last executing test programs: 5m13.173944216s ago: executing program 32 (id=2554): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'macvlan0\x00', 0x0}) r2 = socket(0x2c, 0x3, 0x3) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb3}]}}]}, 0x4c}}, 0x4040010) syz_emit_ethernet(0x2a, &(0x7f0000001700)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @random="c79094b15e35", @local}}}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xfffffe5a}}]}, 0x38}}, 0x400) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0xfffffeeb, r6, 0x20, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x800) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @multicast2}, &(0x7f00000000c0)=0xc) 5m13.132158541s ago: executing program 33 (id=2557): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711221000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x20) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000005c0), 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000940)={'gretap0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0xe8, 0xe8, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xff000000, 0x1ffffff01], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x34}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003ce7ffff060000551a33a8c606849282c69300040000000000001205000000020000000000000a000000000d00000000000008030000000a0000000000df0900000000010000000000000b"], &(0x7f0000000240)=""/102, 0x5b, 0x66, 0x0, 0x7fff, 0x10000}, 0x28) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r8, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}, 0x1, 0x0, 0x0, 0xc040}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6000000010000104000000000300200000000000", @ANYRES32=r8, @ANYBLOB="2420040085ad0000400012800e00010069703665727370616e00001f2c000280040012000500080003000000050016000200000014000600000000000000bb000000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4040014}, 0x20008848) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000008c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000828bd7000fcdbdf25100000000800390009000000050037001000000008003100080000009d00000000008000"], 0x34}}, 0x20000010) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000100)={r11, 0xffffffff}, &(0x7f0000000180)=0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r2, @ANYBLOB='\t\x00'/20, @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="050000000100000000020000000000000010000000f7910000000000"], 0x50) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)={0x1c, 0x29, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="1716c2e9"]}]}, 0x1c}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYRESHEX], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 5m12.233930468s ago: executing program 34 (id=2558): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x9, 0xfff2}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@x25, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x0, 0xffffffffffffffb7}, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x1f, 0x6, 0x490, 0xe8, 0x338, 0x1b8, 0x3f8, 0xe8, 0x3f8, 0x3f8, 0x3f8, 0x3f8, 0x3f8, 0x6, &(0x7f0000000080), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x9, 0x1, 0x1, 0xe, 0x8], 0x5, 0x6}, {0x2, [0x1, 0x4, 0x2, 0x6, 0x1, 0x4], 0x6, 0x4}}}}, {{@ip={@empty, @broadcast, 0x0, 0xffffff00, 'veth1\x00', 'rose0\x00', {}, {}, 0x21, 0x1, 0x2}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x21, 0x7, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x19}, @multicast1, 0xff, 0xffffffff, 'nicvf0\x00', 'wlan1\x00', {}, {}, 0x1d, 0x2, 0x2}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x4d}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "d347", 0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x10, r3}, 0x18) r10 = accept$inet6(r3, &(0x7f0000000800)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000840)=0x1c) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000880)={0x2, 0x5, 0x9, 0x0, 0x0, [{{r6}, 0x10000}, {{r4}, 0x3}, {{r7}, 0xffffffffffffffff}, {{r1}, 0x7fffffff}, {{r0}, 0xfffffffffffffffa}, {{r9}, 0x7}, {{r10}, 0xc9db}, {{r8}, 0xbf}, {{r2}, 0x9}]}) r11 = openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000000280), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r11, &(0x7f00000002c0)={'veth0_to_bridge', 0x32, 0x34}, 0x12) 3m46.300749216s ago: executing program 35 (id=3383): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@private1, @in6=@private0, 0x4e22, 0x7, 0x4e21, 0x0, 0x2, 0x0, 0x20, 0x29}, {0x9, 0x4, 0x40, 0xb, 0x4, 0x0, 0x6, 0x9}, {0x1, 0x6, 0x1, 0x9e3}, 0x3, 0x0, 0x3, 0x1, 0x2, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d6, 0x6c}, 0xa, @in6=@mcast2, 0x3500, 0x2, 0x2, 0x81, 0xfff00000, 0x3, 0x3ff}}, 0xe8) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m43.675234763s ago: executing program 5 (id=5011): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001980)={{r1, &(0x7f0000000800)='\x01\x01\x01\x01\x01\x01', 0x10000, &(0x7f0000000840)={@align=0xf, {0xba, 0xff, 0x3, 0x2}}, 0x2, &(0x7f0000000880), &(0x7f00000008c0)=0x6}, 0x1, &(0x7f0000001940)=[{0x3, 0x2249, &(0x7f0000000900)='\x02\x02\x02\x02\x02\x02', &(0x7f0000000940)="489e5aed414f8dea18df8b293769c2ca2dc91d84b97d84a116547d0c941c1ae73e00ee40777611c8e773915eb0bc449c60fac83a985e0660a85a3192295f7845019e4da4cd0884e21d587da26948b3f5a4e050d0c59c85f29875642060909aed88a3b3a8c477cfbc385ee6ad5ca066268300480e0d4b0620a7b1e9042a292309e03e0f3802cb31a54cb1ddc472cd2e68bb1817fd289f11a46397698b3d3bdc620f1129c920e1b134c6a74a7b945bee2e1f2d8ba6415fed7270d478b34e6705832407f473983eb5b362b28048acc29e1b2811b188288ca954d84f02aeba6d708a2619845bca306ae3508e22cf1f1b923345eaa00e70cc5ec00a12248e60de64ae2019aafc860b3f582231cfd71d058c12855ca357eafb1b1387f412095670321c64830faa88cef81e949bd82f006a90c52555ac702228f6128217fa2582fc5ede34a9a5a6ee56740c3994ac05bed636a19f446247e99b83e2a9584c01fc3c0d8045ce0b39ff996e328defa6de4e85f2c01652a9cd10bce3b497abdd09638016fb973e267fe6c67b1beef80a66c1ffbb52a64ec37da27c223c389a4f3dca8c532d0e52cb32726526dadba5210f80b05238fb4daadbcc0be94f19ca391ef63c7c3f950c21e508ede4516308f9bbe9129f11145590177a347f7793081fbfe59e77ab6b29992c06070eefd8fb4c784b4ea4284cae182005ad0f4c6235bd71243cefec7ca0df0b33b77e93ee204c95f51f3e6e335bb40597bf5685c43c4378687be889b576f806e9057fd8e755d8de16cfcba23ed1c3923caba9689404a4bf351a0affec0f7dc0468afd577ee583fd168a920f220bc03befcda63f42762e25e2d4627e40fa32a39776859bc13481846bbe073b496252c4b6833a85860bfb3afa686c31c0059221432285cb2829098dc5a81c77f66078bedded2724751f8a34c53944bdf0f4f39185275f3f95b53db9867e82f70e5e2391cff858be503fc5819f1b9ddadcaff66f539cc822ae007796bf5c620040de1a2e300e0d8c024c0c23e50d1b7f50248d93e3abd9cb2970cc918d130633c38327c2cc17ab7287428689b428b1b43a75783802b7e1d6f3acb151cc126b0f190747206b212aee6866d49bfdfba2637527ce4c444d73b8384585f03b0796119b67fe219292595828ea04924c8759f2bcc32d8ec3a78ffaf7b6d3c4dbc84d4fea8c1eee8ca54a086aa373e4db7b38b329cd0847472f26c971124d4b2b6fe6e7dae4521c9eb38a0c8fd43dd8f49ddb6cbe580ddb93afa1ce205f3afca58a2e92866c75b54a3a3407e2234e8c89248651209b06661551f960b92225480bfcdbe402523cdc2c080a0898e1b739f693fec7c61998222a3e2ae5adf61d130792dbb42d867c072c375060cd8b09db17d558fa3e665d01f5ac2afb840cb3cd23a05fc2ce14a1300f05e8126679ae971ee04115858fb69927f2f18617a95107390660ac02e5514444ec07fba02dcaa78e4852001b3bec4f0e4f728df66122bead9c0cb7b8063e4881c3c506c057046b8eb2b3013a35940428a1823253746350e1f0afa5a0d4e3323bd3f3f12fb428f800cab5c9efc99851a60b393928b73869031aea6c0eddd2a0079db4ea05b48ab6c613f99c5dd3ea3b221d8b716267b254a7bf401a3d82eb49873c1736d3c51f7016af891aa1042cbc3f4891b3ed662064161c34a95de1d6f534bc913cd6e747081d6e7a1bdf34f5d353b1a3cc3d1a6622f7fece482a19de4fa565c3b1f0a931177c73c39bb9bfa7c029b1027989d619cf83334d4e5ab6253bee1cd09f1b0f417807685e4fb6c1a527586f457dc7a3323515a0d85073a82185917fb142c6dd2bf122d7e13c5cf954a4e00d0eb5fc18c48904f04893de36691d5d1bdb74da038407cbc91b5cdb469a21f45b8fef778ce9917e95e6778562f7611cd3140a74dafe177892a5ea1b180de6ea1ca9e69de106f40b6bd9ced137ea0372d0f9a1a0fd523564a67e6093dd2917ed7a56ed2f8ba4c5bd5d2594045cf47dce7b75b35b67fafedb01b2fddd6a10aef016370eeda689fa3964ff73a7bff2b9628a50fc56604afce04fcf5d7665281d245a85024e23337377045555ff31509486ddbe33a07af25ac0d36a8da037f471fe4734e3112ba5d6a2aa064a082f74f2fa5db9e59cd763a3f30a856ee9601d3a8de87c8ac240584c75e24c60a2f29dd1306277de5f7fdc28c813689e6a0cca4cc3bc645f38e4f03283fe8b0ec2d90081dc316ddb4106f3db5f5cea87f93c385fca881760818dd1a7a82a8bea707d76aa27dc6df56826240772c0aa6b073bfc1e540e5a2bb3c6e1371ed93fa7cf6c5d52d2f11749146888943d5e6cf509be86f953e55ef002c2bb00d2715d3766d126abdab380164534f73378705e60ca98601c1f51aec928beb7dcef8ba652d2c19d4b82e30766c3159f8ac5ee2eee3d3f1198c49bc379b38fc94e17cabbde3a49062fbbd9458bb6d9dafa8770a0b329ea6c72b2124e209b53cf9a1a00eda80f8b817cae167d07a9309bbc862cc5a84e35ecb43a8c11a64bbd3c79bf27b3e34fc05651f71e245372094976baf0fd2b9498c6f083d42eb4f8c5a1d426975c92b7485c70b1876e54086afc6da6469945cd6a9a2932deabf7b25ad5760fadab443e1f77277b9b273270c206d80f067a42ab16a4ce196c5a35989a5b39a84a101e1428c18d9d05502108deb7040fff169ba124113e5fe0a71361d8f18d8586f14b2b73dce4142f5938f487ca86c9eecd387d01f31b066aa2f8a32ec676c85ee7e4c2c1fa7df0335b22a426d6306e9476c26bdfa787682bcaa447c90aaaf69ebdff2628438469be3d647605c42df4952a4fbc6460f4aa11c775175b9e9757ac05a4101d673bee28c6aa879551ab9cccfdca12203a7192e5256bae322bd520859f6c6741ef4e3f8b88670796b91cc98f842a4878de7bac7c207376a57dc07a1045fd5ce42c4dce4107cf2feb2061a79125fcc9acb95bb8e56a7f80ae409e17ac91a274425c9587ecc348cf15fdc981941b94a55b5a040ff825e972c90f7bba5c661c3549e7d431904abab475c3244d10e87a2bdf74854a02648905f9113b029b0dd874a1a6ed70ccbce81955b451e96f0deb8763d2a66c2c90dbc6c52f72b155d83eb5f4ab1af8735f0b1ec736393673caee1fbee04e8b4b5f0fe9865ef409ae3c462ec83179798075df0dd05d47086293c7beac219669c7af3f273106979e52cd9121e20f3ba72b280caa0e8e1708b60ccf3d7139868d9cf1ef693f724136421ecf8cb06bbd559a4ce9804dbdf0c34e74ddac79dab3e903043cf6d0e5d0e7856dbf734fa89a55f107d74c51a004311ac46ee7c957df5f1d61a222ff863a62953935884b28687135ed13b01c6ac6cadd54dfd760f7972198920f050b8fbdf135776b55fbad5122344b97f3bb40c96bb888fab4fc3a6aa85f45437f554aeabba9a2a0c2874f250cb9566df30167b7829ce0db430ecbd8cc1bc46e43efccc3fe95b44b0aff8a4e41945e019dcc9d3f782b9883545ac2c48752a8f8a67a01de834791de17e04c7d53db6c68eea08a6ef31f49dd6a4007915a2094d7b8ff5de3cdfaaebf3a9b9136c6c300a3c7f1b8cf856c8a4a9314fd15a54a23cc3a70845776f09ace9137ee29b9e8bf95153f6fe0d6ad058aaf3337d4e8203e94b28af8b38f814e9a05effd437226677a42bbfeda6612d42a23d34352ab1c671f32ebe8f8b037bfd48c4f05450726c7e93874aa220660604c55c3bdbb4d97a09b46dcf18b4b6a49bc21c6ae3622aa0099a6be28594c755fc0e4347659cd43a7c23d717cbad9b1b6e4dfe14908abb02e752e9fb7f17be1a66c4c7ce2070b7738d71c339f7f64133e551ea0a352c49063938340b84d581a2a59a664039a47677ed1caac48589bdf48cdcd3c2ef455d20c5d6d699e4eee6cc1bcbd8b65977fb8647161ffdb8d0901f8be7f112d775d1608ae2c6c504752dbe535220d42fd62569ec769f66369255dab403e3e2ff5890455429471aabaca41deba8d7285797419f7a81b7433798f13f33453e1adb0545e004c6410d2011622480d462786660b22668eac48529d2c33a4f50c330feb7dd428112dc102f1afbd07fd45c5d592e2f8153028aab5e165252fecfcc08012559a8021e903ccb5d9c047f535fb7a983927e7f66a8b8f10deba35d3108ccecb4bd51af313dd75aed59e209eae36c0a9250d525174b5da1987b5162eb775e5543df88be9f387fa6a5cb8f315b61537c5eb579f699e13fea982d0857f5554b626ce92fe728d0a76b41123dafcca07a6d7539b158cb3b7545af8910d84440db17150d6265873c8b65e29eadc3ccc4ae9fa9321854c9df82f4fdc0727f034ad5c8391c0573c930735dc95bde1009b0103b74832fcfcbc954f2e015c20f59ad9f0d955e181e549a6e22699d8f15e745a7208d1e935b84bc2f3a0fbc4e183a8d75e4c290cc52d7f6518d80ab77d370a0a49b435a1a06382b11979e1498c983533ef8f7ba18e2b70988b8c8e6ab0df1f33956833942e33ace2b75c36285a4de4333fecbfa1a229b26965f522b3e459a753df79e8b2f44ddefcd626e59472acedb37cc7d0edf68bc51fd7e17ae7016bf1743033ebde94d1c5e41346d4a57514dc654c5a70ebf14527c76c4a1fe29169b3ccad846a75553be309c55065c708b9de130f52878210442c6aa9d03b9efd5a012615bde888ae438b13481a71673ffadc709dae8af6b5098d5646876a0661cd553847a3eb109222e9dc5fd1bbdd8bae3ccaf55889548f6a665be43e9bc319dd81ff707092ba53e3e52533eb279297706fa2d2d01ed99762249b0a467be1f90491ead5c0a2c8d32e24e2cf3d36b6f8bc753a00d2b88be335d42c6ce4babf04190bbbad64a8724aaa9fa3121a9f829e03c0cde4e9c733e093437ee3cd7e7f35a1746b994b0e262f4e7104069128c6a9f18cb63e5d4e10c3220fe1ed85e4ec92b772c2465ec0e51e1f367a003c06a9d3fd2c728785cd6c007ed5929aec061b9aab1056fd868157e15bd1b7d74a0454b5a1f68197f8598569681959b89aee8666b6f09fbd3560dad384f90684308551cdb5cfe67a53b57372a1ca867da4d3647df510143688062a5f531c8b00c857ef86b6210b5f1535e9821f2d5f9071f495da55b6e3a149f39fe14222bab5ddcfa8485deb3371c146b912c6ac9b835dd504ce64bb599c65f2a426355b53ebe74da2d22eb1ed6e6781fa0467365abf64fb17b693be78f14804b587a0cb245a6e41dab59ef3fb9402452a58935181caabf390e0125e32d5b5d2fdeb2b55371fdf916002dd78d2b7c358d454afb48add1148a6fdb3fbd56a74feef7446d3285bcecf7085c7eb6252c1004f108eb8c1068fa7b689f331c1dbbb1afb9fac618ceed01560697fde5043bd27238094c437acf9fee9ae5cf4d5fb7fab4ed24865f07f9d2f6033536a6c678d23576599a3d1e7fe1886bdbe29001966324a453886ddcc524949795a5a5c6ea674f770871b88d51fabe8593a82cf8fca8b8b256628f2b0f639fd4eb969c53629cc04e40dadcc8af17bcd02498301f05a4af5fc9ed9f4b6f4c514feaad45808265ca7adb38ba1da55eeaf702767f9905977131cee43962b7a4186c6f25db4d17b9d9420edfcb062f5325ab8379e646b27bd980d3db9856cf23d8a014fb43002f48f6a5f0fc7607d9ac18b6593c84e935a8c2c03789283c713c7416373edfba823ffe2244972400d168ed38a908298c6fb344af9af31cadca61145ba49c015aba2effa8ee22b445a6d4f4a01dd", 0x1000, 0x10}]}) getpeername$llc(r3, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="02002abd7000ffdbdf25170000000c000280080002008800000008000680040002006c0002801c00038008000100ffffffff080001000400000008000200ff0000002c00038008000100ff7f0000080002000000000008000200ff0f0000080002000800000008000200090000000800020005000000080001000000000004000400040004000800020010000000280005800c0002800800040009000000080001006574680007000100696200000800010075647000"], 0xbc}, 0x1, 0x0, 0x0, 0x44010}, 0x4000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) r7 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r7, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}, 0xac}], 0x1, 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000280)={0x4e8, r6, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xf, 0x73}}}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x20c, 0x84, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}]}, {0x74, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0xde}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x80000001}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xb}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="673891b1f7e1"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="e4a0b80a81c7"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xe4}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xfffffd3f}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xd4fd}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}]}, {0xb0, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x22}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_LC={0x8, 0x5, 0x3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x401}, @NL80211_BAND_LC={0x8, 0x5, 0x9e44}, @NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_LC={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="1b71d83c8f2b"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xffffffff}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}, @NL80211_BAND_LC={0x8, 0x5, 0x4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7ff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfffffffe}, @NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_IE={0x8e, 0x2a, [@preq={0x82, 0x88, {{}, 0x2, 0x8, 0x10, @device_a, 0x7, @void, 0x1000, 0xffffb46e, 0xa, [{{0x0, 0x0, 0x1}, @device_a, 0x3}, {{0x1, 0x0, 0x1}, @device_b, 0x7fff}, {{0x0, 0x0, 0x1}, @device_b, 0xed72}, {{0x1}, @broadcast, 0x101}, {{0x1}, @device_a, 0x400}, {{0x1, 0x0, 0x1}, @broadcast, 0x8}, {{0x1}, @device_b, 0x40}, {{0x0, 0x0, 0x1}, @device_a, 0x9}, {{}, @device_b, 0xfc70}, {{0x1}, @device_a, 0x8000}]}}]}, @NL80211_ATTR_IE={0x45, 0x2a, [@mesh_chsw={0x76, 0x6, {0xf, 0x7, 0x2, 0x508}}, @rann={0x7e, 0x15, {{0x1, 0x3}, 0x1, 0x8, @device_a, 0x3, 0x3, 0x80000000}}, @ht={0x2d, 0x1a, {0x4000, 0x2, 0x1, 0x0, {0x9, 0x0, 0x0, 0xe0, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x1, 0x7fff, 0xd}}, @chsw_timing={0x68, 0x4, {0xafe, 0x3}}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x1b8, 0x84, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x21, 0x1, @random="e16ba73b7b5de34a0eab3fcfec6c2b91b52f64ad2508eade717500a97d"}]}, {0x84, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x2}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}, @NL80211_BAND_LC={0x8, 0x5, 0x5f8a}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0xffff0000}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="a57a71481a6a"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="a9e2dee17ee4"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x400}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="0752e7c5cb97"}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x2}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfffffffd}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x13, 0x1, @random="cba962ef8aadd8c0761dac5f16338c"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xd67f}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x5}]}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x40}, @NL80211_BAND_LC={0x8, 0x5, 0x5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x631}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x86}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xb3b}, @NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x80000000}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xffff}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8000}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="73165b993e99"}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x4e8}, 0x1, 0x0, 0x0, 0x50}, 0x8040400) 2m42.80797977s ago: executing program 5 (id=5032): r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x8051}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x9958bb5e1a2c3ef8, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2m42.789183589s ago: executing program 5 (id=5034): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x803, 0x0) close(0x3) (async) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="63a02a3a34097772"], 0xa) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fbdbdf2503000000100007800c00018008000100", @ANYRES32=r2, @ANYBLOB="080001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x2000c845) (async) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fbdbdf2503000000100007800c00018008000100", @ANYRES32=r2, @ANYBLOB="080001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x2000c845) recvmsg(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xf5ffffff}, 0x1e23) (async) recvmsg(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xf5ffffff}, 0x1e23) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) (async) close(r8) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$unix(0x1, 0x2, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x6, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) (async) sendmsg$nl_route_sched(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x6, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r15, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5}, 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000005feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed00007203feff000000001d44fdff00000000db0a00fee10000007303000000000000b500f3ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r15, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5}, 0x10}, 0x94) 2m42.414944856s ago: executing program 5 (id=5044): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100fcffffff000000002f000000100003800400040008000200fd7f000318000180140002006d61637674617030"], 0x3c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r8, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x800) sendmsg$NL80211_CMD_ASSOCIATE(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000029bd7000fddbdf1f00800004e50000000000000005000700000000000100020000000300"/54], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x24004000) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) 2m42.29320054s ago: executing program 5 (id=5047): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002000010"], 0xb8}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000680), r4) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="94000000c7234ecfae4ded1cd4df26e14aec50ad82dde343c86f8f08b3263474af2f5aa13f7e6d3653f00d609303f2f83ecab58d9d31e10b54aeee8cd7f5bd31bfda085ab389f7b52f88d1866fe62a975bf28715e0b478585a2ba86f58043e76c5c99144b11fc11db858076298469f2492c6d735d018f66b33cfccdf184b2a1141e80ab60f4d9a7fbc25da843611b376", @ANYRES16=r5, @ANYBLOB="010129bd7000fcdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x8010) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r8 = socket(0x400000000010, 0x3, 0x0) bind$xdp(r8, &(0x7f00000002c0)={0x2c, 0x0, r6, 0x15}, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {0xf}, {0x10, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000000000)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}, {&(0x7f00000022c0)="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", 0xfcd}], 0x2}, 0x4005) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000061c030b000000000000000003000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 2m41.866718245s ago: executing program 5 (id=5053): openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='THAWED\x00', 0x7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) r3 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000100)='FROZEN\x00', 0x7) 2m33.889242551s ago: executing program 7 (id=5223): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2a6f280021001c00070c06bd7000041000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m33.887574967s ago: executing program 7 (id=5225): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) writev(r0, &(0x7f0000001980)=[{&(0x7f00000000c0)='\n', 0x1}, {&(0x7f0000000340)="169700ddee9c46247b2f079d8db41e2109816bd03890a5cb0c742271fc815be29149d3cc374f7aec5126270c9f4e4673556ea979384d331b571b68711eba50193019650d950a51de5bca455cac113dee556ce67c056d8aa6e97e90bfc943b7dbe812c613290b8b61a80ecb9acbe24cd37d5a01a00a4fe728daa63ccb73fc1db4d793c7452ea844474d278d0933744191d02c4a9f0add4727c952325d16694ea3e685b8248f3c01ccd4c88be608f9104f938b2bab3f7243f09105e704227bcdd62a00d90aa67f2486", 0xc8}, {&(0x7f0000000440)="13c4a63256dca5a4d34f2c8f41b7be2b77", 0x11}], 0x3) 2m33.875992898s ago: executing program 7 (id=5227): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r1, @ANYBLOB="71e79fd811000000140012800c0001006d6163767461700014000380080001"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r6, &(0x7f0000008ac0)=[{{0x0, 0x0, &(0x7f0000004680)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1}, 0x3}], 0x1, 0x820b, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r7, &(0x7f0000000e80)="0d0ad7", 0x3, 0x6d91fb6102d8910c, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=@newlink={0x34, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, 0x20305, 0x7e15}, [@IFLA_XDP={0x4}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x34}, 0x1, 0x0, 0x0, 0x8840}, 0x48094) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r10 = accept$alg(r9, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f0000005fc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}], 0x1, 0x800) recvmmsg(r10, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0xd78a}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/15, 0xf}], 0x1}}], 0x2, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r4) 2m32.949012775s ago: executing program 7 (id=5255): syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2d24d, 0x11f04}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x401, 0xce4d}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, 0x0, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x112}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xfffb, 0x1}, 0x6) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x800, 0x1, 0x0, 0xd, 0x80, 0x80}, 0x20) getsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, 0x0, &(0x7f00000000c0)) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000002e40)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r14 = syz_open_procfs$namespace(r11, &(0x7f0000001780)='ns/ipc\x00') r15 = getpid() sendmmsg$unix(r10, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r11, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r11, 0x0, r13}}}, @cred={{0x1c, 0x1, 0x2, {r15, r12}}}, @rights={{0x18, 0x1, 0x1, [r14, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) r16 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002e80)=0xffffffffffffffff, 0x4) sendmsg$netlink(r3, &(0x7f0000002fc0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfb, 0x80000000}, 0xc, &(0x7f0000002dc0)=[{&(0x7f0000000200)={0xec, 0x1e, 0x400, 0x70bd28, 0x25dfdbfe, "", [@generic="d903ff2a65ec87f098ed54c56e6b839b1c54c1588e3e0a10829cd0e824ec396a435ff206c8a1f82a0efdfea2d5d910ee326479a1a24d031f965c727ed0f07536db3f18889816fd38851404efc9e20a1587591046a54566c64e5fd944381c6d0aa96619b804ccaafdf5ce22483bdc1324be8a9087275a4038a27685880e3ab505805adca0cc0d61d112e36178bc4a614c648bb78a54e79575991b1387291d337d3d48446014e952ec9e3c0860fd6b3fc99588db3cb78870f97f6ba77e7bfc0bc202d13172ecb7d3371b11130bb3248e3a5f93b3f549778d8c6fa35d"]}, 0xec}, {&(0x7f0000000540)={0x1188, 0x2a, 0x200, 0x70bd25, 0x25dfdbff, "", [@typed={0x8, 0x3c, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x39, 0x117, 0x0, 0x1, [@generic="d382fdd74311f9416e68aa8e1c42e84810de06f26ff2644b0f540a2c33a3c76d792d484ae72c78ec26", @typed={0x8, 0x1c, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0x4, 0x1e}]}, @typed={0x8, 0x15e, 0x0, 0x0, @ipv4=@private=0xa010102}, @generic="80adfbbdeea810ed6dfa82bc3c6dd1326696f846e105d7a665b5d845276bf213c7026c6d7d1550e8acd587091ff6a0352277524d43e142a48860a41ca3d311c351fa0a793e61a54547f4b2543becea6c42ee144fa0dbeefdf7ee4af2ce890aa8e1bb06a28ee764d1dd99cd1b90cb2a96b0e9cf09c321c022ec6b92b625dba1f0b2f0161bec9e5260182ed58058c532420ecccb3a259c13fffbd761a5ba361b7f49b83a77e94a4fb6072b5926642b951a650a63f0ee6376feb6998d737f393aedd924046c9ebdbb85da23827f99139107a0191d0fa8792c", @nested={0x4, 0xa6}, @nested={0xf90, 0x5b, 0x0, 0x1, [@typed={0x8, 0x153, 0x0, 0x0, @pid}, @typed={0xf84, 0x10f, 0x0, 0x0, @binary="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"}]}, @typed={0xc, 0xa9, 0x0, 0x0, @u64=0x9a}, @generic="98c1846dfe69a65cbe313e78eebdca55ff720cc11ae2c78c7fd234cbe48bccb235703dde968428cbe027c48e63dffe38b87651e925be155ed48fcecd980a90fd66c8180e47c520b556373bad095fe5254b04fc8c8c5de38017a2cfe680a64a137d606699db3fc5203c5ad360f62e9c1180edc1639324795112cf27b9b317476b5955d139784128c74975d8e7445bb9c4c2f69c2c4ccf249ccba8024c8d7bdf53a59f0ffceece7466d2a88e0b169b63b13956e749"]}, 0x1188}, {&(0x7f0000001780)={0x28, 0x17, 0x10, 0x70bd25, 0x25dfdbfb, "", [@typed={0x14, 0xef, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x4, 0x30}]}, 0x28}, {&(0x7f00000017c0)={0x12d0, 0x1c, 0x8, 0x70bd26, 0x25dfdbfc, "", [@generic="5fb1c316cfbb53f42bac1f6812a429145b999c6fcba4bb62f46700e87ca0235f0fba91424e669b9276e485e8864de36ce813b8400de3800c0fa419fd44e2c2ed4ec21de78053c3f1415e", @nested={0x1011, 0x27, 0x0, 0x1, [@nested={0x4, 0xec}, @nested={0x4, 