, 0x0, 0x0) r16 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r17, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$ETHTOOL_MSG_STATS_GET(r4, &(0x7f0000000880)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)={0x1c4, r5, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STATS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @ETHTOOL_A_STATS_SRC={0x8}, @ETHTOOL_A_STATS_GROUPS={0xcc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x61, 0x5, "08e4d444602d85c5416859e8280fd110dff40a47dbfeb6945742df0e5b3cf4ea9372e0a85d4bd7148e29e22dbd0b485ca3a9bccb47e796d0482849b3d7adc12ad6c3da5065e6b78ee419aae0fb90a5bd0913cf1852921899d6864afa91"}, @ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9f84}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_STATS_SRC={0x8, 0x3, 0x1}, @ETHTOOL_A_STATS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @ETHTOOL_A_STATS_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x24000040}, 0x8000) 82.69778ms ago: executing program 0 (id=4322): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) readv(r0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000840), &(0x7f0000000000)=@ctrl_frame=@bar={{}, {0x44}, @device_a, @device_a, @compressed={{0x1, 0x0, 0x1, 0x0, 0x1}, {0xe, 0x5}}}, 0x14) clock_gettime(0x0, &(0x7f00000013c0)={0x0, 0x0}) nanosleep(&(0x7f0000001400)={r1, r2+60000000}, 0x0) syz_80211_inject_frame(&(0x7f0000001480)=@device_b, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001f40)={0x0, 0x0}) nanosleep(&(0x7f0000001f80)={r3, r4+60000000}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newtfilter={0x50, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r7, {0xffe0, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x0, 0x0, 0x7fff}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) syz_80211_inject_frame(&(0x7f0000002000)=@broadcast, 0x0, 0x0) clock_gettime(0x4, &(0x7f0000000040)={0x0, 0x0}) nanosleep(&(0x7f0000002300)={r8, r9+10000000}, 0x0) syz_80211_inject_frame(&(0x7f0000002380)=@broadcast, 0x0, 0x0) 82.393584ms ago: executing program 5 (id=4323): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES32=r3, @ANYRES64=r4], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000340)={'syztnl1\x00', r3, 0x1, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x9, 0x0, 0x0, @empty, @empty}}}}) (async) r5 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCADDDLCI(r5, 0x8980, &(0x7f0000000080)={'xfrm0\x00', 0x7ff}) 59.137592ms ago: executing program 6 (id=4324): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000004700)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r2 = socket(0x200000000000011, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4000}]}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r7 = socket(0x1e, 0x4, 0x0) sendmmsg$inet(r7, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r8, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x3c}, 0x28) close(0xffffffffffffffff) close(0x4) recvmsg$unix(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1, 0x0, 0xfffffffffffffe68}, 0x0) sendmmsg(r7, &(0x7f00000030c0), 0x4000000000000a4, 0x9200000000000000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r6, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270ffe00000008000100150008"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 0s ago: executing program 7 (id=4325): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x44000}], 0x1, 0x0) kernel console output (not intermixed with test programs): Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.173225][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.173246][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.523681][T17581] TCP: TCP_TX_DELAY enabled [ 358.554571][T17580] netlink: 'syz.0.3030': attribute type 3 has an invalid length. [ 358.681061][T17583] netlink: 'syz.4.2927': attribute type 11 has an invalid length. [ 358.702135][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 358.734135][T17588] netlink: 'syz.5.3033': attribute type 1 has an invalid length. [ 358.734153][T17588] netlink: 'syz.5.3033': attribute type 2 has an invalid length. [ 358.891488][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 358.895023][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 358.895678][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 358.898681][ T5630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 358.899262][ T5630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 359.058945][ T5618] block nbd0: Receive control failed (result -107) [ 359.108006][ T5618] block nbd2: Receive control failed (result -32) [ 360.010508][T17644] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 360.010552][T17644] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 360.010573][T17644] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 360.046069][T17646] __nla_validate_parse: 40 callbacks suppressed [ 360.046087][T17646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3046'. [ 360.059313][T17643] vlan2: entered promiscuous mode [ 360.059352][T17643] hsr0: entered promiscuous mode [ 360.103781][T17643] vlan2: entered allmulticast mode [ 360.103799][T17643] hsr0: entered allmulticast mode [ 360.103812][T17643] hsr_slave_0: entered allmulticast mode [ 360.103827][T17643] hsr_slave_1: entered allmulticast mode [ 360.170125][T17652] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3048'. [ 360.259106][T17656] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3049'. [ 360.669026][T17670] Cannot find set identified by id 0 to match [ 360.932378][T17682] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3056'. [ 360.941010][ C1] net_ratelimit: 11 callbacks suppressed [ 360.941026][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.941266][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.941639][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.951432][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.021054][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.021270][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.021402][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.022217][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.023022][ T5618] Bluetooth: hci4: command tx timeout [ 361.024000][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.024154][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.568376][T17597] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.568547][T17597] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.568777][T17597] bridge_slave_0: entered allmulticast mode [ 361.577856][T17597] bridge_slave_0: entered promiscuous mode [ 361.600058][T17597] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.600150][T17597] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.608806][T17597] bridge_slave_1: entered allmulticast mode [ 361.624491][T17597] bridge_slave_1: entered promiscuous mode [ 361.773831][T17715] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3065'. [ 361.852207][T17597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.855575][T17597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.880209][T17723] Cannot find del_set index 0 as target [ 361.959999][T17597] team0: Port device team_slave_0 added [ 361.971179][T17597] team0: Port device team_slave_1 added [ 362.143548][T17597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.143565][T17597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.143590][T17597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.152501][T17597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.152537][T17597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.152599][T17597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.251236][T17733] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3069'. [ 362.468169][T17735] veth7: entered allmulticast mode [ 362.494282][T17597] hsr_slave_0: entered promiscuous mode [ 362.495269][T17597] hsr_slave_1: entered promiscuous mode [ 362.495993][T17597] debugfs: 'hsr0' already exists in 'hsr' [ 362.496011][T17597] Cannot create hsr debugfs directory [ 363.030181][T15296] IPVS: starting estimator thread 0... [ 363.101844][ T5618] Bluetooth: hci4: command tx timeout [ 363.111065][T17776] IPVS: using max 35 ests per chain, 84000 per kthread [ 363.228601][T17597] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.228649][T17597] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.228674][T17597] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 363.493943][T17597] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.493977][T17597] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.494001][T17597] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 363.540531][T17792] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 363.557909][T17798] x_tables: duplicate underflow at hook 1 [ 363.573189][T17800] x_tables: duplicate underflow at hook 1 [ 363.684106][T17803] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3093'. [ 363.747343][T17597] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.747375][T17597] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.747400][T17597] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 363.821939][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 363.895213][T17807] syzkaller0: entered promiscuous mode [ 363.895237][T17807] syzkaller0: entered allmulticast mode [ 363.966563][T17817] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3097'. [ 365.191502][ T5618] Bluetooth: hci4: command tx timeout [ 365.826893][T17819] tipc: Started in network mode [ 365.826940][T17819] tipc: Node identity bac024e4d7bf, cluster identity 4711 [ 365.827088][T17819] tipc: Enabled bearer , priority 0 [ 365.870237][T17597] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.870269][T17597] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.870293][T17597] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 365.980938][ C0] net_ratelimit: 6 callbacks suppressed [ 365.980956][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.981192][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.981988][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.983259][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.061219][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.061343][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.061435][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.061667][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.061737][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.061900][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.192913][T15298] tipc: Resetting bearer [ 366.194389][T17806] tipc: Resetting bearer [ 366.263368][T17855] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3107'. [ 366.400690][T17806] tipc: Disabling bearer [ 366.637106][T17861] netlink: 'syz.6.3109': attribute type 12 has an invalid length. [ 366.828696][T17597] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 366.853554][T17597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 366.855482][T17597] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 366.887879][T17597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 366.888920][T17597] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 366.916620][T17597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 366.918861][T17597] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 366.956139][T17597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 367.261266][ T5618] Bluetooth: hci4: command tx timeout [ 367.286923][T17597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.328905][T17597] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.349107][T15305] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.349216][T15305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.388833][T15298] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.388926][T15298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.303214][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 368.406647][T17943] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 368.519622][T17597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.590224][T17597] veth0_vlan: entered promiscuous mode [ 368.613206][T17597] veth1_vlan: entered promiscuous mode [ 368.654396][T17597] veth0_macvtap: entered promiscuous mode [ 368.660018][T17597] veth1_macvtap: entered promiscuous mode [ 368.783820][T17597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.816519][T17597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.884875][T15298] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.884942][T15298] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.885012][T15298] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.923599][T15302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.027327][T17965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3138'. [ 369.029928][T17965] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3138'. [ 369.188224][T15294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.188245][T15294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.252468][T15294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.252487][T15294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.757197][T18003] macvlan0: entered promiscuous mode [ 369.817185][T18011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3150'. [ 369.937121][T18011] bond9: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 369.959450][T18011] bond9 (unregistering): Released all slaves [ 370.126981][T18031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3155'. [ 370.127009][T18031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3155'. [ 370.291942][T18036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3159'. [ 370.295140][T18036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3159'. [ 370.527911][T18049] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3161'. [ 370.528668][T18049] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3161'. [ 370.693263][T18059] bond9 (unregistering): Released all slaves [ 371.021078][ C1] net_ratelimit: 9 callbacks suppressed [ 371.021097][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.021141][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.021446][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.021910][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.101241][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.101340][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.101622][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.101919][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.102245][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.102422][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.673238][T18105] nbd: must specify at least one socket [ 371.755922][T18110] __nla_validate_parse: 2 callbacks suppressed [ 371.755940][T18110] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3181'. [ 371.894091][T18120] netlink: 'syz.4.3183': attribute type 10 has an invalid length. [ 371.897414][T18120] team0: Device vxcan1 is of different type [ 372.470614][T18157] netlink: 596 bytes leftover after parsing attributes in process `syz.5.3195'. [ 372.534584][T18154] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3194'. [ 372.610712][T18161] netlink: 'syz.6.3197': attribute type 2 has an invalid length. [ 372.633727][T18162] netlink: 'syz.6.3197': attribute type 2 has an invalid length. [ 372.752625][T18171] netlink: 'syz.6.3200': attribute type 4 has an invalid length. [ 373.054873][T18187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3204'. [ 373.229456][T18198] netlink: 344 bytes leftover after parsing attributes in process `syz.0.3209'. [ 373.398333][T18200] netlink: 'syz.6.3211': attribute type 3 has an invalid length. [ 373.757123][T18224] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3219'. [ 373.809199][T18228] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3220'. [ 