last executing test programs: 30.095097735s ago: executing program 1 (id=1728): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000700)=0x4, 0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYRES32=r3, @ANYRES16=r3, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) close(r1) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x2, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="90000000", @ANYRES16=0x0, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900050000005700000035000e0080000000ffffffffffff0802110000000802110000000000000000000000008064000100250300a205dd06cc31d1a0dae7000000080026006c09000008000c006400000008000d00000000000a0034000202020202020000120035000000000004000501"], 0x90}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockname$packet(r8, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) bpf$MAP_CREATE(0xb00000000000014, &(0x7f00000006c0)=ANY=[@ANYRES16=r9], 0x48) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000c00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb8100000008060001080006040002000000000000000000000180c200000eac148d7178282405971466d6230dc490fef50a0f5eb240d02963b3f77d40f6184f99794b740223d5a3854a37dbb5ce881d5b24b284807d5bce1cdd10695b3e3a811222b53f720342cc31f8546a3a069258c7731ad6902e403b02ec3eb863a367a831b73da21ae61517e9152372e1d64eb98bbf3f3d2d02149a6db62d940865a67184e7d5176ada088402f97818e5a49966e5b0adabe311fc8ab12cdb77a2c140f99754d073c5986b"], 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r10, &(0x7f0000000500)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r10, &(0x7f0000000540)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r10, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)='y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b40)="c954", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="18", 0x1}], 0x1}}], 0x4, 0x40480c0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="000228bd7000fbdbdf25120000000c009900000400007e0000000c0043000600000006000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x48840) 29.614746204s ago: executing program 1 (id=1732): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000340)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000380)={r0}, 0x8) close(r1) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r3}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) (async, rerun: 32) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000580)={0x2e, 0xe, 0x2, 0x5, 0x0, [@mcast1, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1]}, 0x78) (async, rerun: 32) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000140)=@in6={0xa, 0x4e26, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)='b', 0x1}], 0x1}, 0x0) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000006c0)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x16}}, &(0x7f0000000700)='GPL\x00'}, 0x80) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCGNPMODE(r5, 0xc008744c, &(0x7f0000000080)={0x2f, 0x1}) (async) ioctl$PPPIOCSNPMODE(r5, 0x4008744b, &(0x7f00000000c0)={0x21}) 29.329551947s ago: executing program 4 (id=1736): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000001480)={0x3, 0x2, 0x1000, &(0x7f0000000480)=""/4096}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="0001000016000100000000000000000064010100000000000000000000000000000000000000000000000000000000010000000000030000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r1], 0x100}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x99}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8e}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffffffff}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f00000000c0)) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000001480)={0x3, 0x2, 0x1000, &(0x7f0000000480)=""/4096}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="0001000016000100000000000000000064010100000000000000000000000000000000000000000000000000000000010000000000030000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r1], 0x100}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x99}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8e}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffffffff}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f00000000c0)) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) (async) 28.973212862s ago: executing program 1 (id=1739): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) sendmsg$AUDIT_GET(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3e8, 0x200, 0x70bd28, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008058}, 0x4000001) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000003c0)={0x1, [0x0]}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000440)={r4, 0x200}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="2801000010000304000000ffc449c439784d6787000000000000000038d3c01b843c09f48462fc12ed1946cd92fc5c78e4463cc9de", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB], 0x128}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r5, 0x4) r6 = socket$inet_icmp(0x2, 0x2, 0x1) close(r6) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, 0x40, 0x107, 0x70bd2a, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x11, 0x0, 0x0, @fd=r0}, @typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48854}, 0xc010) 28.79061653s ago: executing program 4 (id=1742): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@getqdisc={0x24, 0x25, 0x1, 0x74bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x15}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3516e}]}, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x6b, '\x00', 0x0, 0x3d}, 0x94) 28.378317735s ago: executing program 1 (id=1744): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000340)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000440), 0x366, 0x10, &(0x7f0000000480), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000800)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000840)={0x1d, r4}, 0x10) (async) sendmsg$can_bcm(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="05000000"], 0x48}}, 0x2404c054) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newtfilter={0x24, 0x11, 0x111, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) close(0x4) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000840}, 0x24044010) (async, rerun: 64) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r1, r2, 0x5, 0x0, @void}, 0x10) (async, rerun: 64) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180050001"], 0xa4}}, 0x20008004) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r1, r2, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) syz_emit_ethernet(0x38, &(0x7f0000000580)=ANY=[@ANYBLOB="aa54205fa892bbbbbbbbbbbb0806020188f5060600020180c2000003eb21bd0e6cd5aaaa2aaaaabbf2a02b1df6706a2d038f7b96eb77fa59ef104430c02741bef690a4c838"], 0x0) 27.193231633s ago: executing program 4 (id=1745): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={0x0, 0xe8}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/117, 0x75}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 27.191878841s ago: executing program 3 (id=1746): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000200850000001500000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0xe, 0xfeff, &(0x7f0000000580)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x108) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x7, @loopback, 0xfffffffd}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000180)="6f5054885d44d604e177d0373172d65221902bf6fd125924", 0x18}, {0x0}], 0x2}}], 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="10001a80080002"], 0x30}], 0x1}, 0x0) 27.151243363s ago: executing program 4 (id=1749): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@restrict={0x5, 0x0, 0x0, 0xb, 0x5}, @var={0x4, 0x0, 0x0, 0xe, 0x4, 0x3}, @const={0xc, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x2e, 0x30, 0x5f]}}, &(0x7f0000000140)=""/81, 0x45, 0x51, 0x1, 0x5, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x16, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001100), 0xffffffffffffffd2}, 0x48) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x24, 0x40, 0x107, 0x70bd2c, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@typed={0x4, 0xf, 0x0, 0x0, @binary}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) 27.148979848s ago: executing program 4 (id=1750): socket$netlink(0x10, 0x3, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a00)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x78bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x8c90}]}}]}, 0x3c}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0x7f, 0x3, 0x24, @empty, @dev={0xfe, 0x80, '\x00', 0x26}, 0x40, 0x80, 0x5, 0xffff2d85}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x1, 0x8, 0x7fffffff, 0xff, {{0x1e, 0x4, 0x3, 0x6, 0x78, 0x66, 0x0, 0x8, 0x4, 0x0, @private=0xa010101, @empty, {[@timestamp={0x44, 0x1c, 0x55, 0x0, 0x3, [0x5, 0x1, 0x6, 0xa0, 0xabd, 0x5]}, @noop, @timestamp={0x44, 0xc, 0x86, 0x0, 0x0, [0x3, 0x2]}, @end, @cipso={0x86, 0x36, 0x1, [{0x7, 0xa, "afaa852150159c86"}, {0x1, 0x9, "5e607bbf91545c"}, {0x1, 0x5, "29d27f"}, {0x5, 0xd, "6442e908c943e2fb568467"}, {0x1, 0xb, "69acdc88e91cb905e3"}]}, @ra={0x94, 0x4}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f00000003c0)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x51, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x91, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r5, @ANYBLOB="00012abd7000fddbdf25110000000c0001800800030001000000680001801400020070696d72656730000000000000000000080003000100000008000100", @ANYRES32=r6, @ANYBLOB="140002007465616d30000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="0800030001000000080003000000000014000200766574683100000000000000000000001400018008000100", @ANYRES32=r8, @ANYBLOB="0800030001730000"], 0x9c}, 0x1, 0x0, 0x0, 0x20000084}, 0x1) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r9, &(0x7f0000000040)="14000000140005b7ffccca38b9000000060860eb", 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa10000000000000701000000feffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 25.314521665s ago: executing program 3 (id=1751): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc080) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt(r5, 0x11b, 0x9, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r6, &(0x7f0000000b40)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r6, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="063f", 0x2}, {&(0x7f0000000c00)="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", 0x212}], 0x2) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa, 0x0, 0x4000000000006, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}}, 0xb8}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010001fff03000000fdfffeff00000000", @ANYRES32=0x0, @ANYBLOB="0000000040cc0300380012800b00010067656e657665000028000280140007000000000000000000000000000000000105000c00ffffffff050009000100000008000a00", @ANYRES32=r8], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 25.277764336s ago: executing program 0 (id=1752): socket$kcm(0x29, 0x0, 0x0) (async) r0 = socket$kcm(0x29, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0xc0000}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_INTERLEAVING_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000080)={0x2}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={r3, 0x3}, 0x8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(r4, 0x84, 0x7d, &(0x7f0000000140)={r3}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_SUPPORTED(r2, 0x84, 0x81, &(0x7f0000000180)={r1, 0x3}, 0x8) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0)) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) (async) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000240), 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000280)={r3, 0x5}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000002c0)={r3, 0x3, 0x7}, 0x8) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000002c0)={r3, 0x3, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000300)={r3, 0x9, 0x1}, 0x8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x40, 0x80, 0x5, 0x3, {{0x7, 0x4, 0x3, 0x6, 0x1c, 0x66, 0x0, 0x5, 0x29, 0x0, @multicast2, @loopback, {[@ssrr={0x89, 0x7, 0xb5, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x40, 0x80, 0x5, 0x3, {{0x7, 0x4, 0x3, 0x6, 0x1c, 0x66, 0x0, 0x5, 0x29, 0x0, @multicast2, @loopback, {[@ssrr={0x89, 0x7, 0xb5, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000003c0)={@private1, 0x32, r6}) sendmsg$kcm(r0, &(0x7f0000001dc0)={&(0x7f0000000400)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000480)="d44608a1c324d7aa1cf5adcbaad3bccbb8819bb3c2ed46af1e254154e481c17d89ae8ecc2c916b8853a560ee5544a90433c1c96d9cea508c4c21998a55c8312cc106d2090434b444d1efecbb89e7844cb33f4c79837f9ac0f5cea8ff688054702b7faf60ca1c53192e2d6011352614d2aa59624d99f672f83329cc8791fef9f8f75f660ebe399e5b45614cd70547183d2988f474c8d100a6e79164fa7768bb1ddcd615a21c1706dfa4739670c6045fd8663a5020ef4a1aad23a632755204c77ccd2ec9c1bc2ff6ce5bd059695bb7", 0xce}, {&(0x7f0000000580)="b595a39d18e4f1e2f424f3880abeeacc6f4c0dff00715137cecab8cbe658e7b80cc0b40661cd14795c7fcfd78e7b9bec1345643c5ceec1d9ed0d1c20cd6a8daee4fbb6f207ddf262eb0ed44121f372b49da53e773a545679a488d8cfe74741f39090d3dbe715ee25a096f9edc548073bd84048dd92d380a927124cf03dd74303709bbceb325584428a771b2ba5e34aa5f31d8fa8536fd710b2", 0x99}, {&(0x7f0000000640)="2216fe3da642c8e73f6f2b8394a065452d10a465362e466a74d1b5dce9cc52049646056a5f06f1a074f3670aec49f583a67f206f8ff65b03c3f6cb0e2692e11dc688ff6129f001f8419a3611df99296fce2759888a44bedec395cc337d5558a958bc0a31d830314dfa3b7a24d472c42f6124db27b50c8b2807aaad776e24bd7d823fe6da0432580745c613aadd", 0x8d}, {&(0x7f0000000700)="e7720db4c05d256df9ddb1a987a5e48fbc000651e4644b328b5376e196815c42753835165bb57d6ea2e2536131214230f85422a2399e00d89bd858ca60aa41af9211219c6d0f4a9ab1b19028d598bd58f8eedd573a5a652de17b5cd785d09fd0980cac890c125ee0c2dc7179f05521eee7709ccb41a6df7cee038efd510797dc4ea0a0adcc736f5a53c7c3d0e382f6a9ee3144662fa3ca30ba001dd67574211b35c2", 0xa2}, {&(0x7f00000007c0)="690a2554b8c457f7a7d2dc07f23260bb0879db9d83ec99b625fb617137b47e108abb1d4b5bc96471f0ce5083a0d2b3ebd7deb550bcc9f60005e757a251", 0x3d}, {&(0x7f0000000800)="e7ee6bec5681db70ab780c489e4d641b2ad45d29ae913edc689b26399f1cbdf0a64f700e256a86414d6c4802bfd94705e14d7088a70158dbfcf7e85739cd351ba5207b2859ae463a00dc143d77d2ebabfe52965393c4488625a94cefe32092ee469e0049ec0f26941976280879c92d5c2115ab68c62beda7a5704bd494daf19d9e97c21ba2554ae4a2f06d3b25ba9085c30465beb53f5c88", 0x98}, {&(0x7f00000008c0)="e15a253a707f1e1ad1457c328629d67e239093313d9f4e577041ec6466dd6fbcf2f66d1ca777805d033baa45e9c1645ff278c678a7f9553c7bd9fa4ecf12d278c05198", 0x43}, {&(0x7f0000000940)="b0cd4a75939f4c11b31e786f745ac1d872fa8d76de5d04d735fc61280608e1314252870598b2c252097d9da8bc136f8987635e53606d25652f1e8b680ddc5b772d9753f4bcb7d1bd8562", 0x4a}, {&(0x7f00000009c0)}, {&(0x7f0000000a00)="9e910b45374a206abd3a705b48648cc4bf110654da7fae34a650a5616aa6654df31bb7a27e83b8ff303e38199f87f837275a40000b326c44a32b8cd5be25c5474ee4c65d97edccd8bc5d9b152e898a828f0f881a6fb3938c352c4cdbe5bf55e9d123159283ebcb41e566a5713b15460232a7481216717dcaf58f9704fd5ed87157b9f3290fddddc7d9698f442c014088390008006ac2fd243668aacf4da8770da462d95f1230158892fc6b9f02d38a05d91719ec53eaa4f100bae95d1cd9cc5dc79fd0d973e4a6e3ed02be181c40ce3033c5c15046c2dffa81242ea58e35abac61fd53a5db0e26e46e3f40a5b4f97c79af", 0xf1}], 0xa, &(0x7f0000000bc0)=[{0xe8, 0x116, 0xd6, "52cb1b408d73ddcd1ff69963b710d0680eeaecd4a9a93aeebb40db430e333c6a790fcdcf4ada84968b48a258ca028d54b8df71397eee2f300b78dc857ebab2cd945008d13ee79b086addcba892aecb15b85c0931e4d83a3921be1d755c336ad8f317b68a724bb08a758c651a1001657665fa7cc4d8beeca75523de775ce7149999853a0c5a9d962716e472b897eca57771a1a60350a3f753f0e1e2597289235633a1c734ee12686d700afc84c0eb470fcfc0042ea9f7d206f5cd21262f87968f6b98cd5849dbaf3b34e2150e978d59ea7899e44c"}, {0x30, 0x112, 0x101, "87a307aeb4ad9f4fb6731a9bc235ad2c096538fdeac5d08b4461b7071e"}, {0x1010, 0x116, 0x2268, "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"}, {0xc0, 0xff, 0x7, "0bf5745a787b7b93516899c2576fff49ccb8054f067bded5121fba2c8f4d88e9fd0dbf41eda536285123169b953b3ae853d8c85c908e490873b5b021436f5e66c679fccbdf7e335b554d51d3e37c47e4d48388dac7d93e66cb4d5575887201d0ac842209fdb5758d5bd09fe7bdf84c2d97a412ebdf382883b52d756d7e4a743f446c5fae39b2170b376a95593b9436eaa39b7629098c80b455626ec6b8329519dd62ed68e52b9cb532d4c2"}], 0x11e8}, 0x4800) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r2, 0x84, 0x7a, &(0x7f0000001e00)={r3, 0xffffffffffffffff, 0x80000}, &(0x7f0000001e40)=0xc) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r2, 0x84, 0x7a, &(0x7f0000001e00)={r3, 0xffffffffffffffff, 0x80000}, &(0x7f0000001e40)=0xc) getsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(r7, 0x84, 0x7d, &(0x7f0000001e80)={r3, 0x3}, &(0x7f0000001ec0)=0x8) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r8, 0x29, 0x45, &(0x7f0000001f00)={'IDLETIMER\x00'}, &(0x7f0000001f40)=0x1e) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r8, 0x29, 0x45, &(0x7f0000001f00)={'IDLETIMER\x00'}, &(0x7f0000001f40)=0x1e) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000001f80)={0x3, {{0xa, 0x4e23, 0x401, @private2, 0x3}}}, 0x88) close(r0) (async) close(r0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000002040)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000002080)=0x24) setsockopt$inet_sctp_SCTP_EVENT(r7, 0x84, 0x7f, &(0x7f00000020c0)={r9, 0x8007}, 0x8) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000002100)={r4}) syz_genetlink_get_family_id$nl80211(&(0x7f0000002180), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000021c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r10, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x30, r11, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x4, 0x3b}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x41}]}, 0x30}, 0x1, 0x0, 0x0, 0x24}, 0x24040800) sendmsg$xdp(r10, &(0x7f0000003380)={&(0x7f00000022c0)={0x2c, 0xc, r6, 0x2e}, 0x10, &(0x7f0000003340)=[{&(0x7f0000002300)="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", 0x1000}, {&(0x7f0000003300)="a2e18cf042e873826e78ec62dacb7564f31d309b5e479e2ad5d0a29639b9512b90a883da5ac339ba8d67abf9c75c66150180266dd90f", 0x36}], 0x2, 0x0, 0x0, 0x800}, 0x20008005) (async) sendmsg$xdp(r10, &(0x7f0000003380)={&(0x7f00000022c0)={0x2c, 0xc, r6, 0x2e}, 0x10, &(0x7f0000003340)=[{&(0x7f0000002300)="aefb9e6d60b50a86a4e5e7cc3a587f34e8dcf3ea8e282ad11222485870c9872299a541e37f34100c4949ea4549e959931b1168e526c3bde2656ae0ddb733547fa6f5834914dfc3265ec2175628d9816da9d5e3c135b400cf40ef7647ec998854757a0f784c46e67565634cb1d8be5fb707d964a9c568c423ca63c2dd12e89dc38b917d2d20d73f918499666155be6c21f59733af331a227d54034ccf65fb9b542588ab9fa36ad9ffcf361347e143c4bdd93500b01efc10743f45261af8adccb90e1a07d79205ed07df36dcb7032940d0d1f77b553febb5cf850e377f4180c0249c04783f3cd6563bafc3138fc9cefa41098b65c4d397eb9f9e64ab20d7999873b5f66162160197448487768ba4b40f0be1bd11226568fa7ce6cd381228470aec2537c8b9490c76874773ef74108a7b12885c564ef8a2f591e374f7d30fda09de22d58de16a0deb3745465bb06b8047a564026ff483fb3e56bfcf0304814310b057b0e4f4fc9a30853f3bd6046e9c603e2d7edb47108835c8e8efe1731f733a0e7732030f8e88b9bf09bb968556a7ea0de4350d7172bca4569de54ee46b48ecafb34e332458945bc728e3ea97513e9240517e1ac6f7cb47534e724f90b9f31475cf5fe4cddf068b8ae3448fb1272def55c4868abdd3b52b20a7c78fcf44a6eb7cae33d9c29440f8d347d1eb5952bc68e304ee526d90caa4bda371824c56d132a2e5ea0a7a174f8b042e154a6d0c587f2fc55f14f8d0d36c8edbce2cf191c36efb50cc67a39ca1b71d10c9978fc9bf63590f0206d857522620bc754f558925f75046786db65b4b64ee29d7ec59d651daafadc8f35c33eef430745bf3d934f1b4f5a00370cfa98d82e33ca69b3d5c0177f88d4b9a721c276c43a7889446cef6bef9e36f625a7c21947f11d2342a5c79075520df1829d24c6a1f29e9984db8ab269103677f225136e30219b43c76beedb59584961069d958639cb79e2bd731d99307ba60f7670cdd41adb69a24274e18aa1c4f3408aa35a32a56eea521a19ac4f17be741b4aa951346b0ba0e28e58db1c8e014e1e20ddcb6be4dd694a15154ee118d6cb08df5d76ac973f4b6b963901b8e0cd7e59a297627c4cb495430421ad9118d4acc36a6febdda4bc4b8862f1ad29440f2cb21a68f51713d2c4849d81089e4005d874243afae8ed5e4d0041923846701dcac3c404e47eb0353d4f7c3f36fc48fa50f2a0a5ecb3378b8ebe6988d44fd95b3b225d637a40a68b074b8c38466ee9d305604e47f93afb4b797fca4d04a09475539bd5afc71b278f308a6440565582a2badc18236be84af66859a03ce00508b94725c021e8f8da3d11cb9bebace9e0d46698a0d030adea2d88da399739118c18695a808ef42a5299d970d449b8827214e53439732ef623311842a774984d2d5b1f5b32767396ae49608f2942d79617b2f47063aa1387ee631c12bf28fe72e620c877684c11fbd17e643467256a4915e6cbcb27a3002b2a70fd90657700a2fd514d48a0a5c2ade82125487cbd6054f4273cb8db5e68825b90e17a29c94786ce8eeaff4d30d546b3146661d5bea56264debe6265390d94b19199d41041b729e89eeb908fbddca590e47e4dc785bfb3f4d611a55c177efc21b3248038183e8c0fe9f362f5c36a5b46c2907ed86cac89b4fbfc3f019a66160dc4fdf627c95df1406f21f0af5712beff80b595ecff582f5f08f05410590a073c9496c5a16c031c72c58e1dba735704d862b6cd37290328afb30e8f0252a84c1b6fcd2c26abda3de4701677c15e49c0f8c1daad2e3226f15d53d3118045d4b3b8398d27eb181e20fe5113fb1e09304d435845d985dcc23eee8c304ee836202cc74b20b6b958b01c0e1927566e81e5a59a04c307aa01c61861717c97f1f1da2da98903b39157c9ee6632456d96a6ca4d5fc4db068f68aa505d8987ba5cb3dd7c860e700c9ad777963fd3386109d7b54a4956e49df5cdd2c00e855256006b9b8161dc6cd14f64bef3c311882c1e413e82cee647b21130b68e81d85e27adf0ac47a983c2e20110a31ca77fbfb043e609165b3b046a255ec596eba151d2969c0a4a3a7e3f2f1eb13f218a9a2b4db79a99b09233d0130df7daecff7825cc55b3be424051d2711a4bc9979e035ee42ec97dcfcb5bfa316c7cf15cd09f5c3eab3d4684c7511b7aea1e373fba94799333794eaee0da05291397f1fef564f9c4db5ea71a7acc328f70ceee4e4747e6c0cddc5072c6a0cc04f071eb2230f34d60c99d8808e6a2577a8c325ee37370dcbf0e759888671a083cf678ede1a15ab2b907aa2eb8b07bd79a