0xdc}, @generic="9894c7d1e6", @generic="0740c6bc76d5b6e61844e3c4e7eb5f44b8be3f397f1a2f131ee22dab0891ef0ddf74126204ca7e4d0b6e2dff83e08ea9bef5e862819507c66023a0ee35643493aa5a27752f89d638c0de4908c777d0fa67a2ce70c21b9b89cb94c97c7b3e3dedb6dec59a7072ce20d8b55784ad690599146d95b8faba521b74d976927e4b6defc959894a717d35a4d02987fbae891fab7f0196d63d1e19f1b46a8fc366b8f2ad13efc9ce93b14b6945a063279363122bcd3374d6b2eb338c741e77b54d6f6740ffd2882eaa5251f8c3b1e0638cff52a9d816d019219a7ecfa523de767c1f58b80b7154c40263a13f8c97ee8e5bb42b0354e3a56586fd79f1ff70f35b6fc8797902e1e3aedacef7575b6ace3f130eae7fd2df280a18309978dcb57030940b872aecbb0bcdb45e6ed5b32edf1c7a7df7c1b56e7f29fd687cb8a4f2b7440ebb976f86a4cc77342923f8737ddb4ebd0f389c81a121580f260d8dc43ee2ece784ab883d92d54ad6104ed666e55ec218b21d58fbb5c63e4f6f83346bcc780185d3e511d899be0c46db49593ae60f1041d8050a5ed6a48e0773122725202d0d7446e8d16e96d151293249c6101d7c34ed7b138c4a83ba6d89f5a6b26a2d1c034bf272cdbc0f82da72446118125ca5c599ba587af93fdf6caeb762f612c0f5c226794d15c6bf9624dc13dcdd9d4fa7cfddab6013b7f579395d373703c31ea529d6a75b9ae9c7b692615bfb467f8fff4e64dc387d339781a5026bc890287831addc65af89a3e1a1dd649cd0c0cac6d4ac08357429983117235b77899f2a674acf284177070625c6df916e7a2b486d3d066c75ee519982665303312fbc8d3b4fc135f36b3fdc475e982dc50c26d1a802cad747c864467dcb546506246db89391665307bffdcc0e17cb08cebd8ea299cbfbe2137ca307c0fb3fa14ea1aa7cdad44475766baf65854bd417deabd3056e28f58445414f733d07936cc5bb155ad999f8732b69ca6a101d2ae058167e67c2b2ca6d518c873a51c87d95c460d6f188ee241007aa21d3828a51e9e45b321f99bca44c4625cd165d95d442f60490472d120e87d058740280c30ceba9a17da32645388ce9d228cd5d9d697d95e76f65f6454dbdcb1c374fbbc52cf854648c4108dcbdac2e0f879f73fbc277e26b75e4a83d51cb60ee809aecf61a86fdb6163619f6a6845344cbeaab8a4cdc0a5f7a9b3cc9adcfe6eef0327d304021fa888a265b7a63d0e3723d1f055277c8c73de9db42d896d55e71b51f524a80b2d3dcd89b98b00ce44bc8756b4b3815348586628159dedab679830348d3383068c546152857299153ae12ec5187de5afa256b7011e85b107a2fce7fe14988dea4bb9b21fab89bb1ab9183657f314e6d9a638c814adfc4389e53626520f85e0e58de1d9bbc009930fc161209f7781091c4fb0b81534da631eb34189463e8aebe078cbc14adc461008a9b5ca3f7bdee4c02915b0cabc02a912bffb68f384f3810aedfadfacc0abbdf08164615772f2874e35a4b764c37cb0337f943d6463697d8d653c009c48c771afc2c74a57614265452be007a34dc43cc4ddfee2e93a13deba8d750de0a9b8a2d8907632288b32233acea8bb102570856c97f6c151fc1e2b613998708b0b0eee1cc4a880ae73776a6f83c73073fe667d84d5b52ce9a312bc984aeb0cecfbf604a50a4ca1c85af273b619881d35078195e84bfedef33b01f0c20064b3c1814b23257429315fcad9dede5c82854b58b1fefb86a8e4f7497fc573b57f22e1b16daa74c1af669251c38005cfa899a7691450fa667c5778f434c287070cf10f07b422a762d848cd16b7b1b84c2a116ee46bdd52bf465c6b415e7cfa41810c3cf5e8b97e2b887f1e100cccdd50eb59f82bb2ecce6b3371a98018011583f8d6b0f08db174a5cc75a33dc0bdacedae40736d79bffea55a077263a2111fdf33ca4a07a15cfb52008bb8c310abb819047b6d550e848f9a63fb2de4de01b871176ccbadf14b485d8060c891b845a997f0e6cb0ed02ba42bbcb23f6de52fca3ae52aa20358ceb2c92273d7a257e07d4e3294c0a986c2f303e95fd99b5f04836ea22a72fcbdbe941f7fc0df48627e7d35df0277ff1ab8891c9f8b367462e50c1c1a1c4ed6697033a81e0f99bacad30ddc1b97388f9f09121cf1e3f3d5e4ca1c6a310b2f19f2298bdb85317fe6d9e464ddbe0e0f94b8cbd5945ac65d5594a1fd71fe49ccf8af86866ae59e5f702828232319a5aa3939629ea451da7ea400f25acf3aa72a01beb2ae2f8bc2f92a993440d63c1e0b8b53ac74c62f02b42e29a12668aef91cc97d7269b46f99734148723a35900e765cb0b41cf6cb0400bc441b89a2f8a13c0902ff15e3fbbb6e106c2c475d287c30485e24caec8ae4d4221f35aae5988d3f82808fee6b66141371c32a4bba42887876402dacb1ac0badeb81126df25c234e795c6f63794611db1bce99c33c29c25ff3722a569ae0c1cced73c3a805b66a1d86ed377d219d3e0eaddec268d34c9e0ab543ee55f8d507b2bc67631df8d8f8932e8444036ececa4ee6499ae394777612a0bfda757aaa787c71d7abe4d9918f9f4ac7ee3ffed5aa91373472fe800749a27ef79b1d3f4fecd7cf45abdd9255fb6717e3be344e1ae43c422406c1f368d2003e52a9292a8704b72ded203b4dc74b15cfbdfb0f4d0eec196bdfe1fd507a1ddd8896c031a000dadac1ce32c3cb31ccf45f063eefa565d9141d89216c750ce0ccfef5d15a4965954b762181a03023e96cce09d2ca87622e2294dfbc2349261beab9328f253872e877b582e2f98f749c9019c34b7fad3d54cebe97392b626db9884d0ddc09c76473f6b91d770aea98e560414eca77d6fba96375331d6ba8fc7168eda2815339d3cc9be3dda90d5e0dee91638406a7786cbcaa1aacd4b1509d99a229f17757fcce9865adeadd0995befa62c06f43f9e54b89c0eee054d1c3ec197eb9f340facf8a0c2ef42c309f189c56100bff3b432b3ee997a2a25377e9398e7b0620f5cb26220eca110c3060f30e87fbf267de84be6bf6eb9102520df95bc6efde8b839f6a036c41be0ddd53fbaa37167d0f1d3b173e505af2e9e165dd60ebf62dc1a4d3318fe47d151fd3e0971c26e28bb1a3f0e61c5ecfe4ba7267ec4e3f64c06a7e98f98a164c4c460624d23242d5683bac3394d1e629b027cd18998dfae950dde0323aa14e1112ca10ec1403a9c29b3c13c00582c29462d554d43356d93dbe7609b6f2cbdfdb72baddf2f4263c03f97d90fcc94de74e6f0e19634fe67664d18120b843840a983b2d1ad70d83dc130e8964f09e0e99a42437be0923581efde4eac5dedab7087734b2986a982df9a06be1707297fd88b9fdc68503dba6a70b63fa55241832f1a5ff15b05c50e1ccbd0f4a346489f070f503bbefd4e8691138abccdd593f26e878c33ce73b9f78eb11a7bcbb826504949376310c5d5b354cb61e081c4c7b04162f90aeb783bbc8d7f3d9dbf5e2fe25bc26a12bd1d759791c553534dace87eac37cbd04e5b02f3763ff22cb79cb97e5a3722c3e33569ee01fcb6c386d4c447faca7f7f2eb885a567249ff8fbd85a813c56b9a343695e904d0a8b86c966d25aade48b5e48595081cc397379130811920fe74ab3ede27191010f54688a2d97fa1b5acc14207a8e7dc8680281d00cdf5a852c93f64587d44c70c1910da933c55120552c1ab3298a218b8603caf52acda741a8daa421e41670996e752fd34aa4654996c87a6d3e311ca480a8f6aa1cd90c4dd1c42d3c710e9ea93e6be76a2212312561edfe0c58593e2dbd1a7efb6c2a4b8f7c769281ebb17b8f7a504f8b77b1c713398bfb6c014f9a15558b5595b478b549bc8c1f416a0bd4a43de24dfa72c150cefdd32e19cc4d5d1650ecd13b9892a7ed6648f1f02df1bf617328aa65ad3cef427618ff9822ef0d6068cda8963848a94caaf91e968b8f9365ca00b9462ef158c80da7b6e24dda20fe75c5a6c6d8c79746ab303284c61d3378183f1b62a2a1b2f7d4abab153a0695be58920e2bc47ab55db75d48e6a9136d2b5d75e185f4b6f33b9658350407c80ee89975524aa98bf27a66838167f75ef7b5676d636665568aa4f9d3878451267a31d9054e3ea0de83d92f87aa10a13c9882f299ba022e5519b6d08395daac494b60d92701377403fccc68a468de9f8dda2d0b0cc6dce9189bd202c7a0192a6d901695386756b4f78952b216f44caabcb90acb9430a8d637a7cfa9ade8240678289f743185934211c85f1f38922b6753de71a10dbaa7ce8b002f7a9a1764aa2580717ceff3638cfe863979d929c56dd644d9c2494f6c5ee88a0c45b4e596d1481c13a368c01775114d1b332064d358e46ce652c81352ae5674cf127c7e8e87ba94736a45f7b71c20fcea19978fe17f290792751c19e2ef0b7480dd368b016b4f7a91cb5671badf75f349f43a9c9e6397151874203eb81d0339d706c5cbdbb7792b3029e0806c77f86671efadc06af6e2288985418f7cd59af9dea644a8249e1e0501857469c7e189da464ac7c91daef8ba0df1e7d134fcc52451f883589268c0186030d502f0a9905a43aca7e8842f9b07fe8bc40cb2fa1a40201a2d83337dc7603ab3c23e4d81e3857994d7ea5a32a521660a5c9ca8a57437294c1d45ea84a6809c8b200826d1191a7da60c1c021526b5fac1cb7a6b145311c0c575462a1408eb9a6517de03e41432469965f64fa2a6ed59f5f16232d8c5e04aee61393121b5fbbcd22403abe55543da17036cac7f461b089b15aba4f40c637203192fb2d08d89705f1db3512b99571e79fbcc1790ffb54592849ca0ab383e01f1ab1de97983968bde1ae6167fb44ae507384a92f8ebf144704442230d2aef3a1d9bc2fa708ba1811b936c53f68bf7b03bef2b52370b4a627767f95d7ed5c5719f7fccd1e6bde1538244317ac0ef3f8bd47aea4ff15f7680cd943b684734355317342b39aba9cde004da03ac907ef470a8c43d2570154a52d36ec46da39b9a56fc29b196a37d06fb8e0c9310aca140a0cdb5fce4775ed38ba851fcf13e6cec1d444625476fa63c4a3229212f629ea5c4d7bac1f0e7ce13b62f95bfb53b8ce4dcf48289fdc8ca45628b7b84a444a1240083818ca184ff269dc98dccd237e685bd752e6717d200b897f78f7837a37b45dd4c2cde9d8815664cb9ae8a113ab5a59dd35e929e60ad1358ad529b11b1f8547121557f75cee56ae954f16d946df4845c6186c7d14c8d5e5b8967fc5f440a1408d1ad7c4223771e169d34765c5e6b0bd5e7c7f097a1b29d15b9e821d9d3711fb9ac3b1d2f68fcd65573c1fd4e7ef9c64551a055a2c81c909f604e00b360ada62501d79f211cd43252219456d9478a5c9ab550e9dc447517d0c63d35a6f77ee1e41ec647608f5d8bf7e25f4090d5d0f33923254765a590bf0461ab41a68298b099c52ccb55e376a5c80f3fdb1c4aa3bfc0f15bed3eb84708c6786ee34099c10578b3dedcbba3ea3150bf27232a187cca711dc86b1048059cb1bdd2b39deb52632bca91307d3d87fa796272fa8d8bb53b0b529257f3a574b0cc6398b26e266dfb3f02c9ae34444e0708490f8474d7914243d25b87a02bcaa13d0d579d52eab1ce9b5fce3347186895fa70340cf16ba77c1822015f4dcfade77d345186a1f5b68a85d0b4de809657f82f995588cc1211721065ca2596b3ff87b56f5ad87d03c9dfcd7e9b334e8eb96000e4a3720edd4fe7c4c0c3d20fadbd554ee68de84d653f3b9889e0a321e78fd88e37c09ab37bbcef8064", @generic]}, @nested={0xa6, 0xd6, 0x0, 0x1, [@generic="65757f39a9e5c05c5238cfcc591c98261aace36f1c904503bac4f20ad76fa772efd9a0247ad22da384a25d2b317913c513833ec1b82bdf61224eeefb0a49f0c18bc676ff8ab09284ceb4c915fb91c6c45ffd0ca052676bcada29d4396f6f44cac7e50547d0ff8d89e96bb06cb184c844009ee86236f9a12cbe63c0579b535de462523f2ea9afa581356739c567829466e440f37b1ee8dba6ddee457187254054466c"]}, @typed={0x8, 0x54, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0xa4, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="9a769cbb821a0029f5c625ce396259fa465bad6808b03d5654ba70dc9a50733581dded9f6d", @generic="3102783ef9ed32f6f7d9cab86e0bc5d36cd360186ae3d304bd1836c9e9c505ddc4a1c7209de30da0c0923fbd6e7f52732f21f1f04560478bba7135d43e45bc17ca43e16c7fa0ec01eaf1", @typed={0x8, 0xbe, 0x0, 0x0, @fd=r3}, @generic="476a6031db6fbaa7f9cd45e06caf8e2f7045113c04243d7e7815269c9b39d6fa45238c414a62008476f765a8bdd65a9cf3445d12025d39df2d892e53da56279397968d35b2f9b506aa3ecb07aa55efed856cbd1d5bf633432fd8f64023850e878d85e871e7861d74d26e5d95097ab9d089d5a46e49084409ffdffd43f6e4d63dfa0e9cccb43ee6ff25ac7f97aadb67e118ceffb1", @generic="573ff7b6559e144ea92dc21d459eb1717cc13fa080e90626475271318f63ab5b8ff354abfa0a20b31d5e8ff43d7d206017e4768fd1dddbfa9e6322fd88464d33a7446d83bdba8e03cd3bff77813f263bb4446c6e74e5f558eb3a2b1652769aef11a63e1fa5b3e129cb3f1bc7032561431d801345f137c2f377c627617893ca3b13e062a18207df027082ed96440e29af9b699e5f6eede6a3e2a128df"]}, 0x12d0}, {&(0x7f0000002b40)={0x10, 0x15, 0x8, 0x70bd26, 0x25dfdbfd}, 0x10}], 0x5, &(0x7f0000002ec0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, r1]}}, @rights={{0x34, 0x1, 0x1, [r3, r2, r2, r3, r2, r3, r5, r1, r3]}}, @rights={{0x18, 0x1, 0x1, [r1, r3]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xffffffffffffffff, r13}}}, @rights={{0x24, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, r3, r16]}}], 0xd0, 0x4044080}, 0x4800) 2m32.916438695s ago: executing program 7 (id=5256): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) socket(0x9, 0x4, 0x8) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x60046, 0x400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r1, &(0x7f0000000040)='/:#\x00', 0x8000, &(0x7f00000000c0)={@align=0x37, {0xfff9, 0x42ec, 0x6, 0x1}}, 0xd, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0xd}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x17}}, &(0x7f0000000480)='GPL\x00'}, 0x90) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 2m32.71167366s ago: executing program 7 (id=5261): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1, 0xfffffffe}, 0xc) 2m29.542978991s ago: executing program 8 (id=5306): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x13, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbcc}, {}, {}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) 2m29.488166832s ago: executing program 8 (id=5307): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b00736970"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32], 0x5c}}, 0x40) 2m29.344968432s ago: executing program 8 (id=5308): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r0, 0x0, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000240)=""/108, &(0x7f00000002c0)=0x6c) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x4c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x5b}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) 2m29.341535648s ago: executing program 8 (id=5309): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x14, 0x6, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit], &(0x7f0000000080)='GPL\x00', 0xffffff70, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x3, 0x9, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, &(0x7f0000000180)=[0xffffffffffffffff], &(0x7f00000012c0)=[{0x3, 0x4, 0x2}, {0x1, 0x2, 0x5, 0x2}, {0x0, 0x5, 0x9, 0x7}, {0x4, 0x5, 0x0, 0xd}, {0x0, 0x4, 0x5, 0x2}, {0x2, 0x5, 0xd, 0x5}, {0x1, 0x3, 0x7, 0x9}, {0x3, 0x1, 0xe, 0x6}, {0x1, 0x2, 0xe, 0x9}, {0x0, 0x2, 0xd, 0x2}], 0x10, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000004000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61143c00000000001d430000000000007a0a00fe00581c1f6114630000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e28488b0522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b669615f2710eb8df39fc8c04d2c9c196fa6facfea613569a35cde6451f2edf55ce25c7d72ec7ea85a92458c0559ca3a94727d495bd4671a55a70bc544d71d8e0257707a31936f1adf224077310a86bf447ec92c650acca8c6b0721020894b06178c32f4472d17174d6eb2b067030c5d2c12583f46d2da7fba42d4083259c7cdc8bf1f4299c248865d3c809356c3ed"], &(0x7f0000001440)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000001c0)={0x2}, 0x10, 0x0, r0}, 0x94) 2m29.30980052s ago: executing program 8 (id=5310): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ac00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x10, 0x3, 0x7) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x200}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0xed}]}}]}, 0x44}}, 0x20000000) (async) connect$can_bcm(r0, &(0x7f00000004c0), 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r1) (async) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="05000000010400"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000040f5"], 0x48}}, 0x0) 2m29.200697642s ago: executing program 8 (id=5314): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) sendmsg$FOU_CMD_ADD(r1, 0x0, 0x90) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4004084) r4 = socket$packet(0x11, 0x2, 0x300) accept$packet(r4, &(0x7f0000000000), &(0x7f0000000040)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x13, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0xff2f}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, &(0x7f0000000740)={0x1, 0x101, @status={[0xffffffffffffebd8, 0xfff, 0x1, 0x9, 0x5, 0x7]}, [0xfffffffffffffffa, 0x8f68, 0xc307, 0x0, 0x8000000000000000, 0x7f, 0x6, 0x6, 0x3, 0x40fe3f3f, 0x698, 0x9, 0xe, 0x1, 0x6, 0xb1e0, 0x4, 0x1, 0x2c5, 0x2, 0x4, 0x0, 0x8, 0x4, 0xba, 0xe0, 0x3, 0x3, 0x1, 0xfffffffffffffbff, 0x3, 0x6, 0x1, 0x8, 0x9, 0xfffffffffffffff8, 0x4, 0x2, 0x6, 0x10000, 0x6c7, 0x9, 0x502e989f, 0x7f, 0x50, 0x8000000000, 0x9, 0x7, 0x2, 0xfffffffffffffff9, 0x800, 0x9, 0x83, 0x9, 0x1, 0xb, 0x80, 0x6, 0x7, 0xfffffffffffffe01, 0x13a0, 0x8001, 0x9, 0x8000000000000000]}) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2m26.724798076s ago: executing program 36 (id=5053): openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='THAWED\x00', 0x7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) r3 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000100)='FROZEN\x00', 0x7) 2m17.655250349s ago: executing program 37 (id=5261): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1, 0xfffffffe}, 0xc) 2m14.156716953s ago: executing program 38 (id=5314): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) sendmsg$FOU_CMD_ADD(r1, 0x0, 0x90) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4004084) r4 = socket$packet(0x11, 0x2, 0x300) accept$packet(r4, &(0x7f0000000000), &(0x7f0000000040)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x13, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0xff2f}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, &(0x7f0000000740)={0x1, 0x101, @status={[0xffffffffffffebd8, 0xfff, 0x1, 0x9, 0x5, 0x7]}, [0xfffffffffffffffa, 0x8f68, 0xc307, 0x0, 0x8000000000000000, 0x7f, 0x6, 0x6, 0x3, 0x40fe3f3f, 0x698, 0x9, 0xe, 0x1, 0x6, 0xb1e0, 0x4, 0x1, 0x2c5, 0x2, 0x4, 0x0, 0x8, 0x4, 0xba, 0xe0, 0x3, 0x3, 0x1, 0xfffffffffffffbff, 0x3, 0x6, 0x1, 0x8, 0x9, 0xfffffffffffffff8, 0x4, 0x2, 0x6, 0x10000, 0x6c7, 0x9, 0x502e989f, 0x7f, 0x50, 0x8000000000, 0x9, 0x7, 0x2, 0xfffffffffffffff9, 0x800, 0x9, 0x83, 0x9, 0x1, 0xb, 0x80, 0x6, 0x7, 0xfffffffffffffe01, 0x13a0, 0x8001, 0x9, 0x8000000000000000]}) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1m46.412292892s ago: executing program 6 (id=5972): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x58d, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2, 0xffffffff}}, {{0xa, 0x4e21, 0x400, @dev={0xfe, 0x80, '\x00', 0x25}, 0x8}}}, 0x108) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x40}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x0, 0x2, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0xc, 0x1, 0x2}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3, 0x204, 0x200, {r4, r5/1000+60000}, {0x77359400}, {0x2, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x0, 0x0, 0x1}, 0x19, 0x2, 0x0, 0x0, "fbd0d52a92ca28b0e469257c1bd094e8ae7e349b1baa058bc9526880ec44ff4ba4c1360cbee192b47aa1545207c0da8099d9837fb0f6b9127a18805e63c35169"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000c0}, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r6, 0x0, 0x20000000) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000003c0)={0x100, {{0xa, 0x4e22, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffff224}}, 0x1, 0x3, [{{0xa, 0x4e24, 0x5dc8, @private0, 0xffffff80}}, {{0xa, 0x4e24, 0x100, @mcast1, 0xffff}}, {{0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00', 0xa}}]}, 0x210) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x190) 1m46.184519826s ago: executing program 6 (id=5977): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/195, 0xc3}], 0x1) write$cgroup_subtree(r2, &(0x7f0000000700)=ANY=[], 0xfe33) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x97ffffffffffffff) recvmmsg(r3, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0x88b1}], 0x1, 0x40000120, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) write$bt_hci(r3, &(0x7f0000000200)=ANY=[], 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001a00010000002003000000000000000004000880d3c2fd4a2a46021a7fac04f09454f453af0a7956f16faf5bf145de5083d24008ab93a745176f2aa10791e0e14dfbe48172a907125d996b2e4093dd94791c6355c1a605"], 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@map=r2, 0x7, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180004801300010062726f6164636173742d6c696e6b0000ebee38e36cdf5dafb147096c713b38981af047b0ea7e5f85a65ca23f0cde87992ecce8e8bdb9c26c17fd23cc297010390f325c81e2e3ba54264546516b9c19e39441a63ef497c892ee24871c6c38a022efa7858db3aa090025d5d8611f4103d763b958632fd465ce89768dbf47a5295f83aa52e24c0ce4d428b3f484f116507f70ceed0cccff67cf647c9cf3682328253bb87cfae1c92813a05c9277b816423c6f13eb69c20339b5e91759d457fd968aeaa2bde01ba0462c630b"], 0x2c}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)={0x30, 0x40, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x142, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @u32=0x2892348f}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmsg$inet_sctp(r0, &(0x7f0000000340)={&(0x7f0000000100)=@in={0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="7ce69171fe181c0cf5208679c9aa", 0xe}], 0x1, &(0x7f0000000380)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @prinfo={0x18}, @sndinfo={0x20, 0x84, 0x2, {0xc, 0x200, 0x0, 0x2d}}, @init={0x18, 0x84, 0x0, {0x6, 0x1, 0x0, 0x2}}], 0x68, 0x2000c804}, 0x24000009) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f00000009c0)={0x374, r5, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0xf4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x590}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbfbc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x339a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @private0, 0x2}}}}]}, @TIPC_NLA_NODE={0x1b0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xa2, 0x3, "542f83f3675c793b540fa94e09d6e05f5c32e646d10687a02328fa128ec78cd91aac8c87eec114b12c1018983e9f2456e5f5f5dcd8c8179badcd97c80904257bb7272ffcf99acf7ab404b37a81c65b39d191f48afd277d6fc22ce18d0f337c5532d1f605e02f7af7355bf8afc40aba7768ad4d994a17ec267e263e4d76b8707de444b117f703081e4b38b5169268e56f67cc366b957fb684e8a08b58c400"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "9c958d0fdb3e582de0fc2e0a4b990fdbf0dc9c40f8af"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa}, @TIPC_NLA_NODE_ID={0xb8, 0x3, "09e9c319f0d8cd9f4f42a7fa33b5c05f66baa4863c0628ed8ca292e2d9cec6a462b634f3685c1c45bcc56664088bfac2812a0e926f123ece5254311c7d46a6e165414a20dd759907a595223ef6556986676682f1f845265bea6562217053a731b7f433d2a8c158aa20177f34e5aadf81c8afee68a9b38321f97188d5b651135b1fa525ddfbf4b62b52cd7a5ca8aba804f4d5c15f1632f86cbcbe12a561f4c3a9cadda7a41b3b46cb9b3d50c25a220287c37fd755"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x374}, 0x1, 0x0, 0x0, 0x1040}, 0x40844) 1m46.021047729s ago: executing program 6 (id=5984): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x581401, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x581401, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)={0x44, r2, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$vsock_stream(0x28, 0x1, 0x0) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002400)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000080)={0x28, r7, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x6895}, 0x850) (async) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000080)={0x28, r7, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x6895}, 0x850) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x55) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000340)={0x0, "d2a53a16850340fab122ba06223d6362"}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000000300)={0x1f, 0x0, @any, 0x4}, 0xe) (async) bind$bt_l2cap(r8, &(0x7f0000000300)={0x1f, 0x0, @any, 0x4}, 0xe) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x6}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xeaa7}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f0000000280)={0x3, 0x101, 0xfffd, 0x4}, 0xc) listen(r8, 0x7) (async) listen(r8, 0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xd}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 1m45.932110143s ago: executing program 6 (id=5986): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e67, 0xe7, @private1={0xfc, 0x1, '\x00', 0xfd}, 0x8}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) setsockopt$packet_int(r2, 0x107, 0xc, &(0x7f0000000000)=0x10000, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, 0x0, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000180), &(0x7f00000001c0)=0x40) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, 0x0, &(0x7f0000000500)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="850000001b000000040000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "be45f415d19a877b", "53a8e8ba641839da93589ef68e3aace9", "d6c25a50", "12b78d5d9ab7ce57"}, 0x28) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1m45.892746044s ago: executing program 6 (id=5989): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000800)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x18, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x3}}}}}}}, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x6}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f00000001c0), &(0x7f0000000200)=r2}, 0x20) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x20) r4 = socket(0x1, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="bc1400002e00090027bd70000000000004000000a51411804b8a9f750c996372b5b14b3a91a3ff88cca5dd0d428ddfdd02a37c0b93bcdade6c5307b79c2d122f"], 0x14bc}, 0x1, 0x0, 0x0, 0x42804}, 0x10) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bind$unix(r4, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xe1, '\x00', 0x0, r3, 0x1, 0x5}, 0x48) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000500)=@ipv6_newroute={0x24, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x8}, [@RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) 1m45.660766066s ago: executing program 6 (id=5993): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='gretap0\x00', 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl0\x00', r3, 0x2f, 0x10, 0x0, 0x4, 0x40, @private0, @dev={0xfe, 0x80, '\x00', 0x23}, 0x10, 0x8, 0x8, 0x7fff}}) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 1m30.616574891s ago: executing program 39 (id=5993): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='gretap0\x00', 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl0\x00', r3, 0x2f, 0x10, 0x0, 0x4, 0x40, @private0, @dev={0xfe, 0x80, '\x00', 0x23}, 0x10, 0x8, 0x8, 0x7fff}}) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 26.152905113s ago: executing program 3 (id=7633): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x20000080) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2}]}]}]}, 0x3c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x140, r5, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x12c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4de9c5f0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd59c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7292305c}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9805}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe4da}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1eac4647}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67d331c7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1cec}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf8ec}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8714}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x633b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb3c53a1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa9ba}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4be837dc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5e82}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe914}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x300c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5367}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2313cf96}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa94d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe58d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9685}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xca54}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x219adb2a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x65f6}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2083f65e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49a714e0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f878186}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x98b7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b94cc94}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4c7a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8000000}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f96c51b}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x40100}, 0x20000014) 26.016937003s ago: executing program 3 (id=7637): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000500)={'ip6tnl0\x00', 0x0}) 25.951066681s ago: executing program 3 (id=7639): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b575", 0x2}], 0x1}], 0x1, 0x8001) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a3100000000ec000000030a01040000000000000000010000040900030073797a3100000000bf000c00c618f03400f09419583ff7685919f0568119d9d14430cd4cf58c1dfd7388628bf5f3de6a380f8d8125bd18f3fc2da65ca40a2e034f2effc6760206b9fa54c9a3bb56d2de7b0e1f812b220dbbf2f19e5b8cda6b41301252936b3cfb63639324267c6755e81c6c85de1f625f5c68ac073ecc7689e762b96ba9e9bdf03192cb04a68b01dd12ceadde690d698e276d9df2338382acb1645661d568c7cd968849149f88a064133899c1b91ade7186461131748ba7b73bbfa3ded72096e0000900010073797a310000000014000000110001"], 0x134}}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c000280080001800000000014000000020a01"], 0xf4}}, 0x0) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="030b26bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000c080}, 0x814) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014", @ANYRES8=r1], 0xfc}}, 0xc805) (async) sendmsg$NFT_BATCH(r2, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r2, 0x0, 0x2404c810) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000007f00), r9) (async) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000340), &(0x7f0000000480)=0xe) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x40}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) 25.760958766s ago: executing program 3 (id=7644): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) sendmsg$kcm(r2, &(0x7f0000000400)={&(0x7f00000000c0)=@llc={0x1a, 0x6, 0x1, 0xf0, 0x3, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="04096972093bac364661f0ac68502cc89e57bfec8b701f614d2ace0eba6b3444d55bf19c04c24b2750523f0732b9dcd0193c7490b60a30d8f3ec83dc40394c4fad52f9ccbd108940cf6ca6da61a0d0697b466a24bc59d4c011ce732ec6a38a1ac554d95698a1176cde39d2306b7249f86a91f8ef1ef86969ff3d46f14fee165bdb3b4dc95ec9c95999a5fe19a005c2224e31e8e6b12ccd68708b2a7921017e8465011e5fe3235faed1b1261424ce4a5a49c84d8581bf4df546328b99c5d765203ad30caa382d27ef76b57da71c9ac041bbb35e722b026c35ddf7763a7196137adcec59a1eb4e822cc73c32ebe25e1cc93e2ce3f55890ae", 0xf7}], 0x1, &(0x7f0000000340)=[{0x88, 0x1, 0x6, "2cf01f89934521d84484a05a53e180e89a97f704cb7fa498c5f2b70b722415a6a047516243f5ad93dfb8660522525fb1a4443fcb56c30080a8f10f4bd96d00c3839012e7769a0611eab73110c3a8de3efd1717a7de23e0837018a0bd0b281579430cd27358446030623ec5daf04e544f2b6f379b7d"}], 0x88}, 0x4000000) ioctl$TUNSETNOCSUM(r2, 0xff04, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) (async) sendmsg$kcm(r2, &(0x7f0000000400)={&(0x7f00000000c0)=@llc={0x1a, 