373.902046][T18232] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.902738][T18232] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3221'. [ 374.218277][T18246] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3228'. [ 374.685653][T18276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3238'. [ 374.871436][T18282] x_tables: duplicate underflow at hook 2 [ 375.420466][T18313] trusted_key: syz.5.3250 sent an empty control message without MSG_MORE. [ 376.060951][ C0] net_ratelimit: 9 callbacks suppressed [ 376.060970][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.061205][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.061473][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.061512][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.061701][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.141108][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.141167][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.141205][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.141463][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.141616][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.271836][T18338] FAULT_INJECTION: forcing a failure. [ 376.271836][T18338] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 376.271887][T18338] CPU: 0 UID: 0 PID: 18338 Comm: syz.1.3258 Not tainted syzkaller #0 PREEMPT(full) [ 376.271909][T18338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 376.271929][T18338] Call Trace: [ 376.271994][T18338] [ 376.272051][T18338] dump_stack_lvl+0xe8/0x150 [ 376.272181][T18338] should_fail_ex+0x410/0x560 [ 376.272259][T18338] prepare_alloc_pages+0x223/0x600 [ 376.272314][T18338] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 376.272341][T18338] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 376.272373][T18338] ? __pfx_policy_nodemask+0x10/0x10 [ 376.272398][T18338] ? lock_acquire+0x115/0x350 [ 376.272452][T18338] alloc_pages_mpol+0x21e/0x390 [ 376.272483][T18338] folio_alloc_mpol_noprof+0x39/0x160 [ 376.272511][T18338] vma_alloc_folio_noprof+0xe1/0x1e0 [ 376.272540][T18338] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 376.272577][T18338] do_wp_page+0x117d/0x4b80 [ 376.272627][T18338] ? __pfx_do_wp_page+0x10/0x10 [ 376.272650][T18338] ? do_raw_spin_lock+0x12b/0x2f0 [ 376.272680][T18338] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 376.272718][T18338] handle_mm_fault+0x15d7/0x3750 [ 376.272762][T18338] ? handle_mm_fault+0xf1/0x3750 [ 376.272799][T18338] ? __pfx_handle_mm_fault+0x10/0x10 [ 376.272838][T18338] ? __pfx___up_read+0x10/0x10 [ 376.272869][T18338] ? lock_mm_and_find_vma+0xa7/0x340 [ 376.272903][T18338] do_user_addr_fault+0x746/0x1340 [ 376.272954][T18338] exc_page_fault+0x6a/0xc0 [ 376.273048][T18338] asm_exc_page_fault+0x26/0x30 [ 376.273085][T18338] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 376.273159][T18338] Code: 67 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 67 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 376.273197][T18338] RSP: 0018:ffffc90004c87698 EFLAGS: 00050206 [ 376.273241][T18338] RAX: ffffffff84dcbd01 RBX: ffff8880590000e8 RCX: 000000000000e5d0 [ 376.273256][T18338] RDX: 0000000000000000 RSI: ffff888059001ce8 RDI: 0000200000002000 [ 376.273269][T18338] RBP: ffffc90004c87818 R08: ffff8880590102b7 R09: 1ffff1100b202056 [ 376.273284][T18338] R10: dffffc0000000000 R11: ffffed100b202057 R12: dffffc0000000000 [ 376.273299][T18338] R13: 0000000000000000 R14: ffffc90004c87e10 R15: 00000000000101d0 [ 376.273320][T18338] ? _copy_to_iter+0x3e1/0x1810 [ 376.273390][T18338] _copy_to_iter+0x49d/0x1810 [ 376.273411][T18338] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 376.273452][T18338] ? __pfx__copy_to_iter+0x10/0x10 [ 376.273475][T18338] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 376.273519][T18338] ? tipc_wait_for_rcvmsg+0x4f3/0x640 [ 376.273584][T18338] __skb_datagram_iter+0xf8/0x980 [ 376.273727][T18338] ? __pfx_tipc_wait_for_rcvmsg+0x10/0x10 [ 376.273756][T18338] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 376.273787][T18338] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 376.273815][T18338] skb_copy_datagram_iter+0xb5/0x240 [ 376.273849][T18338] tipc_recvstream+0x732/0xe90 [ 376.273890][T18338] ? __pfx_tipc_recvstream+0x10/0x10 [ 376.273911][T18338] sock_recvmsg+0x196/0x1e0 [ 376.273955][T18338] ____sys_recvmsg+0x1e6/0x4a0 [ 376.274013][T18338] ? __pfx_____sys_recvmsg+0x10/0x10 [ 376.274057][T18338] ? import_iovec+0x73/0xa0 [ 376.274086][T18338] ___sys_recvmsg+0x213/0x5a0 [ 376.274120][T18338] ? __pfx____sys_recvmsg+0x10/0x10 [ 376.274153][T18338] ? lock_acquire+0x115/0x350 [ 376.274190][T18338] ? __fget_files+0x3a2/0x420 [ 376.274242][T18338] __x64_sys_recvmsg+0x1ae/0x290 [ 376.274274][T18338] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 376.274323][T18338] do_syscall_64+0x166/0x520 [ 376.274348][T18338] ? trace_irq_disable+0x3b/0x140 [ 376.274386][T18338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.274406][T18338] ? clear_bhb_loop+0x70/0xc0 [ 376.274429][T18338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.274449][T18338] RIP: 0033:0x7f3f3c99e159 [ 376.274467][T18338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.274483][T18338] RSP: 002b:00007f3f3d7cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 376.274503][T18338] RAX: ffffffffffffffda RBX: 00007f3f3cc25fa0 RCX: 00007f3f3c99e159 [ 376.274517][T18338] RDX: 0000000000003f01 RSI: 0000200000000500 RDI: 0000000000000003 [ 376.274530][T18338] RBP: 00007f3f3d7cc090 R08: 0000000000000000 R09: 0000000000000000 [ 376.274542][T18338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.274554][T18338] R13: 00007f3f3cc26038 R14: 00007f3f3cc25fa0 R15: 00007ffdd4022448 [ 376.274587][T18338] [ 376.448503][T18343] sctp: [Deprecated]: syz.6.3259 (pid 18343) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.448503][T18343] Use struct sctp_sack_info instead [ 376.780498][T18343] __nla_validate_parse: 2 callbacks suppressed [ 376.780516][T18343] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3259'. [ 376.780546][T18343] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3259'. [ 376.882989][T18351] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3263'. [ 376.883014][T18351] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3263'. [ 376.885367][T18353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3264'. [ 376.886294][T18351] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3263'. [ 376.886317][T18351] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3263'. [ 376.887152][T18351] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3263'. [ 376.887171][T18351] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3263'. [ 377.233784][T18363] 8021q: adding VLAN 0 to HW filter on device bond1 [ 377.237775][T18366] debugfs: '1ùà^!00000000000000000000003ÿÿÿÿ' already exists in 'ieee80211' [ 377.278244][T18375] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3271'. [ 377.428770][T18386] veth0: entered promiscuous mode [ 377.429088][T18386] veth0: left promiscuous mode [ 377.429586][T18387] netlink: 'syz.5.3273': attribute type 11 has an invalid length. [ 377.707464][T18397] netlink: 'syz.0.3277': attribute type 1 has an invalid length. [ 378.548779][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.625720][T18440] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 378.627557][T18431] ip6tnl1: entered promiscuous mode [ 378.769383][T18449] IPv6: NLM_F_CREATE should be specified when creating new route [ 378.808107][T18442] xt_hashlimit: size too large, truncated to 1048576 [ 379.877270][T18497] bond9: entered promiscuous mode [ 379.878859][T18503] FAULT_INJECTION: forcing a failure. [ 379.878859][T18503] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 379.878888][T18503] CPU: 0 UID: 0 PID: 18503 Comm: syz.1.3315 Not tainted syzkaller #0 PREEMPT(full) [ 379.878909][T18503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 379.878920][T18503] Call Trace: [ 379.878928][T18503] [ 379.878942][T18497] bond9: entered allmulticast mode [ 379.878936][T18503] dump_stack_lvl+0xe8/0x150 [ 379.878998][T18503] should_fail_ex+0x410/0x560 [ 379.879025][T18503] prepare_alloc_pages+0x223/0x600 [ 379.879053][T18503] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 379.879078][T18503] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 379.879104][T18503] ? __pfx_policy_nodemask+0x10/0x10 [ 379.879128][T18503] ? lock_acquire+0x115/0x350 [ 379.879156][T18503] alloc_pages_mpol+0x21e/0x390 [ 379.879186][T18503] folio_alloc_mpol_noprof+0x39/0x160 [ 379.879214][T18503] vma_alloc_folio_noprof+0xe1/0x1e0 [ 379.879243][T18503] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 379.879279][T18503] do_wp_page+0x117d/0x4b80 [ 379.879320][T18497] 8021q: adding VLAN 0 to HW filter on device bond9 [ 379.879320][T18503] ? __pfx_do_wp_page+0x10/0x10 [ 379.879344][T18503] ? do_raw_spin_lock+0x12b/0x2f0 [ 379.879373][T18503] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 379.879429][T18503] handle_mm_fault+0x15d7/0x3750 [ 379.879469][T18503] ? handle_mm_fault+0xf1/0x3750 [ 379.879508][T18503] ? __pfx_handle_mm_fault+0x10/0x10 [ 379.879550][T18503] ? __pfx___up_read+0x10/0x10 [ 379.879582][T18503] ? lock_mm_and_find_vma+0xa7/0x340 [ 379.879616][T18503] do_user_addr_fault+0x746/0x1340 [ 379.879654][T18503] exc_page_fault+0x6a/0xc0 [ 379.879681][T18503] asm_exc_page_fault+0x26/0x30 [ 379.879700][T18503] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 379.879719][T18503] Code: 67 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 67 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 379.879735][T18503] RSP: 0018:ffffc90002587698 EFLAGS: 00050206 [ 379.879753][T18503] RAX: ffffffff84dcbd01 RBX: ffff8880652c00e8 RCX: 000000000000c5d0 [ 379.879768][T18503] RDX: 0000000000000000 RSI: ffff8880652c3ce8 RDI: 0000200000004000 [ 379.879781][T18503] RBP: ffffc90002587818 R08: ffff8880652d02b7 R09: 1ffff1100ca5a056 [ 379.879794][T18503] R10: dffffc0000000000 R11: ffffed100ca5a057 R12: dffffc0000000000 [ 379.879808][T18503] R13: 0000000000000000 R14: ffffc90002587e10 R15: 00000000000101d0 [ 379.879828][T18503] ? _copy_to_iter+0x3e1/0x1810 [ 379.879857][T18503] _copy_to_iter+0x49d/0x1810 [ 379.879877][T18503] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 379.879919][T18503] ? __pfx__copy_to_iter+0x10/0x10 [ 379.879953][T18503] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 379.879977][T18503] ? tipc_wait_for_rcvmsg+0x4f3/0x640 [ 379.880014][T18503] __skb_datagram_iter+0xf8/0x980 [ 379.880063][T18503] ? __pfx_tipc_wait_for_rcvmsg+0x10/0x10 [ 379.880089][T18503] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 379.880123][T18503] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 379.880155][T18503] skb_copy_datagram_iter+0xb5/0x240 [ 379.880193][T18503] tipc_recvstream+0x732/0xe90 [ 379.880238][T18503] ? __pfx_tipc_recvstream+0x10/0x10 [ 379.880261][T18503] sock_recvmsg+0x196/0x1e0 [ 379.880287][T18503] ____sys_recvmsg+0x1e6/0x4a0 [ 379.880327][T18503] ? __pfx_____sys_recvmsg+0x10/0x10 [ 379.880377][T18503] ? import_iovec+0x73/0xa0 [ 379.880410][T18503] ___sys_recvmsg+0x213/0x5a0 [ 379.880449][T18503] ? __pfx____sys_recvmsg+0x10/0x10 [ 379.880485][T18503] ? lock_acquire+0x115/0x350 [ 379.880525][T18503] ? __fget_files+0x3a2/0x420 [ 379.880570][T18503] __x64_sys_recvmsg+0x1ae/0x290 [ 379.880617][T18503] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 379.880671][T18503] do_syscall_64+0x166/0x520 [ 379.880697][T18503] ? trace_irq_disable+0x3b/0x140 [ 379.880716][T18503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.880735][T18503] ? clear_bhb_loop+0x70/0xc0 [ 379.880758][T18503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.880776][T18503] RIP: 0033:0x7f3f3c99e159 [ 379.880794][T18503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.880810][T18503] RSP: 002b:00007f3f3d7cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 379.880831][T18503] RAX: ffffffffffffffda RBX: 00007f3f3cc25fa0 RCX: 00007f3f3c99e159 [ 379.880846][T18503] RDX: 0000000000003f01 RSI: 0000200000000500 RDI: 0000000000000003 [ 379.880860][T18503] RBP: 00007f3f3d7cc090 R08: 0000000000000000 R09: 0000000000000000 [ 379.880872][T18503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.880884][T18503] R13: 00007f3f3cc26038 R14: 00007f3f3cc25fa0 R15: 00007ffdd4022448 [ 379.880918][T18503] [ 380.433115][T18512] netlink: 'syz.6.3317': attribute type 7 has an invalid length. [ 380.433131][T18512] netlink: 'syz.6.3317': attribute type 8 has an invalid length. [ 380.947910][T18529] veth0_macvtap: left promiscuous mode [ 380.948762][T18529] macvtap0: entered promiscuous mode [ 381.042076][T18529] geneve2: entered promiscuous mode [ 381.042098][T18529] geneve2: entered allmulticast mode [ 381.102082][ C1] net_ratelimit: 9 callbacks suppressed [ 381.102100][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.102316][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.102804][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.103217][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.181089][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.181913][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.182007][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.182975][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.183553][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.183705][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.219118][T18541] netlink: 'syz.1.3327': attribute type 12 has an invalid length. [ 381.339003][T18539] bond1: option resend_igmp: invalid value (32767) [ 381.339029][T18539] bond1: option resend_igmp: allowed values 0 - 255 [ 381.369052][T18539] bond1 (unregistering): Released all slaves [ 381.440119][T18559] sctp: [Deprecated]: syz.6.3330 (pid 18559) Use of struct sctp_assoc_value in delayed_ack socket option. [ 381.440119][T18559] Use struct sctp_sack_info instead [ 381.440773][T18559] netlink: 'syz.6.3330': attribute type 10 has an invalid length. [ 381.489648][T18557] FAULT_INJECTION: forcing a failure. [ 381.489648][T18557] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 381.489675][T18557] CPU: 0 UID: 0 PID: 18557 Comm: syz.0.3332 Not tainted syzkaller #0 PREEMPT(full) [ 381.489706][T18557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 381.489716][T18557] Call Trace: [ 381.489723][T18557] [ 381.489731][T18557] dump_stack_lvl+0xe8/0x150 [ 381.489762][T18557] should_fail_ex+0x410/0x560 [ 381.489788][T18557] prepare_alloc_pages+0x223/0x600 [ 381.489814][T18557] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 381.489838][T18557] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 381.489863][T18557] ? __pfx_policy_nodemask+0x10/0x10 [ 381.489884][T18557] ? lock_acquire+0x115/0x350 [ 381.489906][T18557] alloc_pages_mpol+0x21e/0x390 [ 381.489932][T18557] folio_alloc_mpol_noprof+0x39/0x160 [ 381.489957][T18557] vma_alloc_folio_noprof+0xe1/0x1e0 [ 381.489980][T18557] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 381.490012][T18557] do_wp_page+0x117d/0x4b80 [ 381.490053][T18557] ? __pfx_do_wp_page+0x10/0x10 [ 381.490075][T18557] ? do_raw_spin_lock+0x12b/0x2f0 [ 381.490101][T18557] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 381.490134][T18557] handle_mm_fault+0x15d7/0x3750 [ 381.490169][T18557] ? handle_mm_fault+0xf1/0x3750 [ 381.490206][T18557] ? __pfx_handle_mm_fault+0x10/0x10 [ 381.490243][T18557] ? __pfx___up_read+0x10/0x10 [ 381.490274][T18557] ? lock_mm_and_find_vma+0xa7/0x340 [ 381.490307][T18557] do_user_addr_fault+0x746/0x1340 [ 381.490342][T18557] exc_page_fault+0x6a/0xc0 [ 381.490368][T18557] asm_exc_page_fault+0x26/0x30 [ 381.490386][T18557] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 381.490406][T18557] Code: 67 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 67 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 381.490423][T18557] RSP: 0018:ffffc9000e18f698 EFLAGS: 00050206 [ 