3f8deb808115f0e0066eafbefafa32e73205208d8cfbae60040a02efbb36e75a050670d0215bddf30bc30973a29714e98eafc9a32b0fda638a76d39a13b050617b68b7850d6cd7ab5873376f5c1fe598a0b67307eb65d224f9418acab7e50f24bbdc88be25d741d18063319b3ea8bc06b4ce7523f79c3f87653696cb63b6c4083b4c73dac6f2db2b8fb01ef504e0c0baddb6d57e838a42607e84ef7b94b942220aba7e41bc02800b85cdfc36158ce7087a324d9638aae899fc4d707b33779fa68516b464b48372b43822538f8d219969a873e78e0155c6e91376287be293cce2a0daafcfa2477b1ecf035e70dab14f75acb333ac4756825cf4e32950b1f441f34514a9ec32b555c0b247e7721106556d66f1bcca0cc154e926268b770a1ba0fc4fe2113e96b4420ce1e9af9ce48e4e915bcb2ed241adf3cff4d5f0b30cb65ab631589e2fe5606d611a54c4235efec6efda25c9151e8527246f35efbd6ddc2c8070184ca2eb13d6ec0cbe8bc421ac7304f29eac9743783d423d2bf4a377ab7a0b6b63b238458fc85dd893c965a1ab78d538e1cb05a3251a791c3c07c878c7d2d1cb70d37cfe434a865677ab3ab699237780c04169e31dd52697801826a444abf5b9a963c82063f8a02495fe02bf139a9d9e6003a3ecea4fc867e674a3d15fa2a3b5620b75915039f5a28145e3d7ecc5396fa227805efe86165c059825c1f62c3993e3e2fe40c0e9c5c643921a2ab72d558b4703af413c7a311f5962624e4385c62c55300411f39222c586a95227c620916e2b144231e4150b9a79f2864f4c08cac3aabe92531e5d02359d6e67cd04f3412f2f3a3f8a9829750b391d84af2698f66db5a64a2b1f752d830ef4daa7a0c35e859095c9ae8983dae61f9e470b18f6880b736eddf3117b391536afa73a9c9508bb3516dd382fe342d4ac3ded15f20ce43df066c8727ac072fc539b53e86e6073883e88cee2d06833c7d142532fc5cdef54197e773124ef6589d92b56cf604b60c42edd5b546ffb5dd6cb5151c9731bc5da023ada96b805df7886eb7994921a705a8ae09effd3c0a87a920cdaad2a0ecfe3dde3e382eefa1be4483bada2b8fea66bd17a2b99395ae61346bed591ca6db26c4fbbc822b3e0b25372d8ef83d7bd2e4a03e34169d8dcb598edf29be5f4b8c16c1dfab699acf2d41ef8eadd479ec1b57df756f5e8e57b51e56eee106c0f083865c90b7cf4e068dbbcf2bb2e8af4940ff82a7fb31b8ff89b541e85fef6589d1330a6cf3c7de09665c495ac82c559aa42533a55b08be6e1701f15e9ac5d8552c65149550c4da580fda798df8cdbece1e719f705755d999f2fb8ec10f93004fed08bd4e163e2b9bc74e253a563ffa2dac07e00a0b1ff7e771c818e7ca302497bb6d4766712eb2cbdc3f1a020f30d324854a7a507edffa131220b704f64416773d5f13e07ded23a5a172015ccc363d0919f903537d6f16805919bfc6eeff25eaea84fdf999a8f91d98f7c01597de92c67fc126fe398a2627c48a8d826ba4f267b629045797491a3ce8f46ded1da78bb2e1863939e59b51fc35ed9b72ebcc373c8559950f5a7b6d2bb3195878918d79954938f69785ca97f1188351f64f97200cab055383e81a6bdb2be11fd70bdc516fa0b4e54f8f11092fc20efc72bfbcede247dfd11cca8ced8e9270d7d8db6b140d681e58b88efa4671a9c36b52d7eb364d34f9cb0413084c2c7223eadc6c8aa0353847111ae8fed66949284709ab07ce62ae633dcde93c36aa79c533125a74f974226ebeb539f32ce7f82602f8d46f51a2686451e6d7a58c0243d7596d437c2b1dafc1489fceabf4a7e21e86278ec8931bfe5a90ebc78fbe0dd9f6ac7433e404dbf62d71d2afe0a8aefb04acd6312e104f2320e5d4a7a50b841f4df8441bb5c59a6d5fd80d47948624c491143a97ef4878b11f657872138bf2ba7971554c165c21a3427038c9ed111b8ce88545d1ae3354bc0d33b319b108a2174fb1e0ee8c12f2f04b43879a86a83635bac149956a27de85629391b82ae13671b29caa4638a808392755417b59e4a3ade85fb9de9b5b9893c5af1088dc00d42d79ee1e3a8734774cb7a1c636cc07d6e2b40c4acbd113716942b405e2c6073dc69383103600a27388e10898d5a7ab4eab6a24cdd733c925da37040f79144c3cc172b4fbc5923d6f1307d5a93bb13f7ffdd198690143cb18256c0f5eddf946bbf50758dd6788f53f22de649c0abe772fd6f1de77a4587bbf493e93e30061ab84ee1506bc070453959a9d7163b4a2b91da4d752ee89312c02fa803f56fb6a3a2797c6eee071d5f86171b473e2e88894e40c79405f54720147a5a03c09e0c20baa134dfd1c246474b316e20b6c3d40d9cd2da4d21c84e1f3c91cf4a3dbd1b4c3902aa2a7def0211c0965bf9c782c0a2616240c2488767d752d61cf36afbde98498bd0560f1465730a4d08a5c35da20cd18577f6f3eb55a93df7ca03b8ae1a1a733b8018b17261d40b4254f914416ebf6ca4bc20542cc23e2e9535afed325c3363dbe8343ff38ec41314433f09209c085f5002dc48ce6fce07269de0be8b188deb2a2e7ad04f3a17803603787f85db3628fe43d1104e536eba3a360ac4ed94168f0f5090439eb9dcd9e2e07f3cdd62d48a4abf10dda2b58a7bbfaeb84490840a4fcf5fe44956bb44edbc3421f0d01ef121d451eee7ca905f0f7bb02a03a72a6966edbb9ee7444584df8741773ecea897107aec0242f4b34b398d3fbb7b31149c4f91a25e8edd1497c6128f402ea7057d987213fdd3fce3999cd29ca380e8cb8fde1909561719fd39e1870d107ff9cce041180424b329f7aacecb1043d75e7e2c3e468095f5ecac84d832bc027d51189d7dced7a4a21814efbc616b9e04a6ef822677de86c4b7a742c1c10a89b792c0966e3251d3c229b9385d4f6f343786f0994b26eef4bfe131a732d290ba541b4b95fc066af3179d60713e246143c69bf65f02923674d480487aa7485abf882f6848f145b19d6db6cb5c3a8d533176de1226a0a165fecd36d69c8bac3cf94c0fa48bfa1ce8e6746d837cd7448d3a1fc0747ab08249efb55059e4513d6209eaaf9e9d66c60b93193cdc018963707fa744d950d5f1db57c2b339ec94e36445e6b55ca6668d06c14721efe4b77e1674afe55aa7e704e0f204f14c69b0a829cac2097219d0a5bd1f5b6e3a11a44b9acdbe8c1a878175f7d5f6f96132dc2cfbd717bb5c0aff0893a25e33fbe926978cf9bf889d419027f94593b429e586086b2310c54950e4673a270e3c9f0a28dec47575862b1a123e8860e827acb38565f53291d983c22ec32de2d0159a6faf0cd659587e35ced17c2f2c6589616bb3931d7595354b52f3ceb28a91a6ce771fdce837f1d452cc14d979f190fc8ade707dbc5c6202d66186a37dbebd2d04ddb3199cfb74649d9fa62897c925be8513a2dabcfcbfeb06ad7", 0x1000}, {&(0x7f0000003300)="a2e18cf042e873826e78ec62dacb7564f31d309b5e479e2ad5d0a29639b9512b90a883da5ac339ba8d67abf9c75c66150180266dd90f", 0x36}], 0x2, 0x0, 0x0, 0x800}, 0x20008005) 25.211325939s ago: executing program 1 (id=1753): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000300)={r1, 0x68}, &(0x7f0000000380)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16=r2], 0x104}}, 0x4000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="1400000016000b63d2b947468b041c031193e473", 0x14}], 0x1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000340)={'vxcan1\x00', 0x0}) syz_emit_ethernet(0x96, &(0x7f0000001740)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb653e00603afffe070000000000000000000000000000fe8000000000000000000000000000aa890090780000000020010000000000000000000000000000fc01000000000000000000000000000004079595f429ae08a565c9a41d411170a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c692056271a2b8810721772b4f1e047c333b97bcd3e6ef2af1f480b4414cb716a152ace01b7da18fdb52203a5c00aa7b68f950183e54ddb33e9ea0bf5f11c69fc9f6de3c322ffe5c1d3f1bedb9d5715a644773eca14d21c14ee46d26d9cad35e4aeaafdabe8be1f72b0adf3517cf427965d346483514235c3290b7a40ea1ef58d00d79e6e651fe9841f151c2801552be1d45e6be4f1648d9747074e88cb9d7ecb55bf49a8d71d432686c5bf4ccab598d660bb"], 0x0) bind$can_raw(r8, &(0x7f0000000480), 0x10) read(r8, &(0x7f00000004c0)=""/4073, 0xffffffffffffff4f) sendmsg$can_raw(r8, &(0x7f00000014c0)={&(0x7f0000001500)={0x1d, r9}, 0x10, &(0x7f0000001540)={&(0x7f0000001580)=@can={{0x1, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "00119a7d1a39f603"}, 0x10}}, 0x4000040) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001680)={0xffffffffffffffff}, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000016c0)={0x5, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001700)={r10, r9, 0x25, 0x8, @val=@tracing={r11, 0x7}}, 0x20) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@bridge_newvlan={0x17, 0x70, 0x1, 0x0, 0x0, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8}}]}, 0x24}}, 0x0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 25.103932436s ago: executing program 0 (id=1755): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x90) (async) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffc, @mcast2, 0x2}, 0xa) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x2, @vifc_lcl_ifindex, @multicast1}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 25.008445722s ago: executing program 4 (id=1756): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x3, 0x8, 0x6, 0xffffff26, 0x2, 0x80, 0x8, 0x7, 0x15, 0x9d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0xc6e9f000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, 0xffffffffffffffff, 0x100000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async, rerun: 64) sendmsg$NFT_BATCH(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040048) (rerun: 64) ioctl$OCFS2_IOC_UNRESVSP64(r6, 0x4030582b, &(0x7f0000000640)={0x1, 0x1, 0xfb, 0x4, 0x6, 0x4}) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001300)=""/4073, 0xff0, 0x1, 0x0}, &(0x7f0000002300)=0x53) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'tunl0\x00', 0x0}) connect$packet(r6, &(0x7f0000000040)={0x11, 0xf7, r10, 0x1, 0x6, 0x6, @multicast}, 0x14) (async, rerun: 64) r11 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000ac0)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x154, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffe, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xffffffffffffffbb, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x3c}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x400, 0x80000000, 0x55, 0x9, 0x3, 0x12, 0x1}}]}}]}, 0x154}}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x40, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x40}}, 0x0) ioctl$PPPIOCSMRU(r4, 0x40047452, &(0x7f0000000180)=0x1ff) (async) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r13, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 24.749820763s ago: executing program 2 (id=1757): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000009500000500000a70000000060a010400000000000000000a00000144000480400001800b0001007461726765740000300002800800024000000002140003007339f2179455afb9fdd672ba200000000d000100434f4e4e4d41524b000000000900020073797a32000000000900010073797a31"], 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r1, 0x29, 0xcc, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@ipv6_newroute={0x3c, 0x18, 0x401, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x1}, [@RTA_OIF={0x8, 0x4, 0x2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8, 0x1, 0x1}}}]}, 0x3c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x2, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xc90}]}}, @CTA_LABELS_MASK={0x24, 0x17, [0x7fff, 0x1ff, 0x17d, 0x1, 0x1e62, 0x4, 0xfffffffb, 0x7]}]}, 0x48}, 0x1, 0x0, 0x0, 0x804}, 0x88d1) (async) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x40, r6, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x40}}, 0x4) (async, rerun: 32) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000008c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000480)={0x3c4, r8, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5e9d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe8e3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x390}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000000}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x44901196}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x30b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb33}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x97}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000000000000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4eb1}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xac}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @local, 0x5}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x266}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0xc0}, 0x20000084) 24.676264412s ago: executing program 0 (id=1758): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd0ffffff, 0x0, 0x0, 0x0, 0xd0ffffff}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0}, @ldst={0x6, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000100)='syzkaller\x00', 0x6}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0xffffffffffffffc7, 0x6, 0xb}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32, @ANYBLOB="0008000007500500580040"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x0, 0x20000000, 0x80000001, 0x7}, 0x4d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412) (async) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000840), 0x56) (async) sendmsg$kcm(r7, &(0x7f0000000880)={&(0x7f00000008c0)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000980)="27030200dc0f14000e0003000014c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000a40)={'tunl0\x00', &(0x7f00000009c0)={'gre0\x00', 0x0, 0x10, 0x20, 0x7, 0x7fffffff, {{0x11, 0x4, 0x1, 0xb, 0x44, 0x66, 0x0, 0x40, 0x4, 0x0, @multicast1, @empty, {[@lsrr={0x83, 0xb, 0xf0, [@dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x24, 0x51, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@broadcast, 0x3}, {@empty, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}]}}}}}) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000a80)={@rand_addr, @broadcast, 0x0}, &(0x7f0000000ac0)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000b80)={'ip6tnl0\x00', &(0x7f0000000b00)={'syztnl0\x00', 0x0, 0x4, 0x4, 0xe, 0x0, 0x11, @private0, @empty, 0x1, 0x40, 0x8, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c80)={'gre0\x00', &(0x7f0000000bc0)={'syztnl0\x00', 0x0, 0x20, 0x8000, 0xffffffff, 0x32, {{0x27, 0x4, 0x1, 0x0, 0x9c, 0x68, 0x0, 0xd8, 0x4, 0x0, @loopback, @broadcast, {[@ssrr={0x89, 0x7, 0x2a, [@remote]}, @lsrr={0x83, 0x17, 0x77, [@empty, @private=0xa010100, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0xe1, 0x1, 0x1, [{@multicast1, 0x7}, {@multicast2, 0x495d}, {@local, 0x8}, {@local, 0x2}]}, @rr={0x7, 0x1b, 0xa8, [@loopback, @remote, @rand_addr=0x64010102, @empty, @local, @private=0xa010100]}, @cipso={0x86, 0x26, 0xfffffffffffffffc, [{0x7, 0x7, "d2a08c9934"}, {0x2, 0xa, "634060c9072864b9"}, {0x0, 0x9, "12f50378055895"}, {0x0, 0x6, "64fce49f"}]}]}}}}}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000fc0)={r1, 0xe0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000cc0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d40)=[0x0, 0x0], 0x0, 0x81, &(0x7f0000000d80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000e00), &(0x7f0000000e40), 0x8, 0x8, 0x8, 0x8, &(0x7f0000000e80)}}, 0x10) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000001000)={'vxcan1\x00', 0x0}) bind$can_j1939(r14, &(0x7f0000001040)={0x1d, r15, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) (async) sendmsg$nl_route_sched(r13, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r15, {0xffff, 0xe}, {0xf, 0xa}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) (async) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001140)={0x148, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x8080}, 0x20000044) (async) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x2c, r3, 0x3c1ef5685f8d0157, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x275a, 0x0) r17 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r17, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800400018008000340000000010c00044000000000000000000900010073797a300000000038000000020a01"], 0x110}}, 0x0) write$cgroup_subtree(r16, &(0x7f0000000300)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r16, 0x0) (async) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r3, 0xd34114974ad57236, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r16}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_FLOW={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) 24.599177525s ago: executing program 3 (id=1759): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x8000, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xc}, {0x0, 0xed27c9fa5277b9b7}}, [@TCA_RATE={0x0, 0x5, {0x7, 0x2}}]}, 0x3c}}, 0x24048094) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x290, 0x168, 0x10, 0x0, 0xb, 0x290, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x1, 0xb6, 0x0, 0x20}, 0x6000000, 0x228, 0x290, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xffffff00, 0xffffffff, 0xffffffff], @ipv4=@multicast1, [0xffffffff, 0xffff00, 0xffffff00], 0x4d2, 0x0, 0x1, 0x1, 0x0, 0x5}, {@ipv6=@loopback, [0xff000000, 0xffffffff, 0xffffffff, 0xff000000], @ipv4=@local, [0xffffffff, 0xffffff00, 0xffffff00, 0xff000000], 0x4d6, 0x3507, 0x29, 0x1, 0x4, 0x16}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xffffff00, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x1}, [0xff000000, 0x0, 0xffffffff, 0xffffffff], 0x4d5, 0x3507, 0x0, 0x0, 0x4, 0x4}, {@ipv4=@multicast1, [0xffffffff, 0x0, 0xff, 0xff], @ipv6=@loopback, [0xff000000, 0x0, 0xff000000, 0xffffffff], 0x4d5, 0x3502, 0x21, 0x1, 0x11, 0x14}], 0x1, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x4, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000000000000000000e1ff00a060c2d1"], &(0x7f0000000400)='GPL\x00', 0x5}, 0x94) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0xe22}, 0x1c) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000440)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000480)=0x7, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f00000004c0)=0x800001, 0x4) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c) bind$inet6(r8, &(0x7f0000000540)={0xa, 0x4e25, 0x0, @empty}, 0x1c) listen(r8, 0x0) writev(r6, &(0x7f0000000600)=[{&(0x7f0000000640)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c200000050a245d5cde0080045000028cada401fb1c2801e8db28cbcfc000000000002907800000001000012009078e00000000000000000"], 0x0) r9 = socket(0x2, 0x80805, 0x0) r10 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000140)={r11, 0xff}, 0x8) sendmsg$NFT_BATCH(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a07000000000000000000070000000900010073797a30000000002c000000030a01040000000000000000070000000900010073797a30000000000900030073797a30000000007c000000060a01040000000000000000070000000900010073797a30000000000900020073797a3000000000500004804c0001800a0001006d617463680000003c0002800a0001006c696d6974000000080002400000000024000300000000", @ANYRES8, @ANYRES8], 0xf0}}, 0x0) ioctl(r4, 0x2, &(0x7f0000000000)="8215c3218e3968ad7f9cd6") 23.999662192s ago: executing program 1 (id=1760): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000008000000bfa300000000000007030000ffffffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000000000095000000000000006623848adf1dc9a764ab51a064caff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b81ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6b6981978d51514b00dcc4a2748b376358c33c9753beab62bdf27dc04e4cb4bc598affd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b770009524edd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd88345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1757b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c35af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d9900000011000003971b32fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d677d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc37e5aa23bff8cce0600000000000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68f536a03353a55a8a8e176e5d48887d31c8e0f77f2c1e68ec7c01bd5a2028a8fc107007f5f4c67600a6ade3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d9029f071fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2020ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a017ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f6c3652c423ce6ecc1be5d4e8133fc32f68ea86a2df1e7df98a0ae216c405d0ae9eed114ff2d6fe27dfdff1cf9194849c4cc0da9533e5983863e526a7dc0d8728f3b573ca4427bdb44df9341e9b8420e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9467b51d92e0993af4beaf1f3d47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c27c318475802e2c62681bd1a331422a6e47bbd40857d52c4894944fae5c5000000000000000000000000e0c47613e950b6aefeae054fc723f62ac7d13941de11b018f1f48ac50335df91c771729f81929128135b2803562c1171ee00a3f4a31281aa363e087d53d86dd85e3ff979a7e72d16fdd7e1a0f07a1c8e6085d280d760f74975ceb3a5be6cfb4da8e0aeb769b8b75f4aad803ed77d34872eed2711aa40a3b38099dc2752e8ec9b520faf39e416752aa0830206736570f5d41a4df848c9052551cf8dcb1be000000000eb2577188e8e96bd825d462350905d3eb916b397d2a46a64081e85661d7a5a2716cc87cb1976d15d9b6418e94f165911803e43830432226c660f4da67bb7c8ceb3755c07197d8b80b8d16b12c2ec63bebe107aa2350a7ae564bf69a6c52a2da1496016dd66a1c1b112"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0), 0x0, 0x10, &(0x7f0000000f00), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f40)={r0, 0x0, 0x36, 0x0, &(0x7f0000000fc0)="3d6ee2e04b91ab10143d9abe86dde5b21365c1ed1785bf79e0f3eb2dba93774cc6b23d0016dd6bd64414ce22c0f77c2158222ff96093", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000600)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000640)=0x3ff, 0x12) mkdirat$cgroup(r1, &(0x7f0000000680)='syz1\x00', 0x1ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001480), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000014c0)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r4 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000001500)={'syzkaller1\x00', @link_local}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001540)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001600)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x80}}, 0x0) write$tun(r3, &(0x7f0000001740)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d42cfffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x3417) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000001140), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000001180)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000011c0)={'syzkaller1\x00', @link_local}) (async, rerun: 64) r10 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r11 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000001200)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000012c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) (async) write$tun(r8, &(0x7f0000001400)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x2a, 0x2c, 0x0, @local, @mcast1, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev={0xfe, 0x80, '\x00', 0x25}, @private1, [{0x4}]}}}}}, 0x60) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000018000100200000000000000002009400ff00fe09008c00000600150003000000100016"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x2800c895}, 0x20040854) 23.853099606s ago: executing program 3 (id=1761): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x4ca7, 