0x6, 0x1, 0xf0, 0x3, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="04096972093bac364661f0ac68502cc89e57bfec8b701f614d2ace0eba6b3444d55bf19c04c24b2750523f0732b9dcd0193c7490b60a30d8f3ec83dc40394c4fad52f9ccbd108940cf6ca6da61a0d0697b466a24bc59d4c011ce732ec6a38a1ac554d95698a1176cde39d2306b7249f86a91f8ef1ef86969ff3d46f14fee165bdb3b4dc95ec9c95999a5fe19a005c2224e31e8e6b12ccd68708b2a7921017e8465011e5fe3235faed1b1261424ce4a5a49c84d8581bf4df546328b99c5d765203ad30caa382d27ef76b57da71c9ac041bbb35e722b026c35ddf7763a7196137adcec59a1eb4e822cc73c32ebe25e1cc93e2ce3f55890ae", 0xf7}], 0x1, &(0x7f0000000340)=[{0x88, 0x1, 0x6, "2cf01f89934521d84484a05a53e180e89a97f704cb7fa498c5f2b70b722415a6a047516243f5ad93dfb8660522525fb1a4443fcb56c30080a8f10f4bd96d00c3839012e7769a0611eab73110c3a8de3efd1717a7de23e0837018a0bd0b281579430cd27358446030623ec5daf04e544f2b6f379b7d"}], 0x88}, 0x4000000) (async) ioctl$TUNSETNOCSUM(r2, 0xff04, 0x0) (async) 25.727892268s ago: executing program 3 (id=7645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) (async, rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (rerun: 64) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x6005}, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x2}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv6={0x86dd, @tipc_packet={0xa, 0x6, "3485c0", 0x2c, 0x6, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x1, 0xb, 0x3, 0x2, 0x2, 0x0, 0x1, 0x9, 0x1, 0x1, 0x4597, 0x7, 0x1, 0x4e23, 0x4e22}, 0x4}, 0x3}, 0x4}}}}}}}}}, 0x6e) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611494000000000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 25.470725611s ago: executing program 3 (id=7649): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELFLOWTABLE={0x50, 0x18, 0xa, 0x300, 0x0, 0x0, {0x3, 0x0, 0x1400}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0xfffffffffffffe23, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x28, 0x16, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x20048010}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000030000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008001340000000040800124080000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002600010026bdf000fcdbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002600010026bdf000fcdbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x40, 0x13, 0x1, 0x2000000, 0x25dfdbff, {}, [@IFLA_ADDRESS={0xa, 0x1, @random="4780d8506416"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000d80)=0x5, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt(r7, 0x9, 0x22, &(0x7f00000001c0)="eef703dcec5f2827c4d3bc3db2853e0928ef1ddee40ff769045e6357425169e27b8aa9f94c645672fa75c24f09335c88cd34b230077d41313321301c2fc6b0487454604eff18d7b5cb52e14c16f07795b7b73febea33823f82158cecad6aa6427a74649d720173fddc9b13efaf96cc5cbee96e3e6d0650bb2a5bba77e18ae3342bd5a438a6d8649e679c7bc648381cbac61ec490824c24a1d515518d749eb9897486a561e2075616f2210cdac15969b9b46a0716bc21cf89a0a49819d29369fd659184f146dc3abd32ed71e5509bf1662f78789bd88aa62b", 0xd8) shutdown(r6, 0x1) (async) shutdown(r6, 0x1) connect$bt_l2cap(r6, 0x0, 0x0) 10.422374179s ago: executing program 40 (id=7649): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELFLOWTABLE={0x50, 0x18, 0xa, 0x300, 0x0, 0x0, {0x3, 0x0, 0x1400}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0xfffffffffffffe23, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x28, 0x16, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x20048010}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000030000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008001340000000040800124080000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002600010026bdf000fcdbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002600010026bdf000fcdbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x40, 0x13, 0x1, 0x2000000, 0x25dfdbff, {}, [@IFLA_ADDRESS={0xa, 0x1, @random="4780d8506416"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000d80)=0x5, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt(r7, 0x9, 0x22, &(0x7f00000001c0)="eef703dcec5f2827c4d3bc3db2853e0928ef1ddee40ff769045e6357425169e27b8aa9f94c645672fa75c24f09335c88cd34b230077d41313321301c2fc6b0487454604eff18d7b5cb52e14c16f07795b7b73febea33823f82158cecad6aa6427a74649d720173fddc9b13efaf96cc5cbee96e3e6d0650bb2a5bba77e18ae3342bd5a438a6d8649e679c7bc648381cbac61ec490824c24a1d515518d749eb9897486a561e2075616f2210cdac15969b9b46a0716bc21cf89a0a49819d29369fd659184f146dc3abd32ed71e5509bf1662f78789bd88aa62b", 0xd8) shutdown(r6, 0x1) (async) shutdown(r6, 0x1) connect$bt_l2cap(r6, 0x0, 0x0) 1.685917437s ago: executing program 9 (id=8033): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xa, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001", @ANYRES64=r0], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="40ea15289027e269", @ANYRES32=0x0, @ANYBLOB="00000000063800001800128008000100767469000c000280080005000a01010208000a00", @ANYRES32=r2, @ANYBLOB], 0x40}}, 0x440b0) 1.564519284s ago: executing program 9 (id=8036): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x80000) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000140)=0x4) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {}, {0x0, 0x4000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0xc0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) (async) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000140)=0x4) (async) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {}, {0x0, 0x4000000000000}}}, 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0xc0) (async) 1.507511775s ago: executing program 9 (id=8037): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988200000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.318368486s ago: executing program 0 (id=8039): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x1208002, 0x4) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) 1.215992339s ago: executing program 9 (id=8041): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000300), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00'}) sendto$inet(r0, &(0x7f0000000000)="7fb03f636e876aa57818f81e7030d06239f39d7f67d134fa187ca40cc05bb130fb1eb2028b5653c7b7117d451f0e2aab7a1c89b8c0900ab4bf09f453b36c2baaa7e78483c1528c3c8ba43ae0cc5d5c71d7ee8d9d72834db12e896ddf56f994daf88be4dea85b49182ad98c500fb8d0d91e6beff41bb5f85d26d94d8b03ab144c0f520e1f25d5b3a809f10c7ab237ca8f9ca413407621a970fa3b49", 0x9b, 0x18cf3e04aae54c0f, &(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000000)=""/48, &(0x7f0000000080)=0x30) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r5, 0xffffffffffffffff, 0x8080) write$cgroup_int(r2, &(0x7f00000000c0)=0xa7, 0x12) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="68099a4e30c10624a1bd7000bbdbdf2500003ea3", @ANYRES32=0x0, @ANYBLOB="100a0500231a0500480012800e00010069703665727370616e00000034000280060003003000000014000700fc02000000000000000000000000000014000600fc020000000000000000000000000001"], 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) 1.214827636s ago: executing program 0 (id=8042): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r1, {0x4, 0x2}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x4, 0x1, {0x3, 0x2}}]}}]}, 0x3c}}, 0x20040054) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, r3, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x1c}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x78}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x40080) bind$xdp(r0, &(0x7f0000000680)={0x2c, 0x7, 0x0, 0xb, r2}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800b00010072656a656374000014000200080001400000009205000200000000000900010073797a30000000000900020073797a32"], 0x7c}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x74, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x8, 0x43}}}}, [@NL80211_ATTR_IE={0x4a, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x1, 0x8, @device_b, 0x5, @value=@broadcast, 0x1, 0x3, @device_b, 0x24c}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @ht={0x2d, 0x1a, {0x40, 0x0, 0x1, 0x0, {0x40, 0x4, 0x0, 0x97, 0x0, 0x1, 0x1, 0x2}, 0x1, 0x6, 0x5}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8002}, 0x40) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r6, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000700)=""/218, 0xda}], 0x1}}], 0x1, 0x41, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x9, [@var={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x2e]}}, 0x0, 0x31}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa3, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xb5, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) 1.064852836s ago: executing program 0 (id=8045): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) writev(r1, &(0x7f0000001980)=[{&(0x7f00000000c0)='\n', 0x1}, {&(0x7f0000000340)="169700ddee9c46247b2f079d8db41e2109816bd03890a5cb0c742271fc815be29149d3cc374f7aec5126270c9f4e4673556ea979384d331b571b68711eba50193019650d950a51de5bca455cac113dee556ce67c056d8aa6e97e90bfc943b7dbe812c613290b8b61a80ecb9acbe24cd37d5a01a00a4fe728daa63ccb73fc1db4d793c7452ea844474d278d0933744191d02c4a9f0add4727c952325d16694ea3e685b8248f3c01ccd4c88be608f9104f938b2bab3f7243f09105e704227bcdd62a00d90aa67f24865b2ecf3da717", 0xce}, {&(0x7f0000000440)="13c4a63256dca5a4d34f2c8f41b7be2b77", 0x11}], 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r2) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffc64}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x4850) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x128, r3, 0x8, 0x70bd2c, 0x4, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x481ff260}, {0x6, 0x11, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xfe01}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x93dca889}, {0x6, 0x11, 0x6}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4008080}, 0x80) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x124, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x3e, 0xa8, @random="52c2a48479a3197dc7a7af401d623fed2bb2ef7add78d8642f866776972845bc6cffd044899f07d48085d4a4940d3edc2604b2cb66b2fbd1f8fe"}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x42, 0xa8, @random="f4fcef27a875f646a1cad24b1c1c20db9857d9f71df7cf9beaea8c76a1524f5b2f6d132941f4e381fc2359ee2735c03910552427c45ec372495751479ef7"}]}, 0x124}, 0x1, 0x0, 0x0, 0x80}, 0x4040015) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040018"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x850) 947.568361ms ago: executing program 0 (id=8048): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="0203000210000000020000000000000005000600000000000a004e240000f59cff01000000000000000000000000000101000000000000000200010000000000000000000000000005000500000000000a004e2000000007fe80000000000000000000000000000bff7f0000000000000200080010"], 0x80}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000009500"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10, 0x80000) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e22, @private=0xa010102}, 0x100, 0x0, 0x0, 0x0, 0x330d, &(0x7f00000000c0)='gretap0\x00', 0xfff, 0x2, 0x48f}) 914.593031ms ago: executing program 9 (id=8049): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x4c, 0x0, &(0x7f0000001000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000080)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x7, 0x4, 0x0, 0x0, 0x38, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@cipso={0x86, 0x8, 0x2, [{0x7, 0x2}]}]}}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x5d, 0x6, 0x0, @local, @loopback}}}}, 0x46) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) 860.752964ms ago: executing program 0 (id=8050): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x111}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) (async, rerun: 64) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (rerun: 64) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async, rerun: 64) r5 = accept4(r0, 0x0, 0x0, 0x0) (rerun: 64) sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) clock_gettime(0xfffffffb, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async, rerun: 32) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) (rerun: 32) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}, 0x3}], 0x2, 0x62, 0x0) r6 = socket$inet(0x2, 0x2000080001, 0x84) r7 = socket$netlink(0x10, 0x3, 0x4) listen(r6, 0x4) (async, rerun: 64) writev(r7, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4800000014001d0d09074beafd0d8c560284606088ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e6ee11ac3439693b948e142ff0000000309ff5b", 0x48}], 0x1) (rerun: 64) socket$kcm(0x2, 0x1, 0x84) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000500)) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000150b010300a7dfdb59ff2ed8db000000"], 0x14}}, 0x0) read(r9, &(0x7f0000000080)=""/186, 0xba) syz_genetlink_get_family_id$team(&(0x7f0000002400), 0xffffffffffffffff) 850.892182ms ago: executing program 4 (id=8052): r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006a008313"], 0x28}}, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffa}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @ringbuf_query], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x4e, &(0x7f00000000c0)=""/78, 0x40f00, 0x8, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x2, 0x0, 0x8, 0xe39}, 0x10, 0x162b8}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@cgroup, 0x36, 0x1, 0x6, &(0x7f00000003c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x1, 0x6}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000540)={0x6, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@ifindex=r8, r1, 0x2b, 0x2070, r2, @void, @void, @value=r9, @void, r3}, 0x20) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r11 = accept$alg(r0, 0x0, 0x0) accept4(r11, 0x0, 0x0, 0x0) 626.846228ms ago: executing program 4 (id=8055): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x24}}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xfff3}, {0xffff, 0xffff}, {0xffef, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x82, 0x3, 0x4, 0xffff, 0x7f, 0x7fffffff, 0x1, 0x40, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xdc}, 0x0) r12 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r13, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r2, 0x109, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x17, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1c8, r14, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x108, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x6}, @from_mac, @device_b, @device_a, {0x8, 0x6}, "", @void, @value=@ver_80211n={0x0, 0xd, 0x2, 0x2, 0x0, 0x3}}, @a_msdu=[{@device_b, @device_b, 0xd7, "494820c06a285e0259edb746a63f613e73625c208b13cf3e9e2b8d2ba4e609fad5faada0e02ddf6dee98e5b55122578ce49719ae6851c18edf066eaae98ac2a9c52350a42621dc4c0176895e4d0f2ef07ffbce8ac943f80459a487e6fdc91b8ab9593b3148ea2fce853b199441350dd889717877fc55da9a774d1feeac095ff0fbdcc50bf5bc246df8c6939bae08e3bac38881ab10b0320a1ece1aa94632c00d4ef6b19294c3f2458a0629a9d6892b52fe54abd23ae4ce85b53422cfde03ea770c466c23c4dc5dba297acc99f06d7a7c81972ab082108e"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x80, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_b, @broadcast, @initial, {0x0, 0x1}, @value=@ver_80211n={0x0, 0xb, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x5, @default, 0xc80d, @void, @val={0x1, 0x2, [{0x0, 0x1}, {0x1, 0x1}]}, @val={0x3, 0x1, 0xa1}, @void, @val={0x6, 0x2, 0x8b77}, @void, @val={0x72, 0x6}, @void, [{0xdd, 0x3f, "35d7631a7ed741dd1b8f17e511914ed4dea912497f20f6a016c0080a7ceaad7260e2900183961336994a05ae7436bc830af96d3e52817e1e7211c88214bcf5"}]}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0xa}, @device_b}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x11}, 0x4040080) r16 = socket(0x15, 0x807, 0xf3) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) sendmsg$unix(r16, &(0x7f0000000840)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000500)="1fb76fbc897db0cbc6e3712c6a8daa632e894761a4a00f7827d4383509a7b35228bc3412e54c7c38d383ccb1fb79690cdd4ac217766a6d0afababeea2050cb7c08cf710d175e9dc439285077333536b55056c80cd459fbd1303d3b4ca1d1bb3a38150eccecc2053f41a367c6172d76e6ae6bf9d0af7cae85a935121407390fc3b5e9df6df64188a000aec50b20b5c36ecf74de5531967797861b3c588e753e3be1f2a3b0391895283ff58a56c6ea5d211bf33b5032f54941faefbed6680e0a6556eff48e22a4e1", 0xc7}, {&(0x7f0000000600)="b99acb35d74c69a23712336059c3de2167810bae3f1d12cfb09228981cb9ec337e37ff32143e2ab74d23f93a3388c4b431012bc3a055ed09b9543d09f673732a4e61b4cea89a28dd7210cf8dfd34554e98497bcb1fccf4b1999bd13b3debc2ff3821c462409857950d1d4c3253", 0x6d}, {&(0x7f0000000680)="2f4748ef1044102b60366b13bccccf72f0964d3acea3bee5eb0025fc6f2e130e06f9897db457acf06d8914ded6e67fa39d1ddca355514d6fae59d29a363bfcc4ae6034557ff764cdde0b9832906a7a78cba8864910964a9332b8cfa2e66fbb6a0971cf5d8e1ee101aec002e3d808c873cc123603a25e8e88716ef0e6be8a862352f4442bedb96ab89998309cf638214ee9a9ef7b315f81d2a1ab109afbbaac9e3b6f098e331146f04d1755a71797fc4b38d079da6c6de4664e9eac843f21d6c77de7fdf69d8569ecb8f4d4a7f240fac7adfc23234d", 0xd5}], 0x3, &(0x7f0000000800)=[@rights={{0x18, 0x1, 0x1, [r15, r17]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, 0xffffffffffffffff]}}], 0x38, 0x8000}, 0x20000045) 578.433692ms ago: executing program 0 (id=8057): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) r2 = socket$pptp(0x18, 0x1, 0x2) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001880)={0x0, 0x1, {0x6, @struct={0x1, 0x3}, 0x0, 0x9, 0x2, 0x9, 0x4, 0x8, 0x64, @struct={0xb6, 0x5}, 0x90, 0x2, [0x1ac3, 0x3, 0x1, 0x3, 0x5, 0x401]}, {0x8, @usage=0x400000004, 0x0, 0x2, 0x8000000000000001, 0x800, 0x7fff, 0xc, 0x400, @usage=0x6, 0xe, 0x4, [0xc7, 0x4000000000000, 0x7, 0x7fffffffffffffff, 0x3, 0x6]}, {0x6, @usage=0x8, 0x0, 0xd, 0x3, 0xfffffffffffffffa, 0x5, 0x7f7d, 0xd7, @usage=0x16, 0xc, 0x6, [0x4, 0xd03b, 0xc55d, 0x1, 0x4, 0xc6b0]}, {0x80000000, 0x0, 0xef}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f00000001c0)={{0x2, 0x2, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x4c32ac5fb68dbcb8, {0x2, 0x0, @empty}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000009fc0)={r3, 0x5, 0x33, 0x1}) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r5, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) read(r5, &(0x7f0000000040)=""/244, 0xf4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) 504.930121ms ago: executing program 9 (id=8058): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000080), &(0x7f0000000100)=0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xa8}}, 0x4000011) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r3) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r9) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r12 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x1, 0x8001, 0xfffffbff}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r14, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 476.675757ms ago: executing program 4 (id=8060): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket$kcm(0x11, 0x3, 0x0) (async, rerun: 32) r4 = socket$unix(0x1, 0x5, 0x0) (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x129000, 0x0) close(r5) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xc, 0x8}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x3, 0x6, 0x0, 0xfffd, 0x14, 0x9, 0x4, 0x6}}, @TCA_U32_MARK={0x10, 0xa, {0x6, 0xf}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="27030200590214000600002fb96dbcf706e1050344ee21144add66a44a6b1324890200a012eb", 0x26}], 0x1}, 0x20000000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) r11 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r11, &(0x7f00000000c0), 0x18) 459.800682ms ago: executing program 2 (id=8061): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000440), &(0x7f0000000040)=@udp=r2}, 0x20) (async) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) (async) syz_emit_ethernet(0x2a, &(0x7f0000000880)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="fa34db48716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"/496], 0xe0}, 0x1, 0x0, 0x0, 0x40083}, 0x4000000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f00000001c0)=@getspdinfo={0x14, 0x25, 0x8, 0x70bd2a, 0x25dfdbfd, 0x2, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000081) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)={r4}, &(0x7f0000000080)=0x8) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0xfffe, 0x8, 0x5521, 0x0, r4}, &(0x7f00000000c0)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x200000}, 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 372.855339ms ago: executing program 1 (id=8062): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x8001}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000002c0)={r1, 0x76, "4e99a7465812c1271aee17274cb87f81ee231a972e6d1ab7c2e6e55f930803e26531bb6ed2a0c141ebbb9920c24d883539999515facb5dd347a0ab62b26d41815cef8364942c0faa3188ce905bde5be7d25056f5a37ecae47e5ed797c0f2205c65aefdd9f69a7a33b7541b82f32697715189310eeaa2"}, &(0x7f0000000340)=0x7e) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=0x0, @ANYBLOB="f5ff0f002558b4541f9a9e42f7000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000740)=ANY=[], 0x18}], 0x1000000000000051}, 0x24000055) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001000000000008000200000000000c00028005000100000000002400038014000180080001000000000008000200ac1414000c0002800500010000000000240001801400018008000100ac1414bb08000200ac1414000c00028005000100000000007a27df9b841b"], 0x80}}, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x8000000000000a, &(0x7f00000004c0)=0x4, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r9 = getuid() setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r8, &(0x7f0000002640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="c0ed5af6", 0x4}], 0x1, &(0x7f0000000380)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}], 0x18}}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000003c0)="abfb87b1c2b5c50f5da625f5839deca419696f603be86a32fbd14b37db7d26cabab14d2b296d5a23ccaaebdf9976950d7cc0a7a96f38467822d144fc553b108f2889f7c0f4b43c3d4349e17aa01d34821a7adc58fe17f98023ceb9b6788cfc9a16ca63890203b796ba5f07", 0x6b}, {&(0x7f0000000e40)="e9816b696198d4a647ebdf2d1fa3ee1cd1064bb4fe4f7c2b76753030b8f0a1829234af2b10c18f202dce8d922cc8b5db75e415dc59dd6c011bc45cbf3c28051ff4749d8aae28c8efbf5ae76fc865a3500f3d49499d82d6aaeee2c17a3cb0ecd718de7de867fc4ae53ca0d3ec4a338a7743e7a4b95a37005ce50ddb343b77ac8d134677ac786ec2e12fb6d9b2bdbd0b4762c7a5707cea5a238f9131574c0648ddf03f4509c615272479a33ead654a15f2eb67ffc518fa6fc98078a3cf8c65ea3461e18eb447a6072b668df6456e502239161697e4dc770293335a15cec5f5337e0f4941208bdb91f120aff4491e812b1f612898ede216df9e1819cf0ad5525bd6ae1497075727d4d52a7d4f0fc290d2856bf20d1c0df484c3cb3188b0177e5d367f72eb20a660d6a3691d496702bfde52543cfd2a0ce102bce8d98d0a7f7f55e9a58cf4565c5890969e40853e10d0ca260ad5eff81dede59e0f5f059e68273b3504968b61b30f711634d5b42921a13ffc42ec42d6530883aa09f011c538fc09c3c351966325852cc266040dde8f2d7dc6bb231228ab9781e3cfc98245cf2e6f67d7fc989cb9f973788edf65492cb7b14465a202fbced572ce4a6f27db990a637f614ba2e72f4af64115b75321f556209b828c0bfb0f6b72b21646266cda7bcde2e1bf85cf2a5599d3d72faf50df551ebd76d03df55cc81fdbd29b50117da19ba5fcb927afe76339ad57cf915b077069253938179bbeeee233ddb40890aac0af524af41e4a66019004da801f5880b2817a508a30321e389503cbf9ee181a781545a57e0edb82209744795f8bb5d7fd0c14ed5f7a2c4eee4616f4ef6eb4a73e28b4a8753f5091f2932d89ee8c254156440d3c504b8ab1303be88c65056c1ac224d131f2185298e228b07996823e8dedd77fa7d82ef04191864787c3c34a06944c713b59adc0507387403eb7394aaa727e7fa52145361f90a4615b5059a1f9188fca22e28a6af719baae6e1e5b710f2381a7660605fc1f30a6dc4ef0eb8e98a2e433e2f939836ad14ca269f0f9e42ae6c230a9863002ba857828650987fb5627330efcbbd9040a84ed997e1148b65c9393860cfb7f3faa572cb926fb9e1dc1f1a4cb07c8ed5e41c61949c1d3f976e1ccfac668e1d8fbc26895c35ff04fe54eb33091c391aabc0db02ab5b2bf420c9a4698766e3d6bf0f161beb05d486a610833d3bb288567d25322c4719344ff314579c494a7b5924d4516b65f5f129ea4a49f8dc37f2770f1ea88d3a406d5cc082cf814790e2e1c24349a9e118a07a002bee3d77d0b9c2f8b48d12824870d01d41bd1bb56472a52cbae3611969f4355a172e6a882163183f94690a6d837107a7b433914d2b664b9dd727bc4c49e80", 0x3da}], 0x2}}], 0x2, 0x42054) r10 = socket(0x10, 0x803, 0x2) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYRES16=r8], 