381.490440][T18557] RAX: ffffffff84dcbd01 RBX: ffff8880630000e8 RCX: 000000000000b5d0 [ 381.490455][T18557] RDX: 0000000000000000 RSI: ffff888063004ce8 RDI: 0000200000005000 [ 381.490468][T18557] RBP: ffffc9000e18f818 R08: ffff8880630102b7 R09: 1ffff1100c602056 [ 381.490482][T18557] R10: dffffc0000000000 R11: ffffed100c602057 R12: dffffc0000000000 [ 381.490496][T18557] R13: 0000000000000000 R14: ffffc9000e18fe10 R15: 00000000000101d0 [ 381.490514][T18557] ? _copy_to_iter+0x3e1/0x1810 [ 381.490537][T18557] _copy_to_iter+0x49d/0x1810 [ 381.490553][T18557] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 381.490585][T18557] ? __pfx__copy_to_iter+0x10/0x10 [ 381.490604][T18557] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 381.490623][T18557] ? tipc_wait_for_rcvmsg+0x4f3/0x640 [ 381.490653][T18557] __skb_datagram_iter+0xf8/0x980 [ 381.490687][T18557] ? __pfx_tipc_wait_for_rcvmsg+0x10/0x10 [ 381.490708][T18557] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 381.490734][T18557] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 381.490759][T18557] skb_copy_datagram_iter+0xb5/0x240 [ 381.490789][T18557] tipc_recvstream+0x732/0xe90 [ 381.490823][T18557] ? __pfx_tipc_recvstream+0x10/0x10 [ 381.490841][T18557] sock_recvmsg+0x196/0x1e0 [ 381.490863][T18557] ____sys_recvmsg+0x1e6/0x4a0 [ 381.490897][T18557] ? __pfx_____sys_recvmsg+0x10/0x10 [ 381.490936][T18557] ? import_iovec+0x73/0xa0 [ 381.490959][T18557] ___sys_recvmsg+0x213/0x5a0 [ 381.490990][T18557] ? __pfx____sys_recvmsg+0x10/0x10 [ 381.491022][T18557] ? lock_acquire+0x115/0x350 [ 381.491058][T18557] ? __fget_files+0x3a2/0x420 [ 381.491096][T18557] __x64_sys_recvmsg+0x1ae/0x290 [ 381.491127][T18557] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 381.491176][T18557] do_syscall_64+0x166/0x520 [ 381.491199][T18557] ? trace_irq_disable+0x3b/0x140 [ 381.491217][T18557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.491236][T18557] ? clear_bhb_loop+0x70/0xc0 [ 381.491260][T18557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.491278][T18557] RIP: 0033:0x7f85b7f9e159 [ 381.491296][T18557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.491312][T18557] RSP: 002b:00007f85b8ec6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 381.491332][T18557] RAX: ffffffffffffffda RBX: 00007f85b8225fa0 RCX: 00007f85b7f9e159 [ 381.491346][T18557] RDX: 0000000000003f01 RSI: 0000200000000500 RDI: 0000000000000003 [ 381.491358][T18557] RBP: 00007f85b8ec6090 R08: 0000000000000000 R09: 0000000000000000 [ 381.491370][T18557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.491380][T18557] R13: 00007f85b8226038 R14: 00007f85b8225fa0 R15: 00007fffd203fc78 [ 381.491412][T18557] [ 381.770419][T18559] team0: Port device dummy0 added [ 382.092748][T18569] bond0: entered promiscuous mode [ 382.092769][T18569] bond_slave_0: entered promiscuous mode [ 382.093004][T18569] bond_slave_1: entered promiscuous mode [ 382.094897][T18569] batadv0: entered promiscuous mode [ 382.098732][T18569] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 382.440168][T18587] __nla_validate_parse: 19 callbacks suppressed [ 382.440190][T18587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3340'. [ 383.111040][T18625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3349'. [ 383.264824][T18630] FAULT_INJECTION: forcing a failure. [ 383.264824][T18630] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 383.264860][T18630] CPU: 1 UID: 0 PID: 18630 Comm: syz.6.3351 Not tainted syzkaller #0 PREEMPT(full) [ 383.264887][T18630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 383.264900][T18630] Call Trace: [ 383.264909][T18630] [ 383.264918][T18630] dump_stack_lvl+0xe8/0x150 [ 383.264966][T18630] should_fail_ex+0x410/0x560 [ 383.265014][T18630] prepare_alloc_pages+0x223/0x600 [ 383.265046][T18630] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 383.265087][T18630] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 383.265115][T18630] ? __pfx_policy_nodemask+0x10/0x10 [ 383.265158][T18630] ? lock_acquire+0x115/0x350 [ 383.265189][T18630] alloc_pages_mpol+0x21e/0x390 [ 383.265240][T18630] folio_alloc_mpol_noprof+0x39/0x160 [ 383.265270][T18630] vma_alloc_folio_noprof+0xe1/0x1e0 [ 383.265300][T18630] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 383.265339][T18630] do_wp_page+0x117d/0x4b80 [ 383.265385][T18630] ? __pfx_do_wp_page+0x10/0x10 [ 383.265410][T18630] ? do_raw_spin_lock+0x12b/0x2f0 [ 383.265442][T18630] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 383.265489][T18630] handle_mm_fault+0x15d7/0x3750 [ 383.265530][T18630] ? handle_mm_fault+0xf1/0x3750 [ 383.265569][T18630] ? __pfx_handle_mm_fault+0x10/0x10 [ 383.265610][T18630] ? __pfx___up_read+0x10/0x10 [ 383.265643][T18630] ? lock_mm_and_find_vma+0xa7/0x340 [ 383.265678][T18630] do_user_addr_fault+0x746/0x1340 [ 383.265718][T18630] exc_page_fault+0x6a/0xc0 [ 383.265746][T18630] asm_exc_page_fault+0x26/0x30 [ 383.265767][T18630] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 383.265789][T18630] Code: 67 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 67 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 383.265806][T18630] RSP: 0000:ffffc9000ee8f698 EFLAGS: 00050206 [ 383.265826][T18630] RAX: ffffffff84dcbd01 RBX: ffff8880652c00e8 RCX: 000000000000a5d0 [ 383.265841][T18630] RDX: 0000000000000000 RSI: ffff8880652c5ce8 RDI: 0000200000006000 [ 383.265856][T18630] RBP: ffffc9000ee8f818 R08: ffff8880652d02b7 R09: 1ffff1100ca5a056 [ 383.265871][T18630] R10: dffffc0000000000 R11: ffffed100ca5a057 R12: dffffc0000000000 [ 383.265887][T18630] R13: 0000000000000000 R14: ffffc9000ee8fe10 R15: 00000000000101d0 [ 383.265928][T18630] ? _copy_to_iter+0x3e1/0x1810 [ 383.265960][T18630] _copy_to_iter+0x49d/0x1810 [ 383.265985][T18630] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 383.266041][T18630] ? __pfx__copy_to_iter+0x10/0x10 [ 383.266065][T18630] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 383.266090][T18630] ? tipc_wait_for_rcvmsg+0x4f3/0x640 [ 383.266128][T18630] __skb_datagram_iter+0xf8/0x980 [ 383.266159][T18630] ? __pfx_tipc_wait_for_rcvmsg+0x10/0x10 [ 383.266185][T18630] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 383.266218][T18630] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 383.266250][T18630] skb_copy_datagram_iter+0xb5/0x240 [ 383.266296][T18630] tipc_recvstream+0x732/0xe90 [ 383.266338][T18630] ? __pfx_tipc_recvstream+0x10/0x10 [ 383.266360][T18630] sock_recvmsg+0x196/0x1e0 [ 383.266403][T18630] ____sys_recvmsg+0x1e6/0x4a0 [ 383.266443][T18630] ? __pfx_____sys_recvmsg+0x10/0x10 [ 383.266498][T18630] ? import_iovec+0x73/0xa0 [ 383.266529][T18630] ___sys_recvmsg+0x213/0x5a0 [ 383.266577][T18630] ? __pfx____sys_recvmsg+0x10/0x10 [ 383.266611][T18630] ? lock_acquire+0x115/0x350 [ 383.266647][T18630] ? __fget_files+0x3a2/0x420 [ 383.266687][T18630] __x64_sys_recvmsg+0x1ae/0x290 [ 383.266718][T18630] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 383.266769][T18630] do_syscall_64+0x166/0x520 [ 383.266792][T18630] ? trace_irq_disable+0x3b/0x140 [ 383.266812][T18630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.266832][T18630] ? clear_bhb_loop+0x70/0xc0 [ 383.266857][T18630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.266877][T18630] RIP: 0033:0x7f4a5919e159 [ 383.266894][T18630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.266911][T18630] RSP: 002b:00007f4a5a009028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 383.266931][T18630] RAX: ffffffffffffffda RBX: 00007f4a59425fa0 RCX: 00007f4a5919e159 [ 383.266945][T18630] RDX: 0000000000003f01 RSI: 0000200000000500 RDI: 0000000000000003 [ 383.266958][T18630] RBP: 00007f4a5a009090 R08: 0000000000000000 R09: 0000000000000000 [ 383.266974][T18630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.266986][T18630] R13: 00007f4a59426038 R14: 00007f4a59425fa0 R15: 00007ffd911028d8 [ 383.267018][T18630] [ 383.607069][T18639] xt_CT: You must specify a L4 protocol and not use inversions on it [ 383.986971][T18645] bond10: option lp_interval: invalid value (0) [ 383.987126][T18645] bond10: option lp_interval: allowed values 1 - 2147483647 [ 384.022017][T18645] bond10 (unregistering): Released all slaves [ 384.205746][T18657] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3359'. [ 384.268874][T18662] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3362'. [ 384.477410][T18673] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3366'. [ 384.585647][T18676] netlink: 'syz.0.3367': attribute type 21 has an invalid length. [ 384.585669][T18676] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3367'. [ 384.585730][T18676] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3367'. [ 384.736298][T18682] FAULT_INJECTION: forcing a failure. [ 384.736298][T18682] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 384.736339][T18682] CPU: 0 UID: 0 PID: 18682 Comm: syz.6.3369 Not tainted syzkaller #0 PREEMPT(full) [ 384.736361][T18682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 384.736373][T18682] Call Trace: [ 384.736381][T18682] [ 384.736389][T18682] dump_stack_lvl+0xe8/0x150 [ 384.736423][T18682] should_fail_ex+0x410/0x560 [ 384.736452][T18682] prepare_alloc_pages+0x223/0x600 [ 384.736481][T18682] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 384.736508][T18682] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 384.736535][T18682] ? __pfx_policy_nodemask+0x10/0x10 [ 384.736560][T18682] ? lock_acquire+0x115/0x350 [ 384.736589][T18682] alloc_pages_mpol+0x21e/0x390 [ 384.736620][T18682] folio_alloc_mpol_noprof+0x39/0x160 [ 384.736649][T18682] vma_alloc_folio_noprof+0xe1/0x1e0 [ 384.736677][T18682] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 384.736714][T18682] do_wp_page+0x117d/0x4b80 [ 384.736759][T18682] ? __pfx_do_wp_page+0x10/0x10 [ 384.736782][T18682] ? do_raw_spin_lock+0x12b/0x2f0 [ 384.736812][T18682] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 384.736850][T18682] handle_mm_fault+0x15d7/0x3750 [ 384.736889][T18682] ? handle_mm_fault+0xf1/0x3750 [ 384.736931][T18682] ? __pfx_handle_mm_fault+0x10/0x10 [ 384.736971][T18682] ? __pfx___up_read+0x10/0x10 [ 384.737002][T18682] ? lock_mm_and_find_vma+0xa7/0x340 [ 384.737035][T18682] do_user_addr_fault+0x746/0x1340 [ 384.737076][T18682] exc_page_fault+0x6a/0xc0 [ 384.737103][T18682] asm_exc_page_fault+0x26/0x30 [ 384.737123][T18682] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 384.737143][T18682] Code: 67 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 67 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 384.737160][T18682] RSP: 0018:ffffc9000f107698 EFLAGS: 00050206 [ 384.737179][T18682] RAX: ffffffff84dcbd01 RBX: ffff8880652c00e8 RCX: 00000000000095d0 [ 384.737193][T18682] RDX: 0000000000000000 RSI: ffff8880652c6ce8 RDI: 0000200000007000 [ 384.737208][T18682] RBP: ffffc9000f107818 R08: ffff8880652d02b7 R09: 1ffff1100ca5a056 [ 384.737222][T18682] R10: dffffc0000000000 R11: ffffed100ca5a057 R12: dffffc0000000000 [ 384.737237][T18682] R13: 0000000000000000 R14: ffffc9000f107e10 R15: 00000000000101d0 [ 384.737258][T18682] ? _copy_to_iter+0x3e1/0x1810 [ 384.737288][T18682] _copy_to_iter+0x49d/0x1810 [ 384.737316][T18682] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 384.737357][T18682] ? __pfx__copy_to_iter+0x10/0x10 [ 384.737381][T18682] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 384.737404][T18682] ? tipc_wait_for_rcvmsg+0x4f3/0x640 [ 384.737440][T18682] __skb_datagram_iter+0xf8/0x980 [ 384.737470][T18682] ? __pfx_tipc_wait_for_rcvmsg+0x10/0x10 [ 384.737494][T18682] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 384.737525][T18682] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 384.737554][T18682] skb_copy_datagram_iter+0xb5/0x240 [ 384.737588][T18682] tipc_recvstream+0x732/0xe90 [ 384.737630][T18682] ? __pfx_tipc_recvstream+0x10/0x10 [ 384.737652][T18682] sock_recvmsg+0x196/0x1e0 [ 384.737677][T18682] ____sys_recvmsg+0x1e6/0x4a0 [ 384.737715][T18682] ? __pfx_____sys_recvmsg+0x10/0x10 [ 384.737760][T18682] ? import_iovec+0x73/0xa0 [ 384.737788][T18682] ___sys_recvmsg+0x213/0x5a0 [ 384.737823][T18682] ? __pfx____sys_recvmsg+0x10/0x10 [ 384.737862][T18682] ? lock_acquire+0x115/0x350 [ 384.737918][T18682] ? __fget_files+0x3a2/0x420 [ 384.737964][T18682] __x64_sys_recvmsg+0x1ae/0x290 [ 384.738002][T18682] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 384.738062][T18682] do_syscall_64+0x166/0x520 [ 384.738092][T18682] ? trace_irq_disable+0x3b/0x140 [ 384.738115][T18682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.738139][T18682] ? clear_bhb_loop+0x70/0xc0 [ 384.738168][T18682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.738191][T18682] RIP: 0033:0x7f4a5919e159 [ 384.738212][T18682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.738231][T18682] RSP: 002b:00007f4a5a009028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 384.738260][T18682] RAX: ffffffffffffffda RBX: 00007f4a59425fa0 RCX: 00007f4a5919e159 [ 384.738281][T18682] RDX: 0000000000003f01 RSI: 0000200000000500 RDI: 0000000000000003 [ 384.738294][T18682] RBP: 00007f4a5a009090 R08: 0000000000000000 R09: 0000000000000000 [ 384.738314][T18682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 384.738328][T18682] R13: 00007f4a59426038 R14: 00007f4a59425fa0 R15: 00007ffd911028d8 [ 384.738366][T18682] [ 385.222253][T18685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.141046][ C0] net_ratelimit: 10 callbacks suppressed [ 386.141067][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.141120][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.141665][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.142078][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.221283][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.221856][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.221939][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.222031][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.222392][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.222552][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.509431][T18741] FAULT_INJECTION: forcing a failure. [ 386.509431][T18741] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 386.509462][T18741] CPU: 1 UID: 0 PID: 18741 Comm: syz.0.3386 Not tainted syzkaller #0 PREEMPT(full) [ 386.509483][T18741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 386.509494][T18741] Call Trace: [ 386.509501][T18741] [ 386.509510][T18741] dump_stack_lvl+0xe8/0x150 [ 386.509543][T18741] should_fail_ex+0x410/0x560 [ 386.509571][T18741] prepare_alloc_pages+0x223/0x600 [ 386.509601][T18741] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 386.509627][T18741] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 386.509654][T18741] ? __pfx_policy_nodemask+0x10/0x10 [ 386.509678][T18741] ? lock_acquire+0x115/0x350 [ 386.509705][T18741] alloc_pages_mpol+0x21e/0x390 [ 386.509736][T18741] folio_alloc_mpol_noprof+0x39/0x160 [ 386.509765][T18741] vma_alloc_folio_noprof+0xe1/0x1e0 [ 386.509791][T18741] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 386.509825][T18741] do_wp_page+0x117d/0x4b80 [ 386.509869][T18741] ? __pfx_do_wp_page+0x10/0x10 [ 386.509897][T18741] ? do_raw_spin_lock+0x12b/0x2f0 [ 386.509929][T18741] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 386.509967][T18741] handle_mm_fault+0x15d7/0x3750 [ 386.510006][T18741] ? handle_mm_fault+0xf1/0x3750 [ 386.510043][T18741] ? __pfx_handle_mm_fault+0x10/0x10 [ 386.510082][T18741] ? __pfx___up_read+0x10/0x10 [ 386.510119][T18741] ? lock_mm_and_find_vma+0xa7/0x340 [ 386.510154][T18741] do_user_addr_fault+0x746/0x1340 [ 386.510190][T18741] exc_page_fault+0x6a/0xc0 [ 386.510217][T18741] asm_exc_page_fault+0x26/0x30 [ 386.510236][T18741] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 386.510256][T18741] Code: 67 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 67 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 386.510273][T18741] RSP: 0018:ffffc9000f107698 