0x4) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) (async) sendto$inet(r0, &(0x7f0000000340)="0f83b07ef75b4ff0f2d163c7c8a0d8fb8ab88f5b", 0x14, 0x0, &(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10) 23.635470059s ago: executing program 2 (id=1762): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1b0d29bd700ffedbdf25050000000e0001006e65746465767369000000000f0002006e657464657673696d3000000800030000f60000"], 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x800) (async) sendmsg$nl_generic(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1f4, 0x35, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@generic="7dbc17ef9173151908f42d9c5847ee3bfc8e4b2fd6e3681e2fddc014d317392f03be0adcda01533a5cd1ba51ed878d949a4d0e725ed9910671e8ce14098a02216162a750c661f34598ac164ecaa891fb5cf902ebc469549488f09054752429bfae6b7c9ab035343b98e25c6002011226701313de6af331ae5cbba705aae5f298abc6f88ec3c6962999b7d179d8e17ac518c9e8cca2b2c99deb125b1b9522158da8ae416c00d5115e660b6d15e1c15250c613dc307b2ba66acc5cf719a30eca73a3d135108a841eee5b5ab375d404c6", @nested={0xc, 0x65, 0x0, 0x1, [@nested={0x4, 0x9d}, @nested={0x4, 0x135}]}, @nested={0x2c, 0x114, 0x0, 0x1, [@nested={0x4, 0x96}, @nested={0x4, 0x39}, @typed={0x4, 0xf7}, @typed={0x8, 0xfa, 0x0, 0x0, @fd=r0}, @typed={0x8, 0xf4, 0x0, 0x0, @fd=r0}, @typed={0xc, 0x13, 0x0, 0x0, @u64=0x4}]}, @generic="a290c95644bb53b589c77a753e230df942cc41e20c39c38ec312e6f163dee292e887b730da4d08a953a600e69fd9c1073955e8e01b86dcad63d2b2a6ccdd184bdd15f8411ed588b45493b6954bf90696051900d64557d69ca85f3dd60d5e1600ec41f91479bb6d0aeaf6f4517497008b9cbd6216818f3da735c781891326f78d7469a0b6e4e40ddcbb247aca2794d6c911ea5e1b320c5912a45fa075942ca39db99383e524da1aab509b8191e2852aae4f40e9a44f236f50b031db6db3b780624f25a72e5d2bd86e717f5c87688545d22eb5bb64760b"]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40040}, 0x841) 23.531680616s ago: executing program 0 (id=1763): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa1686dd6a010000004d1100fe8000000000000000000000000000aaff0200000000000000000000000000014e214e20004d90"], 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}, 0xf) r2 = accept4(r1, &(0x7f0000000080)=@rc={0x1f, @none}, &(0x7f0000000100)=0x80, 0x80800) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x9, 0x8}]}, 0x10) (async) syz_emit_ethernet(0x83, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa1686dd6a010000004d1100fe8000000000000000000000000000aaff0200000000000000000000000000014e214e20004d90"], 0x0) (async) socket(0x40000000015, 0x5, 0x0) (async) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}, 0xf) (async) accept4(r1, &(0x7f0000000080)=@rc={0x1f, @none}, &(0x7f0000000100)=0x80, 0x80800) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) (async) 23.513174166s ago: executing program 3 (id=1764): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='geneve0\x00', 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x4020940d, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000400)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x1, 0x180, [0x200000000780, 0x0, 0x0, 0x2000000008a0, 0x2000000008d0], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"]}, 0x1f8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syzkaller1\x00', 0x0}) syz_emit_ethernet(0xe9, &(0x7f0000000540)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@mpls_uc={0x8847, {[{0x31, 0x0, 0x1}, {0x3}, {0x3}, {}], @ipv4=@generic={{0xa, 0x4, 0x1, 0x3a, 0xc7, 0x64, 0x0, 0x4, 0x70, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @rand_addr=0x64010102, {[@timestamp={0x44, 0xc, 0x5d, 0x0, 0xc, [0x3ff, 0x2]}, @rr={0x7, 0x7, 0x70, [@multicast2]}]}}, "3063fdfab292f19cb5a9603cc07d6b30ac087e1295b160624fc9f422c338ac8039e50b8294d413de73147698fc843f4ed80026132cbafe452ae170ed92a1fe2d86575c35ab8934200850fe9655fd56bb72e79bac7a784b8be30ccaf3197c6bc5a33ded55cea17980465df8df8c54571a4276d87d84d5050d206d30b2941662f830a5af9553ca8360def108e4efea0ec59793b3065afea70001d3f764469ca5"}}}}}, &(0x7f0000000640)={0x1, 0x3, [0x99, 0xd09, 0x913, 0xdd9]}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x4000040) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=@ipv6_newaddr={0x70, 0x14, 0x100, 0x70bd26, 0x25dfdbfd, {0xa, 0x78, 0x12, 0xfd, r4}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x3e}, @IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_ADDRESS={0x14, 0x1, @private2}, @IFA_LOCAL={0x14, 0x2, @empty}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000090}, 0x20000000) 23.323494784s ago: executing program 0 (id=1765): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0xb, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="660a00000000000061118dfbfbffffff9410000000000000"], &(0x7f0000000100)='GPL\x00', 0x2}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xc8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/1, 0x1}], 0x1, 0x6, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @link_local}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="fc000000190001"], 0xfc}}, 0x0) 23.279365479s ago: executing program 2 (id=1766): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000080000000200000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000300000000000000004000001811e5ff", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3f, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1, r0}, 0xc) 23.142214946s ago: executing program 2 (id=1767): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x170bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x429a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x8000) socket$netlink(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x170bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x429a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x8000) (async) 22.841629303s ago: executing program 3 (id=1768): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c00000029000100000000000000000002000000080001"], 0x1c}, 0x1, 0xf4}, 0x20000040) 22.731308622s ago: executing program 2 (id=1769): pselect6(0x40, &(0x7f0000000000)={0x8, 0x4, 0x400, 0x0, 0x0, 0x3ff, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, r3, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED]}, 0x28}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0xa02, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275c, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000440)={0x1adbc, 0x1004, 0x0, 0x7, 0x1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r4, r5, 0x25, 0x0, @val=@perf_event={0x1000}}, 0x18) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb4, r1, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xd, 0x54}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x81}, @NL80211_ATTR_IE={0x5c, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @chsw_timing={0x68, 0x4, {0x3, 0x8a}}, @ibss={0x6, 0x2, 0x4}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xe5, 0x8c, 0x9}}, @dsss={0x3, 0x1, 0x4}, @supported_rates={0x1, 0x8, [{}, {0x12, 0x1}, {0x9, 0x1}, {0x1b}, {0x1b, 0x1}, {0x2, 0x1}, {0x6c}, {0x60}]}, @supported_rates={0x1, 0x8, [{0x5, 0x1}, {0x16, 0x1}, {0xb}, {0x9}, {0x24, 0x1}, {0x16, 0x1}, {0x1b, 0x1}, {0x18, 0x1}]}, @peer_mgmt={0x75, 0x8, {0x1, 0xf0, @val=0x1, @val=0x27, @void}}, @rann={0x7e, 0x15, {{0x1, 0x70}, 0x50, 0x0, @broadcast, 0x1000, 0x80000000, 0x4}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_MAC={0x53, 0x6, @broadcast}, @NL80211_ATTR_TX_NO_CCK_RATE, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2c08}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x7}]}, 0xb4}}, 0x80) 22.336783164s ago: executing program 2 (id=1770): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000240)=0x1c) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x401, 0x2000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x401, 0x2000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newtfilter={0x2c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x9}, {0xffff, 0xffff}, {0x8, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xbf, 0x1}}]}, 0x2c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xc, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xc, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, &(0x7f0000000300)={0x66}) 21.383112754s ago: executing program 0 (id=1771): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000680)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000740)=ANY=[@ANYBLOB="12000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x90) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="c048e44a6a0334c970e7b13b767eae02"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5da42d46005c176e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="17520a86e1db67fe33b6c83fbed19378"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x810) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair(0x2c, 0x5, 0x4, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_QOS_MAP(r9, &(0x7f0000000880)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r3, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xc1, 0x30}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$NL80211_CMD_ADD_TX_TS(r10, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4095}, 0x40000c5) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010004000000020000003900000008000300", @ANYRES32=r12, @ANYBLOB="24005a80200004"], 0x40}, 0x1, 0x0, 0x0, 0x404c890}, 0x14) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb0, r3, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x0, 0x11, 0x1}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x4}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x6}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1d}, @NL80211_ATTR_MESH_CONFIG={0xfffffffffffffd51, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x0, 0xa, 0x6}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x1}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0xc}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x26, 0x15, 0xc8}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x4}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x5}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x0, 0x9, 0xfff}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x2}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x0, 0x1, 0xe1}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x51}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4011}, 0x20004081) (async) write$cgroup_int(r1, &(0x7f0000000240)=0x100000000000001, 0x12) 0s ago: executing program 32 (id=1756): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x3, 0x8, 0x6, 0xffffff26, 0x2, 0x80, 0x8, 0x7, 0x15, 0x9d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0xc6e9f000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, 0xffffffffffffffff, 0x100000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async, rerun: 64) sendmsg$NFT_BATCH(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040048) (rerun: 64) ioctl$OCFS2_IOC_UNRESVSP64(r6, 0x4030582b, &(0x7f0000000640)={0x1, 0x1, 0xfb, 0x4, 0x6, 0x4}) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001300)=""/4073, 0xff0, 0x1, 0x0}, &(0x7f0000002300)=0x53) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'tunl0\x00', 0x0}) connect$packet(r6, &(0x7f0000000040)={0x11, 0xf7, r10, 0x1, 0x6, 0x6, @multicast}, 0x14) (async, rerun: 64) r11 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000ac0)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x154, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffe, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xffffffffffffffbb, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x3c}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x400, 0x80000000, 0x55, 0x9, 0x3, 0x12, 0x1}}]}}]}, 0x154}}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x40, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x40}}, 0x0) ioctl$PPPIOCSMRU(r4, 0x40047452, &(0x7f0000000180)=0x1ff) (async) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r13, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) kernel console output (not intermixed with test programs): 145.586392][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.586457][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.586494][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.586531][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.591962][ T7394] openvswitch: netlink: IP tunnel dst address not specified [ 145.721545][ T7365] bond2: Invalid ad_actor_system MAC address. [ 145.721566][ T7365] bond2: option ad_actor_system: invalid value (1) [ 145.723479][ T7365] bond2 (unregistering): Released all slaves [ 145.929432][ T7365] bond2: Invalid ad_actor_system MAC address. [ 145.929454][ T7365] bond2: option ad_actor_system: invalid value (1) [ 145.932565][ T7412] netlink: 'syz.1.365': attribute type 1 has an invalid length. [ 145.938566][ T7365] bond2 (unregistering): Released all slaves [ 146.008750][ T7412] bond2: entered promiscuous mode [ 146.009093][ T7412] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.046342][ T7413] dvmrp0: entered allmulticast mode [ 146.129345][ T7412] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.129814][ T7412] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 146.129837][ T7412] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 146.174279][ T7412] bond2: (slave ip6gre1): making interface the new active one [ 146.174306][ T7412] ip6gre1: entered promiscuous mode [ 146.189875][ T7412] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 146.301879][ T7427] netlink: 'syz.3.368': attribute type 10 has an invalid length. [ 146.319000][ T7427] geneve3: entered promiscuous mode [ 146.319024][ T7427] geneve3: entered allmulticast mode [ 146.488623][ T7433] openvswitch: netlink: IP tunnel dst address not specified [ 146.522389][ T7435] syzkaller1: entered promiscuous mode [ 146.522414][ T7435] syzkaller1: entered allmulticast mode [ 147.072558][ T7475] openvswitch: netlink: IP tunnel dst address not specified [ 147.319048][ T7482] syzkaller0: entered promiscuous mode [ 147.319072][ T7482] syzkaller0: entered allmulticast mode [ 147.549164][ T7506] xt_socket: unknown flags 0xc [ 147.553959][ T7507] xt_socket: unknown flags 0xc [ 147.802665][ T7514] syzkaller0: entered promiscuous mode [ 147.802690][ T7514] syzkaller0: entered allmulticast mode [ 147.962443][ T7526] sit0: entered promiscuous mode [ 147.971350][ T7526] netlink: 'syz.2.395': attribute type 1 has an invalid length. [ 147.971373][ T7526] __nla_validate_parse: 14 callbacks suppressed [ 147.971387][ T7526] netlink: 1 bytes leftover after parsing attributes in process `syz.2.395'. [ 148.436563][ T7534] netlink: 20 bytes leftover after parsing attributes in process `syz.4.400'. [ 148.582130][ T7536] 0: reclassify loop, rule prio 0, protocol 03 [ 149.004460][ T7559] syzkaller1: entered promiscuous mode [ 149.004487][ T7559] syzkaller1: entered allmulticast mode [ 149.409243][ T7572] netlink: 'syz.3.411': attribute type 2 has an invalid length. [ 149.621244][ T7583] netlink: 68 bytes leftover after parsing attributes in process `syz.1.412'. [ 149.802774][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.412'. [ 149.845283][ T7583] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 150.260500][ T7602] Driver unsupported XDP return value 0 on prog (id 167) dev N/A, expect packet loss! [ 150.462894][ T7615] netlink: 44 bytes leftover after parsing attributes in process `syz.2.418'. [ 150.524190][ T7616] netlink: 28 bytes leftover after parsing attributes in process `syz.3.419'. [ 150.524230][ T7616] netlink: 28 bytes leftover after parsing attributes in process `syz.3.419'. [ 150.671610][ T7625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.422'. [ 150.751852][ T7625] hsr_slave_1 (unregistering): left promiscuous mode [ 150.769605][ T7633] netlink: 28 bytes leftover after parsing attributes in process `syz.4.424'. [ 151.035407][ T7644] netlink: 'syz.2.427': attribute type 4 has an invalid length. [ 151.326517][ T7652] netlink: 'syz.0.429': attribute type 2 has an invalid length. [ 151.375499][ T7656] netlink: 36 bytes leftover after parsing attributes in process `syz.1.430'. [ 151.384303][ T53] Bluetooth: hci2: SCO packet too small [ 151.444495][ T7658] gre1: entered promiscuous mode [ 151.444520][ T7658] gre1: entered allmulticast mode [ 151.734376][ T7671]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.748603][ T7671] bond_slave_0: left allmulticast mode [ 151.770891][ T7671]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.773098][ T7671] bond_slave_1: left allmulticast mode [ 151.793418][ T7671]  (unregistering): (slave team0): Releasing backup interface [ 151.803265][ T7671] team0: left allmulticast mode [ 151.803284][ T7671] team_slave_0: left allmulticast mode [ 151.803300][ T7671] team_slave_1: left allmulticast mode [ 151.824683][ T7671]  (unregistering): Released all slaves [ 151.907423][ T7679] vlan2: entered allmulticast mode [ 151.907447][ T7679] veth0_vlan: entered allmulticast mode [ 152.110846][ T7689] veth0_to_bridge: entered promiscuous mode [ 152.127741][ T7687] veth0_to_bridge: left promiscuous mode [ 152.340566][ T53] Bluetooth: hci4: link tx timeout [ 152.340587][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.342876][ T53] Bluetooth: hci4: link tx timeout [ 152.342894][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.357969][ T53] Bluetooth: hci4: link tx timeout [ 152.357989][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.358020][ T53] Bluetooth: hci4: link tx timeout [ 152.358031][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.358057][ T53] Bluetooth: hci4: link tx timeout [ 152.358068][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.358093][ T53] Bluetooth: hci4: link tx timeout [ 152.358104][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.358131][ T53] Bluetooth: hci4: link tx timeout [ 152.358142][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.358217][ T53] Bluetooth: hci4: link tx timeout [ 152.358229][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.358255][ T53] Bluetooth: hci4: link tx timeout [ 152.358265][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.363539][ T53] Bluetooth: hci4: link tx timeout [ 152.363557][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.371686][ T53] Bluetooth: hci4: link tx timeout [ 152.371702][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.372560][ T53] Bluetooth: hci4: link tx timeout [ 152.372573][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.372601][ T53] Bluetooth: hci4: link tx timeout [ 152.372612][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.372637][ T53] Bluetooth: hci4: link tx timeout [ 152.372648][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.372701][ T53] Bluetooth: hci4: link tx timeout [ 152.372713][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.372808][ T53] Bluetooth: hci4: link tx timeout [ 152.372820][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.372846][ T53] Bluetooth: hci4: link tx timeout [ 152.372856][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.372882][ T53] Bluetooth: hci4: link tx timeout [ 152.372892][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.372917][ T53] Bluetooth: hci4: link tx timeout [ 152.372928][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.378491][ T53] Bluetooth: hci4: link tx timeout [ 152.378509][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.386626][ T53] Bluetooth: hci4: link tx timeout [ 152.386643][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.392879][ T53] Bluetooth: hci4: link tx timeout [ 152.392897][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.400998][ T53] Bluetooth: hci4: link tx timeout [ 152.401015][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.414268][ T53] Bluetooth: hci4: link tx timeout [ 152.414287][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.414317][ T53] Bluetooth: hci4: link tx timeout [ 152.414328][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.419587][ T53] Bluetooth: hci4: link tx timeout [ 152.419603][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.427532][ T53] Bluetooth: hci4: link tx timeout [ 152.427548][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.432874][ T53] Bluetooth: hci4: link tx timeout [ 152.432891][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.440762][ T53] Bluetooth: hci4: link tx timeout [ 152.440779][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.446096][ T53] Bluetooth: hci4: link tx timeout [ 152.446112][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.446142][ T53] Bluetooth: hci4: link tx timeout [ 152.446153][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.446177][ T53] Bluetooth: hci4: link tx timeout [ 152.446188][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.454008][ T53] Bluetooth: hci4: link tx timeout [ 152.454025][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.473673][ T53] Bluetooth: hci4: link tx timeout [ 152.473693][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.486862][ T53] Bluetooth: hci4: link tx timeout [ 152.486882][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.494739][ T53] Bluetooth: hci4: link tx timeout [ 152.495882][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.508883][ T53] Bluetooth: hci4: link tx timeout [ 152.508900][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.508931][ T53] Bluetooth: hci4: link tx timeout [ 152.508942][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.508967][ T53] Bluetooth: hci4: link tx timeout [ 152.508978][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.514206][ T53] Bluetooth: hci4: link tx timeout [ 152.514223][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.514252][ T53] Bluetooth: hci4: link tx timeout [ 