0x3c0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r12, @ANYRES16=r11], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007040)=ANY=[@ANYBLOB="78250000400007012bbd7000fedbdf25037c00000400c2805b2501809c23e18061038280139ec505f0ae69c92df229706ab942b6b2f72df2a680c973e27d5fef5c92432f119086dddbb4ae2ec717c219b23507aaea96acd578aac2a0f04c7e04bd9f489e5841f4763eb35313386091a25ac5c96c9b71868f873fc92142e1aca267ac74cd8c9b6584aefdc1b3def792704fee715503c4e16f3eb3a32977e1b91010a0f2643de26800cffdad87525aab2f6507890b1da5857360c0656dacaeffc0c6dba4220801fd1c98a63b739a409898a695297b4f27a696ca037876e5a37781783d0ae40b301d68cf08005c00", @ANYRES32=r9, @ANYBLOB="040081800400ab80d55b270024351d07ba5d6d9d15d9700b2bebe2ba4c20134d98e12a59254048246aab674dfe9eb2ec3f6b7aacc5d7e5a932c8298df58f8f8740ab07ab23012d6a9d09f38bf6a163957c81601fc0f8f926748ec98c25b227a8a53ba1dc4064bbe5f89d5a2a15fbf07a002c3729a4a1785c131a333dbdd191430ab5124ef7963a2ba81d0ee829b04a804d8d6e34dfa230ae3a239c037f1f07fe2884ba75b01ea5d67d5105140d0d3bd8ec16659f8d0f19d851c67d935f1fd471706c0e2b48a74825c83c099d799d8700f2562ac0dce22112d55a6e331f8cbd44124412b61323d8c7fd8763ebb28cf37cdcb5a8c1e274c2dcb4bc493889c7be6b040005808c017d80d8004800d87e3acac4aa30a1cae2a1de7907aad21cc8876117f5f2a73c0f3deb94b40e6ed3d056d975e2fd72807172ade5aaefdcb5fed8553d8e48efcf1ea8915cd71e2203c234516e441a6c0727311da5f4ec37d7995c3215843232a9bc4bbb600b27cfac705ad1e9d985ddfce2cb058b66c74c412446f0dc2ae942491a9b85b27a2985474984992b3acf987b563f2377bad98565efa19fce351acb345ce4c1d7c6f47afa75fc318ef669e20ae105ec34f1b4bc4a3480e0355ff4aa8860052699c4787506607b44a9c9c072b4bb66e6633018844c03ecd3b000ea809800008048cf54cbc443f305e70f6481a5189805c015d80897b3713665ac9995219586fd4bae7577a2b24e6840ab2fe80b8ddb86e6641a885e052d42e7419aa4ec9f096f54342846b10b1bc975424017a6f86d731d7c71fc81532bd6e71c5f16bda79a702914ecc1e3edf596b1cb2007cda0979b7b408bd004895fe5de60daff0eb8c470f37d014e2f53e2aa98dac14329eadefe861f565b1400568004009c8004002d800800ca00000200000000002000328008000d00070000000400398008002e00ac1414aa0400928004003c800c00630002000000000000001a9083a89f7ac1f212cec7a9795a2fb2d979306cd2dba25ca87772e562d23fe81161a096eef8ce05ac3ec3ad60cca3f20aba1ec2a2177e0fbd6e5ce17fb422d61cdc130dc9d0bb75a2e10c245878c4f2fb9ed20838922b0424174751c310b8a5ed43db81bd153ed87b8a2db20da5b262effb5b09dfeba2fd65ccfaf18fa12dfa39da5264d6275e0c939ad5aa80c1876ea83980104bdf758db7e28f132430109100134a3ee00a4f56224465a1b3a4e05fe5e194ef9f9e033e77d20feab3253debee5a97129cb0e7dafaff0718a55c64b98583068e51aabed952bdd92f4e763bc63954f9b24b791f420f6e9071da4e730d6ddc4c28d3a1bc2aa7da823062c87030a9e64efb9d647e2dc7e9ad70ec0cd2b9fcb9426fe70bf46eb8eab471db4283bca86908b7ad7ee34d7fa9a5dd836cc6cadeb2c435126f58eec6a538ea22ef952f18bde1c767deb95b50222942d91c0f4dec18cd8d0ef507e51a4459693772ab01b0cc2f1512eea57afbba5173f9e11ea1cf9d8e5cce4a8473b71ebadbed3141b5e10f025a3163a617ae8371d16ee0a7420746152b51ed8dfe9aa3b4adfb463f1acec80df180b8eea0d65f2ab4db613aae0a9e9b4b3137341032056578760d13137e719ed801e3b1ba519baad6e73a89299d7a4d13ef5159a8bd6ec1e3cc61a69d424c41725cb21e76140065225116471c852b49bb7e431e5adbced19a16852246d03102b6ad92bbc9105a0c343004f3063e093ec1dad8a06e5058c4671ce63e7ad11c99d709c9de1b8e4c4d358092b9ab0b51d68fd15e79d869f8ae982991b56df9ffcb09859f025affebdb1579984d5b6ac6c2631b3c7f62c09ca48aad451a2add6fc16c07cfe81ab4e1eed3c36725857be03802f1b54a4df16ea0b34539c930036f337c559d5030b17bcc1ba790234c6fffd1a571b07363860a65f08591b7c41e1a54dffb0c6330dfa7c70c26c0393ab8a0d04683abbd12b81db0eec4940627f1e61f5861700fb09a60b7731d286f030eda7a7dc4a3e016864b8d3a781535c203efdf243b4d5eec43921941a554cf4ed6c25c8d51d140d658a3138a5261a7482fcf6a2ac5ce99419e416f843ff7e508276420a155b1d0339b1f45bf5a6defe161d51bda72c1b39b6d587069c4819fc4fdd7aaeb81c7a230d8687b9babbc59f2ff05042108f0a08847fa6a89e79d9e224a45279eab41c9a934821b3dddeac8f641b8c160c8996a474b6e0c90967fff16e320dfa877fc3da1056852ca154723cdee8397e580d502caf7974b241f0c03a8e2c7a546ecae8c17d5ea66ee0b3dc03c0951c739842a0bc386af4d3f0d94dfa4ddeba862d403f27d743810ff7fd1c2e906e8b6e2352925b8cc0990aacfe335d6c58043eea2e5e3c7ce553ca5a45fde51121134ace16abb8e9af81cfb1b20573d09191a3011c94cf88ff7401587e46e9d16e4b4dd463f7217358257efeb8d0fb2e7ca1b9b61fadecc4603b9e692520a637ac53d2285066c22cf46f62cfae4978d5baee90b2ccb69700a2e3b3dcb6a1ee1103f49079ea03db6303e8acdb2f2d8de1e49c08364274b7c571995810f0ae46e544dfbd530660bda0440b64c42d0f10600807a9b386908bb9f10d52977d5fad0337df7e8725617cced529dd35ccef22f1fc4136943faae6cc3a62f75b5d479fca7add12be5ef088b03b1ffdf8658982a03ccb5e375048dcc602a3afa8527bfbd149e58b032bd1ea65f630cd466a4573dc93feba8977f7717276cbdd6e398133846f8fd988cf31695429a70e335c8ac4e51e4b7a55d55ce429900e9a28dd3e576585ef8163d75fa2ba0570466d5c01e273ee72a388803512a35e6701c83f2b4019806237c0b71aa792cfe76d70f0256193df44301c6651cf36e5c806f4230a79a7d3ad325588ab8ad032370e1919ab9f4a46dcc9bd9df77965a44c8dd2e5a3b08ae89738651fe69e9bdc79ed478f4120bd374ef5187019aa6f9490011b932b152dc1c5aed5ceb047513107a9aaa1699f7a8de6879b01486f03569ee4990b6c1f23423e61b5ae483f5662d30161353f7c442cf4c7c6caf983c0d1eefddca4e4fdae2c42c7d7ddf4bd93a6cbbd17a843ea2ddf447cfac705e230fb12d211c8a7245c161256c7d9a4a6fae7291dde2e740f600eb3ee946180aec7fa8897c21f604b59f181e3bd0691854f2e73ff6376c77c26200c0cd1a2ff26f64b056843897a92510f4ca5f61aebc1e34c6904000b8c87a82dbf5c562ee3879ce68a31b37ed53692b71a1256c82f4b6eb8b589b8f9a6db0b4986be5eea48348a54339f7c50038d0d8584a13da4cf7ad19b133b46a3e0c22d3c924d48030cab0ed77ae302782578cd111977457f32369ecef76fbf550c00d01c52787b8c65c0ea44f4e4504c8f8aa37f2e5071aeecbb72ebf36a03b6894e03bf5a64b43a560da0efbae3f20f7c24b113ea47de378899c7cc46a31aebb554f5a5d6065e6859beae9109632a67455711fd5dcb926c33d4c76ac8589ef0fb9910ad4ca69662b060d15dee846b25ce3e8a4d11724d84ea40d9e7f880fd4b921088255fb943f5d35797e2ce1c51ef6298c61bab0f38b38d651d27085bd2990d57365fc9c62dfd8c6e38af29d74d813f10e727f7482b979837b133f4cd9e3e33ba44ee217fe7a3ac48eb6d52de56f7410c50eadafa85ae8d0239faaaa0fb8e42877b70390d3162b772c938aceb7a61f40a529f6462f462ba9f6ae644fbd337d9c958114135eda73e691c66d5eb82b9ceb3d48d4ea801271745f321430dfe0bebd9c17038dbfe6918425fcf79d65fb77714369af7cf849ac8e1ea2acd02733330296c0018f2c7e7d1e83e67cd624645f0e316bb54abc50ebfaaefb64aa40483f6cfe4f884f8dceacb372b664f51540b002eeb4f0f0254de9206d3a45f5fb9aa92026b8f04d83d4718ab22c8d5c535e239303ccafd278738a3670e539fd5c4a5c990780a88a5d63e95ce503ff91a2479bd596d48a681afc294775551cd07f5b190af2fab169ba9bc36503239cbb6dcfe899dbbc6c1ee867938eb675f6cc6552e73773c6cf7bc9d74d5734d4f62ee3a7620a396b8162f182d249abf324cace706f99c2811fbba81e7ea4775f527f86aa86e7c707223a7fe0cf2ad21c1e09ee52984da0d6b3bad92495b919a36b0cf6df198e96f56217680bdd3e9ed730ab08a40799440d8d83fd28145d7c9550ddf8a98bbfd4a75775e61fa2e70b725c78cb75246d0ff7923c0283adf99efd49aaaf0840eaa3f0358f6a7b9964e131ec05317ed5913de45b3c33caaec32f69e98516f35cf432645d6d30fb5d0e077797bf0a0fb473ee602c14b9fd0e7520807b6ca4d09fceb8dd5d62b020a036d291888981b1012ce06a9ef4ce4503365d533e6282dc3f02aec311d6410940d10383acac9027f0f01b30b8005d459d0c0de257bbea5c7c73982d77c20602ad9f29a55ab457737cd56f3508e342ca48b5d49e9098a3e1617d0c41f5a17421a2f9b8b6ab2c6269e62b35aa1e21b4baa45de1a84a037862635e5c4d855b14c2f5b959c44d7bc4db0890469985362d93820ad228a5e75127e4acc23a53bdc928d10b0be0e50d1076462041e8bab54f5a0634ad78d115a3686162b5e4e1134e74f70c2cb32e298a6dc6dd01a77ef476fbffbf60d9ce5200a8ef18faec605386e059cc66dc3910b84af5f3b433f389ecae1ae0f5844dbc236a1de5dfa3abe965a4f8bd71842abcb5e33d9d1e412dea305dd412ec37879dc932b3f0e0d15ac442b8667071a34939fc2cfd65ba9e1195aab393f2fd91dfff0bb3baf4bcca033074e87c0df247e0b30647f584f441b8d426ef5f92a22837fcfbf24912a9fa9d22e06b12bd0bf06e10f3bcec5378beaab03d3887a61d557219fb4a02c2e8a1c8068947485bd3d874b0555f9ad7242bc84f3361192a8e4ff2312226e641fcc8fc77b800dd2efef6f27357c0c1a72de1f6fbdb48cd496a5e5f6bb8975d0d2764233a961e84d951cb81bf683cb50138699ebb38e42d11b098bf2509a4fb5cd264bee600543a9d969084d6f60842342588705d7c9a3dd562b6ba32ba440ac99a0ca9d9a88e96255351fc183247d82cdc72dfae6c129e97bbba2fdac4f5cee08e54d19765cac1b644d93db91c9ec3f1d43b0d8e8ef17c95da5b28602c59212fc9170c429108c29b699550ea0fbf27a855e9dfbc2e835d9c8d6eb38484a516ae6151a368f5c62632242bb1b8adfd1e297d48ef6c68e4a26f114953f0ec33be9a178a95ecb97d098a29c9020240ec3b1ef3a0a2264c2654553e2b945f0cd2d332049ceece52e10143cfe8034aa59efb557604ac3e4201b5b2cc8e8e9555b93ecee822836b1c7d418500158ac1d59ec292b84685d7f43b7c66819ccffa22cc9b114ebec5b27d2d9d86d5fe138301113442f5589aec79825f0cc63c78d5fedbb4056e78453a864ea549b547c3cba800644bb254c2f934afc3449d2567a08093aa8e10be852e22641fca4ae9e3ba478bd3cf880c4847936589228f122b3e620bb6bdde358f936fe8bde271146be1aa224cd563bda0f8f1ace8b71fb65173552ca5064c00d244602640cf21b82a6868c14334ef8f3cd3c6c9d91269acc97bea61edfffad80c3124ce5414135b834f1de998783929203fa04d70071c09c90db6fae1f8e9f6d1170ec833469d1edf9aa60256c774bd7014beb174a36c06e4ff3deeb1a45014278ca954bec1a33a9f8252410db78d93d3c1a4a3245fda722e860cd861ab34804d0e1f3d96503ef64c2559bda3bf3d170ef81497572cd6c82f35aae752300af2cf53ec57b05d03b8b0d096c082e2e765732183539710a715b37b62050e8cafd68f5818b88814101fe5d0dc3694e2f7af7abd124f75cf62090fed5e43e7a53447f2499ccd0320b313e92246a43fdc464f920b2eacbe20982c462525b4ece7e20d96498788d13c091ccf83bb2d5982782caf3f56ffbefc895093ef5e36a2d188c026a29d877f1deba765e519ae52c13a08679a22a1632f6f3bbbafa93e196290456bb24762e8d99c6cf3d8cddda337e1c8b2009a6c65c1b450a3633fbcb0b819172666dbe4e398cf1ebf92fc5c182fec3f8190704cc4d00af62b8bb610dc2542227f8c3ead2e4d28dc746f7347f6544bd6a79a357393d47cd25558f72defa85c2ce560da15da2714da12d4d4a53cc935b6301154a10a7ceb914e0589d48f6b056ad0909fc4d8972531d6881a2597c6d335ad8393951f0ab0e019089c7748e3a1bc61f7eab0d64acd758d10fe9285ddfdcf336ccbfbdac95c2be8e8fefbaaae548b891859d4f573685cf7ee268aff9f3ca406caf84acc6f6170bc501665bb6a41fd5ad1a476c908e66d0ada7a31062addd108b90827aa0f3017e6c7f1d06c30f6c99cd683e083d543da1c65d2f6147d1f303e5c5e30190890eee0490472e4ef38b40c1327db3b867adeb80b2483f19f4756ebec2fb4f74d459899aaf3e95b1208f971a65ec560d72b8d4648754e89154e626220d9aeb54b56f2ea2a6a543fe04a1dedb56368ba30f35b6cfc5a4ef56465cd41a4124eb9462ef9d950c3864a8dde5d43da651262adb78b14a147978b1cfed82b7534c324b30954b7e3607cd0cb462143ccc02ae55d00fd0573c53f3786fab0b5768e42ddac13fdab37f751c28fcfcd221fc37c58dd820cfb7ea880dd9113c8ac0c6bf0e49d891bd859f33416af75cbfd1e83815fdd8f47409986ab48b319bbba6d2119462b12f55a681d62d73b72cf1aa4870c475d221a3a2c6c30acb27f89d5ca8341011b018900421abeddf68be4306d22245f719c765ef55c1be7f46312e5d7c5d70dcd1742c75479606ef88974afd1e3f5aa7eb25846ab961b6f949447c2f5cf13e73df0878fb11a5ab915a982c28852b849cab7070d8c21a8fd1e8822c82a6e8096beacb80b060e7b8b331c88f6e68965ed8cd6acdcb537cd5fedb4262ae36da4e316cab223bccd3e7e646a2263104c907dc42a2b57d01ca2edbc784053fe612f5556fda0b5e894b2e0118f8c6969f28725d27fdd341af84600de76c1cdf9446fd112855337ece3fce4594bd144880ace60a4f27f8afaeae4234e91b3a28c0fbda84fdd10cf8fea707bb3a51ef76413a19f0659faa23fd50aa53be69f61d6a4890b02382816df003e09a22e9f79b56978f87726cc1a5e199b91817210b19fcf92e1b0880232c8365a76b998d9dceebd33e1e7484849f2314b682801b01ebe02fadb726f83c576a260b7461775ca9738aa304c0fe69b0dd14b991673da9bca18409893cf2aebfdc5d5b51045635e4fa44d39a2e32fa9ab4d65677762d17f442b22fe9880c007eebd303f054b7987010efaea2b8c193c390b30a19e3e18d8ae663f7aa82e7f6b371b3a90a31fe1fa83f1bc9c51b14b95194d61f38423dd46b098ec6075960527c2f85589da4489247bb0cf84725a1ddf54ebbb28598d0ff5f8915f8543056f5056410c28ef0fbb99008c0cc31b141c48558a9a26f141e7fba477114cd7fdaabd320fa22cc5ff62f83f59b1858aabb906a8f3c9ea160e1e84163e8550526b5be3c9d3e499b004f46f8e2e16d37a37344be6e2f115e4dab21f0800b38e4a05aa20846401650caf0df87ce11c3408df9f2f77f62c3582c95876e699c2ab7267cec3929887c55efaa447bdee78b235092e1f4819adca19232a3b2326b21a50e4aa84230bbc5df0eb12a36239d6a0b1f1c66c9e092dc4d44c0d6f5714f538dab31bcb5694c4454a2100a12a66b00931af3b0c8ce0185818c5e70b6804887b480abc51a494d894100d1ac4cf158678362172bb5f8f58423d016e6c911f94e64e257edaad936a20927cf01f42880f23b06e5c3f6df92ec8a13062bafb30e263c0bcc904dc086babb57eab51ed2b9de4ccb432c4b5791081a386cd5c3cae2ac40bdee3a5e9a4d82236e753a68ee59e2a43d2f655cdaef6332b63a7807e4cd765b08b06c435565da4bb02d11733a99fb9e745a8e9f68e0a3d4cac11e39d05ed1e6c30f67f30b6ffce6321430de05e923ad23e812cdc2e2909376eac441650cf283b373cf655a3906662f2ff18f857089a62992d9db56e73e45ea10ad1a55d15490f34b63d0efec173dc4917a5a702444247c04e299ca12ddbb925bccab96bff43d95c9b39d16296299d7c2436b0b63d2a5e77b4679f09fc50f7e18d5ef0f1131ef9f72961798fcf5e8db789707b8c0ac0726861b7e5dd34095fab559f868102b7512fda945aa789d2e7822ae6acb8cc34140c52e2523dfcefcf93c45be9d98c137ad1dbf4bd0a02eac62dab480c0c339d1e28bd3790a5cc31b045dd4b38ee6be12fb2234c96d9d6e642e6fda80c8b0ff37acdd35c4fcf7c4fe6a3fd768f45f676b79103dbf999bbcf3cafa4503c4f8a77c926369e72f9a015dd82a5594b66aee5a52d214b00c1c7da0e2cdd3a732d244a60708222d847b9744014120819ace5529f0dbab101b7d480936c9a86b2c1921d28af632e333b34433d34c0fd3e69adb6a91584e0c124668bd55d6d7ab9321e344d077be4537e2caf4dc8b7475d62d08e0f09fbd8725b67ec3c0985f098c691c40fbf63c86ba654a3ab9b27e18471c4e4738e33b74baa237f2a5f4c8006368b34678d3b66757300a198cf8e93ea3433143fd05ef6772ad20cfce95894706f52c335ed8c3a84164d40ec349a3d68a0f282c29d036acafac65faea1651fd348111b508bf19045c5a27717a4a1f8d8efeecfaf43d2b064ba7b32cd91f4eba12c29c22ae956b854091a5e56090be0ff66139655adcb20424a1cd7fd3029343ee990f1b79b83eff9f6f4f23db6ac5c864a93d4d56634b87836eb7476122c46b1b865cd9847f7b0400cf4212da54f388b9fe0ff4d1e2e94e4330998648042a15cd0a480f52b42610eeb2d9efa82a184ca895b596c89fed188e3e58fa24de1b09e65fc33283ca6b147e640c68e46db2a4dad10a1f9c5fc71c72c1a30ecc240cee3c9b40ca5c1b8d0587885dda4e62a06eb057a659003c60dc90b9c9e1dbc063f4a285f928cf337fe00737bc9ee89484885848e4bba5f4e05ca5374dbf876a515c9726065ea2454e948fe03250b0340eba1d5ff634a2a204c38ce9889fa428a4db0a42403dc012624ee61a94ac692eddec52d40a49306de14c357f4e18b025117ed330432bf13e45cc60f7ccc1dda7b6222aacbc0a3dae81ac9d0dd36d93b5eb9e8963d0da2a9c38387f585d2177488bb8ba82f1d5f9b23f049fbdb30d0d1f58b871617a92584bca18e8549e71b09da8d070ab549ad17764222d6c53ccad8bc14b1efd4bbc9efacd718415725a4b455fa5c84b89c40e2eea8691b67d33228cc8debdfca38505df430adfb6f5864adc07f3891805e222aa279f5bf045b3a1160e439093ac76d0ce71a8bf6bae967d40463a11bb66e9b88ccaa5a6760b7d37379e00f17499d0a1d27b9ac1ef61f761f5729878e57d4f41edb9f936c7e2d85588346222c0a67f0869195bf3970305889d67582e4b963d33af89e4fc06da6331e265d4e17f175912041622a1097e116253fbab8dfb5c7cfc27dae578c6e2a6d83fa4eaa34c51c4c956b2edf6b48f4da7a3336a9d766ed517459273e022853630c602ae8b56a5a06b55377fa6459323adbb2f5f29bac6d57f0a5ffebaa5d4617453e197798fb6de53107703916c903f27735435f44c3a922fea7240d04b6ce38d0fa07b3c25150e437932eb45e3c94788160582dcbdf18577ff1d864b794d3d9a64e1c4fdc117589648bb164235dffdddc952b6e9463a6516bdd6ffd71855c364885a3c89e4edfaa423a13919a2eeefdae9ec78d20b84263078feee5c74fe3e1b7ee3af23b9bfd95acef341819492214b05f6f4c9c929a6ab7935ba05cd78eed5fc8209de17646570b38f812cb8a5c307b67ace2dc63abd4e0260bb69eec9057bb3b082c19459feb24abc6ad5ab27a2eae6e9b23aa9710476ce1a3fc78f5423665c8e4dbcdda42ee77994888e84deee650eb2558285afe61e4ca17ceee45e5348cf39f28f7cd6c803b4d6b0f67777a2192a760c343599f48cd4bd040164ca23e50301dd99c516652e5822f1a93d6ce42c18b86afe3dfb0eb0728dc29908f0d656e0de86f4475049d1420805dad9eb0ddb33456260526bf8d00a6ad882a5f28d79af0471a42502d96fd42f6b1549729118c43e127813a8fc199eba42ff86d6017ca3c89a7585809a057383cea5520b490a13627cc7399bd273825e4f31d748334759598798664ffa751d11f515b453e62f1c26a3b544f12ce23b5926072825dd0aa5c77c32c7a6ec8fc99d32aadbe63b0aee4c29783ed39bec7c43f322c8838d2b2f591c82e118896d902a0dc6da84dcc0ddb4ac89430ae7ce716e908f68e800d0cae3a3d499eeb1ea347f52866d05c0b7346ac7fddbe9d2efeeaa4f87e92e4fe1be05294885fa534b3fb2b3c880b271d7286d9f53f8aa3dbac0dc03142e63adba3eb733c193ee6663f7e224183c3c9e81864ff831cb1ccf542140b2abbf4b5f51bccacef22730bf09470dfc4512d51a00cde4f8bdeec722b3d2250fb6723cff90c93f7a479d11fc754c7a0026c8de6e2782369558671b08892309cf37f29f95bdfbd8603dee92321b2e98a08511c5260caa1042ddd2db66a85c1ce90d6b77c87e8948b088a34fa550936472d8e61800c6e71ea977c6edd7658eb7f9a7a909f1a9ee9d7fe328083e5aefbdc587c4e9de83122412d5ac87b3f2a34a3fcb4fb95ac942d792c3eda87b9b5df28b49353bffc75b99117a0f473cc45aefd9414f62717467c72c6c47daac2dac498ffabf8c1936cb704fc2b99a6121657f8a331cb428de55661a7d082781a74f496a87f31cc8bc6c8449c96179fca31564c118769f855dbb78cf65188320842ae2373a23516489d7c8fef48c1bbd83c65b0f611f36ca1d02ab8ecdd453f57ae6c3ce3d1356690859242da832abc26f031f1319179f355ef6092aecb8b0ec4a8128e4a912f06ac8f35e48c299d7623c86071b5677af4ed5011bb467d0ac3b4ad7c722327ffc908cac9bc0c4319f59340ad65409bef794a48f81942f0850f35ae94d6d5bb2e214151c6b64b97efa8bc0b93effacd0083127ec99bc8925970cd114a85fe42f25e876ffe68cd7b50a9ab6f48409a36f0236959ec7dbd920ebd6f6618d9aa5277a7d6fc0914f6b3fe3c728619f7c488e3ca7488fd80320db3307f14b733654c7f974f69301ef6d77efe5f305efd8d37003ed93a01068d3a82364212267fb3e1e3746c9c88376ab5efb730f2e7a7a10687343229ef10184eedf66ed467a239023911de28aa20f8768020eb656f9e7fc90c10097cf8cf5c186990fca4127375f55a610bb9efe3af60988151d8b43d493f472522793b2407ff358e0b94a824c3e2b81a01cca09d9a33ef3601d6fd77da47f7f9d59bc26d35dd62e14a5be1afd1cd81d2f16db24da0b4a00da1654b8855feb48901ffd7c99434bb115aa5969b411620604db382f679f549c4f58edfdb5cb6bf7a461bfa07f20275a6b2e2b675cffcb6fd92db4384f92c7084165be5b3533bf29246c0d407467737e4ea6d6372731325ccfc96c92bdafb89f35ab3b7b4e761e12c2b7ce25c5dd05f37b43f591290e0f6fcb493cb19a782ad4e7cf10fba94a909fabae80f4efce860b191f48ae65299c81aa0e92dec3cb1f4000cc5cc0bd30444c6f7348a52f07aef9b95e0fb181db09698d7d2c0956573b834c152f124fadeedb03dc346e6353792a0c400fc28df7f558fc29f092a6dc8ba0dcb71459e36b74f5aeb2c848d7adf7247e56d13e04910ad877e67de9cf15f9a89d17c4d12404bc1d7c2510061192cc265b6b3f3961a8505601836e464f332abded9bb174b02bb0b0eb15f6fc97483b9fd71710103035c7fc84510d7074b0cf809e65f48f710bf7501458af586747f3ba533ab31bb6e825c33e30c761f9f361ff3ef7e5d5d407496384ac63291be346c5604a539b5f6dabf689b2ae5b0d8ae790ba7fd7ff44981046055a01089abb5401db495cbb90d0b51e0f7c3fd0502fa25d237abec4f6e35643ca29e6960faefe17414c3f93257529b932f285380296f794fccf3dd884f1def70d2d9d84ecfe8aafb46e7d2a506dd52594cc5fbb19b24eec293aba79d2f66b387b8b2af21795bbf29e232137ea06fc82d83964c7d04fbff5dac540c93aa5520b60377373ab55bf0962ee4efc3089baccd90b135afc1b2ad143e6bf13cd562aa28da545beb6328c1b67381e0db2ebbd50cda51fc0afc63b9bad46fe9db4afa555464077d0de5aeed4364c80f19c59291676ef8d8953a158ddd0b7f3386b9220b5e33bbd50b545a48799986199e7460d4e4eccdbcab8708f861e4e480956cb65406849632d7b24e542ced5e724ff0007e963b99250ab51b3a56789a491ff4ff9e97a0cbca447c39de10409b1d6062930260d36cca445c83e33c28cc77e193387fc7101284b05189a72e8f25066e69461aa3039ef280d17d3627ec56a2664f0fd80d425b13f79afbd580b71e91f937f7815471e69eebd36d5bcceeae3de782e536c0620de83df7f396953ea86c294440eef889c40c9cae6e90b1e92008e9a1f54bea90d70700f400262c0000927d15c1385fdf77ea6fab9e27e85032ebf881d3bc42090095002d5d5c7a0000000008001b00ffffff7ff200b980d300f3800800f2009a5ceed79e9d5507c2de7049a76bb8da2562d372a053c063c92355864433c9606ca034edaad13f9fcd0bfc86a15744061682cd39750221ceeae8b1044a31d5faf10348151291e282b133fb389f39965842be2458196db3437d460bcd8cf7722e3bc14061417506b726a78dc36a9ce19851be0a7f7f9ec18c9504a9737ed9375745726d440d4d7b863d4dcdda3368acf498879cc4061b135340143de9d9149dcdd4cfb0b82ecec61192bd801a128b2696e501066370937184b06560d0b2151042a413de58b4704f82181c9483a4837fde6b1700887751de4e73af1109dc79399698942aa98d520632c5c02ff3750f25ce36b0e8f22c0b2274c53b7f799758b395195f31276d7a655423bbd4b6fe7755157ba2e13c256c060978447e0a7a14038cb301530c648924ca8caa7a2afefdad3604378491f9c879c0f11ba8ec75610f8dfcb76e831699ff3f0c55290a0d2cf1468a809407a0d91b2fd294711113bd2f2dcfb1856a7d8e2b76ca817ac7e7e5e8f6b224753f73d4adbc7f1776fcd21ce1cbb36a1e9cc980ab92936527502e2a79ba1ce61454dc5f1a67c8ea028cd4ac8f80e68a31b33f5608ba18a5f3dc1ac9658176e577e867ed01a1167237a7751c22", @ANYRES32, @ANYBLOB="0800c1000a010102040068804e2b0f194fef6da6704413279d35119aebbcb80faf72a0efcfd13f6115f2bfcd0d2ba36dff2f9b3423f2da4798dbb5e2708fe7e0943a1e7866e8b58e11ac704362881b30bc4734b1c1d16112db845969d799bbc50fc7f44e98b08b88338fd516e61cbbd7c3376fb2aa1e7605f823734718be3b36c1865bab985785dce373eacd58f3337cfa880cae854af37c5aca5d1666a3af750600fd007b0000000400100004006a8004006e8004001600daadaf663d79233ec4c215c754a73b00e3b18591702abecb62f7ee24105926b125cc74abb2f782ac9d5e00006a1edcb8706812860508001d00", @ANYRES32=0x0, @ANYBLOB="89008b80140093800400b5800c003e000080000000000000bbb8c32391bd62d9667e3f36c7fc08005800ac1e01014a56902ac85b0f0086ac9917d837fce4d29e59046ef6e026f34253f715a222ad41f8b8b6a2298ade64c42c1f7decf0c4a8b6b85002408708000300", @ANYRES32=0x0, @ANYBLOB="0800f400", @ANYRES32, @ANYBLOB="0c0024000100010000000000080040800400c6800000000004000800"], 0x2578}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r4}) 372.364651ms ago: executing program 2 (id=8063): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) socket$alg(0x26, 0x5, 0x0) close(0x3) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r3, &(0x7f0000000000)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x40, 0x4}, 0x1}}, 0x10, 0x0}, 0xf5) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') openat$cgroup(r4, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000002180)={@loopback={0xfec0ffff00000000}, @empty, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2020013}) 371.778772ms ago: executing program 4 (id=8064): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x700, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8ba4, 0x7, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req3={0x2, 0x4, 0x3, 0x7fffffff, 0x2, 0xabe, 0xf077}, 0x1c) (async, rerun: 32) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x24, 0x0, 0xc, 0x0, 0x10003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x80000001, 0x200, 0x9, 0x4, 0x0, 0x1}, 0x0, 0x0) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="310300000000000000000900000008000300", @ANYBLOB='\b'], 0x24}}, 0x0) (async, rerun: 64) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r7, 0xe00, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x20040001) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x7800, 0x80, 0x80000000, 0x98a1, {{0x5, 0x4, 0x3, 0x1, 0x14, 0x65, 0x0, 0x6d, 0x29, 0x0, @private=0xa010100, @empty}}}}) 308.90802ms ago: executing program 2 (id=8065): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) (async) unshare(0x400) (async) bpf$PROG_LOAD(0x23, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042088be120000030c000800050086dd88a888be00000002160966050100005e0700000000000000000200002009f008020000000000000200049403080065580000000237856604ac63f3ee6337b37d77d915f9e4f5c5bfac758a5583ba7ac3c58defead96d737044166801e07e7c599c321fb17e7df5b679e6"], 0xfdef) 235.617129ms ago: executing program 2 (id=8066): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x4f, 0x800003}, 0x10) bind$tipc(r1, 0x0, 0x0) close(r1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) 185.216373ms ago: executing program 1 (id=8067): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0xfffffffd, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f00000001c0)=r2) 184.945777ms ago: executing program 4 (id=8068): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000000080)={&(0x7f0000000140)={0xa, 0xa, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@flowinfo={{0x14, 0x29, 0x3b, 0x14}}], 0x18}, 0x922bac8556bda5ce) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="b8cadb4b488066e8cd6450aa360fbd2b5b0eee40c787a7f0c8f4e7d43614fad4a0a9a25f9b6a51eedcc26d0be5340e496db20f91a3e6f0dca3b872c13d45de544d67defbdfca138011a36dbf8ee8263766d8179e35f36fa729e04acfb3d5e4eb14388274c12617380cb2fe24d1d476c96458d4059b6a70bf6bdcef6c613ca3db92", @ANYRES16=r2, @ANYBLOB="010025bdf000fcdbdf251000000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00;\x00\t\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) 139.293006ms ago: executing program 4 (id=8069): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x0, 0x3d, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x42, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x1, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0xffffffff, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff, 0x10000000}, {}, {0x0, 0x0, 0xc, 0x7, 0x0, 0x6}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x29, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x28e, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x100000, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x6, 0x3}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xcb}, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x4000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {0x0, 0xfffffffe}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x88}, {0x5}, {}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {}, {0x0, 0x0, 0x0, 0x4000, 0x0, 0xfb4}, {0x0, 0x54e4}, {0x0, 0x101, 0x0, 0x4, 0x0, 0xffffffff}, {}, {0x2f, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {0x0, 0x0, 0xfffffffd, 0x80000, 0x3}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x6, 0x0, 0x4}, {0x0, 0x80}, {}, {0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0x0, 0x8}, {0x7f, 0x0, 0xfffffffe, 0xfffffffe}, {}, {}, {0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x8, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x2000000}, {0x0, 0x80000000, 0x0, 0x0, 0x0, 0x101}, {0x5, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7, 0x7f53}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}, {0x3, 0x0, 0x0, 0x0, 0xffffffff}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x1}, {0x4, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {0x1}, {}, {}, {}, {0x2}, {0x0, 0x1}, {}, {0x8, 0x1}, {}, {0x1}, {0x4}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {0x6}, {0x2, 0x1}, {}, {}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x2}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/135, 0x87}, 0x40002101) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r1, 0x58, &(0x7f0000000600)}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="580000000206010200000000000000000000000005000100070000000900020073797a300000000005000500020000000c000780050015000100000082f9d3962664a0fbf650a6bff4589f050004000000000011000000000073683a6e65742c6e657400000000"], 0x58}, 0x1, 0x0, 0x0, 0xc040}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000003c0)={0x6, 0x35, 0x8205, 0xc42a, 0xd, 0x9b45, 0x4, 0xfffffff8}, 0x20) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x74, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0xa, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x3, 0x7fff}}, @TCA_U32_SEL={0x34, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb70b, 0x58f, [{0xaf, 0x6, 0x9, 0x2}, {0x1, 0x1, 0x5, 0x7}]}}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) sendmmsg$inet6(r2, &(0x7f0000000740)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x200, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="7d3bf446daa308e5277c602acde53cf63662666d4bd2ecc3dec91e2dded0846e6a5102d271557d354cdab6433795d1f7655caeae063009648238c438a29de930c3e2a0765ae81b67346ba52f5eb015363f6c1dece06570515da51938", 0x5c}, {&(0x7f00000001c0)="f01558e7633f933e3a9b103d807fda098600915489074a180ee213a975db5cf8dc710b235ff02a7a2997099af86029710155528eeddfdf83475cc8f1ebc22ee86dfef17a9c839e651ef8044ffa7535f8bddbeed33c3f5de97acce7187ef653186ed30da9defb1cc4629c5ab4315ee4f2756d713e34bf5b8f623240b1c05ae90e16cf6ef620d90307a9b08e3e9a94020939422510537b88e97e07aa21288c171f994baf4ae9426e6700a4781913420f74b90cae327a8d6e8ac22d275ff871a961f1abc1cc37585690cb5229cebc5df0b5c975d490aee20ad6628930dfa6c19da31ad0d5", 0xe3}], 0x2, &(0x7f0000000300)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1, r5}}}], 0x28}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x9cd, @mcast2, 0x3}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000400)="4666232a967747496089a7454c0b5466820cbc6f9d8003174891856f16c7c1ce10926d166606b713d4209845a7061a2ee315cabc41ecb373939b110fb6fba4727bf06686277cf28c513e546bb010c70e7f497e21d39dc64e65c51bb21c53284aaff7c361f75af8bc45161380cd8e103803aeb0fc3db9a748cf5a7a23e9d6eed321ff6b0405c4efcfd5", 0x89}, {&(0x7f00000004c0)="ab4fd248532a9aaefc40986abe95f8d0b31e878b8db46a886f43eb45a35d7a605fd3cae24eb15b2c7cd0f8ad7dc31dad082734ee540dbe1901cb3fb92bf07f4e73bf5cec95e9125ebd1e2065a10e20cd15106205331d387bb55d16480765c0edb1402b67be149b6d5ccc44a0804bd35eb93de07ce081c2fab393f98ded462d161a46d86c3c", 0x85}, {&(0x7f0000000640)="9dcf44f29af70795165863d3c869b204c04304f6bb4c945d17ffa8d1db80225d1f99e436ee1853eb8847b0704bd01cfff31dfa382ab6a556bac49339fa1972a72d3898f5935c0261743e1b86499606476b8ad4929a0b2229ba3687a1d165862bf08c9b1a0049936ccf600f934457421ff80984be26dc5315e817e4b4c7e96fc797f878ff9f2c67c59d915dfdc3a12bce8012", 0x92}], 0x3}}], 0x2, 0x8000) 136.591168ms ago: executing program 1 (id=8070): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r2, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x124, 0x15, 0x100, 0x70bd25, 0x25dfdbfe, {0x2b, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x94, 0x1, "1d6094e1b1350a6ee43aed85d13d5995fff35131fa26153c003b8180116236da11fc2bd8699cf3994425a5b66ced728145f176eb5dbe4e985b8b6879b266883d8a058c354532b23b4cee3efc44c669254f90eebf366ce73054264df59920cbb3353c7850405105cbe4eab52131775b97b21aa68d4050460f772fb241d08a8cf864e912292632287d89d5d75854c92d8c"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "63c7063de412425a5be7f93df6f0c13d2d6f10237feb3206d0d4928c75448f2c93b8c07b92132e33802a64197b36696e42c138c7327f34e2a4d4b623f383a42cfa2e5e67d9422bea10e051b7b2d34d0f8805be0aa74e5044677b6c8a27b7aa2c01b43bca92547498f4461d0441929f0b77aa1d8ab060"}]}, 0x124}, 0x1, 0x0, 0x0, 0x4001}, 0x404c001) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}}, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x110, 0x6, 0x0, 0x4) (async) r4 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, &(0x7f0000000200)) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (rerun: 32) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)={0x514, 0x2c, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x504, 0xf2, 0x0, 0x1, [@nested={0x415, 0x9, 0x0, 0x1, [@generic="102feac198785ba6069a2315b12bcdb555b23ad272136fb0f1b7bf24cbe2475d7e47b567c67e8206764a2b7fe8d24e4511a1217be4d745bf52250ee015697e166f9bfebf", @nested={0x69, 0xfe, 0x0, 0x1, [@nested={0x4, 0x7a}, @generic="0cba6006f4bd1742669cffea9c468a302339fdc6e5ebe982f01fca95e5130a030de38ba88c22cabbd5ab444781be3b9ef7354e6110f279d89ed928c3ec7262d99c6ec4b5fed9e3241d1af742772004a1890d48e1d8e17bafdc7dd83637453605ba"]}, @nested={0x4, 0x68}, @nested={0x1b1, 0x35, 0x0, 0x1, [@typed={0x8, 0xd9, 0x0, 0x0, @ipv4=@multicast2}, @generic="18d1cc04e027df777f58d2b9f290fc4953808ad1be9a3080380daea68df269cfe7a69abf3f6dbca0e1e6e0947652cb00ef9b36d61ff4dcc0a673b81067bf67a9dbeff194a587f348b7200a4f84de5d77161702671bcce59db97c0118cfedf73d3242c9e3e9d4875ff2cb61d745394c5848687da93ed4ca2f480ee3fa9bba6fb95453dcd7ed493536c78bf3aed5e605bcf9ced64c1b1130709d383b65f5383053b1243545f1b559e953f71148cc701d66b22a", @generic="e26ae98187095816191cd93789b69ce6398095113d3363efb9683805d0b47c5c3414", @typed={0x8, 0xbe, 0x0, 0x0, @pid}, @generic="66e1b9a3bd46edf8cb89890c4b3fa9511d2d6ab6849479dce4de677b564c2463b139", @typed={0x5, 0x129, 0x0, 0x0, @str='\x00'}, @generic="1de6e91f777aad387b97857eb8257eeea20ff00436e4b4789ab18044dab020e5ae87dfa208b175c33cf2c71428dcad74c6f7b81f05ff19cb8f71b30d224560584b9c7b871a699b898f314f7b732df048e57f614d0762ae28ae27e93c0d460cd15a4caa020e0fcef4b5619a505140ba87dcb55fe4d3ad9a63418c6e5e5871cbeff9ee5e7b68dab17c239ea48cb2cd2aea9c98f0ea83193c58da20c555bc1c7c"]}, @nested={0xe1, 0x9f, 0x0, 0x1, [@generic="643f66a472ab6b53c398fb4523ddf91d84c300000000000000000000000000000000b195e656b4ea1779748f4d8e5deb82e614c311022800000000ad1699982a09a1fe94c5e121c0c556b0136dfb97d13a30270582582f69367749d09e10a1a21399d01c653bc4d02e68477d499bd7dc5b2c1a86afaaffe0133f64dbc9f35fb7bc0d7322724c09b51b26940e3a666be7cf15c3faf673c91246bec038e471c56f3134ef0eff5f19e857697c", @typed={0x8, 0x120, 0x0, 0x0, @pid}, @nested={0x4, 0x26}, @generic="73b712b7ea46d927874ae80e42270e23707ff496287e1b0013f6e43a720eddc9cdaa29cc7abc"]}, @typed={0xc, 0x13f, 0x0, 0x0, @u64=0x2000000000000}, @nested={0xd, 0xd8, 0x0, 0x1, [@generic="fc8cd828b7", @nested={0x4, 0x18}]}, @generic="872dbabf04e79912548c2fe9ac2b28ebb91a02adeb0e89fac194f81a94f00d8e4c5c27ae6d83671d383ee2612e5764749d234069aa3b81f4e5707b7bfa7c7e67c9dfbb2ee974b282aa79b6c69c56debaf4749d43354e5db6bff424d6d15abe353a582bd87dab76a6075566a419610127a2f2a4df7c3d8407b73c667770f5445674871db43e2b7304405587059b16717bcdcfad1267b1f34563f9369d0aa5da4007", @typed={0x8, 0x105, 0x0, 0x0, @fd=r5}]}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640d", @typed={0x4, 0x145}]}]}, 0x514}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000380)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37abcda1a297e0099c5ac0020c5b068030046d323456536016466fcb78dcaaf6c3efed495a46215be0000760636c035b1000000000000ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fb6e9aa241731ae9e0b39072", 