EFLAGS: 00050206 [ 386.510292][T18741] RAX: ffffffff84dcbd01 RBX: ffff8880632a00e8 RCX: 00000000000085d0 [ 386.510307][T18741] RDX: 0000000000000000 RSI: ffff8880632a7ce8 RDI: 0000200000008000 [ 386.510320][T18741] RBP: ffffc9000f107818 R08: ffff8880632b02b7 R09: 1ffff1100c656056 [ 386.510335][T18741] R10: dffffc0000000000 R11: ffffed100c656057 R12: dffffc0000000000 [ 386.510350][T18741] R13: 0000000000000000 R14: ffffc9000f107e10 R15: 00000000000101d0 [ 386.510371][T18741] ? _copy_to_iter+0x3e1/0x1810 [ 386.510402][T18741] _copy_to_iter+0x49d/0x1810 [ 386.510423][T18741] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 386.510464][T18741] ? __pfx__copy_to_iter+0x10/0x10 [ 386.510487][T18741] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 386.510511][T18741] ? tipc_wait_for_rcvmsg+0x4f3/0x640 [ 386.510546][T18741] __skb_datagram_iter+0xf8/0x980 [ 386.510576][T18741] ? __pfx_tipc_wait_for_rcvmsg+0x10/0x10 [ 386.510600][T18741] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 386.510630][T18741] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 386.510659][T18741] skb_copy_datagram_iter+0xb5/0x240 [ 386.510693][T18741] tipc_recvstream+0x732/0xe90 [ 386.510734][T18741] ? __pfx_tipc_recvstream+0x10/0x10 [ 386.510756][T18741] sock_recvmsg+0x196/0x1e0 [ 386.510781][T18741] ____sys_recvmsg+0x1e6/0x4a0 [ 386.510817][T18741] ? __pfx_____sys_recvmsg+0x10/0x10 [ 386.510862][T18741] ? import_iovec+0x73/0xa0 [ 386.510891][T18741] ___sys_recvmsg+0x213/0x5a0 [ 386.510925][T18741] ? __pfx____sys_recvmsg+0x10/0x10 [ 386.510959][T18741] ? lock_acquire+0x115/0x350 [ 386.510997][T18741] ? __fget_files+0x3a2/0x420 [ 386.511035][T18741] __x64_sys_recvmsg+0x1ae/0x290 [ 386.511066][T18741] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 386.511124][T18741] do_syscall_64+0x166/0x520 [ 386.511149][T18741] ? trace_irq_disable+0x3b/0x140 [ 386.511169][T18741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.511190][T18741] ? clear_bhb_loop+0x70/0xc0 [ 386.511214][T18741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.511234][T18741] RIP: 0033:0x7f85b7f9e159 [ 386.511252][T18741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.511269][T18741] RSP: 002b:00007f85b8ec6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 386.511289][T18741] RAX: ffffffffffffffda RBX: 00007f85b8225fa0 RCX: 00007f85b7f9e159 [ 386.511304][T18741] RDX: 0000000000003f01 RSI: 0000200000000500 RDI: 0000000000000003 [ 386.511317][T18741] RBP: 00007f85b8ec6090 R08: 0000000000000000 R09: 0000000000000000 [ 386.511329][T18741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 386.511341][T18741] R13: 00007f85b8226038 R14: 00007f85b8225fa0 R15: 00007fffd203fc78 [ 386.511373][T18741] [ 386.528695][T18747] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.100216][T18750] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3389'. [ 387.320388][T18769] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:19999 [ 387.516718][T18778] ipt_rpfilter: unknown options [ 387.774713][T18784] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3399'. [ 387.774789][T18784] bridge_slave_1: left allmulticast mode [ 387.774809][T18784] bridge_slave_1: left promiscuous mode [ 387.775025][T18784] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.780524][T18784] bridge_slave_0: left allmulticast mode [ 387.780545][T18784] bridge_slave_0: left promiscuous mode [ 387.780732][T18784] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.227635][T18794] 8021q: adding VLAN 0 to HW filter on device bond4 [ 388.258228][T18801] FAULT_INJECTION: forcing a failure. [ 388.258228][T18801] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 388.258259][T18801] CPU: 1 UID: 0 PID: 18801 Comm: syz.1.3405 Not tainted syzkaller #0 PREEMPT(full) [ 388.258280][T18801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 388.258292][T18801] Call Trace: [ 388.258300][T18801] [ 388.258309][T18801] dump_stack_lvl+0xe8/0x150 [ 388.258343][T18801] should_fail_ex+0x410/0x560 [ 388.258372][T18801] prepare_alloc_pages+0x223/0x600 [ 388.258401][T18801] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 388.258434][T18801] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 388.258461][T18801] ? __pfx_policy_nodemask+0x10/0x10 [ 388.258486][T18801] ? lock_acquire+0x115/0x350 [ 388.258514][T18801] alloc_pages_mpol+0x21e/0x390 [ 388.258545][T18801] folio_alloc_mpol_noprof+0x39/0x160 [ 388.258574][T18801] vma_alloc_folio_noprof+0xe1/0x1e0 [ 388.258603][T18801] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 388.258635][T18801] do_wp_page+0x117d/0x4b80 [ 388.258671][T18801] ? __pfx_do_wp_page+0x10/0x10 [ 388.258695][T18801] ? do_raw_spin_lock+0x12b/0x2f0 [ 388.258725][T18801] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 388.258762][T18801] handle_mm_fault+0x15d7/0x3750 [ 388.258801][T18801] ? handle_mm_fault+0xf1/0x3750 [ 388.258836][T18801] ? __pfx_handle_mm_fault+0x10/0x10 [ 388.258878][T18801] ? __pfx___up_read+0x10/0x10 [ 388.258908][T18801] ? lock_mm_and_find_vma+0xa7/0x340 [ 388.258941][T18801] do_user_addr_fault+0x746/0x1340 [ 388.258977][T18801] exc_page_fault+0x6a/0xc0 [ 388.259003][T18801] asm_exc_page_fault+0x26/0x30 [ 388.259022][T18801] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 388.259042][T18801] Code: 67 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 67 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 388.259059][T18801] RSP: 0018:ffffc9000f967698 EFLAGS: 00050206 [ 388.259077][T18801] RAX: ffffffff84dcbd01 RBX: ffff8880631200e8 RCX: 00000000000075d0 [ 388.259092][T18801] RDX: 0000000000000000 RSI: ffff888063128ce8 RDI: 0000200000009000 [ 388.259106][T18801] RBP: ffffc9000f967818 R08: ffff8880631302b7 R09: 1ffff1100c626056 [ 388.259121][T18801] R10: dffffc0000000000 R11: ffffed100c626057 R12: dffffc0000000000 [ 388.259136][T18801] R13: 0000000000000000 R14: ffffc9000f967e10 R15: 00000000000101d0 [ 388.259157][T18801] ? _copy_to_iter+0x3e1/0x1810 [ 388.259185][T18801] _copy_to_iter+0x49d/0x1810 [ 388.259206][T18801] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 388.259245][T18801] ? __pfx__copy_to_iter+0x10/0x10 [ 388.259269][T18801] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 388.259293][T18801] ? tipc_wait_for_rcvmsg+0x4f3/0x640 [ 388.259328][T18801] __skb_datagram_iter+0xf8/0x980 [ 388.259358][T18801] ? __pfx_tipc_wait_for_rcvmsg+0x10/0x10 [ 388.259381][T18801] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 388.259417][T18801] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 388.259446][T18801] skb_copy_datagram_iter+0xb5/0x240 [ 388.259478][T18801] tipc_recvstream+0x732/0xe90 [ 388.259518][T18801] ? __pfx_tipc_recvstream+0x10/0x10 [ 388.259540][T18801] sock_recvmsg+0x196/0x1e0 [ 388.259564][T18801] ____sys_recvmsg+0x1e6/0x4a0 [ 388.259601][T18801] ? __pfx_____sys_recvmsg+0x10/0x10 [ 388.259646][T18801] ? import_iovec+0x73/0xa0 [ 388.259674][T18801] ___sys_recvmsg+0x213/0x5a0 [ 388.259708][T18801] ? __pfx____sys_recvmsg+0x10/0x10 [ 388.259741][T18801] ? lock_acquire+0x115/0x350 [ 388.259778][T18801] ? __fget_files+0x3a2/0x420 [ 388.259816][T18801] __x64_sys_recvmsg+0x1ae/0x290 [ 388.259847][T18801] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 388.259897][T18801] do_syscall_64+0x166/0x520 [ 388.259922][T18801] ? trace_irq_disable+0x3b/0x140 [ 388.259942][T18801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.259962][T18801] ? clear_bhb_loop+0x70/0xc0 [ 388.259986][T18801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.260005][T18801] RIP: 0033:0x7f3f3c99e159 [ 388.260022][T18801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.260038][T18801] RSP: 002b:00007f3f3d7cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 388.260058][T18801] RAX: ffffffffffffffda RBX: 00007f3f3cc25fa0 RCX: 00007f3f3c99e159 [ 388.260073][T18801] RDX: 0000000000003f01 RSI: 0000200000000500 RDI: 0000000000000003 [ 388.260085][T18801] RBP: 00007f3f3d7cc090 R08: 0000000000000000 R09: 0000000000000000 [ 388.260098][T18801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 388.260110][T18801] R13: 00007f3f3cc26038 R14: 00007f3f3cc25fa0 R15: 00007ffdd4022448 [ 388.260141][T18801] [ 389.026333][T18827] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3412'. [ 389.026356][T18827] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3412'. [ 389.452129][T18849] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3419'. [ 389.452154][T18849] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3419'. [ 389.452183][T18849] netlink: 'syz.1.3419': attribute type 4 has an invalid length. [ 389.574758][T18853] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3422'. [ 389.786226][T18860] FAULT_INJECTION: forcing a failure. [ 389.786226][T18860] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 389.786261][T18860] CPU: 0 UID: 0 PID: 18860 Comm: syz.1.3424 Not tainted syzkaller #0 PREEMPT(full) [ 389.786284][T18860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 389.786296][T18860] Call Trace: [ 389.786305][T18860] [ 389.786314][T18860] dump_stack_lvl+0xe8/0x150 [ 389.786348][T18860] should_fail_ex+0x410/0x560 [ 389.786389][T18860] prepare_alloc_pages+0x223/0x600 [ 389.786419][T18860] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 389.786448][T18860] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 389.786476][T18860] ? __pfx_policy_nodemask+0x10/0x10 [ 389.786502][T18860] ? lock_acquire+0x115/0x350 [ 389.786532][T18860] alloc_pages_mpol+0x21e/0x390 [ 389.786565][T18860] folio_alloc_mpol_noprof+0x39/0x160 [ 389.786594][T18860] vma_alloc_folio_noprof+0xe1/0x1e0 [ 389.786625][T18860] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 389.786663][T18860] do_wp_page+0x117d/0x4b80 [ 389.786721][T18860] ? __pfx_do_wp_page+0x10/0x10 [ 389.786743][T18860] ? do_raw_spin_lock+0x12b/0x2f0 [ 389.786773][T18860] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 389.786810][T18860] handle_mm_fault+0x15d7/0x3750 [ 389.786848][T18860] ? handle_mm_fault+0xf1/0x3750 [ 389.786887][T18860] ? __pfx_handle_mm_fault+0x10/0x10 [ 389.786926][T18860] ? __pfx___up_read+0x10/0x10 [ 389.786956][T18860] ? lock_mm_and_find_vma+0xa7/0x340 [ 389.786989][T18860] do_user_addr_fault+0x746/0x1340 [ 389.787025][T18860] exc_page_fault+0x6a/0xc0 [ 389.787051][T18860] asm_exc_page_fault+0x26/0x30 [ 389.787070][T18860] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 389.787090][T18860] Code: 67 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 67 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 389.787107][T18860] RSP: 0018:ffffc9000fa0f698 EFLAGS: 00050206 [ 389.787124][T18860] RAX: ffffffff84dcbd01 RBX: ffff8880632400e8 RCX: 00000000000065d0 [ 389.787139][T18860] RDX: 0000000000000000 RSI: ffff888063249ce8 RDI: 000020000000a000 [ 389.787153][T18860] RBP: ffffc9000fa0f818 R08: ffff8880632502b7 R09: 1ffff1100c64a056 [ 389.787167][T18860] R10: dffffc0000000000 R11: ffffed100c64a057 R12: dffffc0000000000 [ 389.787181][T18860] R13: 0000000000000000 R14: ffffc9000fa0fe10 R15: 00000000000101d0 [ 389.787202][T18860] ? _copy_to_iter+0x3e1/0x1810 [ 389.787231][T18860] _copy_to_iter+0x49d/0x1810 [ 389.787252][T18860] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 389.787291][T18860] ? __pfx__copy_to_iter+0x10/0x10 [ 389.787315][T18860] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 389.787337][T18860] ? tipc_wait_for_rcvmsg+0x4f3/0x640 [ 389.787377][T18860] __skb_datagram_iter+0xf8/0x980 [ 389.787407][T18860] ? __pfx_tipc_wait_for_rcvmsg+0x10/0x10 [ 389.787431][T18860] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 389.787461][T18860] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 389.787489][T18860] skb_copy_datagram_iter+0xb5/0x240 [ 389.787522][T18860] tipc_recvstream+0x732/0xe90 [ 389.787563][T18860] ? __pfx_tipc_recvstream+0x10/0x10 [ 389.787584][T18860] sock_recvmsg+0x196/0x1e0 [ 389.787609][T18860] ____sys_recvmsg+0x1e6/0x4a0 [ 389.787646][T18860] ? __pfx_____sys_recvmsg+0x10/0x10 [ 389.787691][T18860] ? import_iovec+0x73/0xa0 [ 389.787720][T18860] ___sys_recvmsg+0x213/0x5a0 [ 389.787754][T18860] ? __pfx____sys_recvmsg+0x10/0x10 [ 389.787788][T18860] ? lock_acquire+0x115/0x350 [ 389.787825][T18860] ? __fget_files+0x3a2/0x420 [ 389.787863][T18860] __x64_sys_recvmsg+0x1ae/0x290 [ 389.787895][T18860] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 389.787945][T18860] do_syscall_64+0x166/0x520 [ 389.787969][T18860] ? trace_irq_disable+0x3b/0x140 [ 389.787988][T18860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.788008][T18860] ? clear_bhb_loop+0x70/0xc0 [ 389.788032][T18860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.788051][T18860] RIP: 0033:0x7f3f3c99e159 [ 389.788069][T18860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.788085][T18860] RSP: 002b:00007f3f3d7cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 389.788105][T18860] RAX: ffffffffffffffda RBX: 00007f3f3cc25fa0 RCX: 00007f3f3c99e159 [ 389.788120][T18860] RDX: 0000000000003f01 RSI: 0000200000000500 RDI: 0000000000000003 [ 389.788133][T18860] RBP: 00007f3f3d7cc090 R08: 0000000000000000 R09: 0000000000000000 [ 389.788145][T18860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 389.788156][T18860] R13: 00007f3f3cc26038 R14: 00007f3f3cc25fa0 R15: 00007ffdd4022448 [ 389.788189][T18860] [ 390.288230][T18867] bond10: option fail_over_mac: invalid value (16) [ 390.296661][T18867] bond10 (unregistering): Released all slaves [ 390.333102][T18866] tipc: Enabling of bearer rejected, already enabled [ 390.333462][T18866] tipc: Disabling bearer [ 390.422118][T18873] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3427'. [ 390.495336][T18876] sctp: [Deprecated]: syz.6.3429 (pid 18876) Use of struct sctp_assoc_value in delayed_ack socket option. [ 390.495336][T18876] Use struct sctp_sack_info instead [ 390.500083][T18876] netlink: 'syz.6.3429': attribute type 10 has an invalid length. [ 390.563007][T18876] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3429'. [ 390.590278][T18876] team0: Port device dummy0 removed [ 390.618153][T18886] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 390.900573][T18899] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3433'. [ 390.957985][T18900] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3432'. [ 391.077908][T18914] netlink: 'syz.1.3437': attribute type 1 has an invalid length. [ 391.180979][ C1] net_ratelimit: 8 callbacks suppressed [ 391.180998][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.181322][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.181560][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.181927][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.186914][T18914] 8021q: adding VLAN 0 to HW filter on device bond1 [ 391.248839][T18918] netlink: 'syz.0.3438': attribute type 30 has an invalid length. [ 391.260970][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.261073][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.261188][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.261491][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.261819][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.261984][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.337484][T18916] bond1: (slave geneve3): making interface the new active one [ 391.354612][T18916] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 391.907286][T18949] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 392.105674][T18958] netlink: 'syz.0.3455': attribute type 1 has an invalid length. [ 392.197018][T18958] 8021q: adding VLAN 0 to HW filter on device bond2 [ 392.253988][T18962] bond2: (slave veth0_to_bond): making interface the new active one [ 392.258172][T18962] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 392.324327][T18958] macvlan2: entered promiscuous mode [ 392.324350][T18958] macvlan2: entered allmulticast mode [ 392.324938][T18958] bond2: entered promiscuous mode [ 392.324955][T18958] veth0_to_bond: entered promiscuous mode [ 