152.514263][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.514346][ T53] Bluetooth: hci4: link tx timeout [ 152.514358][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.514384][ T53] Bluetooth: hci4: link tx timeout [ 152.514395][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.522243][ T53] Bluetooth: hci4: link tx timeout [ 152.522259][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.818789][ T7707] openvswitch: netlink: EtherType 520 is less than min 600 [ 152.819476][ T7705] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 153.349013][ T7723] ieee802154 phy1 wpan1: encryption failed: -90 [ 153.563721][ T7745] siw: device registration error -23 [ 153.607814][ T7748] __nla_validate_parse: 7 callbacks suppressed [ 153.607836][ T7748] netlink: 20 bytes leftover after parsing attributes in process `syz.2.462'. [ 153.770539][ T53] Bluetooth: hci4: link tx timeout [ 153.770561][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.770683][ T53] Bluetooth: hci4: link tx timeout [ 153.770696][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.770809][ T53] Bluetooth: hci4: link tx timeout [ 153.770821][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.770952][ T53] Bluetooth: hci4: link tx timeout [ 153.770965][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.771085][ T53] Bluetooth: hci4: link tx timeout [ 153.771097][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.771203][ T53] Bluetooth: hci4: link tx timeout [ 153.771215][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.771323][ T53] Bluetooth: hci4: link tx timeout [ 153.771335][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.771452][ T53] Bluetooth: hci4: link tx timeout [ 153.771465][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.771577][ T53] Bluetooth: hci4: link tx timeout [ 153.771589][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.771697][ T53] Bluetooth: hci4: link tx timeout [ 153.771709][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.771819][ T53] Bluetooth: hci4: link tx timeout [ 153.771831][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.771954][ T53] Bluetooth: hci4: link tx timeout [ 153.771966][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.772079][ T53] Bluetooth: hci4: link tx timeout [ 153.772090][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.772214][ T53] Bluetooth: hci4: link tx timeout [ 153.772227][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.772335][ T53] Bluetooth: hci4: link tx timeout [ 153.772347][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.772468][ T53] Bluetooth: hci4: link tx timeout [ 153.772480][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.772588][ T53] Bluetooth: hci4: link tx timeout [ 153.772599][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.772727][ T53] Bluetooth: hci4: link tx timeout [ 153.772739][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.772849][ T53] Bluetooth: hci4: link tx timeout [ 153.772862][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.774593][ T53] Bluetooth: hci4: link tx timeout [ 153.774611][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.774732][ T53] Bluetooth: hci4: link tx timeout [ 153.774744][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.774986][ T53] Bluetooth: hci4: link tx timeout [ 153.774999][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.776548][ T53] Bluetooth: hci4: link tx timeout [ 153.776583][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.776832][ T53] Bluetooth: hci4: link tx timeout [ 153.776863][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.777147][ T53] Bluetooth: hci4: link tx timeout [ 153.777179][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.777491][ T53] Bluetooth: hci4: link tx timeout [ 153.777532][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.780319][ T53] Bluetooth: hci4: link tx timeout [ 153.780361][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.780632][ T53] Bluetooth: hci4: link tx timeout [ 153.780663][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.780941][ T53] Bluetooth: hci4: link tx timeout [ 153.780973][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.781124][ T53] Bluetooth: hci4: link tx timeout [ 153.781135][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.781284][ T53] Bluetooth: hci4: link tx timeout [ 153.781305][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.781525][ T53] Bluetooth: hci4: link tx timeout [ 153.781564][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.781886][ T53] Bluetooth: hci4: link tx timeout [ 153.781917][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.782204][ T53] Bluetooth: hci4: link tx timeout [ 153.782235][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.782528][ T53] Bluetooth: hci4: link tx timeout [ 153.782590][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.782897][ T53] Bluetooth: hci4: link tx timeout [ 153.782934][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.787848][ T53] Bluetooth: hci4: link tx timeout [ 153.787891][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.788206][ T53] Bluetooth: hci4: link tx timeout [ 153.788230][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.788531][ T53] Bluetooth: hci4: link tx timeout [ 153.788562][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.788828][ T53] Bluetooth: hci4: link tx timeout [ 153.788852][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.789054][ T53] Bluetooth: hci4: link tx timeout [ 153.789066][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.789175][ T53] Bluetooth: hci4: link tx timeout [ 153.789187][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.789318][ T53] Bluetooth: hci4: link tx timeout [ 153.789330][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.789435][ T53] Bluetooth: hci4: link tx timeout [ 153.789446][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.789558][ T53] Bluetooth: hci4: link tx timeout [ 153.789570][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.789672][ T53] Bluetooth: hci4: link tx timeout [ 153.789684][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.789791][ T53] Bluetooth: hci4: link tx timeout [ 153.789803][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.789915][ T53] Bluetooth: hci4: link tx timeout [ 153.789927][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.790055][ T53] Bluetooth: hci4: link tx timeout [ 153.790067][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.790178][ T53] Bluetooth: hci4: link tx timeout [ 153.790190][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.790324][ T53] Bluetooth: hci4: link tx timeout [ 153.790336][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.790490][ T53] Bluetooth: hci4: link tx timeout [ 153.790503][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.790613][ T53] Bluetooth: hci4: link tx timeout [ 153.790625][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.790733][ T53] Bluetooth: hci4: link tx timeout [ 153.790745][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.790852][ T53] Bluetooth: hci4: link tx timeout [ 153.790864][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.790979][ T53] Bluetooth: hci4: link tx timeout [ 153.790991][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.791101][ T53] Bluetooth: hci4: link tx timeout [ 153.791113][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.791223][ T53] Bluetooth: hci4: link tx timeout [ 153.791234][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.791431][ T53] Bluetooth: hci4: link tx timeout [ 153.791443][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.791596][ T53] Bluetooth: hci4: link tx timeout [ 153.791609][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.796004][ T53] Bluetooth: hci4: link tx timeout [ 153.796048][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.796399][ T53] Bluetooth: hci4: link tx timeout [ 153.796430][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.800386][ T53] Bluetooth: hci4: link tx timeout [ 153.800428][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.802169][ T53] Bluetooth: hci4: link tx timeout [ 153.802200][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.802515][ T53] Bluetooth: hci4: link tx timeout [ 153.802547][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.802843][ T53] Bluetooth: hci4: link tx timeout [ 153.802880][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.803180][ T53] Bluetooth: hci4: link tx timeout [ 153.803210][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.803638][ T53] Bluetooth: hci4: link tx timeout [ 153.803670][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.804220][ T53] Bluetooth: hci4: link tx timeout [ 153.804259][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.804578][ T53] Bluetooth: hci4: link tx timeout [ 153.804610][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.817902][ T53] Bluetooth: hci4: link tx timeout [ 153.817955][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.823247][ T53] Bluetooth: hci4: link tx timeout [ 153.823299][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.829165][ T53] Bluetooth: hci4: link tx timeout [ 153.829217][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.842207][ T53] Bluetooth: hci4: link tx timeout [ 153.842251][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.870172][ T53] Bluetooth: hci4: link tx timeout [ 153.870217][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.891626][ T53] Bluetooth: hci4: link tx timeout [ 153.891678][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.891998][ T53] Bluetooth: hci4: link tx timeout [ 153.892034][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.894556][ T53] Bluetooth: hci4: link tx timeout [ 153.894597][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.903427][ T53] Bluetooth: hci4: link tx timeout [ 153.903476][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.903913][ T53] Bluetooth: hci4: link tx timeout [ 153.903944][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.904387][ T53] Bluetooth: hci4: link tx timeout [ 153.904426][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.909810][ T53] Bluetooth: hci4: link tx timeout [ 153.909852][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.916733][ T53] Bluetooth: hci4: link tx timeout [ 153.916778][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.917158][ T53] Bluetooth: hci4: link tx timeout [ 153.917190][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.919976][ T53] Bluetooth: hci4: link tx timeout [ 153.920013][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.920584][ T53] Bluetooth: hci4: link tx timeout [ 153.920609][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.963100][ T53] Bluetooth: hci4: link tx timeout [ 153.963150][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 154.016341][ T53] Bluetooth: hci4: link tx timeout [ 154.016394][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 154.060564][ T53] Bluetooth: hci4: link tx timeout [ 154.060614][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 154.113516][ T53] Bluetooth: hci4: link tx timeout [ 154.113568][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 154.149914][ T53] Bluetooth: hci4: link tx timeout [ 154.149974][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 154.185553][ T53] Bluetooth: hci4: link tx timeout [ 154.185604][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 154.187314][ T53] Bluetooth: hci4: link tx timeout [ 154.187354][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 154.210855][ T53] Bluetooth: hci4: link tx timeout [ 154.210893][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 154.249418][ T53] Bluetooth: hci4: link tx timeout [ 154.249471][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 154.376095][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 155.107163][ T7777] netlink: 'syz.4.468': attribute type 4 has an invalid length. [ 155.145670][ T7777] netlink: 'syz.4.468': attribute type 4 has an invalid length. [ 155.147759][ T7779] netlink: 28 bytes leftover after parsing attributes in process `syz.4.468'. [ 155.373510][ T7777] netlink: 'syz.4.468': attribute type 4 has an invalid length. [ 155.388514][ T7777] netlink: 'syz.4.468': attribute type 4 has an invalid length. [ 155.404244][ T7777] netlink: 'syz.4.468': attribute type 4 has an invalid length. [ 155.437294][ T7777] netlink: 'syz.4.468': attribute type 4 has an invalid length. [ 155.493544][ T7777] netlink: 'syz.4.468': attribute type 4 has an invalid length. [ 155.511262][ T7777] netlink: 'syz.4.468': attribute type 4 has an invalid length. [ 155.535731][ T7777] netlink: 'syz.4.468': attribute type 4 has an invalid length. [ 155.552693][ T7801] tipc: Enabling of bearer rejected, media not registered [ 155.581117][ T7777] netlink: 'syz.4.468': attribute type 4 has an invalid length. [ 155.613175][ T7804] tipc: Enabling of bearer rejected, media not registered [ 155.750856][ T7808] syzkaller0: entered promiscuous mode [ 155.750883][ T7808] syzkaller0: entered allmulticast mode [ 156.157879][ T7830] sctp: [Deprecated]: syz.2.483 (pid 7830) Use of int in max_burst socket option deprecated. [ 156.157879][ T7830] Use struct sctp_assoc_value instead [ 156.194169][ T7830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.483'. [ 156.262331][ T7838] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 156.301116][ T7842] workqueue: name exceeds WQ_NAME_LEN. Truncating to: (€h\E3~‘§˜Àϱøoˆõ£R!Fo¹?£¥Ð< [ 156.369957][ T7836] ªªªªª: renamed from vlan0 (while UP) [ 156.644017][ T7850] openvswitch: netlink: Port 536870913 exceeds max allowable 65535 [ 156.852370][ T7853] netlink: 48 bytes leftover after parsing attributes in process `syz.3.488'. [ 156.945026][ T7862] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.493'. [ 157.010601][ T7864] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.492'. [ 157.349306][ T7877] bond0: entered allmulticast mode [ 157.426466][ T7881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.498'. [ 158.139331][ T7903] FAULT_INJECTION: forcing a failure. [ 158.139331][ T7903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.139362][ T7903] CPU: 0 UID: 0 PID: 7903 Comm: syz.3.507 Not tainted syzkaller #0 PREEMPT(full) [ 158.139387][ T7903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 158.139400][ T7903] Call Trace: [ 158.139409][ T7903] [ 158.139418][ T7903] dump_stack_lvl+0xe8/0x150 [ 158.139460][ T7903] should_fail_ex+0x3eb/0x540 [ 158.139491][ T7903] _copy_from_user+0x2d/0xb0 [ 158.139519][ T7903] ___sys_sendmsg+0x1c6/0x360 [ 158.139542][ T7903] ? __lock_acquire+0x747/0x2de0 [ 158.139576][ T7903] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.139641][ T7903] ? __fget_files+0x3a2/0x420 [ 158.139666][ T7903] ? __fget_files+0x2a/0x420 [ 158.139701][ T7903] __x64_sys_sendmsg+0x1b1/0x290 [ 158.139727][ T7903] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 158.139773][ T7903] do_syscall_64+0x166/0x520 [ 158.139798][ T7903] ? trace_irq_disable+0x3b/0x140 [ 158.139827][ T7903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.139848][ T7903] ? clear_bhb_loop+0x70/0xc0 [ 158.139875][ T7903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.139896][ T7903] RIP: 0033:0x7f77c7b9fb19 [ 158.139915][ T7903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.139933][ T7903] RSP: 002b:00007f77c8a09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.139955][ T7903] RAX: ffffffffffffffda RBX: 00007f77c7e25fa0 RCX: 00007f77c7b9fb19 [ 158.139970][ T7903] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 158.139982][ T7903] RBP: 00007f77c8a09090 R08: 0000000000000000 R09: 0000000000000000 [ 158.139995][ T7903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.140006][ T7903] R13: 00007f77c7e26038 R14: 00007f77c7e25fa0 R15: 00007ffc9a81de58 [ 158.140040][ T7903] [ 158.488730][ T7911] FAULT_INJECTION: forcing a failure. [ 158.488730][ T7911] name failslab, interval 1, probability 0, space 0, times 0 [ 158.488763][ T7911] CPU: 1 UID: 0 PID: 7911 Comm: syz.4.510 Not tainted syzkaller #0 PREEMPT(full) [ 158.488787][ T7911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 158.488800][ T7911] Call Trace: [ 158.488808][ T7911] [ 158.488817][ T7911] dump_stack_lvl+0xe8/0x150 [ 158.488858][ T7911] should_fail_ex+0x3eb/0x540 [ 158.488892][ T7911] should_failslab+0xa8/0x100 [ 158.488928][ T7911] __kmalloc_noprof+0xf9/0x710 [ 158.488953][ T7911] ? rcu_is_watching+0x16/0xb0 [ 158.488987][ T7911] ? tomoyo_realpath_from_path+0xef/0x640 [ 158.489010][ T7911] ? tomoyo_realpath_from_path+0xef/0x640 [ 158.489043][ T7911] tomoyo_realpath_from_path+0xef/0x640 [ 158.489079][ T7911] ? tomoyo_path_number_perm+0x219/0x5f0 [ 158.489112][ T7911] tomoyo_path_number_perm+0x246/0x5f0 [ 158.489148][ T7911] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 158.489187][ T7911] ? __lock_acquire+0x747/0x2de0 [ 158.489258][ T7911] ? __fget_files+0x2a/0x420 [ 158.489289][ T7911] ? __fget_files+0x2a/0x420 [ 158.489315][ T7911] ? __fget_files+0x2a/0x420 [ 158.489348][ T7911] security_file_ioctl+0xc3/0x2a0 [ 158.489381][ T7911] __se_sys_ioctl+0x47/0x170 [ 158.489417][ T7911] do_syscall_64+0x166/0x520 [ 158.489443][ T7911] ? trace_irq_disable+0x3b/0x140 [ 158.489474][ T7911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.489498][ T7911] ? clear_bhb_loop+0x70/0xc0 [ 158.489526][ T7911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.489548][ T7911] RIP: 0033:0x7f814f39fb19 [ 158.489569][ T7911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.489586][ T7911] RSP: 002b:00007f8150292028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.489610][ T7911] RAX: ffffffffffffffda RBX: 00007f814f625fa0 RCX: 00007f814f39fb19 [ 158.489626][ T7911] RDX: 00002000000000c0 RSI: 0000000000008955 RDI: 0000000000000003 [ 158.489644][ T7911] RBP: 00007f8150292090 R08: 0000000000000000 R09: 0000000000000000 [ 158.489657][ T7911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.489669][ T7911] R13: 00007f814f626038 R14: 00007f814f625fa0 R15: 00007ffd1f570fc8 [ 158.489707][ T7911] [ 158.489745][ T7911] ERROR: Out of memory at tomoyo_realpath_from_path. [ 159.285326][ T7943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.523'. [ 159.372060][ T7948] netlink: 92 bytes leftover after parsing attributes in process `syz.2.523'. [ 159.537751][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.524'. [ 159.587636][ T7913] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 159.827369][ T7962] FAULT_INJECTION: forcing a failure. [ 159.827369][ T7962] name failslab, interval 1, probability 0, space 0, times 0 [ 159.827402][ T7962] CPU: 1 UID: 0 PID: 7962 Comm: syz.4.526 Not tainted syzkaller #0 PREEMPT(full) [ 159.827426][ T7962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 159.827440][ T7962] Call Trace: [ 159.827449][ T7962] [ 159.827458][ T7962] dump_stack_lvl+0xe8/0x150 [ 159.827500][ T7962] should_fail_ex+0x3eb/0x540 [ 159.827534][ T7962] should_failslab+0xa8/0x100 [ 159.827571][ T7962] __kmalloc_noprof+0xf9/0x710 [ 159.827600][ T7962] ? tomoyo_encode+0x2ad/0x570 [ 159.827622][ T7962] ? tomoyo_encode+0x2ad/0x570 [ 159.827653][ T7962] tomoyo_encode+0x2ad/0x570 [ 159.827684][ T7962] tomoyo_realpath_from_path+0x5fa/0x640 [ 159.827729][ T7962] ? tomoyo_path_number_perm+0x219/0x5f0 [ 159.827762][ T7962] tomoyo_path_number_perm+0x246/0x5f0 [ 159.827800][ T7962] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 159.827830][ T7962] ? __lock_acquire+0x747/0x2de0 [ 159.827905][ T7962] ? __fget_files+0x2a/0x420 [ 159.827936][ T7962] ? __fget_files+0x2a/0x420 [ 159.827963][ T7962] ? __fget_files+0x2a/0x420 [ 159.827996][ T7962] security_file_ioctl+0xc3/0x2a0 [ 159.828030][ T7962] __se_sys_ioctl+0x47/0x170 [ 159.828068][ T7962] do_syscall_64+0x166/0x520 [ 159.828094][ T7962] ? trace_irq_disable+0x3b/0x140 [ 159.828125][ T7962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.828148][ T7962] ? clear_bhb_loop+0x70/0xc0 [ 159.828176][ T7962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.828199][ T7962] RIP: 0033:0x7f814f39fb19 [ 159.828220][ T7962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.828238][ T7962] RSP: 002b:00007f8150292028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.828262][ T7962] RAX: ffffffffffffffda RBX: 00007f814f625fa0 RCX: 00007f814f39fb19 [ 159.828278][ T7962] RDX: 00002000000000c0 RSI: 0000000000008955 RDI: 0000000000000003 [ 159.828292][ T7962] RBP: 00007f8150292090 R08: 0000000000000000 R09: 0000000000000000 [ 159.828306][ T7962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.828322][ T7962] R13: 00007f814f626038 R14: 00007f814f625fa0 R15: 00007ffd1f570fc8 [ 159.828360][ T7962] [ 159.829916][ T7962] ERROR: Out of memory at tomoyo_realpath_from_path. [ 160.155055][ T7968] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 160.155074][ T7968] IPv6: NLM_F_CREATE should be set when creating new route [ 160.155119][ T7968] IPv6: NLM_F_CREATE should be set when creating new route [ 160.155147][ T7968] IPv6: NLM_F_CREATE should be set when creating new route [ 160.542224][ T7981] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.165863][ T8023] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 161.226490][ T8023] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.546'. [ 161.226623][ T8023] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 161.253851][ T8023] 0ªX¹¦Dö»: entered allmulticast mode [ 161.418468][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.551'. [ 161.495896][ T8034] ip_tables: iptables: counters copy to user failed while replacing table [ 161.570432][ T13] IPVS: starting estimator thread 0... [ 161.666521][ T8041] IPVS: using max 26 ests per chain, 62400 per kthread [ 162.000977][ T8063] netlink: 16 bytes leftover after parsing attributes in process `syz.2.556'. [ 162.293584][ T8075] netlink: 16 bytes leftover after parsing attributes in process `syz.0.560'. [ 162.307644][ T8075] validate_nla: 25 callbacks suppressed [ 162.307664][ T8075] netlink: 'syz.0.560': attribute type 1 has an invalid length. [ 162.307679][ T8075] netlink: 224 bytes leftover after parsing attributes in process `syz.0.560'. [ 162.648619][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.565'. [ 162.742407][ T8099] netlink: 24 bytes leftover after parsing attributes in process `syz.3.568'. [ 163.067388][ T8115] syzkaller0: entered promiscuous mode [ 163.067414][ T8115] syzkaller0: entered allmulticast mode [ 163.087501][ T1279] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.087558][ T1279] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.087595][ T1279] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.087632][ T1279] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.333614][ T8122] openvswitch: netlink: IP tunnel dst address not specified [ 163.616863][ T8132] bond1: Unable to set up delay as MII monitoring is disabled [ 163.621918][ T8132] bond1 (unregistering): Released all slaves [ 163.730026][ T8136] sctp: [Deprecated]: syz.1.580 (pid 8136) Use of int in maxseg socket option. [ 163.730026][ T8136] Use struct sctp_assoc_value instead [ 164.080067][ T8159] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.199264][ T1290] IPVS: starting estimator thread 0... [ 164.200814][ T8164] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.221411][ T8167] openvswitch: netlink: IP tunnel dst address not specified [ 164.284890][ T8165] IPVS: using max 28 ests per chain, 67200 per kthread [ 164.366844][ T8172] __nla_validate_parse: 34 callbacks suppressed [ 164.366868][ T8172] netlink: 72 bytes leftover after parsing attributes in process `syz.0.589'. [ 164.372877][ T8171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.590'. [ 164.467097][ T8175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.591'. [ 164.521542][ T8180] bond4: entered promiscuous mode [ 164.521568][ T8180] bond4: entered allmulticast mode [ 164.594420][ T8184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.593'. [ 164.729902][ T8191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.595'. [ 164.787272][ T8193] netlink: 24 bytes leftover after parsing attributes in process `syz.0.596'. [ 164.918864][ T8193] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 164.964532][ T8202] xt_IDLETIMER: label is empty or not nul-terminated [ 165.037742][ T8204] openvswitch: netlink: IP tunnel dst address not specified [ 165.399749][ T8229] netlink: 20 bytes leftover after parsing attributes in process `syz.0.606'. [ 165.895481][ T5643] Bluetooth: hci4: command 0x0406 tx timeout [ 166.173115][ T8257] openvswitch: netlink: IP tunnel dst address not specified [ 166.306048][ T8259] warning: `syz.3.613' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 166.340880][ T8259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 166.341448][ T8260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 166.447820][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.615'. [ 166.644386][ T8273] netlink: 104 bytes leftover after parsing attributes in process `syz.1.617'. [ 166.719203][ T8281] netlink: 4248 bytes leftover after parsing attributes in process `syz.4.621'. [ 166.737078][ T8281] tipc: Started in network mode [ 166.737130][ T8281] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 166.738209][ T8281] tipc: Enabled bearer , priority 0 [ 166.779386][ T30] audit: type=1804 audit(1793832988.467:4): pid=8277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.620" name="/newroot/121/cgroup.controllers" dev="tmpfs" ino=639 res=1 errno=0 [ 166.779441][ T30] audit: type=1800 audit(1793832988.467:5): pid=8277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.620" name="cgroup.controllers" dev="tmpfs" ino=639 res=0 errno=-22 [ 166.903158][ T8286] openvswitch: netlink: IP tunnel dst address not specified [ 167.133169][ T8300] netlink: 'syz.4.629': attribute type 5 has an invalid length. [ 167.149318][ T8300] geneve2: entered promiscuous mode [ 167.149344][ T8300] geneve2: entered allmulticast mode [ 167.166232][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 167.168024][ T1290] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 167.168219][ T1290] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 167.168311][ T1290] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 167.490598][ T8325] : renamed from bond0 (while UP) [ 167.532954][ T8328] openvswitch: netlink: IP tunnel dst address not specified [ 167.736839][ T10] tipc: Node number set to 43690 [ 167.801203][ T8343] batman_adv: batadv0: Adding interface: syzkaller0 [ 167.801223][ T8343] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.801255][ T8343] batman_adv: batadv0: Interface activated: syzkaller0 [ 168.199036][ T8350] nbd: must specify at least one socket [ 168.510793][ T8369] openvswitch: netlink: IP tunnel dst address not specified [ 168.741453][ T8386] openvswitch: netlink: Invalid VLAN frame [ 168.802973][ T8391] bridge2: entered allmulticast mode [ 169.260639][ T8420] netlink: 'syz.1.664': attribute type 5 has an invalid length. [ 169.516944][ T8433] netlink: 'syz.4.670': attribute type 1 has an invalid length. [ 169.517206][ T8434] netlink: 'syz.4.670': attribute type 1 has an invalid length. [ 170.852257][ T8503] erspan0: entered promiscuous mode [ 170.852285][ T8503] erspan0: entered allmulticast mode [ 170.932407][ T8513] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 170.982812][ T8506] tc_dump_action: action bad kind [ 171.140815][ T8521] __nla_validate_parse: 17 callbacks suppressed [ 171.140836][ T8521] netlink: 81 bytes leftover after parsing attributes in process `syz.3.696'. [ 171.304205][ T8534] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 171.508417][ T8540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.702'. [ 171.664010][ T8549] x_tables: duplicate underflow at hook 1 [ 171.890896][ T8561] netlink: 'syz.1.710': attribute type 12 has an invalid length. [ 172.094426][ T8572] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 172.193053][ T8575] netlink: 28 bytes leftover after parsing attributes in process `syz.4.712'. [ 172.208405][ T8575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.712'. [ 172.208428][ T8575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.712'. [ 172.264260][ T8578] netlink: 'syz.4.712': attribute type 4 has an invalid length. [ 172.264285][ T8578] netlink: 152 bytes leftover after parsing attributes in process `syz.4.712'. [ 172.323021][ T8578] .`: renamed from bond0 [ 172.708150][ T8595] netlink: 'syz.4.717': attribute type 1 has an invalid length. [ 172.708745][ T8595] netlink: 28 bytes leftover after parsing attributes in process `syz.4.717'. [ 172.899065][ T8611] vlan3: entered promiscuous mode [ 172.899090][ T8611] hsr0: entered promiscuous mode [ 172.943543][ T8611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.720'. [ 172.968675][ T8611] hsr_slave_0: left promiscuous mode [ 172.971394][ T8611] hsr_slave_1: left promiscuous mode [ 173.822340][ T8649] netlink: 16 bytes leftover after parsing attributes in process `syz.0.736'. [ 174.024926][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.739'. [ 174.025864][ T8663] netlink: 'syz.0.740': attribute type 1 has an invalid length. [ 174.044601][ T8664] netlink: 'syz.0.740': attribute type 1 has an invalid length. [ 174.309779][ T8674] sit1: entered promiscuous mode [ 174.309804][ T8674] sit1: entered allmulticast mode [ 174.555068][ T8652] 8021q: adding VLAN 0 to HW filter on device bond4 [ 174.731824][ T8696] netlink: 'syz.2.751': attribute type 16 has an invalid length. [ 174.731859][ T8696] netlink: 'syz.2.751': attribute type 3 has an invalid length. [ 175.112506][ T8715] gtp3: entered promiscuous mode [ 175.112532][ T8715] gtp3: entered allmulticast mode [ 175.208679][ T8715] netlink: 'syz.4.757': attribute type 1 has an invalid length. [ 175.266628][ T8715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.337720][ T8723] bond0: (slave veth5): Enslaving as an active interface with a down link [ 175.384857][ T8715] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 175.385641][ T8715] bond0: (slave wlan1): Opening slave failed [ 175.953056][ T8755] ksmbd: Unknown IPC event: 4, ignore. [ 176.080650][ T8763] syzkaller1: entered promiscuous mode [ 176.080674][ T8763] syzkaller1: entered allmulticast mode [ 176.098098][ T8763] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4116 [ 176.181119][ T8753] Bluetooth: hci0: unsupported parameter 5161 [ 176.181143][ T8753] Bluetooth: hci0: unsupported parameter 8192 [ 176.181171][ T8753] Bluetooth: hci0: unsupported parameter 5161 [ 176.181184][ T8753] Bluetooth: hci0: unsupported parameter 8192 [ 176.439332][ T8780] __nla_validate_parse: 9 callbacks suppressed [ 176.439353][ T8780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.771'. [ 176.442580][ T8780] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 176.495708][ T8786] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 176.680555][ T8801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.775'. [ 176.681056][ T8801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.775'. [ 176.681577][ T8801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.775'. [ 176.713673][ T8801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.775'. [ 176.714232][ T8801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.775'. [ 176.732029][ T8801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.775'. [ 176.743950][ T8793] netlink: 104 bytes leftover after parsing attributes in process `syz.2.775'. [ 176.753246][ T8801] netlink: 104 bytes leftover after parsing attributes in process `syz.2.775'. [ 176.753872][ T8801] netlink: 104 bytes leftover after parsing attributes in process `syz.2.775'. [ 176.785982][ T8796] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 176.790800][ T8796] bond4 (unregistering): Released all slaves [ 177.051756][ T8813] 8021q: adding VLAN 0 to HW filter on device .` [ 177.118046][ T8813] A link change request failed with some changes committed already. Interface ÿÿÿÿÿÿ may have been left with an inconsistent configuration, please check. [ 177.178135][ T8822] tipc: Enabling of bearer rejected, failed to enable media [ 177.743814][ T8850] netlink: 'syz.4.791': attribute type 10 has an invalid length. [ 177.783378][ T8850] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.792642][ T8850] .`: (slave team0): Enslaving as an active interface with an up link [ 178.126858][ T8862] xt_cgroup: path and classid specified [ 178.651323][ T8885] xt_CT: No such helper "snmp_trap" [ 179.035352][ T8912] vlan0: entered promiscuous mode [ 179.035376][ T8912] bond0: entered promiscuous mode [ 179.192762][ T8926] syzkaller0: entered promiscuous mode [ 179.192792][ T8926] syzkaller0: entered allmulticast mode [ 179.236300][ T8920] nbd: illegal input index 65508 [ 180.988155][ T8955] veth0: entered promiscuous mode [ 181.005768][ T8956] veth0: left promiscuous mode [ 181.119242][ T8961] netlink: 'syz.3.825': attribute type 2 has an invalid length. [ 181.613226][ T8987] __nla_validate_parse: 68 callbacks suppressed [ 181.613250][ T8987] netlink: 76 bytes leftover after parsing attributes in process `syz.2.837'. [ 181.627812][ T8996] netlink: 36 bytes leftover after parsing attributes in process `syz.0.836'. [ 182.031839][ T9016] netlink: 72 bytes leftover after parsing attributes in process `syz.1.842'. [ 182.063993][ T9016] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.064211][ T9016] bridge0: port 2(bridge_slave_1) entered listening state [ 182.065105][ T9016] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.065262][ T9016] bridge0: port 1(bridge_slave_0) entered listening state [ 182.229152][ T9028] netlink: 36 bytes leftover after parsing attributes in process `syz.2.847'. [ 182.427459][ T9035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.850'. [ 182.535292][ T9040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.850'. [ 182.941699][ T9057] netlink: 'syz.4.855': attribute type 1 has an invalid length. [ 182.982138][ T9057] bond4: entered promiscuous mode [ 182.982584][ T9057] 8021q: adding VLAN 0 to HW filter on device bond4 [ 183.021075][ T9057] 8021q: adding VLAN 0 to HW filter on device bond4 [ 183.022997][ T9057] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 183.023019][ T9057] bond4: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 183.065892][ T9057] bond4: (slave xfrm1): making interface the new active one [ 183.065922][ T9057] xfrm1: entered promiscuous mode [ 183.072657][ T9057] xfrm1: left promiscuous mode [ 183.309742][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.859'. [ 183.533029][ T9085] netlink: 44 bytes leftover after parsing attributes in process `syz.4.863'. [ 183.742692][ T9097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.867'. [ 183.742718][ T9097] netlink: 24 bytes leftover after parsing attributes in process `syz.2.867'. [ 184.018971][ T9117] sctp: [Deprecated]: syz.2.872 (pid 9117) Use of struct sctp_assoc_value in delayed_ack socket option. [ 184.018971][ T9117] Use struct sctp_sack_info instead [ 184.296157][ T9126] netlink: 'syz.2.876': attribute type 3 has an invalid length. [ 184.623770][ T9142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.682766][ T9148] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 184.683687][ T9148] Bluetooth: hci0: load_link_keys: too big key_count value 5120 [ 184.812689][ T9156] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 184.813446][ T9157] netlink: 'syz.3.885': attribute type 1 has an invalid length. [ 184.962192][ T9168] xt_l2tp: v2 doesn't support IP mode [ 185.002732][ T9171] team0: No ports can be present during mode change [ 185.274974][ T3344] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.275024][ T3344] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.275062][ T3344] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.275099][ T3344] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.520187][ T9194] IPVS: Unknown mcast interface: dvmrp0 [ 185.576007][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 185.872736][ T9209] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 186.835858][ T9263] __nla_validate_parse: 42 callbacks suppressed [ 186.835880][ T9263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.908'. [ 187.001905][ T9277] netlink: 24 bytes leftover after parsing attributes in process `syz.4.913'. [ 187.002247][ T9272] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 187.173021][ T9268] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.204103][ T9268] bond1: entered promiscuous mode [ 187.204292][ T9268] bond1: entered allmulticast mode [ 187.218728][ T9268] bond0: (slave bond1): Enslaving as an active interface with an up link [ 187.772087][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.918'. [ 188.017779][ T9312] openvswitch: netlink: Port 536870913 exceeds max allowable 65535 [ 188.155144][ T9316] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 188.198998][ T9316] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 188.275230][ T9316] TC_ACT_REPEAT abuse ? [ 188.360739][ T9331] netlink: 14 bytes leftover after parsing attributes in process `syz.2.925'. [ 188.360776][ T9331] netlink: 36 bytes leftover after parsing attributes in process `syz.2.925'. [ 188.470753][ T9331] netlink: 14 bytes leftover after parsing attributes in process `syz.2.925'. [ 188.871536][ T9357] netlink: 'syz.1.928': attribute type 2 has an invalid length. [ 188.884200][ T9349] netlink: 'syz.1.928': attribute type 1 has an invalid length. [ 188.995446][ T9349] 8021q: adding VLAN 0 to HW filter on device bond5 [ 189.130753][ T9372] netlink: 'syz.1.934': attribute type 20 has an invalid length. [ 189.130779][ T9372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.934'. [ 189.234060][ T9372] netlink: 'syz.1.934': attribute type 20 has an invalid length. [ 189.234086][ T9372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.934'. [ 190.025783][ T9396] netlink: 64 bytes leftover after parsing attributes in process `syz.0.938'. [ 190.115182][ T9405] netlink: 'syz.2.939': attribute type 3 has an invalid length. [ 190.115208][ T9405] netlink: 32 bytes leftover after parsing attributes in process `syz.2.939'. [ 190.328374][ T9415] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 190.513822][ T9431] x_tables: duplicate underflow at hook 2 [ 190.856472][ T9451] openvswitch: netlink: Missing key (keys=40, expected=100) [ 190.862546][ T9451] netlink: 'syz.0.955': attribute type 1 has an invalid length. [ 190.862566][ T9451] netlink: 'syz.0.955': attribute type 1 has an invalid length. [ 191.057971][ T9455] 8021q: adding VLAN 0 to HW filter on device bond5 [ 191.058907][ T9455] bridge0: port 3(bond5) entered blocking state [ 191.059114][ T9455] bridge0: port 3(bond5) entered disabled state [ 191.059255][ T9455] bond5: entered allmulticast mode [ 191.062414][ T9455] bond5: entered promiscuous mode [ 191.063591][ T9455] bridge0: port 3(bond5) entered blocking state [ 191.063713][ T9455] bridge0: port 3(bond5) entered forwarding state [ 191.081152][ T9465] netlink: 'syz.1.958': attribute type 1 has an invalid length. [ 191.222486][ T9470] 8021q: adding VLAN 0 to HW filter on device bond6 [ 191.272034][ T9468] bond6: (slave geneve2): making interface the new active one [ 191.286058][ T9468] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 191.312584][ T1290] bridge0: port 3(bond5) entered disabled state [ 191.344950][ T1279] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 191.366943][ T1279] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 191.366992][ T1279] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 191.367030][ T1279] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 191.532107][ T9487] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 191.662751][ T5643] Bluetooth: hci4: unexpected event for opcode 0x0c6d [ 191.949064][ T9507] netlink: 'syz.2.968': attribute type 8 has an invalid length. [ 191.949085][ T9507] __nla_validate_parse: 4 callbacks suppressed [ 191.949098][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.968'. [ 191.972008][ T9507] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.974312][ T9507] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.036773][ T9519] netlink: 'syz.2.968': attribute type 8 has an invalid length. [ 192.036796][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.968'. [ 192.065953][ T9512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.269689][ T1290] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.270616][ T1290] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.270659][ T1290] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.271912][ T1290] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.691397][ T9562] openvswitch: netlink: Flow key attr not present in new flow. [ 192.760905][ T9563] netlink: 28 bytes leftover after parsing attributes in process `syz.1.978'. [ 192.760946][ T9563] netlink: 28 bytes leftover after parsing attributes in process `syz.1.978'. [ 193.049029][ T9580] syzkaller0: entered promiscuous mode [ 193.049055][ T9580] syzkaller0: entered allmulticast mode [ 193.408767][ T9598] bond5: option resend_igmp: invalid value (32767) [ 193.408795][ T9598] bond5: option resend_igmp: allowed values 0 - 255 [ 193.413482][ T9598] bond5 (unregistering): Released all slaves [ 193.553309][ T9603] bond5: option resend_igmp: invalid value (32767) [ 193.553335][ T9603] bond5: option resend_igmp: allowed values 0 - 255 [ 193.592200][ T9603] bond5 (unregistering): Released all slaves [ 193.720703][ T9621] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 193.824615][ T9623] netlink: 52 bytes leftover after parsing attributes in process `syz.2.992'. [ 193.835675][ T9623] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.835825][ T9623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.836168][ T9623] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.836304][ T9623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.840180][ T9623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.992'. [ 193.840622][ T9623] netlink: 52 bytes leftover after parsing attributes in process `syz.2.992'. [ 193.901796][ T9627] FAULT_INJECTION: forcing a failure. [ 193.901796][ T9627] name failslab, interval 1, probability 0, space 0, times 0 [ 193.901828][ T9627] CPU: 0 UID: 0 PID: 9627 Comm: syz.1.993 Not tainted syzkaller #0 PREEMPT(full) [ 193.901852][ T9627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 193.901865][ T9627] Call Trace: [ 193.901873][ T9627] [ 193.901882][ T9627] dump_stack_lvl+0xe8/0x150 [ 193.901923][ T9627] should_fail_ex+0x3eb/0x540 [ 193.901957][ T9627] should_failslab+0xa8/0x100 [ 193.901993][ T9627] __kmalloc_cache_noprof+0x9e/0x600 [ 193.902021][ T9627] ? __raw_spin_lock_init+0x45/0x100 [ 193.902042][ T9627] ? ovs_flow_cmd_new+0x317/0xea0 [ 193.902066][ T9627] ? ovs_flow_cmd_new+0x317/0xea0 [ 193.902099][ T9627] ovs_flow_cmd_new+0x317/0xea0 [ 193.902128][ T9627] ? __kasan_kmalloc+0x93/0xb0 [ 193.902164][ T9627] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 193.902246][ T9627] ? __kmalloc_noprof+0x387/0x710 [ 193.902277][ T9627] ? __nla_parse+0x40/0x60 [ 193.902311][ T9627] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 193.902338][ T9627] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 193.902372][ T9627] genl_family_rcv_msg_doit+0x233/0x340 [ 193.902404][ T9627] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 