0x91, 0x8000, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x2, 0x3, 0x0, 0xe, 0x61}]}, &(0x7f0000000400)='syzkaller\x00'}, 0x94) 99.968618ms ago: executing program 2 (id=8071): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d80)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001000)={'sit0\x00', 0x0}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000000240)=0x1, 0x4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) ioctl$sock_ifreq(r3, 0x8924, &(0x7f0000000000)={'veth1_vlan\x00', @ifru_mtu=0x1}) sendto$inet6(r2, 0x0, 0x0, 0x2000c000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x12) 98.417709ms ago: executing program 1 (id=8072): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "910d00"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}, 0x1, 0x0, 0x0, 0x180}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003840)=ANY=[@ANYBLOB="4400000040000701feffffff00000000017c00000400d7002800018006000600800a000008001100", @ANYRES32=0x0, @ANYBLOB="14001900fe800000000000000000000000000019040002"], 0x44}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "910d00"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}, 0x1, 0x0, 0x0, 0x180}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003840)=ANY=[@ANYBLOB="4400000040000701feffffff00000000017c00000400d7002800018006000600800a000008001100", @ANYRES32=0x0, @ANYBLOB="14001900fe800000000000000000000000000019040002"], 0x44}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) 1.283509ms ago: executing program 2 (id=8073): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}, {&(0x7f0000000240)="ce9075f1f81436d5b4f4d1394038f09abb4e660644f071df82bdf79297cdd770b003e01a7dff1ddd04abfe171e78c080dc2f43bd8b57601b549e14e16fd508bd48e750e3597ae536271fb97d54adffc8bcb671afcfc075f0b69a1372198df9ebea574bc2fb1ee364bf725defe9f5", 0x6e}], 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff2, 0xffff}, {0x7, 0xffe0}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) socket(0x40000000015, 0x5, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(r4, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x12022, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000114a73a"], 0x5c}}, 0x0) getsockopt(r4, 0x200000000114, 0x2718, 0x0, &(0x7f0000000400)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r6, 0x8946, &(0x7f0000000000)="8d557fd094c38f748ec33512ef3a") sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x44b, 0x70bd28, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x1b}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x30008095}, 0x0) 274.67µs ago: executing program 1 (id=8074): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x9}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb4, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x90, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x24a2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0xb4}, 0x1, 0x0, 0x0, 0xbe41801752031cbe}, 0x20040000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xffff}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$int_out(r3, 0x5460, &(0x7f0000000580)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff03"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r6, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040811}, 0x4040000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002e80), r7) sendmsg$NLBL_CIPSOV4_C_REMOVE(r7, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="0000b0015e73db098d77d9437f3045955284449e19d6441515a91f02af14a707921937f071fe998f24c493e1a07bda984175e8ac5cc9e2397ed7b9d61a06ab873324d61121aa8307d397419f2cc105f214336e0102bc9e1357bbae641f81f43702acac99fe43894e0a49e2467356686fa678e96166a63732940abf85b0efae779a5e5be805485266b77116b524bd74b32671b64a4c561514d777ba937fae6081df7a", @ANYRES16=r8, @ANYBLOB="010025bd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000840) 0s ago: executing program 1 (id=8075): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e22, @private=0xa010101}], 0x10) r2 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg$kcm(r2, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x62) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x2) shutdown(r3, 0x0) connect$unix(r3, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r5 = accept(r4, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000002240)='\x00', 0x1, 0x400440e9, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000000)={r9, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f00000001c0)={r9, @in6={{0xa, 0x4e20, 0xffffffff, @empty, 0xffffffff}}}, 0x90) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={r9, 0x4}, &(0x7f0000000080)=0x8) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r6, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c0002800500170000000400030ea600060003009c9e17"], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x8, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) kernel console output (not intermixed with test programs): :28kB active_file:9772kB inactive_file:161468kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:179140kB dirty:344kB writeback:0kB shmem:3656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18420kB pagetables:7816kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 653.079667][ T2175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.128511][T30251] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40960kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 653.175758][T30251] Node 0 DMA free:11248kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 653.213508][T30251] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 653.243175][T30251] Node 0 DMA32 free:902840kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34164kB inactive_anon:28kB active_file:9772kB inactive_file:161468kB unevictable:1536kB writepending:344kB zspages:0kB present:3129332kB managed:2552584kB mlocked:0kB bounce:0kB free_pcp:40312kB local_pcp:19524kB free_cma:0kB [ 653.298435][T30251] lowmem_reserve[]: 0 0 0 0 0 [ 653.324481][T30251] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:664kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 653.413489][T30251] lowmem_reserve[]: 0 0 0 0 0 [ 653.468210][T30251] Node 1 Normal free:3791908kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:63164kB local_pcp:34100kB free_cma:0kB [ 653.565158][T30251] lowmem_reserve[]: 0 0 0 0 0 [ 653.594623][T30251] Node 0 DMA: 0*4kB 2*8kB (U) 2*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11248kB [ 653.608208][T30310] xt_CT: You must specify a L4 protocol and not use inversions on it [ 653.621123][T30251] Node 0 DMA32: 3401*4kB (UME) 5461*8kB (UM) 4181*16kB (UME) 119*32kB (UME) 44*64kB (UM) 441*128kB (UM) 566*256kB (UME) 362*512kB (UME) 232*1024kB (UME) 72*2048kB (UM) 0*4096kB = 902524kB [ 653.640842][T30251] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 653.655145][T30310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 653.666692][T30251] Node 1 Normal: 4*4kB (U) 3*8kB (UM) 9*16kB (UM) 7*32kB (UM) 11*64kB (UM) 4*128kB (UM) 4*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 923*4096kB (UM) = 3791960kB [ 653.697841][T30251] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 653.730095][T30251] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 653.755993][T30251] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 653.766120][T30251] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 653.775898][T30251] 44155 total pagecache pages [ 653.787750][T30251] 0 pages in swap cache [ 653.804151][T30251] Free swap = 124996kB [ 653.812309][T30251] Total swap = 124996kB [ 653.816551][T30251] 2097051 pages RAM [ 653.820752][T30251] 0 pages HighMem/MovableOnly [ 653.825459][T30251] 427124 pages reserved [ 653.829941][T30251] 0 pages cma reserved [ 654.100184][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.340315][T19475] Bluetooth: hci0: command tx timeout [ 655.139971][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.460706][ T8448] veth0_to_bond: left promiscuous mode [ 656.179760][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.788680][T30325] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 657.076683][T30457] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 657.116505][T30453] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 657.162866][T30463] netlink: 'syz.4.6512': attribute type 11 has an invalid length. [ 657.173590][T30463] __nla_validate_parse: 8 callbacks suppressed [ 657.173606][T30463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6512'. [ 657.192497][T30462] syzkaller1: entered promiscuous mode [ 657.207456][T30462] syzkaller1: entered allmulticast mode [ 657.220615][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.274181][T30474] netlink: 'syz.3.6515': attribute type 1 has an invalid length. [ 657.352473][T30474] 8021q: adding VLAN 0 to HW filter on device bond3 [ 657.451857][T30474] bond3: (slave veth0_to_bond): making interface the new active one [ 657.463880][T30474] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 657.503100][T30498] xt_hashlimit: invalid interval [ 657.512890][T30474] netlink: 'syz.3.6515': attribute type 1 has an invalid length. [ 657.524973][T30474] netlink: 'syz.3.6515': attribute type 2 has an invalid length. [ 657.594163][T30504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6523'. [ 657.629034][T30506] netlink: 'syz.4.6525': attribute type 2 has an invalid length. [ 657.664670][T30504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6523'. [ 657.691495][T30514] netlink: 'syz.4.6528': attribute type 3 has an invalid length. [ 657.737428][T30518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6530'. [ 657.780468][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.814264][T30526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6530'. [ 657.917359][T30534] netlink: 'syz.1.6533': attribute type 1 has an invalid length. [ 657.940039][T30537] nbd: couldn't find a device at index 0 [ 657.972531][T30543] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6536'. [ 657.975620][T30534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6533'. [ 657.985464][T30543] bond0: ARP target 8.4.0.0 is already present [ 657.997619][T30543] bond0: option arp_ip_target: invalid value (1032) [ 658.139017][T30557] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6538'. [ 658.206909][T30560] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6540'. [ 658.214424][T30561] tipc: Enabled bearer , priority 0 [ 658.261902][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.381572][T30575] unsupported nlmsg_type 40 [ 658.394154][T30580] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 658.425594][T30582] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 658.585923][T30596] xt_hashlimit: max too large, truncated to 1048576 [ 658.724707][T30606] netlink: 'syz.2.6555': attribute type 1 has an invalid length. [ 658.735621][T30606] ip_vti0: entered promiscuous mode [ 659.085569][T30642] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6567'. [ 659.193589][T30654] sctp: [Deprecated]: syz.9.6571 (pid 30654) Use of int in max_burst socket option. [ 659.193589][T30654] Use struct sctp_assoc_value instead [ 659.270857][T30660] FAULT_INJECTION: forcing a failure. [ 659.270857][T30660] name failslab, interval 1, probability 0, space 0, times 0 [ 659.286147][T30660] CPU: 0 UID: 0 PID: 30660 Comm: syz.2.6574 Not tainted syzkaller #0 PREEMPT(full) [ 659.286170][T30660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 659.286180][T30660] Call Trace: [ 659.286186][T30660] [ 659.286204][T30660] dump_stack_lvl+0xe8/0x150 [ 659.286226][T30660] should_fail_ex+0x40c/0x560 [ 659.286322][T30660] should_failslab+0xa8/0x100 [ 659.286348][T30660] __kmalloc_noprof+0xe8/0x750 [ 659.286368][T30660] ? rcu_is_watching+0x15/0xb0 [ 659.286385][T30660] ? tls_sw_sendmsg+0x161/0x2860 [ 659.286458][T30660] ? tls_sw_sendmsg+0x599/0x2860 [ 659.286474][T30660] ? trace_irq_enable+0x3b/0x140 [ 659.286496][T30660] tls_sw_sendmsg+0x599/0x2860 [ 659.286527][T30660] ? aa_sk_perm+0x6d5/0x900 [ 659.286550][T30660] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 659.286568][T30660] ? __pfx_aa_sk_perm+0x10/0x10 [ 659.286586][T30660] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 659.286635][T30660] ? sock_rps_record_flow+0x19/0x350 [ 659.286682][T30660] ? inet_send_prepare+0x5b/0x260 [ 659.286699][T30660] ? inet6_sendmsg+0x101/0x120 [ 659.286751][T30660] ? __pfx_inet6_sendmsg+0x10/0x10 [ 659.286771][T30660] sock_write_iter+0x313/0x4c0 [ 659.286790][T30660] ? __pfx_sock_write_iter+0x10/0x10 [ 659.286811][T30660] do_iter_readv_writev+0x612/0x8c0 [ 659.286842][T30660] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 659.286862][T30660] ? bpf_lsm_file_permission+0x9/0x20 [ 659.286883][T30660] ? security_file_permission+0x75/0x260 [ 659.286953][T30660] ? rw_verify_area+0x203/0x4c0 [ 659.286973][T30660] vfs_writev+0x343/0x990 [ 659.286992][T30660] ? __pfx_vfs_writev+0x10/0x10 [ 659.287011][T30660] ? lock_release+0x4b/0x3c0 [ 659.287035][T30660] ? __fget_files+0x3a2/0x420 [ 659.287052][T30660] ? __fget_files+0x2a/0x420 [ 659.287071][T30660] do_writev+0x154/0x2e0 [ 659.287087][T30660] ? __pfx_do_writev+0x10/0x10 [ 659.287104][T30660] ? rcu_is_watching+0x15/0xb0 [ 659.287119][T30660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.287136][T30660] do_syscall_64+0x174/0x580 [ 659.287156][T30660] ? trace_irq_disable+0x3b/0x140 [ 659.287176][T30660] ? clear_bhb_loop+0x40/0x90 [ 659.287193][T30660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.287215][T30660] RIP: 0033:0x7fc1b0d9ce59 [ 659.287231][T30660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.287243][T30660] RSP: 002b:00007fc1b1b8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 659.287261][T30660] RAX: ffffffffffffffda RBX: 00007fc1b1015fa0 RCX: 00007fc1b0d9ce59 [ 659.287273][T30660] RDX: 0000000000000002 RSI: 0000200000001980 RDI: 0000000000000003 [ 659.287283][T30660] RBP: 00007fc1b1b8e090 R08: 0000000000000000 R09: 0000000000000000 [ 659.287293][T30660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.287303][T30660] R13: 00007fc1b1016038 R14: 00007fc1b1015fa0 R15: 00007ffdf1a95d68 [ 659.287320][T30660] [ 659.596059][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.652768][T30669] netlink: Unknown conntrack attr (type=2304, max=9) [ 659.852666][T30690] netlink: 'syz.1.6582': attribute type 1 has an invalid length. [ 660.016616][T30699] netlink: 'syz.1.6585': attribute type 7 has an invalid length. [ 660.057360][T30699] ip6gretap0: entered promiscuous mode [ 660.082076][T30699] syz_tun: entered promiscuous mode [ 660.088263][T30699] gretap0: entered promiscuous mode [ 660.276550][T30722] veth1_to_team: entered promiscuous mode [ 660.288895][T30722] gretap0: entered promiscuous mode [ 660.295741][T30722] gretap0: left promiscuous mode [ 660.302723][T30722] veth1_to_team: left promiscuous mode [ 660.346822][T30726] veth1_to_bond: entered allmulticast mode [ 660.355442][T30732] veth1_to_bond: left allmulticast mode [ 660.415836][T30738] FAULT_INJECTION: forcing a failure. [ 660.415836][T30738] name failslab, interval 1, probability 0, space 0, times 0 [ 660.461350][T30738] CPU: 0 UID: 0 PID: 30738 Comm: syz.3.6598 Not tainted syzkaller #0 PREEMPT(full) [ 660.461375][T30738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 660.461385][T30738] Call Trace: [ 660.461392][T30738] [ 660.461399][T30738] dump_stack_lvl+0xe8/0x150 [ 660.461423][T30738] should_fail_ex+0x40c/0x560 [ 660.461443][T30738] should_failslab+0xa8/0x100 [ 660.461466][T30738] __kmalloc_noprof+0xe8/0x750 [ 660.461486][T30738] ? iov_iter_iovec_advance+0x1e0/0x290 [ 660.461506][T30738] ? skcipher_next_slow+0xee/0x230 [ 660.461596][T30738] ? skcipher_walk_next+0x7ce/0xc00 [ 660.461646][T30738] skcipher_next_slow+0xee/0x230 [ 660.461663][T30738] aria_avx_ctr_encrypt+0xf0/0x6d0 [ 660.461683][T30738] ? scatterwalk_ffwd+0x350/0x490 [ 660.461699][T30738] ? __virt_addr_valid+0x137/0x390 [ 660.461726][T30738] ? __pfx_aria_avx_ctr_encrypt+0x10/0x10 [ 660.461747][T30738] ? __pfx_crypto_gcm_init_common+0x10/0x10 [ 660.461802][T30738] crypto_gcm_encrypt+0x2e5/0x3e0 [ 660.461818][T30738] bpf_exec_tx_verdict+0x12b0/0x2680 [ 660.461845][T30738] tls_sw_sendmsg+0x1b81/0x2860 [ 660.461873][T30738] ? aa_sk_perm+0x6d5/0x900 [ 660.461894][T30738] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 660.461910][T30738] ? __pfx_aa_sk_perm+0x10/0x10 [ 660.461927][T30738] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 660.461944][T30738] ? sock_rps_record_flow+0x19/0x350 [ 660.461963][T30738] ? inet_send_prepare+0x5b/0x260 [ 660.461980][T30738] ? inet6_sendmsg+0x101/0x120 [ 660.462001][T30738] ? __pfx_inet6_sendmsg+0x10/0x10 [ 660.462020][T30738] sock_write_iter+0x313/0x4c0 [ 660.462037][T30738] ? __pfx_sock_write_iter+0x10/0x10 [ 660.462059][T30738] do_iter_readv_writev+0x612/0x8c0 [ 660.462080][T30738] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 660.462100][T30738] ? bpf_lsm_file_permission+0x9/0x20 [ 660.462119][T30738] ? security_file_permission+0x75/0x260 [ 660.462137][T30738] ? rw_verify_area+0x203/0x4c0 [ 660.462154][T30738] vfs_writev+0x343/0x990 [ 660.462170][T30738] ? __pfx_vfs_writev+0x10/0x10 [ 660.462188][T30738] ? lock_release+0x4b/0x3c0 [ 660.462209][T30738] ? __fget_files+0x3a2/0x420 [ 660.462224][T30738] ? __fget_files+0x2a/0x420 [ 660.462242][T30738] do_writev+0x154/0x2e0 [ 660.462257][T30738] ? __pfx_do_writev+0x10/0x10 [ 660.462271][T30738] ? rcu_is_watching+0x15/0xb0 [ 660.462286][T30738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.462300][T30738] do_syscall_64+0x174/0x580 [ 660.462319][T30738] ? trace_irq_disable+0x3b/0x140 [ 660.462338][T30738] ? clear_bhb_loop+0x40/0x90 [ 660.462355][T30738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.462369][T30738] RIP: 0033:0x7f750cd9ce59 [ 660.462385][T30738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.462397][T30738] RSP: 002b:00007f750dc1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 660.462414][T30738] RAX: ffffffffffffffda RBX: 00007f750d015fa0 RCX: 00007f750cd9ce59 [ 660.462424][T30738] RDX: 0000000000000002 RSI: 0000200000001980 RDI: 0000000000000003 [ 660.462433][T30738] RBP: 00007f750dc1c090 R08: 0000000000000000 R09: 0000000000000000 [ 660.462443][T30738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.462452][T30738] R13: 00007f750d016038 R14: 00007f750d015fa0 R15: 00007ffd25ce9338 [ 660.462470][T30738] [ 660.798101][ T2175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.927423][T30754] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 661.003025][T30754] Bluetooth: MGMT ver 1.23 [ 661.099370][T30768] bond0: Error: CAN devices cannot be enslaved [ 661.268758][T30789] openvswitch: netlink: Message has 8 unknown bytes. [ 661.280040][T30789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.373816][T30800] FAULT_INJECTION: forcing a failure. [ 661.373816][T30800] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 661.449887][T30800] CPU: 0 UID: 0 PID: 30800 Comm: syz.9.6612 Not tainted syzkaller #0 PREEMPT(full) [ 661.449911][T30800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 661.449920][T30800] Call Trace: [ 661.449926][T30800] [ 661.449933][T30800] dump_stack_lvl+0xe8/0x150 [ 661.449956][T30800] should_fail_ex+0x40c/0x560 [ 661.449975][T30800] _copy_to_user+0x31/0xb0 [ 661.450083][T30800] simple_read_from_buffer+0xe1/0x170 [ 661.450103][T30800] proc_fail_nth_read+0x1bb/0x230 [ 661.450147][T30800] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 661.450167][T30800] ? rw_verify_area+0x24a/0x4c0 [ 661.450187][T30800] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 661.450205][T30800] vfs_read+0x213/0xa80 [ 661.450225][T30800] ? __pfx___mutex_lock+0x10/0x10 [ 661.450278][T30800] ? __pfx_vfs_read+0x10/0x10 [ 661.450300][T30800] ? __fget_files+0x3a2/0x420 [ 661.450316][T30800] ? __fget_files+0x2a/0x420 [ 661.450335][T30800] ksys_read+0x150/0x270 [ 661.450355][T30800] ? __pfx_ksys_read+0x10/0x10 [ 661.450375][T30800] ? rcu_is_watching+0x15/0xb0 [ 661.450393][T30800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.450409][T30800] do_syscall_64+0x174/0x580 [ 661.450429][T30800] ? trace_irq_disable+0x3b/0x140 [ 661.450448][T30800] ? clear_bhb_loop+0x40/0x90 [ 661.450466][T30800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.450482][T30800] RIP: 0033:0x7f838655d68e [ 661.450497][T30800] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 661.450511][T30800] RSP: 002b:00007f83874d0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 661.450528][T30800] RAX: ffffffffffffffda RBX: 00007f83874d16c0 RCX: 00007f838655d68e [ 661.450539][T30800] RDX: 000000000000000f RSI: 00007f83874d10a0 RDI: 0000000000000004 [ 661.450550][T30800] RBP: 00007f83874d1090 R08: 0000000000000000 R09: 0000000000000000 [ 661.450560][T30800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.450570][T30800] R13: 00007f8386816038 R14: 00007f8386815fa0 R15: 00007ffe94a57318 [ 661.450588][T30800] [ 661.866075][ T2175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.030699][T30847] veth3: entered allmulticast mode [ 662.400234][T30891] __nla_validate_parse: 16 callbacks suppressed [ 662.400252][T30891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6634'. [ 662.432577][T30892] xt_TCPMSS: Only works on TCP SYN packets [ 662.523681][T30905] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6637'. [ 662.559104][T30905] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 662.715504][T30923] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 662.843262][T30934] validate_nla: 5 callbacks suppressed [ 662.843277][T30934] netlink: 'syz.1.6647': attribute type 9 has an invalid length. [ 662.879902][T30935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6647'. [ 662.906367][ T2175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.918185][T25197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.943923][T30948] netlink: 'syz.4.6651': attribute type 21 has an invalid length. [ 662.990291][T30951] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.997738][T30951] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.124393][T30959] netlink: 'syz.9.6652': attribute type 2 has an invalid length. [ 663.244354][T30974] x_tables: duplicate underflow at hook 1 [ 663.328820][T30981] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6658'. [ 663.344355][T30987] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6660'. [ 663.360729][T30990] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6660'. [ 663.370133][T30981] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6658'. [ 663.496136][T31000] netlink: 294 bytes leftover after parsing attributes in process `syz.3.6664'. [ 663.535328][T31000] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 663.588971][T31008] xt_l2tp: invalid flags combination: 8 [ 663.824248][T31037] netlink: 'syz.2.6673': attribute type 1 has an invalid length. [ 663.862339][T31041] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6674'. [ 663.893600][T31037] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6673'. [ 663.925257][T31040] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.992169][T31047] vlan2: entered promiscuous mode [ 664.024356][T31047] geneve1: entered promiscuous mode [ 664.041491][T31047] vlan2: entered allmulticast mode [ 664.048397][T31047] geneve1: entered allmulticast mode [ 664.095070][T31057] syzkaller0: entered promiscuous mode [ 664.118416][T31057] syzkaller0: entered allmulticast mode [ 664.708397][T31118] netlink: 'syz.1.6696': attribute type 21 has an invalid length. [ 664.717039][T31111] macvtap1: entered promiscuous mode [ 664.735214][T31111] vlan0: entered promiscuous mode [ 664.747645][T31111] macvtap1: entered allmulticast mode [ 664.769112][T31111] vlan0: entered allmulticast mode [ 664.782125][T31111] veth0_vlan: entered allmulticast mode [ 664.867505][T31130] nbd: must specify an index to disconnect [ 664.986854][ T5755] net_ratelimit: 1 callbacks suppressed [ 664.986872][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.065702][T31151] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 665.083633][ T5755] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 665.266566][T31166] vlan2: entered promiscuous mode [ 665.288831][T31166] hsr0: entered promiscuous mode [ 665.308309][T31166] vlan2: entered allmulticast mode [ 665.313997][T31166] hsr0: entered allmulticast mode [ 665.328811][T31166] hsr_slave_0: entered allmulticast mode [ 665.344963][T31166] hsr_slave_1: entered allmulticast mode [ 665.757349][T31213] netlink: 'syz.4.6723': attribute type 5 has an invalid length. [ 665.784483][T31213] netlink: 'syz.4.6723': attribute type 1 has an invalid length. [ 665.991158][T31238] bridge0: port 3(vlan2) entered blocking state [ 666.023063][ T2175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.038537][T31238] bridge0: port 3(vlan2) entered disabled state [ 666.063643][T31238] vlan2: entered allmulticast mode [ 666.087334][T31238] vlan2: entered promiscuous mode [ 666.138410][T31256] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 666.351049][T31301] netlink: 'syz.1.6741': attribute type 9 has an invalid length. [ 666.368799][T31301] syzkaller0: entered promiscuous mode [ 666.389862][T31301] syzkaller0: entered allmulticast mode [ 666.594462][T31312] netlink: 'syz.2.6745': attribute type 29 has an invalid length. [ 666.621028][T31312] netlink: 'syz.2.6745': attribute type 29 has an invalid length. [ 666.838633][T31346] 8021q: adding VLAN 0 to HW filter on device bond4 [ 666.848170][T31346] bridge0: port 3(bond4) entered blocking state [ 666.854846][T31346] bridge0: port 3(bond4) entered disabled state [ 666.862771][T31346] bond4: entered allmulticast mode [ 666.870410][T31346] bond4: entered promiscuous mode [ 666.876012][T31346] bridge0: port 3(bond4) entered blocking state [ 666.882382][T31346] bridge0: port 3(bond4) entered forwarding state [ 667.067855][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.191770][T31365] batman_adv: batadv0: Interface deactivated: dummy0 [ 667.198658][T31365] dummy0: left promiscuous mode [ 667.353261][T31365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.368591][T31365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.405071][T31365] hsr0: left promiscuous mode [ 667.429045][T31365] ipvlan1: left allmulticast mode [ 667.434528][T31365] veth0_vlan: left allmulticast mode [ 667.461084][T31365] tipc: Resetting bearer [ 667.473589][T31365] mac80211_hwsim hwsim70 syzkaller0: left promiscuous mode [ 667.481343][T31365] mac80211_hwsim hwsim70 syzkaller0: left allmulticast mode [ 667.492355][T31365] bond2: left promiscuous mode [ 667.497753][T31365] bond2: left allmulticast mode [ 667.512120][T31365] bridge1: left promiscuous mode [ 667.517138][T31365] bridge1: left allmulticast mode [ 667.524080][T31365] ip6tnl2: left promiscuous mode [ 667.534803][T31365] bond4: left promiscuous mode [ 667.540208][T31365] vti0: left promiscuous mode [ 667.563178][ T5284] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 667.598248][T31288] bridge0: port 3(bond4) entered disabled state [ 667.617593][T31289] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.696110][T31289] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.718980][T31388] __nla_validate_parse: 20 callbacks suppressed [ 667.719013][T31388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6759'. [ 667.738600][T31289] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.752765][T31289] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.785476][T31393] netlink: 68 bytes leftover after parsing attributes in process `syz.9.6761'. [ 667.797049][T31383] tipc: Enabling of bearer rejected, media not registered [ 667.814739][T31389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6758'. [ 667.860571][T31396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6762'. [ 668.047930][T31407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6766'. [ 668.070151][T31398] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6763'. [ 668.103838][T21425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.179803][T31421] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6769'. [ 668.308885][T31429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6772'. [ 668.393972][T31441] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6775'. [ 668.432732][T31441] ipvlan1: entered allmulticast mode [ 668.440000][T31441] veth0_vlan: entered allmulticast