392.328082][T18958] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 392.328746][T18958] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 392.328931][T18958] bond2: left promiscuous mode [ 392.328946][T18958] veth0_to_bond: left promiscuous mode [ 392.512666][T18972] netlink: 'syz.5.3458': attribute type 1 has an invalid length. [ 392.791272][T18988] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 392.794032][T18988] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 393.046982][T19004] __nla_validate_parse: 6 callbacks suppressed [ 393.047001][T19004] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3465'. [ 393.085622][T19005] netlink: 'syz.5.3464': attribute type 11 has an invalid length. [ 393.237659][T19011] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3467'. [ 393.430515][T19023] netlink: 'syz.1.3470': attribute type 7 has an invalid length. [ 393.430536][T19023] netlink: 536 bytes leftover after parsing attributes in process `syz.1.3470'. [ 393.470301][T19022] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3470'. [ 393.503030][T19028] netlink: 'syz.6.3472': attribute type 4 has an invalid length. [ 393.878563][T19052] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3479'. [ 393.980075][T19049] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3477'. [ 394.208512][T19062] lo: left promiscuous mode [ 394.339125][T19072] netlink: 'syz.0.3482': attribute type 21 has an invalid length. [ 394.339146][T19072] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3482'. [ 394.364739][T19072] netlink: 'syz.0.3482': attribute type 5 has an invalid length. [ 394.364756][T19072] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3482'. [ 394.365839][T19063] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 394.477365][T19082] netlink: 'syz.5.3485': attribute type 11 has an invalid length. [ 394.478163][T19082] netlink: 3800 bytes leftover after parsing attributes in process `syz.5.3485'. [ 394.663582][T19088] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3489'. [ 394.809274][T19088] veth3: entered allmulticast mode [ 394.816782][T19092] bridge_slave_1: left allmulticast mode [ 394.816863][T19092] bridge_slave_1: left promiscuous mode [ 394.817074][T19092] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.862568][T19092] bridge_slave_0: left allmulticast mode [ 394.862589][T19092] bridge_slave_0: left promiscuous mode [ 394.862778][T19092] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.029972][T19109] sctp: [Deprecated]: syz.6.3492 (pid 19109) Use of int in maxseg socket option. [ 395.029972][T19109] Use struct sctp_assoc_value instead [ 395.770203][T19123] IPv6: NLM_F_CREATE should be specified when creating new route [ 396.104702][T19136] netlink: 'syz.1.3504': attribute type 3 has an invalid length. [ 396.105230][T19136] netlink: 'syz.1.3504': attribute type 3 has an invalid length. [ 396.105754][T19136] netlink: 'syz.1.3504': attribute type 3 has an invalid length. [ 396.166389][T19136] netlink: 'syz.1.3504': attribute type 3 has an invalid length. [ 396.166985][T19136] netlink: 'syz.1.3504': attribute type 3 has an invalid length. [ 396.205478][T19136] netlink: 'syz.1.3504': attribute type 3 has an invalid length. [ 396.220928][ C0] net_ratelimit: 8 callbacks suppressed [ 396.220943][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.221348][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.221402][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.221950][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.222306][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.232197][T19136] netlink: 'syz.1.3504': attribute type 3 has an invalid length. [ 396.236636][T19136] netlink: 'syz.1.3504': attribute type 3 has an invalid length. [ 396.237215][T19136] netlink: 'syz.1.3504': attribute type 3 has an invalid length. [ 396.237742][T19136] netlink: 'syz.1.3504': attribute type 3 has an invalid length. [ 396.301398][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.303592][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.306734][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.306816][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.307020][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.384854][T19145] : entered promiscuous mode [ 396.492841][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 396.494784][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 396.496741][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 396.498901][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 396.511156][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 398.276352][T19226] __nla_validate_parse: 7 callbacks suppressed [ 398.276372][T19226] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3523'. [ 398.370201][T19226] 8021q: adding VLAN 0 to HW filter on device bond5 [ 398.402430][T19232] bridge_slave_0: default FDB implementation only supports local addresses [ 398.502660][T19223] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3524'. [ 398.622619][ T5618] Bluetooth: hci0: command tx timeout [ 398.932644][T19254] macvlan0: entered promiscuous mode [ 398.954768][T19151] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.954937][T19151] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.955065][T19151] bridge_slave_0: entered allmulticast mode [ 398.956869][T19151] bridge_slave_0: entered promiscuous mode [ 398.991222][T19151] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.991374][T19151] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.991494][T19151] bridge_slave_1: entered allmulticast mode [ 398.995438][T19151] bridge_slave_1: entered promiscuous mode [ 399.087059][T19258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3531'. [ 399.197631][T19151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.229593][T19151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.264088][T19263] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3533'. [ 399.384006][T19268] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3531'. [ 399.390190][T19151] team0: Port device team_slave_0 added [ 399.423653][T19151] team0: Port device team_slave_1 added [ 399.614021][T19151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.614038][T19151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.614061][T19151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.622494][T19151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.622532][T19151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.627958][T19151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.774611][T19285] syzkaller1: entered promiscuous mode [ 399.774633][T19285] syzkaller1: entered allmulticast mode [ 399.810016][T19283] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 399.823077][T19151] hsr_slave_0: entered promiscuous mode [ 399.841153][T19298] Bluetooth: MGMT ver 1.23 [ 399.841190][T19298] Bluetooth: hci0: unsupported parameter 5135 [ 399.841204][T19298] Bluetooth: hci0: unsupported parameter 8192 [ 399.841216][T19298] Bluetooth: hci0: unsupported parameter 5135 [ 399.841227][T19298] Bluetooth: hci0: unsupported parameter 8192 [ 399.842602][T19151] hsr_slave_1: entered promiscuous mode [ 399.843318][T19151] debugfs: 'hsr0' already exists in 'hsr' [ 399.843335][T19151] Cannot create hsr debugfs directory [ 399.987994][T19293] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3539'. [ 400.023255][T19304] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3539'. [ 400.321269][T19320] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3547'. [ 400.321305][T19320] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3547'. [ 400.656539][T19333] sctp_setsockopt_delayed_ack: 55 callbacks suppressed [ 400.656558][T19333] sctp: [Deprecated]: syz.5.3551 (pid 19333) Use of struct sctp_assoc_value in delayed_ack socket option. [ 400.656558][T19333] Use struct sctp_sack_info instead [ 400.701809][ T5618] Bluetooth: hci0: command tx timeout [ 400.727997][T19337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3552'. [ 400.766362][T19151] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 400.786820][T19151] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 400.787770][T19151] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 400.838635][T19151] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 400.839593][T19151] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 400.876645][T19151] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 400.880735][T19151] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 400.905100][T19151] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 401.217216][T19361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.261168][ C1] net_ratelimit: 13 callbacks suppressed [ 401.261187][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.261228][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.261871][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.262177][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.301345][T19361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.341317][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.341629][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.351090][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.351189][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.352024][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.352184][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.465248][T19151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.495548][T19151] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.516883][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.516954][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.546166][T15296] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.546265][T15296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.624624][T19151] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 401.691860][T15297] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.691966][T15297] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.692002][T15297] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.692044][T15297] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.078267][T19386] validate_nla: 60 callbacks suppressed [ 402.078363][T19386] netlink: 'syz.0.3567': attribute type 1 has an invalid length. [ 402.344922][T19390] bond3: (slave bridge1): making interface the new active one [ 402.347641][T19390] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 402.521777][T15296] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.522042][T15298] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.522076][T15298] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.522107][T15298] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.782103][ T5618] Bluetooth: hci0: command tx timeout [ 402.829742][T19151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.381193][T19456] __nla_validate_parse: 76 callbacks suppressed [ 403.381212][T19456] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3583'. [ 403.381227][T19456] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3583'. [ 403.521503][T19434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3580'. [ 403.550007][ T5618] block nbd3: Receive control failed (result -107) [ 403.569967][T19433] netlink: 'syz.0.3580': attribute type 12 has an invalid length. [ 403.569989][T19433] netlink: 'syz.0.3580': attribute type 29 has an invalid length. [ 403.570003][T19433] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3580'. [ 403.570022][T19433] netlink: 59 bytes leftover after parsing attributes in process `syz.0.3580'. [ 403.570375][T19433] netlink: 'syz.0.3580': attribute type 12 has an invalid length. [ 403.570392][T19433] netlink: 'syz.0.3580': attribute type 29 has an invalid length. [ 403.570406][T19433] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3580'. [ 403.570423][T19433] netlink: 59 bytes leftover after parsing attributes in process `syz.0.3580'. [ 403.648481][T19433] netlink: 'syz.0.3580': attribute type 12 has an invalid length. [ 403.648503][T19433] netlink: 'syz.0.3580': attribute type 29 has an invalid length. [ 403.648518][T19433] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3580'. [ 403.648537][T19433] netlink: 59 bytes leftover after parsing attributes in process `syz.0.3580'. [ 403.648924][T19433] netlink: 'syz.0.3580': attribute type 12 has an invalid length. [ 403.648940][T19433] netlink: 'syz.0.3580': attribute type 29 has an invalid length. [ 403.648954][T19433] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3580'. [ 403.649221][T19433] netlink: 'syz.0.3580': attribute type 12 has an invalid length. [ 403.733769][T19151] veth0_vlan: entered promiscuous mode [ 403.768500][T19434] lo: entered promiscuous mode [ 403.810031][T19434] tunl0: entered promiscuous mode [ 403.862582][T19434] gre0: entered promiscuous mode [ 403.948530][T19434] gretap0: entered promiscuous mode [ 403.971686][T19434] erspan0: entered promiscuous mode [ 403.988541][T19434] ip_vti0: entered promiscuous mode [ 404.002631][T19434] ip6_vti0: entered promiscuous mode [ 404.008255][T19434] sit0: entered promiscuous mode [ 404.048497][T19434] ip6tnl0: entered promiscuous mode [ 404.068547][T19434] ip6gre0: entered promiscuous mode [ 404.093682][T19434] syz_tun: entered promiscuous mode [ 404.115280][T19434] ip6gretap0: entered promiscuous mode [ 404.127653][T19434] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.128378][T19434] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.138168][T19434] bridge0: entered promiscuous mode [ 404.220457][T19151] veth1_vlan: entered promiscuous mode [ 404.293973][T19151] veth0_macvtap: entered promiscuous mode [ 404.300264][T19151] veth1_macvtap: entered promiscuous mode [ 404.338565][T19151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.375198][T19151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.528069][T19478] syzkaller1: entered promiscuous mode [ 404.528091][T19478] syzkaller1: entered allmulticast mode [ 404.535378][ T1015] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.545358][ T78] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.558651][T15302] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.559663][T15298] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.707230][T15297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.707263][T15297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.786911][ T1015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.786934][ T1015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.861201][ T5618] Bluetooth: hci0: command tx timeout [ 405.124015][T19503] IPVS: sync thread started: state = BACKUP, mcast_ifn = team0, syncid = 2, id = 0 [ 405.234528][T19502] 8021q: adding VLAN 0 to HW filter on device bond10 [ 405.352411][T19502] bond10: (slave veth0_to_bond): making interface the new active one [ 405.380770][T19502] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 405.561101][T19511] nbd: illegal input index 65508 [ 405.664309][T19502] bond11: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 405.695439][T19502] bond11 (unregistering): Released all slaves [ 406.300943][ C0] net_ratelimit: 10 callbacks suppressed [ 406.300963][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.301512][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.301749][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.302251][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.303014][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.381298][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.381324][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.381389][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.381750][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.381923][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.547791][T19532] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 408.549206][T19555] __nla_validate_parse: 13 