193.902445][ T9627] ? bpf_lsm_capable+0x9/0x20 [ 193.902464][ T9627] ? security_capable+0x7e/0x2c0 [ 193.902505][ T9627] genl_rcv_msg+0x614/0x7a0 [ 193.902537][ T9627] ? __pfx_genl_rcv_msg+0x10/0x10 [ 193.902561][ T9627] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 193.902603][ T9627] netlink_rcv_skb+0x226/0x4a0 [ 193.902649][ T9627] ? __pfx_genl_rcv_msg+0x10/0x10 [ 193.902676][ T9627] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 193.902726][ T9627] ? down_read+0x2b9/0x320 [ 193.902760][ T9627] genl_rcv+0x28/0x40 [ 193.902781][ T9627] netlink_unicast+0x8ef/0xa80 [ 193.902831][ T9627] netlink_sendmsg+0x7f0/0xb20 [ 193.902871][ T9627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.902909][ T9627] ? aa_sock_msg_perm+0x144/0x210 [ 193.902937][ T9627] ? apparmor_socket_sendmsg+0x98/0x360 [ 193.902972][ T9627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.903004][ T9627] sock_sendmsg_nosec+0x14e/0x190 [ 193.903038][ T9627] ____sys_sendmsg+0x54e/0x850 [ 193.903069][ T9627] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.903104][ T9627] ? import_iovec+0x73/0xa0 [ 193.903138][ T9627] ___sys_sendmsg+0x2a5/0x360 [ 193.903159][ T9627] ? __lock_acquire+0x747/0x2de0 [ 193.903194][ T9627] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.903262][ T9627] ? __fget_files+0x3a2/0x420 [ 193.903289][ T9627] ? __fget_files+0x2a/0x420 [ 193.903327][ T9627] __x64_sys_sendmsg+0x1b1/0x290 [ 193.903354][ T9627] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 193.903405][ T9627] do_syscall_64+0x166/0x520 [ 193.903430][ T9627] ? trace_irq_disable+0x3b/0x140 [ 193.903461][ T9627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.903484][ T9627] ? clear_bhb_loop+0x70/0xc0 [ 193.903512][ T9627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.903534][ T9627] RIP: 0033:0x7fb099d9fb19 [ 193.903555][ T9627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.903573][ T9627] RSP: 002b:00007fb09ac6b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.903596][ T9627] RAX: ffffffffffffffda RBX: 00007fb09a025fa0 RCX: 00007fb099d9fb19 [ 193.903613][ T9627] RDX: 0000000004008094 RSI: 00002000000001c0 RDI: 0000000000000003 [ 193.903634][ T9627] RBP: 00007fb09ac6b090 R08: 0000000000000000 R09: 0000000000000000 [ 193.903648][ T9627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.903660][ T9627] R13: 00007fb09a026038 R14: 00007fb09a025fa0 R15: 00007ffeac384408 [ 193.903698][ T9627] [ 194.283734][ T9630] netlink: 5740 bytes leftover after parsing attributes in process `syz.0.995'. [ 194.458542][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.526242][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.624712][ T9658] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 194.719349][ T9664] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1005'. [ 194.766532][ T9664] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1005'. [ 194.966709][ T5647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.989288][ T9671] validate_nla: 1 callbacks suppressed [ 194.989310][ T9671] netlink: 'syz.2.1005': attribute type 29 has an invalid length. [ 195.126713][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.126760][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.126796][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.126832][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.343098][ T9680] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 195.647425][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.748361][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.749167][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.764567][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.994365][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.084580][ T9695] syz.0.1014 (9695) used greatest stack depth: 17992 bytes left [ 196.315231][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.388928][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.390902][ T9717] netlink: 'syz.0.1022': attribute type 1 has an invalid length. [ 196.477281][ T9717] 8021q: adding VLAN 0 to HW filter on device bond2 [ 196.735109][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.767562][ T1279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.012550][ T9759] __nla_validate_parse: 3 callbacks suppressed [ 197.012573][ T9759] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1028'. [ 197.784525][ T9765] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1032'. [ 197.971262][ T9785] syz.2.1036: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 197.971510][ T9785] CPU: 0 UID: 0 PID: 9785 Comm: syz.2.1036 Not tainted syzkaller #0 PREEMPT(full) [ 197.971536][ T9785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 197.971550][ T9785] Call Trace: [ 197.971558][ T9785] [ 197.971568][ T9785] dump_stack_lvl+0xe8/0x150 [ 197.971612][ T9785] warn_alloc+0x24d/0x270 [ 197.971639][ T9785] ? stack_depot_save_flags+0x33/0x810 [ 197.971676][ T9785] ? __pfx_warn_alloc+0x10/0x10 [ 197.971701][ T9785] ? kasan_save_track+0x4f/0x80 [ 197.971730][ T9785] ? __kasan_kmalloc+0x93/0xb0 [ 197.971762][ T9785] ? xsk_init_queue+0x8a/0xe0 [ 197.971785][ T9785] ? xsk_setsockopt+0x52a/0x960 [ 197.971809][ T9785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.971848][ T9785] __vmalloc_node_range_noprof+0x12c/0x16f0 [ 197.971908][ T9785] ? rcu_is_watching+0x16/0xb0 [ 197.971948][ T9785] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 197.971973][ T9785] ? __kmalloc_cache_noprof+0x31c/0x600 [ 197.972001][ T9785] ? __kmalloc_cache_noprof+0x148/0x600 [ 197.972028][ T9785] ? xskq_create+0x56/0x220 [ 197.972059][ T9785] xskq_create+0x148/0x220 [ 197.972086][ T9785] ? xsk_init_queue+0x8a/0xe0 [ 197.972113][ T9785] xsk_init_queue+0x8a/0xe0 [ 197.972141][ T9785] xsk_setsockopt+0x52a/0x960 [ 197.972169][ T9785] ? __pfx_xsk_setsockopt+0x10/0x10 [ 197.972193][ T9785] ? __pfx_aa_sk_perm+0x10/0x10 [ 197.972256][ T9785] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 197.972287][ T9785] ? __pfx_xsk_setsockopt+0x10/0x10 [ 197.972313][ T9785] do_sock_setsockopt+0x17c/0x1b0 [ 197.972343][ T9785] __x64_sys_setsockopt+0x13d/0x1b0 [ 197.972373][ T9785] do_syscall_64+0x166/0x520 [ 197.972400][ T9785] ? trace_irq_disable+0x3b/0x140 [ 197.972433][ T9785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.972457][ T9785] ? clear_bhb_loop+0x70/0xc0 [ 197.972486][ T9785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.972509][ T9785] RIP: 0033:0x7fe7f439fb19 [ 197.972537][ T9785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.972558][ T9785] RSP: 002b:00007fe7f5312028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 197.972581][ T9785] RAX: ffffffffffffffda RBX: 00007fe7f4625fa0 RCX: 00007fe7f439fb19 [ 197.972598][ T9785] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 197.972612][ T9785] RBP: 00007fe7f4437b70 R08: 0000000000000004 R09: 0000000000000000 [ 197.972626][ T9785] R10: 0000200000000780 R11: 0000000000000246 R12: 0000000000000000 [ 197.972641][ T9785] R13: 00007fe7f4626038 R14: 00007fe7f4625fa0 R15: 00007ffd3420dbd8 [ 197.972678][ T9785] [ 197.972697][ T9785] Mem-Info: [ 197.972708][ T9785] active_anon:5319 inactive_anon:0 isolated_anon:0 [ 197.972708][ T9785] active_file:0 inactive_file:43354 isolated_file:0 [ 197.972708][ T9785] unevictable:0 dirty:60 writeback:0 [ 197.972708][ T9785] slab_reclaimable:11734 slab_unreclaimable:107082 [ 197.972708][ T9785] mapped:29263 shmem:522 pagetables:1128 [ 197.972708][ T9785] sec_pagetables:0 bounce:0 [ 197.972708][ T9785] kernel_misc_reclaimable:0 [ 197.972708][ T9785] free:1276524 free_pcp:10500 free_cma:0 [ 197.972773][ T9785] Node 0 active_anon:21276kB inactive_anon:0kB active_file:0kB inactive_file:173212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117052kB dirty:232kB writeback:0kB shmem:2088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12576kB pagetables:4364kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 197.972838][ T9785] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 197.972899][ T9785] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 197.972965][ T9785] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 197.973007][ T9785] Node 0 DMA32 free:1153372kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:21276kB inactive_anon:0kB active_file:0kB inactive_file:173212kB unevictable:0kB writepending:232kB zspages:0kB present:3129332kB managed:2523088kB mlocked:0kB bounce:0kB free_pcp:40300kB local_pcp:19984kB free_cma:0kB [ 197.973074][ T9785] lowmem_reserve[]: 0 0 1 1 1 [ 197.973113][ T9785] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1660kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 197.973278][ T9785] lowmem_reserve[]: 0 0 0 0 0 [ 197.973321][ T9785] Node 1 Normal free:3937364kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:8kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:1696kB local_pcp:0kB free_cma:0kB [ 197.973391][ T9785] lowmem_reserve[]: 0 0 0 0 0 [ 197.973431][ T9785] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 197.973573][ T9785] Node 0 DMA32: 1219*4kB (UME) 480*8kB (UME) 179*16kB (UM) 115*32kB (UM) 76*64kB (UME) 45*128kB (UM) 12*256kB (UME) 14*512kB (UME) 3*1024kB (ME) 8*2048kB (UME) 268*4096kB (UM) = 1153308kB [ 197.973765][ T9785] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 197.973877][ T9785] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 2*16kB (UM) 3*32kB (UM) 3*64kB (UM) 2*128kB (UM) 6*256kB (UM) 2*512kB (M) 2*1024kB (UM) 0*2048kB 960*4096kB (M) = 3937364kB [ 197.974057][ T9785] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 197.974077][ T9785] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 197.974096][ T9785] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 197.974115][ T9785] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 197.974134][ T9785] 43872 total pagecache pages [ 197.974147][ T9785] 0 pages in swap cache [ 197.974155][ T9785] Free swap = 124996kB [ 197.974164][ T9785] Total swap = 124996kB [ 197.974173][ T9785] 2097051 pages RAM [ 197.974181][ T9785] 0 pages HighMem/MovableOnly [ 197.974190][ T9785] 434248 pages reserved [ 197.974206][ T9785] 0 pages cma reserved [ 199.199782][ T9820] netlink: 'syz.3.1047': attribute type 1 has an invalid length. [ 199.199807][ T9820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1047'. [ 199.393647][ T9825] tunl0: entered promiscuous mode [ 199.424461][ T9825] netlink: 'syz.1.1044': attribute type 3 has an invalid length. [ 199.424484][ T9825] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1044'. [ 199.476547][ T9835] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1050'. [ 199.634676][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1051'. [ 199.634714][ T9840] netlink: 'syz.4.1051': attribute type 30 has an invalid length. [ 199.687436][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1051'. [ 199.687482][ T9842] netlink: 'syz.4.1051': attribute type 30 has an invalid length. [ 199.753532][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1051'. [ 199.753569][ T9846] netlink: 'syz.4.1051': attribute type 30 has an invalid length. [ 199.753850][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1051'. [ 199.753871][ T9844] netlink: 'syz.4.1051': attribute type 30 has an invalid length. [ 199.882605][ T9848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1052'. [ 200.577125][ T9879] net_ratelimit: 13 callbacks suppressed [ 200.577149][ T9879] openvswitch: netlink: Geneve option length err (len 352, max 255). [ 201.107840][ T9888] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.108360][ T9888] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.136749][ T9889] tipc: Enabled bearer , priority 0 [ 201.147972][ T9889] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 201.197243][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.260931][ T9887] tipc: Disabling bearer [ 201.355008][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.358443][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.473263][ T9905] sch_tbf: burst 0 is lower than device gre0 mtu (1500) ! [ 201.895299][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.980417][ T9935] syzkaller1: entered promiscuous mode [ 201.980442][ T9935] syzkaller1: entered allmulticast mode [ 202.227785][ T9941] xt_bpf: check failed: parse error [ 202.297379][ T3344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.374994][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.427675][ T5647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.515938][ T9949] __nla_validate_parse: 7 callbacks suppressed [ 202.515969][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1079'. [ 202.762715][ T9957] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1083'. [ 202.762741][ T9957] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1083'. [ 203.150667][ T9976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1089'. [ 203.229701][ T9979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1089'. [ 203.376287][ T9999] sctp: [Deprecated]: syz.1.1092 (pid 9999) Use of int in maxseg socket option. [ 203.376287][ T9999] Use struct sctp_assoc_value instead [ 203.395992][ T1273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.414937][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.474302][ T9999] bridge_slave_1: left allmulticast mode [ 203.474329][ T9999] bridge_slave_1: left promiscuous mode [ 203.474603][ T9999] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.531270][ T9999] bridge_slave_0: left allmulticast mode [ 203.531299][ T9999] bridge_slave_0: left promiscuous mode [ 203.531538][ T9999] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.771768][T10014] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 203.850324][T10014] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1095'. [ 203.979597][T10019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1097'. [ 204.077951][T10025] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1098'. [ 204.108431][T10032] netlink: 'syz.4.1101': attribute type 12 has an invalid length. [ 204.108453][T10032] netlink: 'syz.4.1101': attribute type 29 has an invalid length. [ 204.108466][T10032] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1101'. [ 204.233933][T10036] batman_adv: batadv0: Adding interface: syzkaller0 [ 204.233950][T10036] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.233978][T10036] batman_adv: batadv0: Interface activated: syzkaller0 [ 204.297492][T10035] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 204.338892][T10035] batman_adv: batadv0: Removing interface: syzkaller0 [ 204.390558][T10042] syz_tun: entered allmulticast mode [ 204.460856][T10041] syz_tun: left allmulticast mode [ 204.490539][T10051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1108'. [ 205.001687][T10085] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.570290][T10126] syzkaller1: entered promiscuous mode [ 205.570316][T10126] syzkaller1: entered allmulticast mode [ 205.605056][ T1273] net_ratelimit: 5 callbacks suppressed [ 205.605079][ T1273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.606930][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.802893][T10138] bond7: entered promiscuous mode [ 205.804019][T10138] bond7: entered allmulticast mode [ 205.804530][T10138] 8021q: adding VLAN 0 to HW filter on device bond7 [ 205.834162][T10142] netlink: 'syz.4.1132': attribute type 1 has an invalid length. [ 205.975282][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.980785][ T5369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.991253][T10142] 8021q: adding VLAN 0 to HW filter on device bond5 [ 206.091871][T10143] bond5: (slave veth9): Enslaving as a backup interface with a down link [ 206.418204][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.629074][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.715019][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.283477][T10194] 0: reclassify loop, rule prio 0, protocol 03 [ 207.504957][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.597856][T10215] __nla_validate_parse: 4 callbacks suppressed [ 207.597876][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1157'. [ 207.647477][T10225] ip_tables: iptables: counters copy to user failed while replacing table [ 207.898268][T10237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1163'. [ 208.323194][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1170'. [ 208.419402][T10276] syzkaller1: entered allmulticast mode [ 208.420438][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1171'. [ 208.571274][T10279] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1174'. [ 208.744570][T10291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1177'. [ 208.817514][T10291] netlink: 316 bytes leftover after parsing attributes in process `syz.1.1177'. [ 208.821061][T10291] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1177'. [ 208.821093][T10291] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1177'. [ 209.610366][T10328] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1189'. [ 210.443925][T10323] netlink: 'syz.2.1186': attribute type 1 has an invalid length. [ 210.797196][ T29] net_ratelimit: 13 callbacks suppressed [ 210.797238][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.834342][T10378] netlink: 'syz.4.1203': attribute type 2 has an invalid length. [ 210.859523][T10381] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 210.965494][T10386] netlink: 'syz.1.1205': attribute type 1 has an invalid length. [ 211.016215][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.089876][T10388] ip6gretap0: entered allmulticast mode [ 211.694680][T10418] xt_hashlimit: overflow, try lower: 0/0 [ 211.851696][T10426] openvswitch: netlink: Message has 33 unknown bytes. [ 211.904130][ T5640] Bluetooth: hci3: command 0x0406 tx timeout [ 211.904173][ T5640] Bluetooth: hci1: command 0x0406 tx timeout [ 211.904265][ T5643] Bluetooth: hci2: command 0x0406 tx timeout [ 212.093667][ T5638] Bluetooth: hci1: unexpected cc 0x1009 length: 8 > 7 [ 212.093703][ T5638] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 212.108987][T10433] veth0: entered promiscuous mode [ 212.109203][T10434] veth0: left promiscuous mode [ 212.820572][T10470] netlink: 'syz.3.1233': attribute type 9 has an invalid length. [ 212.923679][T10473] syzkaller0: entered promiscuous mode [ 212.923706][T10473] syzkaller0: entered allmulticast mode [ 213.032588][T10457] xt_CT: You must specify a L4 protocol and not use inversions on it [ 213.043778][T10482] netlink: 'syz.3.1235': attribute type 29 has an invalid length. [ 213.232301][T10487] __nla_validate_parse: 11 callbacks suppressed [ 213.232324][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1238'. [ 213.468605][T10494] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 213.868026][T10518] netlink: 'syz.2.1246': attribute type 1 has an invalid length. [ 213.936757][T10526] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1248'. [ 213.940118][T10525] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1246'. [ 214.002412][T10518] 8021q: adding VLAN 0 to HW filter on device bond7 [ 214.216054][T10537] netlink: 1504 bytes leftover after parsing attributes in process `syz.1.1250'. [ 214.277895][T10538] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1251'. [ 214.278104][T10540] ieee802154 phy1 wpan1: encryption failed: -90 [ 214.280162][T10538] openvswitch: netlink: Geneve opt len 89 is not a multiple of 4. [ 214.341077][T10536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.341756][T10540] netlink: 'syz.3.1252': attribute type 2 has an invalid length. [ 214.394481][T10540] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1252'. [ 214.394517][T10540] netlink: 'syz.3.1252': attribute type 6 has an invalid length. [ 214.430793][T10544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1253'. [ 214.654203][T10550] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1256'. [ 215.071100][T10560] syzkaller0: entered promiscuous mode [ 215.071128][T10560] syzkaller0: entered allmulticast mode [ 215.122267][T10566] netlink: 'syz.2.1258': attribute type 1 has an invalid length. [ 215.128505][T10569] netlink: 'syz.2.1258': attribute type 1 has an invalid length. [ 215.210573][T10566] 8021q: adding VLAN 0 to HW filter on device bond8 [ 215.239477][T10559] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 215.256968][T10559] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 215.613432][T10589] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 215.801187][T10590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1262'. [ 215.922351][T10604] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1268'. [ 216.074371][T10609] ip_tables: iptables: counters copy to user failed while replacing table [ 216.096849][T10609] netlink: 'syz.1.1270': attribute type 1 has an invalid length. [ 216.723714][T10637] netlink: 'syz.2.1275': attribute type 14 has an invalid length. [ 217.075609][T10652] ip_tables: iptables: counters copy to user failed while replacing table [ 217.103500][T10653] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 217.125806][T10653] netlink: 'syz.1.1281': attribute type 1 has an invalid length. [ 217.332673][T10657] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 217.332772][T10657] gretap0: entered promiscuous mode [ 217.332792][T10657] gretap0: entered allmulticast mode [ 217.555855][T10666] netlink: 'syz.3.1285': attribute type 3 has an invalid length. [ 217.583254][T10671] netlink: 'syz.2.1288': attribute type 83 has an invalid length. [ 218.099672][T10702] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 218.099761][T10702] gretap1: entered promiscuous mode [ 218.099779][T10702] gretap1: entered allmulticast mode [ 