mode [ 668.447980][T31450] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 668.523981][T31455] netlink: 'syz.3.6779': attribute type 58 has an invalid length. [ 668.553256][T31455] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6779'. [ 668.564346][T31450] xt_hashlimit: size too large, truncated to 1048576 [ 668.602448][T31462] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 668.660919][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.824598][T31476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.126430][T31501] bond5 (unregistering): Released all slaves [ 669.145811][T20685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.196408][T31513] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 669.214676][T31511] netlink: 'syz.4.6793': attribute type 27 has an invalid length. [ 669.223939][T31511] netlink: 'syz.4.6793': attribute type 4 has an invalid length. [ 669.408805][T31525] syzkaller0: entered promiscuous mode [ 669.431470][T31525] syzkaller0: entered allmulticast mode [ 669.445413][T31525] tipc: Started in network mode [ 669.457589][T31525] tipc: Node identity 465243c25a5, cluster identity 4711 [ 669.483423][T31525] tipc: Enabled bearer , priority 0 [ 669.500596][T31521] tipc: Resetting bearer [ 669.508666][T31534] netlink: 'syz.9.6801': attribute type 12 has an invalid length. [ 669.531379][T31521] tipc: Disabling bearer [ 669.560196][T31534] netlink: 'syz.9.6801': attribute type 12 has an invalid length. [ 669.689042][T31551] syzkaller0: entered promiscuous mode [ 669.699107][T31551] syzkaller0: entered allmulticast mode [ 669.724436][T31557] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 669.855606][T31570] "syz.1.6813" (31570) uses obsolete ecb(arc4) skcipher [ 669.988704][T31582] openvswitch: netlink: Message has 56 unknown bytes. [ 670.182944][T21439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.377166][T31608] bond0: entered promiscuous mode [ 670.385932][T31608] bond_slave_0: entered promiscuous mode [ 670.392924][T31608] bond_slave_1: entered promiscuous mode [ 670.479764][T31616] SET target dimension over the limit! [ 670.517214][T31616] bridge_slave_1 (unregistering): left allmulticast mode [ 670.537435][T31616] bridge_slave_1 (unregistering): left promiscuous mode [ 670.551592][T31616] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.622839][T31622] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 670.648734][T31622] 0ªX¹¦Dö»: entered allmulticast mode [ 670.755551][T31632] netlink: 'syz.4.6830': attribute type 1 has an invalid length. [ 670.808477][T31636] ipvlan2: entered promiscuous mode [ 670.824854][T31639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.852131][T31639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.943778][T31653] dvmrp0: left allmulticast mode [ 670.952750][T31654] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 671.003212][T31654] gtp0: entered promiscuous mode [ 671.017474][T31654] gtp0: entered allmulticast mode [ 671.034116][T31656] netlink: 'syz.1.6836': attribute type 1 has an invalid length. [ 671.078247][T31666] batman_adv: batadv0: Interface activated: dummy0 [ 671.087495][T31666] batadv0: mtu less than device minimum [ 671.095355][T31666] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 671.106273][T31666] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 671.117204][T31666] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 671.127975][T31666] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 671.138804][T31666] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 671.149742][T31666] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 671.160608][T31666] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 671.176378][T31670] netlink: 'syz.3.6840': attribute type 12 has an invalid length. [ 671.197003][T31670] netlink: 'syz.3.6840': attribute type 29 has an invalid length. [ 671.231324][T31670] netlink: 'syz.3.6840': attribute type 3 has an invalid length. [ 671.260960][T31680] IPVS: set_ctl: invalid protocol: 8 172.20.20.187:257 [ 671.286527][T31680] IPVS: Error connecting to the multicast addr [ 671.851304][T31729] bond5: Removing last ns target with arp_interval on [ 671.881632][T31729] syzkaller0: entered promiscuous mode [ 671.887240][T31729] syzkaller0: entered allmulticast mode [ 672.056473][T31744] IPVS: Error connecting to the multicast addr [ 672.747866][T31776] __nla_validate_parse: 51 callbacks suppressed [ 672.747882][T31776] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6869'. [ 672.751897][T31781] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6871'. [ 672.764828][T31776] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6869'. [ 672.828342][T31781] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6871'. [ 672.861673][T31786] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.6873'. [ 673.406292][T27738] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 673.441265][T31829] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6886'. [ 673.476702][T27738] CPU: 1 UID: 0 PID: 27738 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 673.476726][T27738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 673.476735][T27738] Call Trace: [ 673.476742][T27738] [ 673.476749][T27738] dump_stack_lvl+0xe8/0x150 [ 673.476772][T27738] dump_header+0xd3/0x4b0 [ 673.476795][T27738] oom_kill_process+0x3ab/0x970 [ 673.476816][T27738] out_of_memory+0x1064/0x1480 [ 673.476832][T27738] ? try_charge_memcg+0xbca/0x1590 [ 673.476857][T27738] ? __pfx_out_of_memory+0x10/0x10 [ 673.476873][T27738] ? do_raw_spin_unlock+0xf5/0x210 [ 673.476896][T27738] try_charge_memcg+0xc74/0x1590 [ 673.476916][T27738] ? fs_reclaim_acquire+0x7c/0x100 [ 673.476940][T27738] ? __pfx_try_charge_memcg+0x10/0x10 [ 673.476960][T27738] ? lock_release+0x4b/0x3c0 [ 673.476979][T27738] ? rcu_is_watching+0x15/0xb0 [ 673.476995][T27738] ? rcu_is_watching+0x15/0xb0 [ 673.477009][T27738] ? lock_release+0x4b/0x3c0 [ 673.477027][T27738] ? percpu_ref_tryget+0xfd/0x180 [ 673.477048][T27738] charge_memcg+0x19c/0x2b0 [ 673.477067][T27738] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 673.477086][T27738] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 673.477107][T27738] __swap_cache_prepare_and_add+0xdd/0x700 [ 673.477127][T27738] ? page_rmappable_folio+0x9a/0x170 [ 673.477153][T27738] swap_cache_alloc_folio+0xf1/0x240 [ 673.477172][T27738] swap_cluster_readahead+0x355/0x670 [ 673.477192][T27738] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 673.477211][T27738] ? rcu_is_watching+0x15/0xb0 [ 673.477227][T27738] ? trace_hrtimer_start+0x82/0x200 [ 673.477256][T27738] ? get_vma_policy+0x27b/0x3c0 [ 673.477276][T27738] swapin_readahead+0x196/0xc50 [ 673.477290][T27738] ? rcu_is_watching+0x15/0xb0 [ 673.477304][T27738] ? swap_table_get+0x1e/0x260 [ 673.477317][T27738] ? rcu_is_watching+0x15/0xb0 [ 673.477331][T27738] ? __pfx_swapin_readahead+0x10/0x10 [ 673.477347][T27738] ? lock_release+0x4b/0x3c0 [ 673.477368][T27738] ? rcu_is_watching+0x15/0xb0 [ 673.477382][T27738] ? get_swap_device_info+0x1c/0x2b0 [ 673.477399][T27738] ? swap_table_get+0x1e/0x260 [ 673.477413][T27738] ? swap_table_get+0x1e/0x260 [ 673.477428][T27738] ? swap_table_get+0x216/0x260 [ 673.477444][T27738] ? swap_cache_get_folio+0x2ea/0x2f0 [ 673.477462][T27738] do_swap_page+0x545/0x5340 [ 673.477481][T27738] ? __pte_offset_map+0x29/0x240 [ 673.477498][T27738] ? lock_acquire+0x5f/0x350 [ 673.477516][T27738] ? __pfx___schedule+0x10/0x10 [ 673.477533][T27738] ? schedule+0x90/0x360 [ 673.477551][T27738] ? do_swap_page+0x128/0x5340 [ 673.477566][T27738] ? __pfx_do_swap_page+0x10/0x10 [ 673.477580][T27738] ? __pte_offset_map+0x45/0x240 [ 673.477596][T27738] ? __pte_offset_map+0x1ae/0x240 [ 673.477614][T27738] ? pte_offset_map_rw_nolock+0xea/0x160 [ 673.477632][T27738] handle_mm_fault+0x124c/0x3080 [ 673.477655][T27738] ? handle_mm_fault+0xec/0x3080 [ 673.477674][T27738] ? __pfx_handle_mm_fault+0x10/0x10 [ 673.477689][T27738] ? lock_vma_under_rcu+0x45a/0x500 [ 673.477716][T27738] ? rcu_is_watching+0x15/0xb0 [ 673.477734][T27738] do_user_addr_fault+0xa4d/0x1340 [ 673.477752][T27738] ? trace_page_fault_user+0x84/0x1e0 [ 673.477767][T27738] exc_page_fault+0x6a/0xc0 [ 673.477785][T27738] asm_exc_page_fault+0x26/0x30 [ 673.477801][T27738] RIP: 0033:0x7f750cd5d68e [ 673.477817][T27738] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 673.477829][T27738] RSP: 002b:00007ffd25ce9618 EFLAGS: 00010246 [ 673.477844][T27738] RAX: 0000000000000000 RBX: 000055556608a500 RCX: 00007f750cd5d68e [ 673.477854][T27738] RDX: 00007ffd25ce9670 RSI: 0000000000000000 RDI: 0000000000000000 [ 673.477864][T27738] RBP: 00007ffd25ce96dc R08: 0000000000000000 R09: 0000000000000000 [ 673.477874][T27738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 673.477883][T27738] R13: 00000000000927c0 R14: 00000000000a4442 R15: 00007ffd25ce9730 [ 673.477901][T27738] [ 673.889836][T27738] memory: usage 307200kB, limit 307200kB, failcnt 849 [ 673.896908][T27738] memory+swap: usage 307452kB, limit 9007199254740988kB, failcnt 0 [ 673.905440][T27738] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 673.912854][T27738] Memory cgroup stats for /syz3: [ 673.912962][T27738] cache 4096 [ 673.921253][T27738] rss 4096 [ 673.924345][T27738] rss_huge 0 [ 673.927558][T27738] shmem 0 [ 673.931001][T27738] mapped_file 4096 [ 673.934742][T27738] dirty 0 [ 673.937731][T27738] writeback 0 [ 673.944520][T27738] workingset_refault_anon 21 [ 673.955378][T27738] workingset_refault_file 147 [ 674.043154][T27738] swap 253952 [ 674.054689][T31838] bond4: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 674.082458][T27738] swapcached 475136 [ 674.088852][T31838] bond4 (unregistering): Released all slaves [ 674.115215][T27738] pgpgin 122247 [ 674.135687][T27738] pgpgout 122245 [ 674.198932][T27738] pgfault 248830 [ 674.234947][T31839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6891'. [ 674.265695][T31766] syz.3.6866 (31766) used greatest stack depth: 18792 bytes left [ 674.315960][T27738] pgmajfault 23 [ 674.325628][T31850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6894'. [ 674.340110][T27738] inactive_anon 0 [ 674.344072][T27738] active_anon 4096 [ 674.347870][T27738] inactive_file 0 [ 674.357628][T31839] vlan3: entered allmulticast mode [ 674.362544][T27738] active_file 4096 [ 674.382457][T27738] unevictable 0 [ 674.383180][T31851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6894'. [ 674.390315][T27738] hierarchical_memory_limit 314572800 [ 674.397770][T31839] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 674.400636][T31850] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6894'. [ 674.433357][T27738] hierarchical_memsw_limit 9223372036854771712 [ 674.439849][T27738] total_cache 4096 [ 674.447665][T27738] total_rss 4096 [ 674.463055][T27738] total_rss_huge 0 [ 674.475724][T27738] total_shmem 0 [ 674.485697][T27738] total_mapped_file 4096 [ 674.504563][T27738] total_dirty 0 [ 674.523566][T27738] total_writeback 0 [ 674.534282][T27738] total_workingset_refault_anon 21 [ 674.549283][T27738] total_workingset_refault_file 147 [ 674.573416][T27738] total_swap 253952 [ 674.585415][T27738] total_swapcached 475136 [ 674.602376][T27738] total_pgpgin 122250 [ 674.615638][T27738] total_pgpgout 122248 [ 674.642247][T27738] total_pgfault 248885 [ 674.653290][T27738] total_pgmajfault 23 [ 674.669085][T27738] total_inactive_anon 0 [ 674.680690][T27738] total_active_anon 4096 [ 674.696680][T27738] total_inactive_file 0 [ 674.727794][T27738] total_active_file 4096 [ 674.753066][T27738] total_unevictable 0 [ 674.773557][T27738] anon_cost 0 [ 674.774881][T31869] tipc: Enabled bearer , priority 0 [ 674.784676][T27738] file_cost 0 [ 674.794873][T27738] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.6866,pid=31746,uid=0 [ 674.804802][T31872] xt_TCPMSS: Only works on TCP SYN packets [ 674.817882][T31869] syzkaller0: entered promiscuous mode [ 674.830656][T27738] Memory cgroup out of memory: OOM victim 31746 (syz.3.6866) is already exiting. Skip killing the task [ 674.867984][T31869] syzkaller0: entered allmulticast mode [ 674.876749][T31870] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 674.924080][T31882] validate_nla: 3 callbacks suppressed [ 674.924095][T31882] netlink: 'syz.4.6904': attribute type 4 has an invalid length. [ 674.956537][T31882] netlink: 'syz.4.6904': attribute type 4 has an invalid length. [ 674.961652][T31887] netlink: 'syz.1.6905': attribute type 19 has an invalid length. [ 674.976343][T31869] tipc: Resetting bearer [ 675.015681][T31869] tipc: Disabling bearer [ 675.150691][T31900] netlink: 'syz.2.6907': attribute type 1 has an invalid length. [ 675.257210][T31897] erspan0: left promiscuous mode [ 675.280206][T31911] netlink: 'syz.4.6910': attribute type 1 has an invalid length. [ 675.348962][T31897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.362259][T31897] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.385228][T21425] net_ratelimit: 21 callbacks suppressed [ 675.385244][T21425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.402674][T31897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 675.434847][T31897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.442897][T31897] batadv0: mtu less than device minimum [ 675.449179][T31897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 675.460195][T31897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 675.471167][T31897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 675.482138][T31897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 675.493102][T31897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 675.504068][T31897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 675.515040][T31897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 675.526005][T31897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 675.548001][T31897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.572574][T31897] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 675.583237][T31897] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 675.617541][T31907] bond1: option min_links: invalid value (18446744073709551614) [ 675.625398][T31907] bond1: option min_links: allowed values 0 - 2147483647 [ 675.633950][T31907] bond1 (unregistering): Released all slaves [ 675.660945][T31911] 8021q: adding VLAN 0 to HW filter on device bond4 [ 675.677865][T31289] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.685010][T31289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.707793][T31289] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.714971][T31289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.742311][T31923] macvlan3: entered promiscuous mode [ 675.752604][T31923] macvlan3: entered allmulticast mode [ 675.759338][T31923] bond4: entered promiscuous mode [ 675.764941][T31923] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 675.775513][T31923] bond4: left promiscuous mode [ 676.222331][T31968] netlink: 'syz.4.6923': attribute type 30 has an invalid length. [ 676.361744][T31980] bridge8: entered promiscuous mode [ 676.367337][T31980] bridge8: entered allmulticast mode [ 676.507138][T31999] netlink: 'syz.2.6934': attribute type 11 has an invalid length. [ 676.575132][T32003] gre1: entered promiscuous mode [ 676.586436][T32003] gre1: entered allmulticast mode [ 677.080271][T32057] netlink: 'syz.3.6948': attribute type 10 has an invalid length. [ 677.102677][T32057] bond3: (slave veth0_to_bond): Releasing active interface [ 677.138492][ T29] audit: type=1800 audit(1781931831.511:26): pid=32069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.6954" name="memory.events" dev="tmpfs" ino=1996 res=0 errno=0 [ 677.192838][ T29] audit: type=1804 audit(1781931831.541:27): pid=32069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.6954" name="/newroot/388/memory.events" dev="tmpfs" ino=1996 res=1 errno=0 [ 677.492946][T32103] netlink: 'syz.9.6962': attribute type 10 has an invalid length. [ 677.782249][T32123] __nla_validate_parse: 16 callbacks suppressed [ 677.782268][T32123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6971'. [ 677.798206][T32123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6971'. [ 677.815916][T32132] netlink: 'syz.9.6973': attribute type 1 has an invalid length. [ 677.824544][T32132] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6973'. [ 677.887286][T32135] netlink: 3 bytes leftover after parsing attributes in process `syz.9.6975'. [ 677.909109][T32140] bridge6: entered promiscuous mode [ 677.914766][T32140] bridge6: entered allmulticast mode [ 678.129355][T32163] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6985'. [ 678.367528][T32187] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6992'. [ 678.447277][T32196] tipc: Enabled bearer , priority 0 [ 678.632902][T32213] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6999'. [ 678.810077][T32212] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 678.874360][T32217] syzkaller0: entered promiscuous mode [ 678.880573][T32217] syzkaller0: entered allmulticast mode [ 679.072690][T32213] gretap1: entered promiscuous mode [ 679.401432][T32258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7014'. [ 679.428846][T32255] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7011'. [ 679.432935][T32261] bridge35: entered promiscuous mode [ 679.458403][T32261] bridge35: entered allmulticast mode [ 679.485685][T32261] team0: Port device bridge35 added [ 679.495946][T32272] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7015'. [ 679.533157][T32270] bridge0: port 4(team0) entered blocking state [ 679.580321][T32270] bridge0: port 4(team0) entered disabled state [ 679.586986][T32270] team0: entered allmulticast mode [ 679.595587][T32270] team_slave_0: entered allmulticast mode [ 679.604119][T32270] team0: entered promiscuous mode [ 679.610954][T32270] team_slave_0: entered promiscuous mode [ 679.617354][T32270] bridge0: port 4(team0) entered blocking state [ 679.623743][T32270] bridge0: port 4(team0) entered forwarding state [ 679.654662][T21421] tipc: Node number set to 3268669122 [ 679.928756][T32306] xt_TCPMSS: Only works on TCP SYN packets [ 679.932672][T32307] team_slave_1: entered promiscuous mode [ 679.960655][T32307] team0: Port device team_slave_1 removed [ 680.130868][T32329] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 680.287188][T32355] mac80211_hwsim hwsim70 syzkaller0: entered promiscuous mode [ 680.315797][T32355] mac80211_hwsim hwsim70 syzkaller0: entered allmulticast mode [ 680.327171][T32355] validate_nla: 4 callbacks suppressed [ 680.327186][T32355] netlink: 'syz.9.7042': attribute type 49 has an invalid length. [ 680.584713][T15703] net_ratelimit: 59 callbacks suppressed [ 680.584728][T15703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.600057][T32379] SET target dimension over the limit! [ 680.627335][T32382] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.634520][T32382] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.642949][T31285] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 680.658060][T31285] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 680.676350][T32382] batman_adv: batadv0: Interface deactivated: dummy0 [ 680.701460][T32382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 680.715475][T32382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 680.750538][T32382] ipvlan1: left allmulticast mode [ 680.755691][T32382] veth0_vlan: left allmulticast mode [ 680.762213][T32382] mac80211_hwsim hwsim70 syzkaller0: left promiscuous mode [ 680.770461][T32382] mac80211_hwsim hwsim70 syzkaller0: left allmulticast mode [ 680.819318][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 680.827639][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.101704][T32420] netlink: get zone limit has 4 unknown bytes [ 681.111067][T32418] netlink: 'syz.1.7063': attribute type 21 has an invalid length. [ 681.133343][T32418] netlink: 'syz.1.7063': attribute type 1 has an invalid length. [ 681.172573][T32424] netlink: 'syz.4.7065': attribute type 9 has an invalid length. [ 681.335062][T32432] 8021q: adding VLAN 0 to HW filter on device bond8 [ 681.352244][T32432] bridge0: port 3(bond8) entered blocking state [ 681.360767][T32432] bridge0: port 3(bond8) entered disabled state [ 681.367304][T32432] bond8: entered allmulticast mode [ 681.374779][T32432] bond8: entered promiscuous mode [ 681.388017][T31289] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 681.396273][T31289] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 681.409440][T21425] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 681.624830][T15703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.779560][T15703] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 681.787430][T21421] IPVS: starting estimator thread 0... [ 681.879213][T32483] IPVS: using max 44 ests per chain, 105600 per kthread [ 681.939985][T32498] netlink: 'syz.1.7090': attribute type 5 has an invalid length. [ 681.962496][T32498] netlink: 'syz.1.7090': attribute type 1 has an invalid length. [ 681.974329][T32498] netlink: 'syz.1.7090': attribute type 3 has an invalid length. [ 682.004495][T32505] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.030345][T32505] bridge_slave_1 (unregistering): left allmulticast mode [ 682.050587][T32505] bridge_slave_1 (unregistering): left promiscuous mode [ 682.084817][T32505] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.103739][T32509] netlink: 'syz.1.7093': attribute type 3 has an invalid length. [ 682.127686][T32507] syzkaller1: entered promiscuous mode [ 682.140076][T32507] syzkaller1: entered allmulticast mode [ 682.206564][T32514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 682.260518][T15703] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 682.547867][T32547] sctp: [Deprecated]: syz.1.7104 (pid 32547) Use of int in maxseg socket option. [ 682.547867][T32547] Use struct sctp_assoc_value instead [ 682.664901][T21439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.706361][T32563] netlink: 'syz.9.7108': attribute type 1 has an invalid length. [ 682.770435][T32574] IPv6: NLM_F_CREATE should be specified when creating new route [ 682.896971][T32592] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 682.904826][ T5626] Bluetooth: hci2: command 0x0406 tx timeout [ 683.332485][T32595] netlink: 'syz.2.7114': attribute type 1 has an invalid length. [ 683.365196][T32597] x_tables: duplicate underflow at hook 1 [ 683.704118][T21425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.300406][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 685.713645][T32564] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 685.792719][T21425] net_ratelimit: 2 callbacks suppressed [ 685.792735][T21425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.879052][T32615] __nla_validate_parse: 20 callbacks suppressed [ 685.879067][T32615] netlink: 256 bytes leftover after parsing attributes in process `syz.9.7120'. [ 685.879867][T32618] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7123'. [ 685.917998][T32619] openvswitch: netlink: IP tunnel dst address not specified [ 685.940901][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.952909][T32623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7125'. [ 686.005601][T32623] bond2: entered promiscuous mode [ 686.011847][T32631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7127'. [ 686.012606][T32623] 8021q: adding VLAN 0 to HW filter on device bond2 [ 686.029087][T32631] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7127'. [ 686.030976][T32623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7125'. [ 686.056884][T32623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7125'. [ 686.087015][T32632] 8021q: adding VLAN 0 to HW filter on device bond2 [ 686.112844][T32632] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 686.124746][T32632] bond2: (slave sit1): Error -95 calling set_mac_address [ 686.152461][T32623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7125'. [ 686.181438][T32642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7131'. [ 686.186623][T32635] 8021q: adding VLAN 0 to HW filter on device bond9 [ 686.197677][T32635] bridge0: port 4(bond9) entered blocking state [ 686.205172][T32635] bridge0: port 4(bond9) entered disabled state [ 686.212922][T32635] bond9: entered allmulticast mode [ 686.219935][T32635] bond9: entered promiscuous mode [ 686.225901][T32623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7125'. [ 686.231278][T32642] netlink: 'syz.2.7131': attribute type 9 has an invalid length. [ 686.354486][T32657] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ2 [ 686.366720][T19475] Bluetooth: hci9: link tx timeout [ 686.372322][T19475] Bluetooth: hci9: killing stalled connection 10:aa:aa:aa:aa:aa [ 686.381617][T19475] Bluetooth: hci9: link tx timeout [ 686.386809][T19475] Bluetooth: hci9: killing stalled connection 11:aa:aa:aa:aa:aa [ 686.491875][T31290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.508648][T31290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.788973][T32707] netlink: 'syz.4.7146': attribute type 4 has an invalid length. [ 686.825299][T21425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.064740][T32717] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 687.107070][T32741] lo: entered allmulticast mode [ 687.265457][ T35] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.288504][ T35] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.298590][ T35] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.308535][ T35] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.544110][ T312] veth0_macvtap: left promiscuous mode [ 687.865941][T21439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.987326][ T358] team_slave_1: left promiscuous mode [ 688.192867][ T358] bridge0: port 3(vlan2) entered blocking state [ 688.199290][ T358] bridge0: port 3(vlan2) entered forwarding state [ 688.208892][ T358] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 688.231045][ T358] 8021q: adding VLAN 0 to HW filter on device bond1 [ 688.240442][ T358] 8021q: adding VLAN 0 to HW filter on device bond2 [ 688.247633][T21439] bond_slave_0: entered promiscuous mode [ 688.253356][T21439] bond_slave_1: entered promiscuous mode [ 688.285804][ T370] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 688.286226][T31283] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 688.325220][T31283] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 688.344844][T31283] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 688.421025][T19475] Bluetooth: hci9: command 0x0405 tx timeout [ 688.711134][ T419] netlink: 'syz.1.7194': attribute type 10 has an invalid length. [ 688.752756][ T419] veth1_macvtap: left promiscuous mode [ 688.823057][ T419] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 688.903045][T15703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.066006][ T450] netlink: 'syz.9.7199': attribute type 2 has an invalid length. [ 689.349178][ T465] lo speed is unknown, defaulting to 1000 [ 689.565631][ T489] veth0_macvtap: left promiscuous mode [ 689.767648][ T511] sctp: [Deprecated]: syz.3.7212 (pid 511) Use of struct sctp_assoc_value in delayed_ack socket option. [ 689.767648][ T511] Use struct sctp_sack_info instead [ 689.947026][T15703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.017778][ T525] gtp1: entered promiscuous mode [ 690.037892][ T525] gtp1: entered allmulticast mode [ 690.421283][T31283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.499642][T19475] Bluetooth: hci9: command 0x0405 tx timeout [ 690.564320][ T564] netlink: 'syz.3.7227': attribute type 30 has an invalid length. [ 690.589642][ T564] bond7: option arp_missed_max: invalid value (0) [ 690.596191][ T564] bond7: option arp_missed_max: allowed values 1 - 255 [ 690.607408][ T564] bond7 (unregistering): Released all slaves [ 690.893293][ T594] __nla_validate_parse: 62 callbacks suppressed [ 690.893311][ T594] netlink: 104 bytes leftover after parsing attributes in process `syz.9.7236'. [ 690.934800][ T595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7234'. [ 690.982563][T15703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.090877][ T601] bond5: option resend_igmp: invalid value (32767) [ 691.097797][ T601] bond5: option resend_igmp: allowed values 0 - 255 [ 691.101138][ T612] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7240'. [ 691.116337][ T601] bond5 (unregistering): Released all slaves [ 691.134947][ T618] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 691.176309][ T612] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7240'. [ 691.347001][ T628] netlink: 248 bytes leftover after parsing attributes in process `syz.2.7241'. [ 691.446196][ T629] netlink: 248 bytes leftover after parsing attributes in process `syz.2.7241'. [ 691.486643][ T638] lo speed is unknown, defaulting to 1000 [ 691.498779][ T638] lo speed is unknown, defaulting to 1000 [ 691.512473][ T629] sctp: [Deprecated]: syz.2.7241 (pid 629) Use of int in max_burst socket option. [ 691.512473][ T629] Use struct sctp_assoc_value instead [ 691.533862][ T638] lo speed is unknown, defaulting to 1000 [ 691.540927][ T628] sctp: [Deprecated]: syz.2.7241 (pid 628) Use of int in max_burst socket option. [ 691.540927][ T628] Use struct sctp_assoc_value instead [ 691.567091][ T638] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 691.634544][ T638] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 691.657977][ T638] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 691.677422][ T654] mac80211_hwsim hwsim70 syzkaller0: entered promiscuous mode [ 691.678912][ T638] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 691.703290][ T654] mac80211_hwsim hwsim70 syzkaller0: entered allmulticast mode [ 691.728222][ T654] tipc: Resetting bearer [ 691.741234][ T638] lo speed is unknown, defaulting to 1000 [ 691.747883][ T638] lo speed is unknown, defaulting to 1000 [ 691.755187][ T656] mac80211_hwsim hwsim76 syzkaller0: left allmulticast mode [ 691.763171][ T656] tipc: Resetting bearer [ 691.771296][ T638] lo speed is unknown, defaulting to 1000 [ 691.777836][ T638] lo speed is unknown, defaulting to 1000 [ 691.787959][ T652] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7247'. [ 691.798018][ T638] lo speed is unknown, defaulting to 1000 [ 691.806528][ T638] lo speed is unknown, defaulting to 1000 [ 691.821424][ T638] lo speed is unknown, defaulting to 1000 [ 691.858397][ T638] lo speed is unknown, defaulting to 1000 [ 691.867051][ T638] lo speed is unknown, defaulting to 1000 [ 691.899265][ T638] lo speed is unknown, defaulting to 1000 [ 691.922921][ T638] lo speed is unknown, defaulting to 1000 [ 691.940618][ T638] lo speed is unknown, defaulting to 1000 [ 691.950518][ T638] lo speed is unknown, defaulting to 1000 [ 692.025049][T15703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.111760][ T683] tipc: New replicast peer: 255.255.255.255 [ 692.123324][ T683] tipc: Enabled bearer , priority 10 [ 692.131953][ T686] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7253'. [ 692.255444][ T696] xt_l2tp: wrong L2TP version: 0 [ 692.291452][ T695] IPv6: sit2: Disabled Multicast RS [ 692.354615][ T708] netlink: 248 bytes leftover after parsing attributes in process `syz.2.7260'. [ 692.475300][ T711] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.7262'. [ 692.752318][ T742] netlink: 'syz.1.7271': attribute type 1 has an invalid length. [ 692.792687][ T748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 692.829075][ T751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 692.979242][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 693.018415][ T766] x_tables: duplicate underflow at hook 1 [ 693.063534][T15703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.805545][ T850] bond0: entered promiscuous mode [ 693.828699][ T850] bond_slave_0: entered promiscuous mode [ 693.840794][ T850] bond_slave_1: entered promiscuous mode [ 693.854800][ T850] batadv0: entered promiscuous mode [ 693.862961][ T850] debugfs: 'hsr1' already exists in 'hsr' [ 693.868796][ T850] Cannot create hsr debugfs directory [ 693.877334][ T850] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 693.886424][ T850] bond0: left promiscuous mode [ 693.895078][ T850] bond_slave_0: left promiscuous mode [ 693.907635][ T850] bond_slave_1: left promiscuous mode [ 693.921739][ T850] batadv0: left promiscuous mode [ 694.104569][T15703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.406925][ T892] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 694.425257][T21439] lo speed is unknown, defaulting to 1000 [ 694.602528][ T908] mac80211_hwsim hwsim70 syzkaller0: left promiscuous mode [ 694.610123][ T908] mac80211_hwsim hwsim70 syzkaller0: left allmulticast mode [ 694.727353][ T922] syzkaller0: entered promiscuous mode [ 694.741694][ T922] syzkaller0: entered allmulticast mode [ 694.760537][ T926] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 694.775985][ T926] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 694.965705][ T952] tipc: Resetting bearer [ 695.035043][ T952] tipc: Resetting bearer [ 695.066086][ T966] netlink: 'syz.1.7325': attribute type 5 has an invalid length. [ 695.087718][ T966] netlink: 'syz.1.7325': attribute type 6 has an invalid length. [ 695.108480][ T970] netlink: 'syz.3.7327': attribute type 10 has an invalid length. [ 695.133161][ T970] veth1_macvtap: left promiscuous mode [ 695.158765][T15703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.170920][ T970] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 695.198959][ T974] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.212523][ T974] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.254383][ T981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 695.308499][ T983] netlink: 'syz.4.7331': attribute type 1 has an invalid length. [ 695.318472][ T983] nbd: error processing sock list [ 695.325411][ T979] team0: Port device team_slave_0 removed [ 695.350517][ T974] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.374999][ T974] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.436946][ T974] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.448097][ T974] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.464919][ T992] tipc: Enabling of bearer rejected, already enabled [ 695.481166][ T992] mac80211_hwsim hwsim76 syzkaller0: entered allmulticast mode [ 695.491939][ T992] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 695.518145][ T996] team0: entered promiscuous mode [ 695.523877][ T996] team_slave_0: entered promiscuous mode [ 695.529886][ T996] team_slave_1: entered promiscuous mode [ 695.537058][ T996] gretap0: entered promiscuous mode [ 695.556473][ T996] debugfs: 'hsr1' already exists in 'hsr' [ 695.564325][ T996] Cannot create hsr debugfs directory [ 695.573051][ T974] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.586129][ T974] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.605830][ T1004] tipc: Resetting bearer [ 695.703781][ T1008] tunl0: entered promiscuous mode [ 695.712554][ T1008] netlink: 'syz.4.7340': attribute type 4 has an invalid length. [ 695.727828][ T35] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.737807][ T35] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.763048][T31289] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.781909][T31289] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.811764][T31285] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.820196][T31285] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.835723][T31285] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.842212][ T1016] netlink: 'syz.4.7342': attribute type 12 has an invalid length. [ 695.854709][T31285] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.870852][ T970] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.897262][ T970] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.923575][ T1020] __nla_validate_parse: 20 callbacks suppressed [ 695.923592][ T1020] netlink: 252 bytes leftover after parsing attributes in process `syz.4.7345'. [ 695.947993][ T1018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7344'. [ 695.959473][ T970] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.980401][ T970] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.014128][ T1018] 8021q: adding VLAN 0 to HW filter on device bond7 [ 696.028347][ T970] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 696.040972][ T970] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.106670][ T970] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 696.121765][ T970] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.191014][T31283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.199182][T31283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.266655][ T1056] netlink: 666 bytes leftover after parsing attributes in process `syz.4.7351'. [ 696.506141][ T1086] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7356'. [ 696.701256][ T1097] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 696.724803][ T1098] netlink: 'syz.4.7362': attribute type 22 has an invalid length. [ 696.734117][ T1093] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7361'. [ 696.736311][ T1098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7362'. [ 696.775764][ T1093] netlink: 'syz.9.7361': attribute type 1 has an invalid length. [ 696.860478][ T1114] netlink: 68 bytes leftover after parsing attributes in process `syz.9.7361'. [ 696.876704][ T1114] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7361'. [ 696.912668][ T1118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7366'. [ 696.990037][ T1127] netlink: 112 bytes leftover after parsing attributes in process `syz.2.7369'. [ 697.033782][ T1131] syzkaller1: entered promiscuous mode [ 697.042413][ T1131] syzkaller1: entered allmulticast mode [ 697.222720][T21425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.817638][ T1199] netlink: 'syz.9.7378': attribute type 49 has an invalid length. [ 698.267240][T15703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.453363][ T1241] dvmrp0: entered allmulticast mode [ 698.999777][T31283] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 699.008067][T31283] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.022324][T31283] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 699.030724][T31283] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.042993][T31283] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 699.051442][T31283] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.066465][T31290] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 699.074753][T31290] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.108900][ T1244] netlink: 'syz.3.7386': attribute type 39 has an invalid length. [ 699.302842][T21425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.789059][ T1103] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 700.344762][T20685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.843233][ T1342] netlink: 'syz.2.7418': attribute type 3 has an invalid length. [ 700.955432][ T1353] __nla_validate_parse: 11 callbacks suppressed [ 700.955463][ T1353] netlink: 44 bytes leftover after parsing attributes in process `syz.9.7423'. [ 700.978700][ T1353] syzkaller1: entered promiscuous mode [ 700.986324][ T1353] syzkaller1: entered allmulticast mode [ 701.175894][ T1365] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7426'. [ 701.298007][ T1385] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7432'. [ 701.318318][ T1385] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7432'. [ 701.327853][ T1385] netlink: 'syz.9.7432': attribute type 12 has an invalid length. [ 701.343645][ T1385] netlink: 'syz.9.7432': attribute type 11 has an invalid length. [ 701.382892][T20685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.395506][ T1389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 701.442744][ T1395] tipc: Cannot configure node identity twice [ 701.448881][ T1395] tipc: Cannot configure node identity twice [ 701.461802][ T1397] netlink: 80 bytes leftover after parsing attributes in process `syz.9.7437'. [ 701.472168][ T1397] netlink: 64 bytes leftover after parsing attributes in process `syz.9.7437'. [ 701.650594][ T1411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7438'. [ 701.661929][ T1411] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7438'. [ 701.848519][ T1426] netlink: 'syz.1.7446': attribute type 1 has an invalid length. [ 701.864254][ T1426] 8021q: adding VLAN 0 to HW filter on device bond4 [ 701.875672][ T1427] vlan5: entered promiscuous mode [ 701.880859][ T1427] bond4: entered promiscuous mode [ 701.885969][ T1427] vlan5: entered allmulticast mode [ 701.892204][ T1427] bond4: entered allmulticast mode [ 701.905017][ T1426] bond4: (slave bridge37): making interface the new active one [ 701.913346][ T1426] bridge37: entered promiscuous mode [ 701.918797][ T1426] bridge37: entered allmulticast mode [ 701.926254][ T1426] bond4: (slave bridge37): Enslaving as an active interface with an up link [ 701.942199][T31290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.037701][ T1439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7449'. [ 702.050805][ T1439] netlink: 'syz.1.7449': attribute type 29 has an invalid length. [ 702.058739][ T1439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7449'. [ 702.123559][ T1445] netlink: 'syz.1.7449': attribute type 29 has an invalid length. [ 702.426537][T21425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.516034][ T1491] syzkaller1: entered promiscuous mode [ 702.522250][ T1491] syzkaller1: entered allmulticast mode [ 702.635378][ T1497] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 702.737747][ T1504] netlink: zone id is out of range [ 702.742991][ T1504] netlink: zone id is out of range [ 702.748122][ T1504] netlink: zone id is out of range [ 702.753902][ T1504] netlink: zone id is out of range [ 702.763870][ T1504] netlink: del zone limit has 4 unknown bytes [ 702.853680][ T1522] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 703.046572][ T1544] netlink: 'syz.1.7477': attribute type 1 has an invalid length. [ 703.103486][ T1554] atomic_op ffff888053b9a198 conn xmit_atomic 0000000000000000 [ 703.115600][ T1554] xt_cgroup: path and classid specified [ 703.225777][ T1563] 8021q: adding VLAN 0 to HW filter on device bond10 [ 703.238836][ T1563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 703.243462][ T1566] netlink: 'syz.2.7483': attribute type 1 has an invalid length. [ 703.296406][ T1566] 8021q: adding VLAN 0 to HW filter on device bond8 [ 703.331745][ T1571] bond8: (slave veth13): Enslaving as an active interface with a down link [ 703.353045][ T1566] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 703.360751][ T1566] bond8: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 703.462518][T21425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.241856][ T1577] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 704.247894][ T1577] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 704.256930][ T1577] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 704.263472][ T1577] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 704.273392][ T1577] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 704.279928][ T1577] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 704.288663][ T1577] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 704.294925][ T1577] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 704.303803][ T1577] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 704.310074][ T1577] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 704.319803][ T1577] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 704.325774][ T1577] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 704.337090][ T1577] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 704.343231][ T1577] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 704.353208][ T1577] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 704.359154][ T1577] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 704.368517][ T1577] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 704.374766][ T1577] Bluetooth: hci9: Error when powering off device on rfkill (-4) [ 704.503616][T15703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.533989][ T1600] sit1: entered promiscuous mode [ 704.538965][ T1600] sit1: entered allmulticast mode [ 704.739904][T19475] Bluetooth: hci0: command 0x0405 tx timeout [ 704.746058][ T1577] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 704.752360][ T1577] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 704.917126][ T1611] netlink: 'syz.2.7497': attribute type 21 has an invalid length. [ 705.023590][ T1629] netlink: 'syz.4.7502': attribute type 3 has an invalid length. [ 705.345733][ T1662] IPv6: Can't replace route, no match found [ 705.370929][ T1662] netlink: 'syz.4.7511': attribute type 1 has an invalid length. [ 705.718631][ T1691] netlink: 'syz.4.7521': attribute type 1 has an invalid length. [ 705.761471][ T807] IPVS: starting estimator thread 0... [ 705.800645][ T1698] syzkaller0: entered promiscuous mode [ 705.808380][ T1698] syzkaller0: entered allmulticast mode [ 705.849734][ T1696] IPVS: using max 50 ests per chain, 120000 per kthread [ 706.104093][ T1725] IPVS: set_ctl: invalid protocol: 29 127.0.0.1:20001 [ 706.128602][ T1725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 706.193828][ T1735] __nla_validate_parse: 12 callbacks suppressed [ 706.193846][ T1735] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7530'. [ 706.240449][ T1739] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7531'. [ 706.266775][ T1739] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7531'. [ 706.310527][ T1735] syzkaller0: entered promiscuous mode [ 706.316100][ T1735] syzkaller0: entered allmulticast mode [ 706.324792][ T1739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7531'. [ 706.351470][ T1735] netlink: 'syz.3.7530': attribute type 1 has an invalid length. [ 706.402978][ T1735] 8021q: adding VLAN 0 to HW filter on device bond7 [ 706.496636][ T1758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7535'. [ 706.572275][ T1764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7535'. [ 706.584776][T20685] net_ratelimit: 2 callbacks suppressed [ 706.584794][T20685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.614360][ T1754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 706.763664][ T1782] netlink: 'syz.1.7537': attribute type 39 has an invalid length. [ 706.802792][ T1785] netlink: 'syz.2.7538': attribute type 11 has an invalid length. [ 706.835397][ T1785] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7538'. [ 706.856850][ T1788] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 706.876820][ T1789] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7540'. [ 706.896601][ T1789] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7540'. [ 706.933390][ T1785] syzkaller0: entered promiscuous mode [ 706.936407][ T1788] netlink: 'syz.4.7540': attribute type 1 has an invalid length. [ 706.941090][ T1785] syzkaller0: entered allmulticast mode [ 707.023695][ T1805] netlink: 228 bytes leftover after parsing attributes in process `syz.9.7546'. [ 707.131865][ T1810] 8021q: adding VLAN 0 to HW filter on device bond5 [ 707.167698][ T1810] bond5: (slave geneve2): making interface the new active one [ 707.177605][ T1810] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 707.192150][ T1819] Unsupported xt match [ 707.192163][ T1819] unable to load match [ 707.207012][ T1821] x_tables: unsorted underflow at hook 2 [ 707.223174][ T1822] Unsupported xt match [ 707.223189][ T1822] unable to load match [ 707.342275][ T1835] v: renamed from vlan0 (while UP) [ 707.427179][ T1842] sctp: [Deprecated]: syz.9.7558 (pid 1842) Use of int in max_burst socket option. [ 707.427179][ T1842] Use struct sctp_assoc_value instead [ 707.577309][ T1856] Cannot find add_set index 0 as target [ 707.626729][T20685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.699308][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 707.700145][T31289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.845158][ T1885] xt_hashlimit: size too large, truncated to 1048576 [ 707.904982][ T1886] xt_hashlimit: size too large, truncated to 1048576 [ 707.962027][ T1877] mac80211_hwsim hwsim70 syzkaller0: entered promiscuous mode [ 707.988191][ T1877] mac80211_hwsim hwsim70 syzkaller0: entered allmulticast mode [ 708.013176][ T1887] syz.2.7570 (1887) used greatest stack depth: 18680 bytes left [ 708.132348][ T1897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 708.161049][ T1903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 708.215070][ T1907] ip6erspan1: entered allmulticast mode [ 708.361691][ T1920] tipc: Enabling of bearer rejected, media not registered [ 708.635610][ T1950] pimreg: entered allmulticast mode [ 708.656594][ T1950] syz_tun: entered allmulticast mode [ 708.664877][T20685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.722507][ T1957] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 708.757840][ T1950] pimreg: left allmulticast mode [ 709.271904][ T1987] validate_nla: 7 callbacks suppressed [ 709.271921][ T1987] netlink: 'syz.1.7599': attribute type 39 has an invalid length. [ 709.312487][ T1985] netlink: 'syz.2.7601': attribute type 6 has an invalid length. [ 709.705807][T21425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.831219][ T2030] openvswitch: netlink: Duplicate key (type 2). [ 710.129849][ T2058] netlink: 'syz.2.7623': attribute type 1 has an invalid length. [ 710.357304][ T2085] netlink: 'syz.3.7633': attribute type 21 has an invalid length. [ 710.378609][ T2089] netlink: 'syz.2.7632': attribute type 1 has an invalid length. [ 710.476268][ T2089] bond9: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 710.510265][ T2089] bond9: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 710.553757][ T2089] bond9: (slave ip6gre1): making interface the new active one [ 710.585419][ T2089] bond9: (slave ip6gre1): Enslaving as an active interface with an up link [ 710.867590][ T2132] netlink: 'syz.9.7646': attribute type 7 has an invalid length. [ 710.977294][ T2139] team_slave_0 (unregistering): left promiscuous mode [ 710.998356][ T2139] team0: Port device team_slave_0 removed [ 711.270347][ T2162] netlink: 'syz.1.7652': attribute type 13 has an invalid length. [ 711.519056][ T2192] xt_addrtype: ipv6 does not support BROADCAST matching [ 711.553857][ T2196] __nla_validate_parse: 24 callbacks suppressed [ 711.553873][ T2196] netlink: 212344 bytes leftover after parsing attributes in process `syz.9.7662'. [ 711.685865][ T2212] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7668'. [ 711.710918][ T2212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7668'. [ 711.741946][ T2212] block nbd6: Unsupported socket: should be TCP or UNIX. [ 711.782675][T15703] net_ratelimit: 2 callbacks suppressed [ 711.782690][T15703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.924924][ T2231] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7672'. [ 711.940407][ T2235] netlink: 56 bytes leftover after parsing attributes in process `syz.9.7673'. [ 712.025275][ T2239] bond6: Removing last arp target with arp_interval on [ 712.063560][ T2247] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7679'. [ 712.081559][ T2248] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7679'. [ 712.117698][ T2251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7681'. [ 712.127435][ T2251] netlink: 'syz.1.7681': attribute type 3 has an invalid length. [ 712.207382][ T2257] Cannot find set identified by id 65534 to match [ 712.294893][ T2265] netlink: 'syz.1.7686': attribute type 1 has an invalid length. [ 712.308097][ T2270] smc: ib device syz2 ibport 2 erased user defined pnetid SYZ2 [ 712.377884][ T2265] 8021q: adding VLAN 0 to HW filter on device bond7 [ 712.423698][ T2267] bond7: (slave dummy0): Enslaving as a backup interface with an up link [ 712.436513][ T2265] netlink: 'syz.1.7686': attribute type 10 has an invalid length. [ 712.450984][ T2287] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7690'. [ 712.473137][ T2265] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7686'. [ 712.482563][T31286] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 712.505079][ T2265] dummy0: entered promiscuous mode [ 712.513509][T31286] bond7: (slave dummy0): link status up again after 0 ms [ 712.536035][ T2265] bond7: (slave dummy0): Removing an active aggregator [ 712.550265][T31288] bond7: (slave dummy0): link status up again after 0 ms [ 712.554379][ T2265] bond7: (slave dummy0): Releasing backup interface [ 712.566628][ T2297] SET target dimension over the limit! [ 712.830508][T21425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.103065][ T2360] veth1_macvtap: left promiscuous mode [ 713.135093][ T2360] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 713.334749][ T2369] lo speed is unknown, defaulting to 1000 [ 713.357927][ T2378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 713.460539][T31289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.499769][ T2390] syz.4.7718: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 713.535215][ T2390] CPU: 1 UID: 0 PID: 2390 Comm: syz.4.7718 Not tainted syzkaller #0 PREEMPT(full) [ 713.535241][ T2390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 713.535252][ T2390] Call Trace: [ 713.535259][ T2390] [ 713.535267][ T2390] dump_stack_lvl+0xe8/0x150 [ 713.535293][ T2390] warn_alloc+0x249/0x340 [ 713.535317][ T2390] ? __pfx_stack_trace_save+0x10/0x10 [ 713.535342][ T2390] ? __pfx_warn_alloc+0x10/0x10 [ 713.535365][ T2390] ? __kasan_kmalloc+0x93/0xb0 [ 713.535386][ T2390] ? __kmalloc_cache_noprof+0x318/0x660 [ 713.535405][ T2390] ? xskq_create+0x56/0x170 [ 713.535434][ T2390] ? xsk_init_queue+0x8a/0xe0 [ 713.535451][ T2390] ? xsk_setsockopt+0x52a/0x960 [ 713.535467][ T2390] ? do_sock_setsockopt+0x17c/0x1b0 [ 713.535489][ T2390] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 713.535510][ T2390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.535529][ T2390] __vmalloc_node_range_noprof+0x12c/0x1730 [ 713.535562][ T2390] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 713.535585][ T2390] ? __kasan_kmalloc+0x93/0xb0 [ 713.535608][ T2390] vmalloc_user_noprof+0xad/0xe0 [ 713.535626][ T2390] ? xskq_create+0xbf/0x170 [ 713.535647][ T2390] xskq_create+0xbf/0x170 [ 713.535666][ T2390] xsk_init_queue+0x8a/0xe0 [ 713.535684][ T2390] xsk_setsockopt+0x52a/0x960 [ 713.535702][ T2390] ? __pfx_xsk_setsockopt+0x10/0x10 [ 713.535719][ T2390] ? __pfx_aa_sk_perm+0x10/0x10 [ 713.535743][ T2390] ? lock_release+0x4b/0x3c0 [ 713.535767][ T2390] ? aa_sock_opt_perm+0xff/0x1a0 [ 713.535785][ T2390] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 713.535808][ T2390] ? __pfx_xsk_setsockopt+0x10/0x10 [ 713.535826][ T2390] do_sock_setsockopt+0x17c/0x1b0 [ 713.535850][ T2390] __x64_sys_setsockopt+0x13d/0x1b0 [ 713.535872][ T2390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.535889][ T2390] do_syscall_64+0x174/0x580 [ 713.535910][ T2390] ? trace_irq_disable+0x3b/0x140 [ 713.535930][ T2390] ? clear_bhb_loop+0x40/0x90 [ 713.535948][ T2390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.535963][ T2390] RIP: 0033:0x7f6d1239ce59 [ 713.535978][ T2390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.535993][ T2390] RSP: 002b:00007f6d13264028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 713.536012][ T2390] RAX: ffffffffffffffda RBX: 00007f6d12615fa0 RCX: 00007f6d1239ce59 [ 713.536025][ T2390] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 713.536036][ T2390] RBP: 00007f6d12432e6f R08: 0000000000000004 R09: 0000000000000000 [ 713.536046][ T2390] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.536056][ T2390] R13: 00007f6d12616038 R14: 00007f6d12615fa0 R15: 00007ffda651f368 [ 713.536074][ T2390] [ 713.536090][ T2390] Mem-Info: [ 713.749033][ T2408] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 713.825514][ T2390] active_anon:8208 inactive_anon:7 isolated_anon:0 [ 713.825514][ T2390] active_file:2571 inactive_file:40448 isolated_file:0 [ 713.825514][ T2390] unevictable:768 dirty:132 writeback:0 [ 713.825514][ T2390] slab_reclaimable:14391 slab_unreclaimable:160547 [ 713.825514][ T2390] mapped:55053 shmem:1309 pagetables:1861 [ 713.825514][ T2390] sec_pagetables:0 bounce:0 [ 713.825514][ T2390] kernel_misc_reclaimable:0 [ 713.825514][ T2390] free:1169693 free_pcp:24616 free_cma:0 [ 713.838507][ T2409] xt_l2tp: missing protocol rule (udp|l2tpip) [ 713.879362][T15703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.885369][ T2390] Node 0 active_anon:32932kB inactive_anon:28kB active_file:10284kB inactive_file:161584kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:179252kB