callbacks suppressed [ 408.549234][T19555] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3608'. [ 408.554557][T19584] netlink: 240 bytes leftover after parsing attributes in process `syz.6.3616'. [ 408.766580][ T5618] Bluetooth: hci4: ISO packet too small [ 409.400770][T19638] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3630'. [ 409.427315][ T5618] block nbd4: Receive control failed (result -107) [ 410.327219][T19670] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3644'. [ 410.857513][T19704] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3656'. [ 410.903260][T19709] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 411.005204][T19707] sctp: [Deprecated]: syz.5.3655 (pid 19707) Use of struct sctp_assoc_value in delayed_ack socket option. [ 411.005204][T19707] Use struct sctp_sack_info instead [ 411.220516][T19721] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3661'. [ 411.341334][ C1] net_ratelimit: 8 callbacks suppressed [ 411.341354][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.341419][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.342908][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.343727][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.420999][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.421102][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.421118][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.421514][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.422101][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.422264][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.535183][T19736] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3669'. [ 411.538685][T19736] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3669'. [ 411.538704][T19736] netlink: 11 bytes leftover after parsing attributes in process `syz.7.3669'. [ 411.555118][T19732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3666'. [ 412.010142][T19769] validate_nla: 5 callbacks suppressed [ 412.010160][T19769] netlink: 'syz.0.3678': attribute type 19 has an invalid length. [ 412.013282][T19769] netlink: 'syz.0.3678': attribute type 19 has an invalid length. [ 412.148167][T19769] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.148294][T19769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.148608][T19769] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.148704][T19769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.273186][T19769] Unknown status report in ack skb [ 412.458694][T19785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.555609][T19791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.628354][T19791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.690043][T19798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.815061][T19795] gretap1: entered promiscuous mode [ 412.817098][T19795] batman_adv: batadv0: Adding interface: gretap1 [ 412.817115][T19795] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.817144][T19795] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 413.608286][T19833] netlink: 'syz.5.3698': attribute type 1 has an invalid length. [ 413.653896][T19833] bond11: entered promiscuous mode [ 413.654391][T19833] 8021q: adding VLAN 0 to HW filter on device bond11 [ 413.699639][T19833] 8021q: adding VLAN 0 to HW filter on device bond11 [ 413.700553][T19833] bond11: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 413.700572][T19833] bond11: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 413.758197][T19833] bond11: (slave ip6gre3): making interface the new active one [ 413.758217][T19833] ip6gre3: entered promiscuous mode [ 413.759559][T19833] bond11: (slave ip6gre3): Enslaving as an active interface with an up link [ 413.934718][T19842] netlink: 'syz.6.3702': attribute type 2 has an invalid length. [ 413.955342][T19842] netlink: 'syz.6.3702': attribute type 2 has an invalid length. [ 413.955360][T19842] __nla_validate_parse: 7 callbacks suppressed [ 413.955370][T19842] netlink: 67 bytes leftover after parsing attributes in process `syz.6.3702'. [ 414.074044][T19852] veth0: entered promiscuous mode [ 414.096113][T19850] veth0: left promiscuous mode [ 414.348367][T19861] netlink: 'syz.5.3706': attribute type 30 has an invalid length. [ 414.416015][T19861] bond12: option arp_missed_max: invalid value (0) [ 414.416038][T19861] bond12: option arp_missed_max: allowed values 1 - 255 [ 414.441843][T19861] bond12 (unregistering): Released all slaves [ 414.522568][T19863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3704'. [ 414.899450][T19884] netlink: 'syz.6.3710': attribute type 21 has an invalid length. [ 414.899473][T19884] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3710'. [ 414.899556][T19884] netlink: 'syz.6.3710': attribute type 4 has an invalid length. [ 414.899572][T19884] netlink: 'syz.6.3710': attribute type 5 has an invalid length. [ 414.899584][T19884] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3710'. [ 414.908152][T19884] netlink: 'syz.6.3710': attribute type 21 has an invalid length. [ 414.908200][T19884] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3710'. [ 414.908480][T19884] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3710'. [ 415.113710][T19888] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3711'. [ 415.207537][T19889] 8021q: adding VLAN 0 to HW filter on device bond2 [ 415.222629][T19886] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3711'. [ 415.239218][T19895] bond2: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 415.256886][T19895] bond2: entered allmulticast mode [ 415.263172][T19896] bond2: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 415.517943][T19889] 8021q: adding VLAN 0 to HW filter on device bond3 [ 415.583364][T19894] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 415.610363][T19905] Bluetooth: MGMT ver 1.23 [ 415.649749][T19890] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 415.903515][T19915] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3719'. [ 415.978623][T19921] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3719'. [ 416.381030][ C1] net_ratelimit: 8 callbacks suppressed [ 416.381051][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.381227][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.381563][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.381720][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.460943][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.461162][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.461244][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.461481][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.461625][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.461830][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.617531][T19941] unsupported nlmsg_type 40 [ 417.093048][T19967] validate_nla: 6 callbacks suppressed [ 417.093066][T19967] netlink: 'syz.5.3735': attribute type 8 has an invalid length. [ 417.094915][T19967] sch_fq: defrate 0 ignored. [ 417.133550][T19966] netlink: 'syz.7.3734': attribute type 2 has an invalid length. [ 418.509642][T20046] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20000 [ 418.856494][T20057] sctp: [Deprecated]: syz.6.3753 (pid 20057) Use of struct sctp_assoc_value in delayed_ack socket option. [ 418.856494][T20057] Use struct sctp_sack_info instead [ 418.858747][T20057] netlink: 'syz.6.3753': attribute type 10 has an invalid length. [ 419.363509][T20074] netlink: 'syz.1.3758': attribute type 23 has an invalid length. [ 419.551288][T20078] __nla_validate_parse: 8 callbacks suppressed [ 419.551308][T20078] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3759'. [ 419.640084][T20089] xt_hashlimit: size too large, truncated to 1048576 [ 420.059440][T20109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3769'. [ 420.209760][T20120] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3772'. [ 420.245575][T20118] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 420.755297][T20147] netlink: 'syz.6.3781': attribute type 4 has an invalid length. [ 420.930431][T20152] netlink: 200 bytes leftover after parsing attributes in process `syz.7.3777'. [ 421.149636][T20161] netlink: 'syz.0.3785': attribute type 1 has an invalid length. [ 421.421697][ C0] net_ratelimit: 9 callbacks suppressed [ 421.421716][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.422013][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.422686][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.423740][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.501038][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.501371][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.511117][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.511221][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.520375][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.520566][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.059618][T20167] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3786'. [ 423.096510][T20206] netlink: 'syz.0.3790': attribute type 1 has an invalid length. [ 423.124069][T20206] 8021q: adding VLAN 0 to HW filter on device bond4 [ 423.128353][T20206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3790'. [ 423.149282][T20206] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3790'. [ 423.194631][T20209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3791'. [ 423.195336][T20209] netlink: 'syz.0.3791': attribute type 30 has an invalid length. [ 423.195349][T20209] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3791'. [ 423.366362][T20129] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 423.618077][T20219] ip6gre2: entered allmulticast mode [ 423.629059][ T12] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 424.043751][T20242] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 424.044029][T20244] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3801'. [ 424.045421][T20242] bond1 (unregistering): Released all slaves [ 424.442384][T20268] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 424.636226][T20279] __nla_validate_parse: 1 callbacks suppressed [ 424.636245][T20279] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3809'. [ 424.636259][T20279] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3809'. [ 424.959655][T20304] No such timeout policy "s" [ 425.092175][T20313] mac80211_hwsim hwsim46 wlan0: entered promiscuous mode [ 425.093921][T20321] netlink: 'syz.1.3818': attribute type 1 has an invalid length. [ 425.548530][T20342] bridge0: entered allmulticast mode [ 425.550264][T20342] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3824'. [ 425.550339][T20342] bridge_slave_1: left promiscuous mode [ 425.550562][T20342] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.585787][T20342] bridge_slave_0: left allmulticast mode [ 425.585811][T20342] bridge_slave_0: left promiscuous mode [ 425.586030][T20342] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.651988][T20348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3824'. [ 425.687370][T20342] bridge0 (unregistering): left allmulticast mode [ 425.818179][T20363] veth3: entered allmulticast mode [ 425.855386][T20364] tipc: Enabling of bearer rejected, media not registered [ 425.985858][T20369] netlink: 59 bytes leftover after parsing attributes in process `syz.5.3831'. [ 426.458373][T20397] netlink: 'syz.0.3840': attribute type 3 has an invalid length. [ 426.461067][ C0] net_ratelimit: 45 callbacks suppressed [ 426.461083][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.461171][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.461682][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.461700][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.469270][T20398] syzkaller1: entered allmulticast mode [ 426.541789][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.542469][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.542520][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.542630][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.543336][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.543547][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.098141][T20428] netlink: 'syz.7.3850': attribute type 1 has an invalid length. [ 427.176917][T20436] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3849'. [ 427.260327][T20433] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3852'. [ 427.292029][T20433] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3852'. [ 427.485291][T20444] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3856'. [ 427.538799][T20444] syzkaller1: entered promiscuous mode [ 427.538820][T20444] syzkaller1: entered allmulticast mode [ 427.566701][T20444] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3856'. [ 427.699191][T20451] netlink: 'syz.6.3857': attribute type 17 has an invalid length. [ 427.727552][T20451] erspan0: entered promiscuous mode [ 427.728583][T20451] gretap0: entered promiscuous mode [ 427.741651][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 428.456254][T20483] ip6gre1: entered promiscuous mode [ 428.456276][T20483] ip6gre1: entered allmulticast mode [ 428.512360][T20483] netlink: 'syz.0.3868': attribute type 6 has an invalid length. [ 428.612022][T20496] No such timeout policy "s" [ 428.737883][T20504] Bluetooth: ISO socket layer initialized [ 428.796369][T20494] bond6 (unregistering): Released all slaves [ 429.128631][T20530] bond1: option downdelay: invalid value (18446744073709551615) [ 429.128660][T20530] bond1: option downdelay: allowed values 0 - 2147483647 [ 429.178000][T20530] bond1 (unregistering): Released all slaves [ 429.198542][T20538] netlink: 'syz.7.3880': attribute type 1 has an invalid length. [ 429.741254][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 429.746709][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 429.773078][T20573] bridge_slave_0: invalid flags given to default FDB implementation [ 430.005380][T20579] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 430.035101][T20593] __nla_validate_parse: 9 callbacks suppressed [ 430.035125][T20593] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3895'. [ 430.282291][T20603] netlink: 'syz.7.3897': attribute type 13 has an invalid length. [ 430.436197][T20614] pimreg3: entered allmulticast mode [ 430.585132][T20619] syzkaller0: entered promiscuous mode [ 430.585154][T20619] syzkaller0: entered allmulticast mode [ 430.678773][T20626] sctp: [Deprecated]: syz.6.3909 (pid 20626) Use of struct sctp_assoc_value in delayed_ack socket option. [ 430.678773][T20626] Use struct sctp_sack_info instead [ 430.733613][T20631] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3908'. [ 430.927887][T20643] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3907'. [ 431.201525][T20664] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3918'. [ 431.291641][T20670] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3919'. [ 431.482958][T20681] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 431.501025][ C0] net_ratelimit: 10 callbacks suppressed [ 431.501041][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.501056][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.501244][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.501779][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.581011][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.581086][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.581149][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.581397][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.581956][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.581985][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.870747][T20698] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3927'. [ 432.251594][T20714] 8021q: adding VLAN 0 to HW filter on device bond5 [ 432.336201][T20724] batman_adv: batadv0: Adding interface: wlan1 [ 