219.045023][T10753] __nla_validate_parse: 6 callbacks suppressed [ 219.045045][T10753] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1312'. [ 219.493816][T10783] raw_sendmsg: syz.2.1318 forgot to set AF_INET. Fix it! [ 219.901775][T10806] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1328'. [ 219.934131][T10808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1325'. [ 219.934539][T10809] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1329'. [ 219.942824][T10805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1327'. [ 219.942915][T10805] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1327'. [ 220.366720][T10830] netlink: 'syz.4.1334': attribute type 1 has an invalid length. [ 220.470659][T10826] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1334'. [ 220.617221][T10849] netlink: 'syz.4.1341': attribute type 2 has an invalid length. [ 220.620854][T10849] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1341'. [ 220.743140][ T1290] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 220.743806][T10857] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 220.791332][T10855] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1342'. [ 220.882715][T10855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1342'. [ 221.053673][T10872] netlink: 'syz.2.1347': attribute type 1 has an invalid length. [ 221.101491][T10872] 8021q: adding VLAN 0 to HW filter on device bond9 [ 221.158582][T10879] ip6t_rt: too many addresses specified [ 221.230791][T10880] Bluetooth: hci0: unsupported parameter 5135 [ 221.230814][T10880] Bluetooth: hci0: unsupported parameter 8192 [ 221.230828][T10880] Bluetooth: hci0: unsupported parameter 5135 [ 221.230842][T10880] Bluetooth: hci0: unsupported parameter 8192 [ 221.388052][T10895] sctp: [Deprecated]: syz.3.1353 (pid 10895) Use of int in max_burst socket option. [ 221.388052][T10895] Use struct sctp_assoc_value instead [ 221.903594][T10919] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 222.108695][T10927] batman_adv: batadv0: Adding interface: syzkaller0 [ 222.108714][T10927] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.108747][T10927] batman_adv: batadv0: Interface activated: syzkaller0 [ 222.158215][T10926] veth1_macvtap: left promiscuous mode [ 222.158244][T10926] macsec0: entered allmulticast mode [ 222.201733][T10926] veth1_macvtap: entered promiscuous mode [ 222.201760][T10926] veth1_macvtap: entered allmulticast mode [ 222.201847][T10926] macsec0: left allmulticast mode [ 222.201862][T10926] veth1_macvtap: left allmulticast mode [ 222.289767][T10920] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 222.327372][T10920] batman_adv: batadv0: Removing interface: syzkaller0 [ 222.442603][T10946] netlink: 'syz.2.1367': attribute type 1 has an invalid length. [ 222.465922][T10947] netlink: 'syz.2.1367': attribute type 1 has an invalid length. [ 222.999772][T10973] netlink: 'syz.0.1373': attribute type 6 has an invalid length. [ 223.226007][T10985] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 223.645167][T11004] netlink: 'syz.0.1379': attribute type 4 has an invalid length. [ 223.934465][T11025] Cannot find add_set index 0 as target [ 223.956962][T11029] Cannot find add_set index 0 as target [ 224.130275][T11044] __nla_validate_parse: 16 callbacks suppressed [ 224.130298][T11044] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1391'. [ 224.363256][T11053] xt_hashlimit: size too large, truncated to 1048576 [ 224.855043][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 224.862052][T11081] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1404'. [ 224.864142][T11081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1404'. [ 224.864205][T11081] bridge_slave_1: left allmulticast mode [ 224.864220][T11081] bridge_slave_1: left promiscuous mode [ 224.864388][T11081] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.900146][T11081] bridge_slave_0: left allmulticast mode [ 224.900174][T11081] bridge_slave_0: left promiscuous mode [ 224.904195][T11081] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.820492][T11116] tipc: Started in network mode [ 225.820525][T11116] tipc: Node identity dee84bb587e2, cluster identity 4711 [ 225.820743][T11116] tipc: Enabled bearer , priority 0 [ 225.881713][T11126] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1411'. [ 226.031802][T11135] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1413'. [ 226.031840][T11135] netlink: 'syz.1.1413': attribute type 7 has an invalid length. [ 226.031854][T11135] netlink: 'syz.1.1413': attribute type 8 has an invalid length. [ 226.031883][T11135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1413'. [ 226.080467][T11116] syzkaller0: entered promiscuous mode [ 226.080494][T11116] syzkaller0: entered allmulticast mode [ 226.097890][T11116] tipc: Resetting bearer [ 226.103736][T11126] 0·: renamed from hsr0 (while UP) [ 226.134079][T11126] 0·: entered allmulticast mode [ 226.134107][T11126] hsr_slave_0: entered allmulticast mode [ 226.134632][T11126] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 226.184718][T11145] tipc: Enabling of bearer rejected, no device for the media [ 226.280110][T11134] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1412'. [ 226.331496][T11147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1412'. [ 226.589698][T11145] syzkaller0: entered promiscuous mode [ 226.589727][T11145] syzkaller0: entered allmulticast mode [ 226.617617][T11115] tipc: Resetting bearer [ 228.200408][T11115] tipc: Disabling bearer [ 228.597219][T11178] netlink: 'syz.0.1418': attribute type 1 has an invalid length. [ 228.597288][T11178] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1418'. [ 228.597464][T11178] netlink: 'syz.0.1418': attribute type 1 has an invalid length. [ 228.597476][T11178] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1418'. [ 228.597573][T11178] netlink: 'syz.0.1418': attribute type 1 has an invalid length. [ 228.597676][T11178] netlink: 'syz.0.1418': attribute type 1 has an invalid length. [ 228.597775][T11178] netlink: 'syz.0.1418': attribute type 1 has an invalid length. [ 228.597872][T11178] netlink: 'syz.0.1418': attribute type 1 has an invalid length. [ 228.597967][T11178] netlink: 'syz.0.1418': attribute type 1 has an invalid length. [ 228.598118][T11178] netlink: 'syz.0.1418': attribute type 1 has an invalid length. [ 228.598311][T11178] netlink: 'syz.0.1418': attribute type 1 has an invalid length. [ 228.598418][T11178] netlink: 'syz.0.1418': attribute type 1 has an invalid length. [ 229.915332][ T29] tipc: Node number set to 1493846965 [ 230.076753][T11188] __nla_validate_parse: 31 callbacks suppressed [ 230.076777][T11188] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1420'. [ 230.370356][T11209] FAULT_INJECTION: forcing a failure. [ 230.370356][T11209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.370392][T11209] CPU: 0 UID: 0 PID: 11209 Comm: syz.2.1426 Not tainted syzkaller #0 PREEMPT(full) [ 230.370427][T11209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 230.370441][T11209] Call Trace: [ 230.370450][T11209] [ 230.370459][T11209] dump_stack_lvl+0xe8/0x150 [ 230.370501][T11209] should_fail_ex+0x3eb/0x540 [ 230.370535][T11209] _copy_from_user+0x2d/0xb0 [ 230.370565][T11209] ___sys_recvmsg+0x173/0x5a0 [ 230.370598][T11209] ? __pfx____sys_recvmsg+0x10/0x10 [ 230.370629][T11209] ? lock_acquire+0x115/0x350 [ 230.370676][T11209] ? __fget_files+0x2a/0x420 [ 230.370703][T11209] ? __fget_files+0x3a2/0x420 [ 230.370728][T11209] ? __fget_files+0x2a/0x420 [ 230.370760][T11209] ? fdget+0x1ac/0x250 [ 230.370795][T11209] do_recvmmsg+0x31a/0x800 [ 230.370831][T11209] ? __pfx_do_recvmmsg+0x10/0x10 [ 230.370872][T11209] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 230.370908][T11209] ? fdget+0x1ac/0x250 [ 230.370943][T11209] __x64_sys_recvmmsg+0x198/0x250 [ 230.370983][T11209] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 230.371024][T11209] do_syscall_64+0x166/0x520 [ 230.371050][T11209] ? trace_irq_disable+0x3b/0x140 [ 230.371082][T11209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.371106][T11209] ? clear_bhb_loop+0x70/0xc0 [ 230.371133][T11209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.371156][T11209] RIP: 0033:0x7fe7f439fb19 [ 230.371177][T11209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.371197][T11209] RSP: 002b:00007fe7f5312028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 230.371221][T11209] RAX: ffffffffffffffda RBX: 00007fe7f4625fa0 RCX: 00007fe7f439fb19 [ 230.371238][T11209] RDX: 0000000000000005 RSI: 0000200000004200 RDI: 0000000000000003 [ 230.371252][T11209] RBP: 00007fe7f5312090 R08: 0000000000000000 R09: 0000000000000000 [ 230.371266][T11209] R10: 0000000040000102 R11: 0000000000000246 R12: 0000000000000001 [ 230.371280][T11209] R13: 00007fe7f4626038 R14: 00007fe7f4625fa0 R15: 00007ffd3420dbd8 [ 230.371319][T11209] [ 230.959994][T11227] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1430'. [ 231.102011][T11234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1432'. [ 231.173945][T11244] macsec1: entered promiscuous mode [ 231.174174][T11244] macsec1: entered allmulticast mode [ 231.174196][T11244] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 231.174643][T11244] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 231.203743][T11244] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 232.497961][T11298] openvswitch: netlink: Key 24 has unexpected len 0 expected 4 [ 232.854962][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 233.320132][T11325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1459'. [ 233.328479][T11327] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1460'. [ 233.344519][T11326] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1460'. [ 233.415835][T11330] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 233.562380][T11330] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 234.108660][T11333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1459'. [ 234.351190][T11362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1465'. [ 234.639222][T11362] rxe_eth0 speed is unknown, defaulting to 1000 [ 234.907053][T11377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1471'. [ 235.017970][T11390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1471'. [ 235.821353][T11404] openvswitch: netlink: Message has -1 unknown bytes. [ 235.946418][T11406] veth1_macvtap: left promiscuous mode [ 236.400221][T11416] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1478'. [ 236.847550][T11429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1480'. [ 237.059199][T11431] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1481'. [ 237.094155][T11431] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1481'. [ 237.541973][T11441] validate_nla: 25 callbacks suppressed [ 237.541997][T11441] netlink: 'syz.1.1484': attribute type 5 has an invalid length. [ 238.075704][T11454] 0: reclassify loop, rule prio 0, protocol 03 [ 238.314963][T11463] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1491'. [ 238.470094][T11466] x_tables: unsorted underflow at hook 2 [ 239.521956][T11505] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 239.522045][T11505] gretap1: entered promiscuous mode [ 239.522064][T11505] gretap1: entered allmulticast mode [ 240.342886][T11526] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1507'. [ 240.697807][T11542] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1513'. [ 240.799841][T11544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1514'. [ 240.950270][T11553] x_tables: duplicate underflow at hook 2 [ 241.059669][T11553] ip_tables: iptables: counters copy to user failed while replacing table [ 241.139858][T11553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1516'. [ 241.212043][T11561] sock: sock_timestamping_bind_phc: sock not bind to device [ 242.615162][T11577] netlink: 'syz.1.1523': attribute type 2 has an invalid length. [ 242.682265][T11577] !;: entered promiscuous mode [ 242.727755][T11586] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1521'. [ 242.814280][T11587] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 243.028077][T11593] IPVS: set_ctl: invalid protocol: 255 172.20.20.12:20000 [ 243.155236][T11600] netlink: 'syz.0.1529': attribute type 1 has an invalid length. [ 243.374410][T11600] bond3: entered promiscuous mode [ 243.387654][T11600] 8021q: adding VLAN 0 to HW filter on device bond3 [ 243.545841][T11602] bond3: (slave bridge3): making interface the new active one [ 243.545869][T11602] bridge3: entered promiscuous mode [ 243.551375][T11602] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 243.632927][T11606] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 243.632958][T11606] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 244.272583][T11624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1535'. [ 245.013781][T11647] netlink: 'syz.0.1546': attribute type 1 has an invalid length. [ 245.103227][T11650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1546'. [ 245.167232][T11647] 8021q: adding VLAN 0 to HW filter on device bond4 [ 245.298789][T11655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1547'. [ 246.000298][T11670] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1552'. [ 246.048693][T11673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1551'. [ 246.048823][T11673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1551'. [ 246.048933][T11673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1551'. [ 246.049044][T11673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1551'. [ 246.049152][T11673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1551'. [ 246.401905][T11682] xt_ipcomp: unknown flags 1D [ 246.412745][T11682] netlink: 'syz.2.1555': attribute type 4 has an invalid length. [ 246.845912][T11695] nbd: socks must be embedded in a SOCK_ITEM attr [ 247.840007][T11734] __nla_validate_parse: 35 callbacks suppressed [ 247.840035][T11734] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1567'. [ 248.229494][T11744] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1571'. [ 248.854925][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 249.004614][T11767] 8021q: VLANs not supported on ip_vti0 [ 249.077721][T11771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1579'. [ 249.077754][T11771] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1579'. [ 249.499833][T11778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1582'. [ 249.760305][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1586'. [ 250.347025][T11807] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 250.952251][T11840] x_tables: duplicate underflow at hook 3 [ 250.963468][T11842] ip_tables: iptables: counters copy to user failed while replacing table [ 250.979074][T11842] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1601'. [ 251.141860][T11819] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 251.161084][T11819] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 251.574846][T11852] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1603'. [ 251.760881][T11855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1605'. [ 251.760907][T11855] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1605'. [ 252.369377][T11877] x_tables: unsorted underflow at hook 1 [ 253.200718][T11910] __nla_validate_parse: 1 callbacks suppressed [ 253.200740][T11910] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1623'. [ 253.229180][T11914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1623'. [ 253.237220][T11917] netlink: 'syz.4.1624': attribute type 1 has an invalid length. [ 253.256195][T11919] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1623'. [ 253.489315][T11917] bond6: (slave gretap2): making interface the new active one [ 253.528296][T11917] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 253.756908][T11933] bond1: option mode: unable to set because the bond device is up [ 253.863939][T11939] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1626'. [ 253.864291][T11938] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1626'. [ 253.995624][T11938] bond1 (unregistering): Released all slaves [ 254.453049][T11951] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1632'. [ 254.540510][T11953] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1633'. [ 255.183590][T11971] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1637'. [ 255.184220][T11975] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1637'. [ 255.335782][T11981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1640'. [ 255.373108][T11981] bridge0: port 1(syz_tun) entered blocking state [ 255.373613][T11981] bridge0: port 1(syz_tun) entered disabled state [ 255.374054][T11981] syz_tun: entered allmulticast mode [ 255.390423][T11981] syz_tun: entered promiscuous mode [ 255.406783][T11981] bridge0: port 1(syz_tun) entered blocking state [ 255.406908][T11981] bridge0: port 1(syz_tun) entered forwarding state [ 255.445156][T11974] 0ªî{X¹¦: renamed from eql (while UP) [ 255.509874][T11974] 0ªî{X¹¦: entered allmulticast mode [ 255.510456][T11974] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 255.742374][T11993] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.903773][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.343638][T12013] netlink: 'syz.3.1649': attribute type 2 has an invalid length. [ 256.373713][T12018] ip_tables: iptables: counters copy to user failed while replacing table [ 256.497326][T12024] netlink: 'syz.2.1652': attribute type 7 has an invalid length. [ 257.274419][T12047] netlink: 'syz.4.1661': attribute type 3 has an invalid length. [ 257.693928][T12067] netlink: 'syz.2.1669': attribute type 4 has an invalid length. [ 257.703863][T12068] netlink: 'syz.2.1669': attribute type 4 has an invalid length. [ 258.454139][T12090] ip6t_hbh: too many supported opts specified [ 258.490749][T12090] syzkaller0: left promiscuous mode [ 258.490773][T12090] syzkaller0: left allmulticast mode [ 258.606719][T12100] ip_tables: iptables: counters copy to user failed while replacing table [ 258.979083][T12102] syzkaller1: entered promiscuous mode [ 258.979966][T12102] syzkaller1: entered allmulticast mode [ 259.203036][T12116] __nla_validate_parse: 10 callbacks suppressed [ 259.203063][T12116] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1683'. [ 259.590898][T12135] FAULT_INJECTION: forcing a failure. [ 259.590898][T12135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.590933][T12135] CPU: 0 UID: 0 PID: 12135 Comm: syz.2.1685 Not tainted syzkaller #0 PREEMPT(full) [ 259.590961][T12135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 259.590991][T12135] Call Trace: [ 259.591000][T12135] [ 259.591010][T12135] dump_stack_lvl+0xe8/0x150 [ 259.591053][T12135] should_fail_ex+0x3eb/0x540 [ 259.591089][T12135] _copy_from_user+0x2d/0xb0 [ 259.591121][T12135] __sys_bpf+0x2e7/0xe00 [ 259.591154][T12135] ? __pfx___sys_bpf+0x10/0x10 [ 259.591191][T12135] ? __fget_files+0x2a/0x420 [ 259.591241][T12135] ? ksys_write+0x242/0x270 [ 259.591274][T12135] ? __pfx_ksys_write+0x10/0x10 [ 259.591312][T12135] __x64_sys_bpf+0xba/0xd0 [ 259.591349][T12135] do_syscall_64+0x166/0x520 [ 259.591376][T12135] ? trace_irq_disable+0x3b/0x140 [ 259.591408][T12135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.591431][T12135] ? clear_bhb_loop+0x70/0xc0 [ 259.591460][T12135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.591484][T12135] RIP: 0033:0x7fe7f439fb19 [ 259.591504][T12135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.591523][T12135] RSP: 002b:00007fe7f5312028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 259.591546][T12135] RAX: ffffffffffffffda RBX: 00007fe7f4625fa0 RCX: 00007fe7f439fb19 [ 259.591563][T12135] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 259.591578][T12135] RBP: 00007fe7f5312090 R08: 0000000000000000 R09: 0000000000000000 [ 259.591593][T12135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.591607][T12135] R13: 00007fe7f4626038 R14: 00007fe7f4625fa0 R15: 00007ffd3420dbd8 [ 259.591645][T12135] [ 259.929805][T12141] netlink: 193 bytes leftover after parsing attributes in process `syz.4.1687'. [ 259.946557][T12143] netlink: 'syz.1.1688': attribute type 10 has an invalid length. [ 260.442075][T12158] xt_hashlimit: size too large, truncated to 1048576 [ 260.443797][T12161] xt_hashlimit: size too large, truncated to 1048576 [ 261.233412][T12183] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1697'. [ 261.299842][T12194] FAULT_INJECTION: forcing a failure. [ 261.299842][T12194] name failslab, interval 1, probability 0, space 0, times 0 [ 261.299877][T12194] CPU: 0 UID: 0 PID: 12194 Comm: syz.2.1700 Not tainted syzkaller #0 PREEMPT(full) [ 261.299903][T12194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 261.299917][T12194] Call Trace: [ 261.299926][T12194] [ 261.299936][T12194] dump_stack_lvl+0xe8/0x150 [ 261.299979][T12194] should_fail_ex+0x3eb/0x540 [ 261.300014][T12194] should_failslab+0xa8/0x100 [ 261.300051][T12194] __kmalloc_cache_node_noprof+0xa5/0x620 [ 261.300084][T12194] ? __get_vm_area_node+0x155/0x2f0 [ 261.300106][T12194] ? __get_vm_area_node+0x155/0x2f0 [ 261.300137][T12194] __get_vm_area_node+0x155/0x2f0 [ 261.300168][T12194] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 261.300194][T12194] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 261.300219][T12194] ? lock_acquire+0x115/0x350 [ 261.300253][T12194] ? __lock_acquire+0x747/0x2de0 [ 261.300298][T12194] ? hook_capable+0x1c3/0x5e0 [ 261.300333][T12194] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 261.300372][T12194] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 261.300399][T12194] __vmalloc_noprof+0xd2/0x120 [ 261.300425][T12194] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 261.300451][T12194] bpf_prog_alloc_no_stats+0x47/0x550 [ 261.300472][T12194] ? bpf_prog_alloc+0x2a/0x1a0 [ 261.300497][T12194] bpf_prog_alloc+0x3c/0x1a0 [ 261.300523][T12194] bpf_prog_load+0x7f8/0x1c60 [ 261.300562][T12194] ? __pfx_bpf_prog_load+0x10/0x10 [ 261.300605][T12194] ? __might_fault+0xaf/0x130 [ 261.300637][T12194] __sys_bpf+0xd86/0xe00 [ 261.300670][T12194] ? __pfx___sys_bpf+0x10/0x10 [ 261.300705][T12194] ? __fget_files+0x2a/0x420 [ 261.300769][T12194] ? ksys_write+0x242/0x270 [ 261.300802][T12194] ? __pfx_ksys_write+0x10/0x10 [ 261.300839][T12194] __x64_sys_bpf+0xba/0xd0 [ 261.300876][T12194] do_syscall_64+0x166/0x520 [ 261.300903][T12194] ? trace_irq_disable+0x3b/0x140 [ 261.300935][T12194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.300959][T12194] ? clear_bhb_loop+0x70/0xc0 [ 261.300988][T12194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.301011][T12194] RIP: 0033:0x7fe7f439fb19 [ 261.301034][T12194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.301054][T12194] RSP: 002b:00007fe7f5312028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 261.301078][T12194] RAX: ffffffffffffffda RBX: 00007fe7f4625fa0 RCX: 00007fe7f439fb19 [ 261.301096][T12194] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 261.301110][T12194] RBP: 00007fe7f5312090 R08: 0000000000000000 R09: 0000000000000000 [ 261.301125][T12194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.301139][T12194] R13: 00007fe7f4626038 R14: 00007fe7f4625fa0 R15: 00007ffd3420dbd8 [ 261.301177][T12194] [ 261.301188][T12194] syz.2.1700: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 261.301262][T12194] CPU: 0 UID: 0 PID: 12194 Comm: syz.2.1700 Not tainted syzkaller #0 PREEMPT(full) [ 261.301286][T12194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 261.301299][T12194] Call Trace: [ 261.301307][T12194] [ 261.301316][T12194] dump_stack_lvl+0xe8/0x150 [ 261.301353][T12194] warn_alloc+0x24d/0x270 [ 261.301381][T12194] ? __kasan_kmalloc+0x22/0xb0 [ 261.301428][T12194] ? __pfx_warn_alloc+0x10/0x10 [ 261.301455][T12194] ? __get_vm_area_node+0x155/0x2f0 [ 261.301487][T12194] ? __get_vm_area_node+0x2a9/0x2f0 [ 261.301519][T12194] __vmalloc_node_range_noprof+0x396/0x16f0 [ 261.301547][T12194] ? lock_acquire+0x115/0x350 [ 261.301579][T12194] ? __lock_acquire+0x747/0x2de0 [ 261.301624][T12194] ? hook_capable+0x1c3/0x5e0 [ 261.301659][T12194] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 261.301697][T12194] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 261.301717][T12194] __vmalloc_noprof+0xd2/0x120 [ 261.301743][T12194] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 261.301769][T12194] bpf_prog_alloc_no_stats+0x47/0x550 [ 261.301790][T12194] ? bpf_prog_alloc+0x2a/0x1a0 [ 261.301815][T12194] bpf_prog_alloc+0x3c/0x1a0 [ 261.301841][T12194] bpf_prog_load+0x7f8/0x1c60 [ 261.301879][T12194] ? __pfx_bpf_prog_load+0x10/0x10 [ 261.301921][T12194] ? __might_fault+0xaf/0x130 [ 261.301953][T12194] __sys_bpf+0xd86/0xe00 [ 261.301986][T12194] ? __pfx___sys_bpf+0x10/0x10 [ 261.302022][T12194] ? __fget_files+0x2a/0x420 [ 261.302071][T12194] ? ksys_write+0x242/0x270 [ 261.302103][T12194] ? __pfx_ksys_write+0x10/0x10 [ 261.302140][T12194] __x64_sys_bpf+0xba/0xd0 [ 261.302177][T12194] do_syscall_64+0x166/0x520 [ 261.302203][T12194] ? trace_irq_disable+0x3b/0x140 [ 261.302234][T12194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.302258][T12194] ? clear_bhb_loop+0x70/0xc0 [ 261.302287][T12194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.302313][T12194] RIP: 0033:0x7fe7f439fb19 [ 261.302332][T12194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.302351][T12194] RSP: 002b:00007fe7f5312028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 261.302373][T12194] RAX: ffffffffffffffda RBX: 00007fe7f4625fa0 RCX: 00007fe7f439fb19 [ 261.302396][T12194] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 261.302410][T12194] RBP: 00007fe7f5312090 R08: 0000000000000000 R09: 0000000000000000 [ 261.302425][T12194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.302438][T12194] R13: 00007fe7f4626038 R14: 00007fe7f4625fa0 R15: 00007ffd3420dbd8 [ 261.302477][T12194] [ 261.504252][T12194] Mem-Info: [ 261.504271][T12194] active_anon:5345 inactive_anon:0 isolated_anon:0 [ 261.504271][T12194] active_file:0 inactive_file:43379 isolated_file:0 [ 261.504271][T12194] unevictable:0 dirty:68 writeback:0 [ 261.504271][T12194] slab_reclaimable:11788 slab_unreclaimable:109383 [ 261.504271][T12194] mapped:29293 shmem:506 pagetables:1119 [ 261.504271][T12194] sec_pagetables:0 bounce:0 [ 261.504271][T12194] kernel_misc_reclaimable:0 [ 261.504271][T12194] free:1274183 free_pcp:8793 free_cma:0 [ 261.504334][T12194] Node 0 active_anon:21380kB inactive_anon:0kB active_file:0kB inactive_file:173312kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117172kB dirty:272kB writeback:0kB shmem:2024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13540kB pagetables:4328kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 261.504398][T12194] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 261.504457][T12194] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 261.504524][T12194] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 261.504565][T12194] Node 0 DMA32 free:1145140kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:21380kB inactive_anon:0kB active_file:0kB inactive_file:173312kB unevictable:0kB writepending:272kB zspages:0kB present:3129332kB managed:2523088kB mlocked:0kB bounce:0kB free_pcp:32400kB local_pcp:16772kB free_cma:0kB [ 261.504633][T12194] lowmem_reserve[]: 0 0 1 1 1 [ 261.504669][T12194] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1660kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 261.568056][T12194] lowmem_reserve[]: 0 0 0 0 0 [ 261.568106][T12194] Node 1 Normal free:3936232kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:2768kB local_pcp:2768kB free_cma:0kB [ 261.568175][T12194] lowmem_reserve[]: 0 0 0 0 0 [ 261.568215][T12194] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 261.568343][T12194] Node 0 DMA32: 531*4kB (UME) 579*8kB (UME) 313*16kB (UME) 452*32kB (UM) 109*64kB (UME) 51*128kB (UM) 18*256kB (UME) 6*512kB (ME) 2*1024kB (M) 5*2048kB (ME) 265*4096kB (UM) = 1145140kB [ 261.568518][T12194] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 261.568627][T12194] Node 1 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 2*32kB (UM) 1*64kB (M) 1*128kB (M) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 0*2048kB 960*4096kB (M) = 3936284kB [ 261.568795][T12194] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 261.568815][T12194] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 261.568833][T12194] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 261.568860][T12194] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 261.568878][T12194] 43881 total pagecache pages [ 261.568887][T12194] 0 pages in swap cache [ 261.568895][T12194] Free swap = 124996kB [ 261.568904][T12194] Total swap = 124996kB [ 261.568913][T12194] 2097051 pages RAM [ 261.568921][T12194] 0 pages HighMem/MovableOnly [ 261.568929][T12194] 434248 pages reserved [ 261.568937][T12194] 0 pages cma reserved [ 261.892105][T12197] netlink: 'syz.4.1698': attribute type 6 has an invalid length. [ 262.550773][T12203] geneve3: entered promiscuous mode [ 262.550800][T12203] geneve3: entered allmulticast mode [ 262.570641][T11112] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 262.571551][T11112] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 262.571594][T11112] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 262.571630][T11112] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 262.571860][T12207] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1705'. [ 262.688384][T12215] Cannot find add_set index 0 as target [ 262.755965][T12217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1708'. [ 262.758566][T12217] syzkaller0: Caught tx_queue_len zero misconfig [ 262.787111][T12212] sctp: [Deprecated]: syz.3.1703 (pid 12212) Use of struct sctp_assoc_value in delayed_ack socket option. [ 262.787111][T12212] Use struct sctp_sack_info instead [ 263.123714][T12211] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1702'. [ 263.123747][T12211] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1702'. [ 263.124183][T12211] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 263.170503][T12213] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1702'. [ 263.170532][T12213] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1702'. [ 263.170933][T12213] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 263.380550][T12236] FAULT_INJECTION: forcing a failure. [ 263.380550][T12236] name failslab, interval 1, probability 0, space 0, times 0 [ 263.380583][T12236] CPU: 0 UID: 0 PID: 12236 Comm: syz.2.1713 Not tainted syzkaller #0 PREEMPT(full) [ 263.380607][T12236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 263.380620][T12236] Call Trace: [ 263.380628][T12236] [ 263.380637][T12236] dump_stack_lvl+0xe8/0x150 [ 263.380687][T12236] should_fail_ex+0x3eb/0x540 [ 263.380719][T12236] ? alloc_vmap_area+0x217/0x1410 [ 263.380740][T12236] should_failslab+0xa8/0x100 [ 263.380778][T12236] ? alloc_vmap_area+0x217/0x1410 [ 263.380797][T12236] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 263.380828][T12236] ? alloc_vmap_area+0x217/0x1410 [ 263.380858][T12236] alloc_vmap_area+0x217/0x1410 [ 263.380899][T12236] ? __pfx_alloc_vmap_area+0x10/0x10 [ 263.380919][T12236] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 263.380948][T12236] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 263.380975][T12236] ? __get_vm_area_node+0x155/0x2f0 [ 263.381003][T12236] __get_vm_area_node+0x200/0x2f0 [ 263.381034][T12236] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 263.381058][T12236] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 263.381081][T12236] ? lock_acquire+0x115/0x350 [ 263.381113][T12236] ? __lock_acquire+0x747/0x2de0 [ 263.381156][T12236] ? hook_capable+0x1c3/0x5e0 [ 263.381191][T12236] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 263.381228][T12236] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 263.381248][T12236] __vmalloc_noprof+0xd2/0x120 [ 263.381272][T12236] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 263.381297][T12236] bpf_prog_alloc_no_stats+0x47/0x550 [ 263.381317][T12236] ? bpf_prog_alloc+0x2a/0x1a0 [ 263.381341][T12236] bpf_prog_alloc+0x3c/0x1a0 [ 263.381365][T12236] bpf_prog_load+0x7f8/0x1c60 [ 263.381401][T12236] ? __pfx_bpf_prog_load+0x10/0x10 [ 263.381438][T12236] ? __might_fault+0xaf/0x130 [ 263.381468][T12236] __sys_bpf+0xd86/0xe00 [ 263.381499][T12236] ? __pfx___sys_bpf+0x10/0x10 [ 263.381530][T12236] ? __fget_files+0x2a/0x420 [ 263.381577][T12236] ? ksys_write+0x242/0x270 [ 263.381610][T12236] ? __pfx_ksys_write+0x10/0x10 [ 263.381657][T12236] __x64_sys_bpf+0xba/0xd0 [ 263.381694][T12236] do_syscall_64+0x166/0x520 [ 263.381721][T12236] ? trace_irq_disable+0x3b/0x140 [ 263.381751][T12236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.381772][T12236] ? clear_bhb_loop+0x70/0xc0 [ 263.381798][T12236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.381824][T12236] RIP: 0033:0x7fe7f439fb19 [ 263.381844][T12236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.381881][T12236] RSP: 002b:00007fe7f5312028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 263.381905][T12236] RAX: ffffffffffffffda RBX: 00007fe7f4625fa0 RCX: 00007fe7f439fb19 [ 263.381920][T12236] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 263.381933][T12236] RBP: 00007fe7f5312090 R08: 0000000000000000 R09: 0000000000000000 [ 263.381947][T12236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.381960][T12236] R13: 00007fe7f4626038 R14: 00007fe7f4625fa0 R15: 00007ffd3420dbd8 [ 263.381997][T12236] [ 263.834131][T12234] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1711'. [ 263.928553][T12246] sctp: [Deprecated]: syz.4.1710 (pid 12246) Use of int in max_burst socket option deprecated. [ 263.928553][T12246] Use struct sctp_assoc_value instead [ 263.990913][T12234] bond1: option min_links: invalid value (18446744073709551614) [ 263.990944][T12234] bond1: option min_links: allowed values 0 - 2147483647 [ 264.076474][T12234] bond1 (unregistering): Released all slaves [ 264.197603][T12252] ip_tables: iptables: counters copy to user failed while replacing table [ 264.348277][T12252] netlink: 'syz.3.1718': attribute type 1 has an invalid length. [ 264.389425][T12253] xt_hashlimit: size too large, truncated to 1048576 [ 264.576512][T12252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.707208][T12254] syzkaller1: entered promiscuous mode [ 264.707234][T12254] syzkaller1: entered allmulticast mode [ 264.905995][T12269] __nla_validate_parse: 2 callbacks suppressed [ 264.906017][T12269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1722'. [ 265.041135][T12274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1723'. [ 265.141527][T12278] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1725'. [ 265.429234][T12284] netlink: 'syz.2.1727': attribute type 5 has an invalid length. [ 265.478306][T12284] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.223589][T12307] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1734'. [ 266.263890][T12315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1736'. [ 266.438208][T12326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1736'. [ 266.734052][T12338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1737'. [ 266.745408][T12335] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1739'. [ 266.769069][T12338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1737'. [ 266.805815][T12335] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 267.262371][T12356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1744'. [ 267.318676][T12359] netlink: 'syz.0.1747': attribute type 33 has an invalid length. [ 267.481218][T12359] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 267.501154][T12359] bond5 (unregistering): Released all slaves [ 267.519534][T12371] openvswitch: netlink: IP tunnel dst address not specified [ 269.942747][T12358] __nla_validate_parse: 1 callbacks suppressed [ 269.942771][T12358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1746'. [ 270.060619][T12358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1746'. [ 270.259986][T12386] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 270.393145][T12386] netlink: 'syz.3.1751': attribute type 1 has an invalid length. [ 270.535064][T12386] 8021q: adding VLAN 0 to HW filter on device bond1 [ 270.686688][T12402] bond1: (slave geneve3): making interface the new active one [ 270.693419][T12402] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 270.841621][T12396] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1753'. [ 270.977753][T12423] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1759'. [ 271.075186][T12429] netlink: 'syz.0.1758': attribute type 64 has an invalid length. [ 271.208674][T12434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1758'. [ 271.264662][T12423] ebt_limit: overflow, try lower: 4278190080/255 [ 271.325322][T12430] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1758'. [ 271.851781][T12427] udevd[12427]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 271.934921][T12426] udevd[12426]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 272.157356][T12470] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1756'. [ 272.208727][T12404] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1756'. [ 272.254902][T12470] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1756'. [ 272.338156][T12470] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1756'. [ 275.662118][T12491] NFSD: Failed to start, no listeners configured. [ 277.674732][ C0] sched: DL replenish lagged too much [ 282.139580][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 318.311053][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 341.831359][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 348.055984][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 379.247221][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 396.134693][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 396.141692][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12506/1:b..l.. [ 396.150858][ C0] rcu: (detected by 0, t=10503 jiffies, g=55037, q=1016 ncpus=2) [ 396.158715][ C0] task:syz.2.1770 state:R running task stack:26896 pid:12506 tgid:12495 ppid:5635 task_flags:0x400140 flags:0x00080002 [ 396.172343][ C0] Call Trace: [ 396.175660][ C0] [ 396.178655][ C0] __schedule+0x17dd/0x5830 [ 396.183219][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 396.188470][ C0] ? __lock_acquire+0x747/0x2de0 [ 396.193459][ C0] ? __pfx___schedule+0x10/0x10 [ 396.198372][ C0] preempt_schedule_irq+0x4b/0x90 [ 396.203453][ C0] irqentry_exit+0x14f/0x9b0 [ 396.208092][ C0] ? trace_irq_disable+0x3b/0x140 [ 396.213174][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 396.219272][ C0] RIP: 0010:unwind_next_frame+0x129d/0x2550 [ 396.225221][ C0] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 9b 67 c7 00 48 8b 3b 48 85 ff 0f 84 34 07 00 00 48 83 c7 20 e8 f6 1d 00 00 48 89 c3 <4d> 8d 7e 40 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 [ 396.244868][ C0] RSP: 0018:ffffc9001b7cefe0 EFLAGS: 00000282 [ 396.250980][ C0] RAX: 00007fe7f4437b70 RBX: 00007fe7f4437b70 RCX: dffffc0000000000 [ 396.258982][ C0] RDX: ffffffff922d486e RSI: 0000000000000000 RDI: ffffc9001b7cff68 [ 396.267022][ C0] RBP: 1ffffffff245a90d R08: ffffc9001b7cff48 R09: 0000000000000000 [ 396.275037][ C0] R10: ffffc9001b7cf0d8 R11: ffffffff81b3a880 R12: dffffc0000000000 [ 396.283055][ C0] R13: ffffffff922d486a R14: ffffc9001b7cf088 R15: ffffc9001b7cf0c0 [ 396.291079][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 396.297322][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.303610][ C0] ? unwind_next_frame+0x8f/0x2550 [ 396.308781][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 396.314984][ C0] arch_stack_walk+0x11b/0x150 [ 396.319813][ C0] stack_trace_save+0xa9/0x100 [ 396.324633][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 396.330059][ C0] save_stack+0x122/0x230 [ 396.334440][ C0] ? __lock_acquire+0x747/0x2de0 [ 396.339444][ C0] ? __pfx_save_stack+0x10/0x10 [ 396.344343][ C0] ? __free_frozen_pages+0xc97/0xd90 [ 396.349660][ C0] ? __slab_free+0x269/0x2c0 [ 396.354293][ C0] ? qlist_free_all+0x99/0x100 [ 396.359101][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 396.364774][ C0] ? __kasan_kmalloc+0x22/0xb0 [ 396.369578][ C0] ? __kvmalloc_node_noprof+0x50a/0x820 [ 396.375179][ C0] ? bpf_check_cfg+0x1c4/0x4860 [ 396.380052][ C0] ? bpf_check+0x294f/0x34e0 [ 396.384643][ C0] ? bpf_prog_load+0x14da/0x1c60 [ 396.389605][ C0] ? __sys_bpf+0xd86/0xe00 [ 396.394044][ C0] ? __x64_sys_bpf+0xba/0xd0 [ 396.398786][ C0] ? do_syscall_64+0x166/0x520 [ 396.403595][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.409710][ C0] ? page_ext_put+0x97/0xc0 [ 396.414243][ C0] __reset_page_owner+0x73/0x2a0 [ 396.419214][ C0] __free_frozen_pages+0xc97/0xd90 [ 396.424379][ C0] __slab_free+0x269/0x2c0 [ 396.428849][ C0] ? qlist_free_all+0x8e/0x100 [ 396.433644][ C0] qlist_free_all+0x99/0x100 [ 396.438255][ C0] kasan_quarantine_reduce+0x148/0x160 [ 396.443733][ C0] __kasan_kmalloc+0x22/0xb0 [ 396.448357][ C0] __kvmalloc_node_noprof+0x50a/0x820 [ 396.453763][ C0] ? __kvmalloc_node_noprof+0x340/0x820 [ 396.459328][ C0] ? bpf_check_cfg+0x1c4/0x4860 [ 396.464231][ C0] ? bpf_check_cfg+0x1c4/0x4860 [ 396.469108][ C0] bpf_check_cfg+0x1c4/0x4860 [ 396.473836][ C0] ? __pfx_bpf_check_cfg+0x10/0x10 [ 396.478972][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 396.484193][ C0] ? kfree+0x1c5/0x650 [ 396.488275][ C0] ? bpf_prog_calc_tag+0x310/0x370 [ 396.493401][ C0] ? vfree+0x426/0x490 [ 396.497492][ C0] ? bpf_prog_calc_tag+0x310/0x370 [ 396.502621][ C0] ? resolve_func_ptrs+0xc7a/0xe50 [ 396.507750][ C0] ? check_and_resolve_insns+0x231a/0x28e0 [ 396.513589][ C0] ? __pfx_resolve_func_ptrs+0x10/0x10 [ 396.519073][ C0] ? check_subprogs+0x413/0x540 [ 396.523962][ C0] ? add_kfuncs+0x251/0x2e0 [ 396.528552][ C0] bpf_check+0x294f/0x34e0 [ 396.533009][ C0] ? ktime_get_with_offset+0x93/0x2d0 [ 396.538403][ C0] ? ktime_get_with_offset+0x93/0x2d0 [ 396.543914][ C0] ? __pfx_bpf_check+0x10/0x10 [ 396.548691][ C0] ? bpf_obj_name_cpy+0x194/0x1e0 [ 396.553749][ C0] bpf_prog_load+0x14da/0x1c60 [ 396.558537][ C0] ? __pfx_bpf_prog_load+0x10/0x10 [ 396.563667][ C0] ? __might_fault+0xaf/0x130 [ 396.568368][ C0] __sys_bpf+0xd86/0xe00 [ 396.572619][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 396.577389][ C0] ? __set_task_blocked+0x233/0x320 [ 396.582628][ C0] ? __pfx___se_sys_rt_sigprocmask+0x10/0x10 [ 396.588805][ C0] ? do_user_addr_fault+0xd3f/0x1480 [ 396.594100][ C0] __x64_sys_bpf+0xba/0xd0 [ 396.598532][ C0] do_syscall_64+0x166/0x520 [ 396.603127][ C0] ? trace_irq_disable+0x3b/0x140 [ 396.608174][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.614246][ C0] ? clear_bhb_loop+0x70/0xc0 [ 396.618935][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.624834][ C0] RIP: 0033:0x7fe7f439fb19 [ 396.629255][ C0] RSP: 002b:00007fe7f522b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 396.637672][ C0] RAX: ffffffffffffffda RBX: 00007fe7f4626630 RCX: 00007fe7f439fb19 [ 396.645666][ C0] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 396.653652][ C0] RBP: 00007fe7f4437b70 R08: 0000000000000000 R09: 0000000000000000 [ 396.661621][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.669592][ C0] R13: 00007fe7f46266c8 R14: 00007fe7f4626630 R15: 00007ffd3420dbd8 [ 396.677581][ C0]