432.336228][T20724] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.336260][T20724] batman_adv: batadv0: Interface activated: wlan1 [ 432.880549][T20753] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3939'. [ 433.046734][T20766] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3944'. [ 433.046762][T20766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3944'. [ 433.185697][T20769] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3946'. [ 434.444743][T20797] IPVS: set_ctl: invalid protocol: 51 172.20.20.18:20001 [ 434.687839][T15292] IPVS: starting estimator thread 0... [ 434.770976][T20805] IPVS: using max 28 ests per chain, 67200 per kthread [ 434.920283][T20821] xt_IDLETIMER: label is empty or not nul-terminated [ 435.586425][T20847] __nla_validate_parse: 3 callbacks suppressed [ 435.586446][T20847] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3967'. [ 435.695046][T20857] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3972'. [ 435.770367][T20864] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3972'. [ 435.770391][T20864] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3972'. [ 435.777605][T20864] vlan0: entered promiscuous mode [ 435.837651][T20857] netlink: 'syz.6.3972': attribute type 4 has an invalid length. [ 435.910296][T20857] xt_limit: Overflow, try lower: 536871034/0 [ 436.034445][T20873] netlink: 'syz.7.3975': attribute type 3 has an invalid length. [ 436.034466][T20873] netlink: 244 bytes leftover after parsing attributes in process `syz.7.3975'. [ 436.086201][T20877] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3976'. [ 436.141174][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 436.249246][T20887] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3982'. [ 436.413422][T20886] nbd: must specify at least one socket [ 436.510593][T20907] netlink: 'syz.5.3987': attribute type 2 has an invalid length. [ 436.541557][ C1] net_ratelimit: 9 callbacks suppressed [ 436.541576][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.541836][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.541947][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.542800][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.543087][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.602936][T20906] dvmrp0: entered allmulticast mode [ 436.621125][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.627606][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.627711][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.628076][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.628453][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.851986][T20927] Bluetooth: hci0: unsupported parameter 5135 [ 436.852010][T20927] Bluetooth: hci0: unsupported parameter 8192 [ 436.852022][T20927] Bluetooth: hci0: unsupported parameter 5135 [ 436.852034][T20927] Bluetooth: hci0: unsupported parameter 8192 [ 436.858612][T20915] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 436.858635][T20915] syzkaller1: group set to 0 [ 437.064859][T20939] netlink: 'syz.7.3995': attribute type 2 has an invalid length. [ 437.087124][T20939] : entered promiscuous mode [ 437.197041][T20945] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3997'. [ 437.666173][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880419b3c00: rx timeout, send abort [ 438.166230][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880419b3c00: abort rx timeout. Force session deactivation [ 438.166348][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880595e0800: rx timeout, send abort [ 438.666392][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880595e0800: abort rx timeout. Force session deactivation [ 439.756131][T20919] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 439.989543][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.070755][T20974] tipc: Enabling of bearer rejected, failed to enable media [ 440.187375][T20982] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4008'. [ 440.277884][T20987] netlink: 'syz.0.4011': attribute type 1 has an invalid length. [ 440.337213][T20987] bond6: entered promiscuous mode [ 440.337602][T20987] 8021q: adding VLAN 0 to HW filter on device bond6 [ 440.376221][T20993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4010'. [ 440.545484][T21000] netlink: 'syz.6.4014': attribute type 5 has an invalid length. [ 441.398581][T21049] __nla_validate_parse: 2 callbacks suppressed [ 441.398600][T21049] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4028'. [ 441.543892][T21056] netlink: 'syz.7.4029': attribute type 83 has an invalid length. [ 441.571129][T21056] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4029'. [ 441.580997][ C1] net_ratelimit: 8 callbacks suppressed [ 441.581014][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.581260][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.582018][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.583683][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.661068][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.661673][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.671077][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.671193][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.672276][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.672478][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.728792][T21061] Bluetooth: hci0: unsupported parameter 5135 [ 441.728815][T21061] Bluetooth: hci0: unsupported parameter 8192 [ 441.728831][T21061] Bluetooth: hci0: unsupported parameter 5135 [ 441.728843][T21061] Bluetooth: hci0: unsupported parameter 8192 [ 441.730004][T21061] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4031'. [ 441.730061][T21061] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4031'. [ 441.796124][T21064] batadv_slave_0: entered promiscuous mode [ 441.797732][T21063] batadv_slave_0: left promiscuous mode [ 442.153745][T21089] tipc: Started in network mode [ 442.153776][T21089] tipc: Node identity 5202658f0ad3, cluster identity 4711 [ 442.154096][T21089] tipc: Enabled bearer , priority 0 [ 442.196752][T21089] syzkaller0: MTU too low for tipc bearer [ 442.196771][T21089] tipc: Disabling bearer [ 442.259679][T21096] syzkaller0: MTU too low for tipc bearer [ 442.259717][T21096] tipc: Enabling of bearer rejected, failed to enable media [ 443.147761][T21140] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4050'. [ 443.148166][T21134] netlink: 'syz.1.4047': attribute type 1 has an invalid length. [ 443.286618][T21134] 8021q: adding VLAN 0 to HW filter on device bond4 [ 443.319826][T21140] tipc: New replicast peer: 255.255.255.255 [ 443.320495][T21140] tipc: Enabled bearer , priority 10 [ 443.376530][T21156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4053'. [ 443.385147][T21156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4053'. [ 443.385727][T21156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4053'. [ 443.413279][T21156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4053'. [ 443.416874][T21156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4053'. [ 444.431500][T15657] tipc: Node number set to 1490118031 [ 444.536027][T21220] lo speed is unknown, defaulting to 1000 [ 444.542307][T21220] lo speed is unknown, defaulting to 1000 [ 444.544586][T21220] lo speed is unknown, defaulting to 1000 [ 444.545756][T21220] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 444.545790][T21220] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 444.545830][T21220] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 444.597656][T21218] netlink: 'syz.0.4071': attribute type 10 has an invalid length. [ 444.599652][T21224] xt_LOG: level 8 >= 8 [ 444.624022][T21218] team0: Device vxcan1 is of different type [ 444.643542][T21220] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 444.644329][T21222] netlink: 'syz.6.4072': attribute type 2 has an invalid length. [ 444.692723][T21220] lo speed is unknown, defaulting to 1000 [ 444.696849][T21220] lo speed is unknown, defaulting to 1000 [ 444.698726][T21220] lo speed is unknown, defaulting to 1000 [ 444.700654][T21220] lo speed is unknown, defaulting to 1000 [ 444.729416][T21220] lo speed is unknown, defaulting to 1000 [ 444.737476][T21220] lo speed is unknown, defaulting to 1000 [ 444.739172][T21220] lo speed is unknown, defaulting to 1000 [ 444.866014][T21220] lo speed is unknown, defaulting to 1000 [ 444.870249][T21220] lo speed is unknown, defaulting to 1000 [ 444.888410][T21220] lo speed is unknown, defaulting to 1000 [ 444.890410][T21220] lo speed is unknown, defaulting to 1000 [ 444.925788][T21231] batman_adv: batadv0: Adding interface: syzkaller0 [ 444.925804][T21231] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.925834][T21231] batman_adv: batadv0: Interface activated: syzkaller0 [ 444.968508][T21230] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 445.029455][T21230] batman_adv: batadv0: Removing interface: syzkaller0 [ 445.172948][T21235] ip6gre3: entered allmulticast mode [ 445.651403][T21273] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 445.658660][T21273] netlink: 'syz.6.4089': attribute type 2 has an invalid length. [ 445.659454][T21273] netdevsim netdevsim6: Firmware load for '..' refused, path contains '..' component [ 445.849852][T21287] sctp: [Deprecated]: syz.7.4090 (pid 21287) Use of struct sctp_assoc_value in delayed_ack socket option. [ 445.849852][T21287] Use struct sctp_sack_info instead [ 445.850147][T21287] netlink: 'syz.7.4090': attribute type 12 has an invalid length. [ 445.850165][T21287] netlink: 'syz.7.4090': attribute type 11 has an invalid length. [ 445.929719][T21297] sctp: [Deprecated]: syz.7.4090 (pid 21297) Use of struct sctp_assoc_value in delayed_ack socket option. [ 445.929719][T21297] Use struct sctp_sack_info instead [ 445.929945][T21291] netlink: 'syz.7.4090': attribute type 12 has an invalid length. [ 445.929963][T21291] netlink: 'syz.7.4090': attribute type 11 has an invalid length. [ 446.316560][T21311] team0: Port device team_slave_0 removed [ 446.404345][T21324] netlink: 'syz.5.4104': attribute type 1 has an invalid length. [ 446.433675][T21324] 8021q: adding VLAN 0 to HW filter on device bond12 [ 446.435871][T21327] tunl0: entered promiscuous mode [ 446.454370][T21327] __nla_validate_parse: 30 callbacks suppressed [ 446.454382][T21327] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4103'. [ 446.519567][T21324] bond12: (slave geneve2): making interface the new active one [ 446.532342][T21324] bond12: (slave geneve2): Enslaving as an active interface with an up link [ 446.621195][ C0] net_ratelimit: 7 callbacks suppressed [ 446.621214][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.621292][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.621588][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.621678][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.678727][T21333] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4105'. [ 446.701144][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.702160][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.715348][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.715432][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.716156][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.716352][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.792959][T21336] validate_nla: 2 callbacks suppressed [ 446.792979][T21336] netlink: 'syz.1.4106': attribute type 1 has an invalid length. [ 446.792996][T21336] netlink: 'syz.1.4106': attribute type 2 has an invalid length. [ 446.796502][T21336] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4106'. [ 446.927402][T21341] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4108'. [ 447.181717][ T5618] Bluetooth: hci6: command 0x0406 tx timeout [ 447.199013][T21351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4111'. [ 447.349555][T21364] netlink: 'syz.0.4117': attribute type 21 has an invalid length. [ 447.375769][T21364] netlink: 'syz.0.4117': attribute type 6 has an invalid length. [ 447.375791][T21364] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4117'. [ 447.620720][T21370] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 447.775823][T21378] netlink: 'syz.0.4121': attribute type 5 has an invalid length. [ 447.857535][ T5630] block nbd5: Receive control failed (result -32) [ 448.062897][T21395] netlink: 'syz.0.4127': attribute type 4 has an invalid length. [ 448.062920][T21395] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4127'. [ 448.808172][T21432] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4139'. [ 448.875794][T21436] tipc: Enabling of bearer rejected, failed to enable media [ 448.894290][T21431] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4138'. [ 449.003627][T21438] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4140'. [ 449.264071][T21445] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 449.264091][T21445] IPv6: NLM_F_CREATE should be set when creating new route [ 449.264122][T21445] IPv6: NLM_F_CREATE should be set when creating new route [ 449.374317][T21452] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.375210][T21452] netlink: 'syz.7.4146': attribute type 12 has an invalid length. [ 449.903306][T21480] netlink: 'syz.6.4152': attribute type 3 has an invalid length. [ 450.036938][T21486] ovs-s: entered promiscuous mode [ 450.048260][T21486] openvswitch: ovs-s: Dropping previously announced user features [ 450.528639][T21498] bond13 (unregistering): Released all slaves [ 451.038900][ T5630] Bluetooth: hci7: connection err: -111 [ 451.601516][T21550] syzkaller1: entered promiscuous mode [ 451.601540][T21550] syzkaller1: entered allmulticast mode [ 451.661219][ C1] net_ratelimit: 6 callbacks suppressed [ 451.661242][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.661349][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.661736][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.662277][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.742140][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.743348][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.750939][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.751055][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.760056][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.760244][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.812457][T21568] __nla_validate_parse: 7 callbacks suppressed [ 451.812518][T21568] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4186'. [ 451.934019][T21572] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4188'. [ 452.065306][T21575] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4189'. [ 452.141335][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 452.177384][T21579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4191'. [ 452.191501][T21579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4191'. [ 452.479481][T21598] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4196'. [ 452.805591][T21621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4202'. [ 452.891679][T21625] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4203'. [ 453.066417][T21632] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4207'. [ 453.516064][T21719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4213'. [ 454.369778][T21831] netlink: 'syz.6.4217': attribute type 1 has an invalid length. [ 454.369803][T21831] netlink: 'syz.6.4217': attribute type 2 has an invalid length. [ 454.547930][T21838] xt_hashlimit: size too large, truncated to 1048576 [ 454.770315][T21848] pim6reg1: entered promiscuous mode [ 454.770370][T21848] pim6reg1: entered allmulticast mode [ 455.074486][T21864] mac80211_hwsim hwsim46 wlan0: left promiscuous mode [ 455.428480][T21884] bond13: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 455.457360][T21884] bond13 (unregistering): Released all slaves [ 456.532475][T21917] bond6: (slave bond_slave_0): Device is not our slave [ 456.532497][T21917] bond6: option active_slave: invalid value (bond_slave_0) [ 456.535921][T21917] bond6 (unregistering): Released all slaves [ 456.701097][ C1] net_ratelimit: 8 callbacks suppressed [ 456.701126][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.701655][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.711214][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.718189][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.781052][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.781091][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.781194][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.781396][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.781646][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.782986][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.894541][T21926] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20001 [ 456.921786][T21928] netlink: 'syz.6.4243': attribute type 23 has an invalid length. [ 457.029758][T21933] __nla_validate_parse: 14 callbacks suppressed [ 457.029782][T21933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4241'. [ 457.174016][T21931] syzkaller1: entered promiscuous mode [ 457.174039][T21931] syzkaller1: entered allmulticast mode [ 457.254335][T21946] bond0: entered promiscuous mode [ 457.254357][T21946] bond_slave_0: entered promiscuous mode [ 457.254548][T21946] bond_slave_1: entered promiscuous mode [ 457.254732][T21946] syz_tun: entered promiscuous mode [ 457.256768][T21946] batadv0: entered promiscuous mode [ 457.257504][T21946] debugfs: 'hsr1' already exists in 'hsr' [ 457.257523][T21946] Cannot create hsr debugfs directory [ 457.258095][T21946] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 457.260578][T21946] bond0: left promiscuous mode [ 457.260606][T21946] bond_slave_0: left promiscuous mode [ 457.330885][T21946] bond_slave_1: left promiscuous mode [ 457.331099][T21946] syz_tun: left promiscuous mode [ 457.332549][T21946] batadv0: left promiscuous mode [ 457.539928][T21958] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4250'. [ 457.550474][T21958] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4250'. [ 457.563622][T21958] netlink: 108 bytes leftover after parsing attributes in process `syz.6.4250'. [ 457.706959][T21966] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4251'. [ 457.725278][T21961] bond6: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 457.757103][T21966] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4251'. [ 457.895643][T21971] netlink: 'syz.7.4255': attribute type 16 has an invalid length. [ 457.895738][T21971] netlink: 'syz.7.4255': attribute type 3 has an invalid length. [ 457.895753][T21971] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4255'. [ 458.235417][T21988] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4256'. [ 458.340238][T21977] syzkaller0: entered promiscuous mode [ 458.340261][T21977] syzkaller0: entered allmulticast mode [ 458.601866][T22004] team0: Device xfrm0 is of different type [ 458.695926][T22009] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4260'. [ 458.695974][T22009] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4260'. [ 459.111421][T22025] netlink: 'syz.6.4266': attribute type 1 has an invalid length. [ 459.269943][T22037] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 459.279174][T22030] netlink: 'syz.5.4268': attribute type 11 has an invalid length. [ 460.090169][T22069] vlan1: entered allmulticast mode [ 460.090192][T22069] bond0: entered allmulticast mode [ 460.090234][T22069] bond_slave_0: entered allmulticast mode [ 460.090251][T22069] bond_slave_1: entered allmulticast mode [ 460.345649][T22080] netlink: 'syz.5.4279': attribute type 3 has an invalid length. [ 460.778508][T22105] IPv6: NLM_F_CREATE should be specified when creating new route [ 460.998930][T22100] bond7: entered promiscuous mode [ 461.741654][ C1] net_ratelimit: 11 callbacks suppressed [ 461.741683][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.741700][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.742033][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.742128][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.743380][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.821070][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.821165][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.821195][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.822315][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.822387][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.014183][T22173] netlink: 'syz.0.4306': attribute type 39 has an invalid length. [ 462.129903][T22175] __nla_validate_parse: 12 callbacks suppressed [ 462.129925][T22175] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4307'. [ 462.415395][T22192] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4314'. [ 463.335905][T22202] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4317'. [ 464.651358][T22150] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 464.873593][T22226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.879721][T22229] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4323'. [ 464.946116][ T31] INFO: task syz.3.2527:15375 blocked for more than 143 seconds. [ 464.946142][ T31] Not tainted syzkaller #0 [ 464.946155][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 464.946166][ T31] task:syz.3.2527 state:D stack:25720 pid:15375 tgid:15374 ppid:5616 task_flags:0x400140 flags:0x00080002 [ 464.946232][ T31] Call Trace: [ 464.946240][ ** replaying previous printk message ** [ 464.946240][ T31] [ 464.946255][ T31] __schedule+0x17db/0x58f0 [ 464.946327][ T31] ? __pfx___schedule+0x10/0x10 [ 464.946365][ T31] ? schedule+0x90/0x2b0 [ 464.946395][ T31] schedule+0x164/0x2b0 [ 464.946424][ T31] schedule_preempt_disabled+0x13/0x30 [ 464.946450][ T31] __mutex_lock+0x7c1/0x1550 [ 464.946486][ T31] ? __mutex_lock+0x5d4/0x1550 [ 464.946518][ T31] ? nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 464.946660][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 464.946699][ T31] ? net_generic+0x1e/0x240 [ 464.946741][ T31] ? net_generic+0x1e/0x240 [ 464.946774][ T31] nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 464.946810][ T31] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 464.946873][ T31] ? rcu_is_watching+0x16/0xb0 [ 464.946913][ T31] ? trace_kmalloc+0x2a/0xf0 [ 464.946939][ T31] ? __kmalloc_noprof+0x38c/0x720 [ 464.946965][ T31] ? __nla_parse+0x40/0x60 [ 464.947030][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 464.947099][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 464.947138][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 464.947175][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 464.947219][ T31] ? bpf_lsm_capable+0x9/0x20 [ 464.947254][ T31] ? security_capable+0x7e/0x2c0 [ 464.947333][ T31] genl_rcv_msg+0x614/0x7a0 [ 464.947368][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 464.947396][ T31] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 464.947441][ T31] netlink_rcv_skb+0x226/0x4a0 [ 464.949518][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 464.949555][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 464.949622][ T31] ? down_read+0x2be/0x330 [ 464.949657][ T31] genl_rcv+0x28/0x40 [ 464.949680][ T31] netlink_unicast+0x7bd/0x940 [ 464.949739][ T31] netlink_sendmsg+0x813/0xb40 [ 464.949770][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.949801][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 464.949886][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.949907][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 464.949933][ T31] ____sys_sendmsg+0x54e/0x850 [ 464.949969][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 464.950008][ T31] ? import_iovec+0x73/0xa0 [ 464.950039][ T31] ___sys_sendmsg+0x2a5/0x360 [ 464.950067][ T31] ? __lock_acquire+0x747/0x2de0 [ 464.950095][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.950130][ T31] ? futex_wait+0x2a2/0x390 [ 464.950200][ T31] ? __fget_files+0x2a/0x420 [ 464.950228][ T31] ? __fget_files+0x3a2/0x420 [ 464.950268][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 464.950307][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 464.950359][ T31] do_syscall_64+0x166/0x520 [ 464.950385][ T31] ? trace_irq_disable+0x3b/0x140 [ 464.950407][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.950430][ T31] ? clear_bhb_loop+0x70/0xc0 [ 464.950456][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.950477][ T31] RIP: 0033:0x7f2becf9e159 [ 464.950496][ T31] RSP: 002b:00007f2beded4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.950519][ T31] RAX: ffffffffffffffda RBX: 00007f2bed225fa0 RCX: 00007f2becf9e159 [ 464.950535][ T31] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 464.950549][ T31] RBP: 00007f2bed03506b R08: 0000000000000000 R09: 0000000000000000 [ 464.950562][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.950575][ T31] R13: 00007f2bed226038 R14: 00007f2bed225fa0 R15: 00007ffd00bca038 [ 464.950609][ T31] [ 464.950732][ T31] [ 464.950732][ T31] Showing all locks held in the system: [ 464.950751][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 464.963731][ T31] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 464.964109][ T31] locks held by klogd/4971: 1, last CPU#1: [ 464.964148][ T31] #0: ffffffff8ed4eb80 (syslog_lock){+.+.}-{4:4}, at: syslog_print+0x4ad/0x610 [ 464.964328][ T31] locks held by getty/5370: 2, on CPU#1: [ 464.964369][ T31] #0: ffff8880291b40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 464.964544][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 464.964612][ T31] locks held by syz.2.1024/9556: 2, on CPU#0: [ 464.964627][ T31] #0: ffffffff902c5cc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 464.964804][ T31] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 464.971792][ T31] locks held by syz.3.2527/15375: 2, on CPU#0: [ 464.971829][ T31] #0: ffffffff902c5cc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 464.972032][ T31] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 464.972229][ T31] locks held by syz.4.3328/18543: 2, on CPU#1: [ 464.972268][ T31] #0: ffffffff902c5cc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 464.972408][ T31] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 464.972600][ T31] locks held by syz.1.4300/22147: 1, last CPU#0: [ 464.972638][ T31] #0: ffff888077f2e9b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 464.972789][ T31] locks held by syz.5.4323/22229: 2, last CPU#0: [ 464.972827][ T31] #0: ffff888053c036b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 464.973027][ T31] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 464.973179][ T31] locks held by syz.7.4325/22231: 2, last CPU#1: [ 464.973217][ T31] #0: ffff88803667f678 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 464.973334][ T31] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 464.973391][ T31] [ 464.973396][ T31] ============================================= [ 464.973396][ T31] [ 464.979921][ T31] NMI backtrace for cpu 1 [ 464.979972][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 464.980060][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 464.980092][ T31] Call Trace: [ 464.980106][ T31] [ 464.980132][ T31] dump_stack_lvl+0xe8/0x150 [ 464.980211][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 464.980345][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 464.980433][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 464.980500][ T31] sys_info+0x135/0x170 [ 464.980569][ T31] watchdog+0xfd7/0x1030 [ 464.980644][ T31] ? watchdog+0x1c7/0x1030 [ 464.980715][ T31] kthread+0x38b/0x480 [ 464.980788][ T31] ? __pfx_watchdog+0x10/0x10 [ 464.980837][ T31] ? __pfx_kthread+0x10/0x10 [ 464.980900][ T31] ret_from_fork+0x514/0xb70 [ 464.980978][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 464.981030][ T31] ? __switch_to+0xc89/0x1420 [ 464.981126][ T31] ? __pfx_kthread+0x10/0x10 [ 464.981184][ T31] ret_from_fork_asm+0x1a/0x30 [ 464.981303][ T31] [ 464.982433][ T31] Sending NMI from CPU 1 to CPUs 0: [ 464.982504][ C0] NMI backtrace for cpu 0 [ 464.982517][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 464.982536][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 464.982546][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 464.982579][ C0] Code: e8 be 9a 54 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ff 9e c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 464.982594][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 464.982610][ C0] RAX: 1ffffffff35a8200 RBX: 00000000000003fd RCX: 0000000000000000 [ 464.982621][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 464.982632][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 464.982643][ C0] R10: dffffc0000000000 R11: ffffffff857340f0 R12: dffffc0000000000 [ 464.982656][ C0] R13: 0000000000000000 R14: ffffffff9ad41300 R15: 0000000000000000 [ 464.982667][ C0] FS: 0000000000000000(0000) GS:ffff888124cca000(0000) knlGS:0000000000000000 [ 464.982681][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 464.982693][ C0] CR2: 000000110c39daea CR3: 0000000033cec000 CR4: 00000000003526f0 [ 464.982708][ C0] Call Trace: [ 464.982714][ C0] [ 464.982722][ C0] wait_for_lsr+0x184/0x2f0 [ 464.982744][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 464.982779][ C0] serial8250_console_write+0xaa1/0x1200 [ 464.982798][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 464.982825][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 464.982844][ C0] ? __schedule+0x17f1/0x58f0 [ 464.982876][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 464.982903][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 464.982925][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 464.982952][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 464.982973][ C0] nbcon_kthread_func+0x679/0x880 [ 464.982994][ C0] ? nbcon_kthread_func+0x163/0x880 [ 464.983011][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 464.983033][ C0] ? __kthread_parkme+0x71/0x1f0 [ 464.983058][ C0] ? __kthread_parkme+0x199/0x1f0 [ 464.983085][ C0] kthread+0x38b/0x480 [ 464.983101][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 464.983117][ C0] ? __pfx_kthread+0x10/0x10 [ 464.983134][ C0] ret_from_fork+0x514/0xb70 [ 464.983151][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 464.983166][ C0] ? __switch_to+0xc89/0x1420 [ 464.983191][ C0] ? __pfx_kthread+0x10/0x10 [ 464.983207][ C0] ret_from_fork_asm+0x1a/0x30 [ 464.983241][ C0] [ 464.986113][T22232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.990456][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 465.905888][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 465.915015][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 465.925084][ T31] Call Trace: [ 465.928377][ T31] [ 465.931336][ T31] vpanic+0x56d/0xa60 [ 465.935348][ T31] ? __pfx___schedule+0x10/0x10 [ 465.940232][ T31] ? __pfx_vpanic+0x10/0x10 [ 465.944770][ T31] panic+0xc5/0xd0 [ 465.948511][ T31] ? __pfx_panic+0x10/0x10 [ 465.952945][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 465.958424][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 465.963815][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 465.969985][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 465.976360][ T31] watchdog+0x1030/0x1030 [ 465.980721][ T31] ? watchdog+0x1c7/0x1030 [ 465.985169][ T31] kthread+0x38b/0x480 [ 465.989257][ T31] ? __pfx_watchdog+0x10/0x10 [ 465.993973][ T31] ? __pfx_kthread+0x10/0x10 [ 465.998584][ T31] ret_from_fork+0x514/0xb70 [ 466.003190][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 466.008342][ T31] ? __switch_to+0xc89/0x1420 [ 466.013042][ T31] ? __pfx_kthread+0x10/0x10 [ 466.017663][ T31] ret_from_fork_asm+0x1a/0x30 [ 466.022462][ T31] [ 466.026100][ T31] Kernel Offset: disabled [ 466.030438][ T31] Rebooting in 86400 seconds..