dirty:524kB writeback:0kB shmem:3700kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:19620kB pagetables:7300kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 713.905436][ T2369] lo speed is unknown, defaulting to 1000 [ 713.941869][ T2390] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40960kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 714.006104][ T2390] Node 0 DMA free:11248kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 714.046358][ T2390] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 714.053455][ T2390] Node 0 DMA32 free:874596kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32684kB inactive_anon:28kB active_file:10284kB inactive_file:161584kB unevictable:1536kB writepending:524kB zspages:0kB present:3129332kB managed:2552584kB mlocked:0kB bounce:0kB free_pcp:36172kB local_pcp:15504kB free_cma:0kB [ 714.088384][ T2390] lowmem_reserve[]: 0 0 0 0 0 [ 714.095444][ T2390] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:664kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 714.126667][ T2390] lowmem_reserve[]: 0 0 0 0 0 [ 714.131764][ T2390] Node 1 Normal free:3793128kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:61972kB local_pcp:30692kB free_cma:0kB [ 714.165817][ T2390] lowmem_reserve[]: 0 0 0 0 0 [ 714.171055][ T2390] Node 0 DMA: 0*4kB 2*8kB (U) 2*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11248kB [ 714.186350][ T2390] Node 0 DMA32: 6652*4kB (UME) 6487*8kB (UME) 4536*16kB (UME) 228*32kB (UME) 46*64kB (UME) 108*128kB (UM) 561*256kB (UM) 355*512kB (UM) 229*1024kB (UM) 68*2048kB (UM) 0*4096kB = 874280kB [ 714.206287][ T2390] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 714.218216][ T2390] Node 1 Normal: 5*4kB (U) 7*8kB (UM) 13*16kB (UM) 10*32kB (UM) 13*64kB (UM) 7*128kB (UM) 6*256kB (UM) 9*512kB (UM) 4*1024kB (UM) 6*2048kB (U) 920*4096kB (UM) = 3793180kB [ 714.236255][ T2390] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 714.246205][ T2390] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 714.255861][ T2390] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 714.266207][ T2390] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 714.276245][ T2390] 44326 total pagecache pages [ 714.281934][ T2390] 0 pages in swap cache [ 714.286264][ T2390] Free swap = 124996kB [ 714.297153][ T2390] Total swap = 124996kB [ 714.330482][ T2390] 2097051 pages RAM [ 714.339086][ T2390] 0 pages HighMem/MovableOnly [ 714.357253][ T2390] 427124 pages reserved [ 714.365092][ T2390] 0 pages cma reserved [ 714.405978][ T2439] validate_nla: 2 callbacks suppressed [ 714.405995][ T2439] netlink: 'syz.1.7732': attribute type 1 has an invalid length. [ 714.442918][ T2440] IPv6: NLM_F_REPLACE set, but no existing node found! [ 714.908609][T21425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.667840][ T2546] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 715.676412][ T2551] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 715.943777][T21425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.026099][ T2577] geneve3: entered promiscuous mode [ 716.228542][ T2592] bond7 (unregistering): Released all slaves [ 716.641716][ T2658] netlink: 'syz.1.7774': attribute type 17 has an invalid length. [ 716.658354][ T2658] __nla_validate_parse: 17 callbacks suppressed [ 716.658370][ T2658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7774'. [ 716.681661][ T2658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7774'. [ 716.710441][ T2671] netlink: 'syz.2.7776': attribute type 12 has an invalid length. [ 716.828814][ T2689] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7776'. [ 716.879010][ T2694] tipc: Enabling of bearer rejected, failed to enable media [ 716.901460][ T2694] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7781'. [ 716.935096][ T2696] lo speed is unknown, defaulting to 1000 [ 716.974701][ T2700] netlink: 'syz.1.7782': attribute type 16 has an invalid length. [ 716.985323][T21425] net_ratelimit: 1 callbacks suppressed [ 716.985338][T21425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.993575][ T2699] bridge0: port 4(team0) entered disabled state [ 717.010574][ T2700] netlink: 'syz.1.7782': attribute type 17 has an invalid length. [ 717.028089][ T2699] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.037575][ T2699] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.084217][ T2699] bridge0: port 3(vlan2) entered disabled state [ 717.110786][ T2700] dummy0: left promiscuous mode [ 717.123358][ T2700] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.130459][ T2700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.140915][ T2700] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.147983][ T2700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 717.168665][ T2700] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 717.187438][T31285] bridge0: port 3(vlan2) entered blocking state [ 717.193791][T31285] bridge0: port 3(vlan2) entered forwarding state [ 717.207430][T31285] bridge0: port 4(team0) entered blocking state [ 717.213768][T31285] bridge0: port 4(team0) entered forwarding state [ 717.225855][ T2703] bond0: (slave bond_slave_0): Releasing backup interface [ 717.240393][ T2703] bond5: (slave veth0_to_bond): Releasing active interface [ 717.294908][ T2696] lo speed is unknown, defaulting to 1000 [ 717.415076][ T2719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7788'. [ 717.511902][ T2719] vlan3: entered allmulticast mode [ 717.517476][ T2719] veth1_virt_wifi: entered allmulticast mode [ 717.555596][ T2726] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7790'. [ 717.792716][T32681] IPVS: starting estimator thread 0... [ 717.806042][ T2765] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 717.814490][ T2765] x_tables: duplicate underflow at hook 1 [ 717.825693][ T2762] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.7799'. [ 717.845894][ T2770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7798'. [ 717.855079][ T2770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7798'. [ 717.889559][ T2763] IPVS: using max 58 ests per chain, 139200 per kthread [ 718.024361][T21425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.050811][ T2790] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.7803'. [ 718.163926][ T2800] netlink: 'syz.4.7806': attribute type 12 has an invalid length. [ 718.176785][ T2800] netlink: 'syz.4.7806': attribute type 3 has an invalid length. [ 718.590712][ T2875] netlink: 'syz.4.7823': attribute type 27 has an invalid length. [ 718.608744][ T2875] netlink: 'syz.4.7823': attribute type 4 has an invalid length. [ 718.732619][ T2897] IPVS: ip_vs_edit_dest(): server weight less than zero [ 718.740018][T32681] IPVS: starting estimator thread 0... [ 718.754724][ T2897] netlink: 'syz.9.7830': attribute type 1 has an invalid length. [ 718.770025][ T2897] nbd: error processing sock list [ 718.813220][ T2906] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 718.839475][ T2901] IPVS: using max 43 ests per chain, 103200 per kthread [ 719.065341][T21425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.228984][T31288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.269812][T19475] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 719.277267][T19475] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 719.288665][T19475] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 719.297747][T19475] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 719.306471][T19475] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 719.344011][ T5626] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 719.352141][ T5626] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 719.359584][ T5626] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 719.367385][ T5626] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 719.376242][ T5626] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 719.493829][T31288] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.553015][T31288] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.597038][T31288] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.657916][ T2955] syzkaller0: entered promiscuous mode [ 719.671937][ T2955] syzkaller0: entered allmulticast mode [ 719.682889][T31288] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.870235][T31288] bond9: left allmulticast mode [ 719.876750][T31288] bond9: left promiscuous mode [ 719.895233][T31288] bridge0: port 4(bond9) entered disabled state [ 719.938141][T31288] bond8: left allmulticast mode [ 719.953732][T31288] bond8: left promiscuous mode [ 719.969941][T31288] bridge0: port 3(bond8) entered disabled state [ 720.008184][T31288] bridge_slave_1: left allmulticast mode [ 720.023234][T31288] bridge_slave_1: left promiscuous mode [ 720.025074][ T2978] xt_nat: multiple ranges no longer supported [ 720.036391][T31288] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.056992][T31288] bridge_slave_0: left allmulticast mode [ 720.074200][T31288] bridge_slave_0: left promiscuous mode [ 720.095300][T31288] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.104385][T21425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.243074][T31288] lo: left allmulticast mode [ 720.349800][T31288] bond4 (unregistering): (slave vti0): Releasing backup interface [ 720.384257][T31288] gretap0 (unregistering): left promiscuous mode [ 720.440963][T31288] bond0 (unregistering): (slave bond6): Releasing backup interface [ 720.450240][T31288] bond0 (unregistering): Released all slaves [ 720.458107][T31288] bond1 (unregistering): Released all slaves [ 720.467896][T31288] bond2 (unregistering): Released all slaves [ 720.477686][T31288] bond3 (unregistering): Released all slaves [ 720.487073][T31288] bond4 (unregistering): Released all slaves [ 720.497518][T31288] bond5 (unregistering): (slave veth5): Releasing active interface [ 720.507004][T31288] bond5 (unregistering): Released all slaves [ 720.521462][T31288] bond6 (unregistering): Released all slaves [ 720.532728][T31288] bond7 (unregistering): Released all slaves [ 720.542609][T31288] bond8 (unregistering): Released all slaves [ 720.553049][T31288] bond9 (unregistering): Released all slaves [ 720.562415][T31288] bond10 (unregistering): Released all slaves [ 720.577325][T31288] bond11 (unregistering): Released all slaves [ 720.594182][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 720.619779][ T2938] lo speed is unknown, defaulting to 1000 [ 720.664721][T31288] tipc: Disabling bearer [ 720.686670][T31288] tipc: Disabling bearer [ 720.711011][T31288] tipc: Left network mode [ 720.727587][ T3007] syzkaller0: entered promiscuous mode [ 720.752971][ T3007] syzkaller0: entered allmulticast mode [ 721.046417][ T3025] IPVS: Unknown mcast interface: vcan0 [ 721.146510][T15703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.231996][ T2938] lo speed is unknown, defaulting to 1000 [ 721.327901][ T5284] 8021q: adding VLAN 0 to HW filter on device eth2 [ 721.459248][T19475] Bluetooth: hci10: command tx timeout [ 721.556363][ T3071] team0: Device is already in use. [ 721.578250][T31288] team0: left promiscuous mode [ 721.593475][T31288] team_slave_1: left promiscuous mode [ 721.606078][T31288] hsr_slave_0: left promiscuous mode [ 721.613787][T31288] hsr_slave_1: left promiscuous mode [ 721.624626][T31288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 721.633885][T31288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 721.644692][T31288] batman_adv: batadv0: Removing interface: dummy0 [ 721.738337][ T3087] validate_nla: 2 callbacks suppressed [ 721.738365][ T3087] netlink: 'syz.4.7868': attribute type 1 has an invalid length. [ 721.882477][T31288] team0 (unregistering): Port device team_slave_1 removed [ 721.992010][ T3087] 8021q: adding VLAN 0 to HW filter on device bond8 [ 722.093885][ T3124] __nla_validate_parse: 23 callbacks suppressed [ 722.093904][ T3124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7872'. [ 722.111626][ T3124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7872'. [ 722.126035][ T3130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7873'. [ 722.186636][T21425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.219055][ T5284] 8021q: adding VLAN 0 to HW filter on device eth4 [ 722.260892][ T2938] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.268126][ T2938] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.276308][ T2938] bridge_slave_0: entered allmulticast mode [ 722.284186][ T2938] bridge_slave_0: entered promiscuous mode [ 722.302247][T31288] IPVS: stop unused estimator thread 0... [ 722.310108][ T2938] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.318579][ T2938] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.325983][ T2938] bridge_slave_1: entered allmulticast mode [ 722.333360][ T2938] bridge_slave_1: entered promiscuous mode [ 722.352049][ T2938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.366086][ T2938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.392208][ T2938] team0: Port device team_slave_0 added [ 722.401571][ T2938] team0: Port device team_slave_1 added [ 722.426566][ T2938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.435996][ T2938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.462640][ T2938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.474270][ T2938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.481325][ T2938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.508063][ T2938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.537344][ T2938] hsr_slave_0: entered promiscuous mode [ 722.543661][ T2938] hsr_slave_1: entered promiscuous mode [ 722.550344][ T2938] debugfs: 'hsr0' already exists in 'hsr' [ 722.556121][ T2938] Cannot create hsr debugfs directory [ 723.222781][T20685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.539908][T19475] Bluetooth: hci10: command tx timeout [ 724.261684][T31286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.269839][T31286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.879759][ T3100] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 724.897794][ T2938] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 724.951438][ T2938] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 724.966990][ T2938] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 724.988684][ T2938] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 725.003507][ T2938] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 725.025454][ T2938] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 725.040357][ T3165] netlink: 108 bytes leftover after parsing attributes in process `syz.2.7878'. [ 725.088286][ T3164] netlink: 'syz.2.7878': attribute type 12 has an invalid length. [ 725.098971][ T3164] netlink: 'syz.2.7878': attribute type 29 has an invalid length. [ 725.108365][ T3164] netlink: 'syz.2.7878': attribute type 1 has an invalid length. [ 725.117531][ T3164] netlink: 'syz.2.7878': attribute type 2 has an invalid length. [ 725.125634][ T2938] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 725.143294][ T2938] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 725.247003][ T3189] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7883'. [ 725.308388][T21425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.339827][ T2938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.374028][ T2938] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.419291][T31286] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.426441][T31286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.465721][T31281] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.472892][T31281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.619333][T19475] Bluetooth: hci10: command tx timeout [ 725.760220][ T3243] netlink: 'syz.4.7895': attribute type 1 has an invalid length. [ 725.898578][ T3253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7897'. [ 725.937956][ T3253] 8021q: adding VLAN 0 to HW filter on device macsec3 [ 725.954382][T20685] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 726.078507][ T3272] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7900'. [ 726.210553][ T2938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.296014][ T5626] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 726.304806][ T5626] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 726.313133][ T5626] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 726.321091][ T5626] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 726.328522][ T5626] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 726.344654][T15703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.661631][ T2938] veth0_vlan: entered promiscuous mode [ 726.692549][ T2938] veth1_vlan: entered promiscuous mode [ 726.734697][ T3291] lo speed is unknown, defaulting to 1000 [ 726.755112][ T2938] veth0_macvtap: entered promiscuous mode [ 726.774194][ T2938] veth1_macvtap: entered promiscuous mode [ 726.809960][ T2938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 726.841278][ T2938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 726.865527][T31283] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.883484][T31283] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.916240][T31283] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.942633][T31283] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.116958][ T3329] netlink: 'syz.2.7907': attribute type 39 has an invalid length. [ 727.127745][ T3291] lo speed is unknown, defaulting to 1000 [ 727.388678][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.485422][ T3291] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.493252][ T3291] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.501545][ T3291] bridge_slave_0: entered allmulticast mode [ 727.508623][ T3291] bridge_slave_0: entered promiscuous mode [ 727.536627][ T3291] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.547187][ T3291] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.555310][ T3291] bridge_slave_1: entered allmulticast mode [ 727.562934][ T3291] bridge_slave_1: entered promiscuous mode [ 727.592258][ T3291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.604753][ T3291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 727.634895][ T3291] team0: Port device team_slave_0 added [ 727.643418][ T3291] team0: Port device team_slave_1 added [ 727.664744][ T3291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 727.672439][ T3291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.698804][ T3291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 727.712186][ T3291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.716218][T19475] Bluetooth: hci10: command tx timeout [ 727.720802][ T3291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.751481][ T3291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.779994][ T3291] hsr_slave_0: entered promiscuous mode [ 727.786191][ T3291] hsr_slave_1: entered promiscuous mode [ 727.792422][ T3291] debugfs: 'hsr0' already exists in 'hsr' [ 727.798153][ T3291] Cannot create hsr debugfs directory [ 727.853866][ T3291] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.882884][ T3291] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.954343][ T3291] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.994140][ T3291] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.422372][T19475] Bluetooth: hci6: command tx timeout [ 728.428211][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.198889][ T3283] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 729.247023][ T3291] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 729.274905][ T3291] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 729.302702][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.304233][ T3291] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 729.319853][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.331434][ T3291] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 729.350236][ T3291] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 729.372267][ T3291] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 729.394331][ T3291] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 729.417895][ T3291] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 729.436487][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.447419][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.464982][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.475131][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.617255][ T3411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7918'. [ 729.633650][ T3411] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7918'. [ 729.643031][ T3291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.680264][ T3291] 8021q: adding VLAN 0 to HW filter on device team0 [ 729.692070][ T3413] syzkaller0: entered promiscuous mode [ 729.697901][ T3413] syzkaller0: entered allmulticast mode [ 729.723355][T31285] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.730531][T31285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.747980][ T3420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7920'. [ 729.777026][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.784181][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.825335][ T3424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7921'. [ 729.865418][ T3427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7922'. [ 729.983346][ T3438] netlink: 260 bytes leftover after parsing attributes in process `syz.4.7924'. [ 730.089641][ T3448] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7927'. [ 730.124988][ T3448] netlink: 'syz.4.7927': attribute type 3 has an invalid length. [ 730.138201][ T3448] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7927'. [ 730.148349][ T3448] netlink: 'syz.4.7927': attribute type 3 has an invalid length. [ 730.202386][ T3454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7928'. [ 730.250084][ T3463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 730.376525][ T3474] sctp: [Deprecated]: syz.9.7932 (pid 3474) Use of int in maxseg socket option. [ 730.376525][ T3474] Use struct sctp_assoc_value instead [ 730.417455][ T3477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7933'. [ 730.448674][ T3479] syzkaller0: entered promiscuous mode [ 730.473867][ T3479] syzkaller0: entered allmulticast mode [ 730.502809][T20685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.515418][T19475] Bluetooth: hci6: command tx timeout [ 730.538572][ T3479] tipc: Enabled bearer , priority 0 [ 730.563883][ T3291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.603052][ T3489] vlan2: entered promiscuous mode [ 730.608160][ T3489] geneve1: entered promiscuous mode [ 730.614104][ T3489] vlan2: entered allmulticast mode [ 730.620286][ T3489] geneve1: entered allmulticast mode [ 730.628485][ T3478] tipc: Resetting bearer [ 730.648209][ T3478] tipc: Disabling bearer [ 730.756465][ T3291] veth0_vlan: entered promiscuous mode [ 730.784253][ T3505] netlink: 'syz.2.7941': attribute type 11 has an invalid length. [ 730.784705][ T3291] veth1_vlan: entered promiscuous mode [ 730.844555][ T3291] veth0_macvtap: entered promiscuous mode [ 730.879780][ T3291] veth1_macvtap: entered promiscuous mode [ 730.918487][ T3291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 730.962785][ T3291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 730.993869][ T3523] ipvlan0: Caught tx_queue_len zero misconfig [ 731.003959][ T3523] netlink: 'syz.1.7949': attribute type 21 has an invalid length. [ 731.012194][T31285] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.037364][T31285] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.055108][T31285] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.074718][T31285] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.081207][ T3517] netlink: 'syz.2.7946': attribute type 3 has an invalid length. [ 731.220750][T31281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.246268][T31281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.327711][T31286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.343592][T31286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.490347][ T3554] veth0_macvtap: Caught tx_queue_len zero misconfig [ 731.545004][T20685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.573515][ T3557] netlink: 'syz.4.7959': attribute type 8 has an invalid length. [ 731.635282][ T3557] bridge0: entered promiscuous mode [ 731.655652][ T3557] gretap0: entered promiscuous mode [ 731.677608][ T3557] bridge0: left promiscuous mode [ 731.691806][ T3557] gretap0: left promiscuous mode [ 731.726635][ T3560] tunl0: left promiscuous mode [ 731.796164][ T3560] bridge0: port 3(team0) entered disabled state [ 731.802626][ T3560] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.810031][ T3560] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.864694][ T3560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 731.917101][ T3560] gtp0: left promiscuous mode [ 731.931884][ T3560] gtp0: left allmulticast mode [ 731.938355][ T3560] geneve2: left promiscuous mode [ 731.944980][ T3560] geneve2: left allmulticast mode [ 731.950768][ T3560] tipc: Resetting bearer [ 731.964797][ T3560] mac80211_hwsim hwsim76 syzkaller0: left promiscuous mode [ 731.975737][ T3560] mac80211_hwsim hwsim76 syzkaller0: left allmulticast mode [ 731.987697][ T3560] bond1: left promiscuous mode [ 731.997720][ T3560] veth1_vlan: left allmulticast mode [ 732.003925][ T3560] macvtap0: left promiscuous mode [ 732.009829][ T3560] macvtap0: left allmulticast mode [ 732.023237][T31290] wlan0: Trigger new scan to find an IBSS to join [ 732.052652][ T3560] vlan2: left promiscuous mode [ 732.062557][ T3560] geneve1: left promiscuous mode [ 732.075859][ T3560] vlan2: left allmulticast mode [ 732.086671][ T3560] geneve1: left allmulticast mode [ 732.111625][ T3560] gre1: left promiscuous mode [ 732.120787][ T3560] gre1: left allmulticast mode [ 732.146487][ T3560] bridge6: left promiscuous mode [ 732.157650][ T3560] bridge6: left allmulticast mode [ 732.188394][ T3560] ip6erspan1: left allmulticast mode [ 732.196485][ T3560] vlan3: left allmulticast mode [ 732.202356][ T3560] veth1_virt_wifi: left allmulticast mode [ 732.237710][T31285] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.272797][T31285] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.305577][T31285] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.342092][T31285] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.415015][T31285] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.444451][T31285] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.490301][T31285] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.521044][T31285] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.548558][ T3586] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 732.552040][ T3609] sctp: [Deprecated]: syz.4.7970 (pid 3609) Use of int in maxseg socket option. [ 732.552040][ T3609] Use struct sctp_assoc_value instead [ 732.584183][T19475] Bluetooth: hci6: command tx timeout [ 732.595165][ T3586] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 732.601571][T15703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.623079][ T3586] gretap2: entered promiscuous mode [ 732.655765][ T3586] gretap2: entered allmulticast mode [ 732.797349][ T3627] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 732.916901][ T3636] netlink: 'syz.2.7978': attribute type 83 has an invalid length. [ 732.988824][ T3647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 733.202854][ T3665] netlink: 'syz.4.7987': attribute type 1 has an invalid length. [ 733.270969][ T3665] 8021q: adding VLAN 0 to HW filter on device bond9 [ 733.282944][ T3673] bond0: Device is already in use. [ 733.328719][ T3675] bond9: (slave geneve3): making interface the new active one [ 733.338730][ T3675] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 733.351928][T31286] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.371827][T31286] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.396149][T31286] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.409470][ T3683] netlink: 'syz.9.7997': attribute type 10 has an invalid length. [ 733.440727][T31286] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.467183][ T3683] team0: entered allmulticast mode [ 733.477336][ T3683] team_slave_0: entered allmulticast mode [ 733.493009][ T3683] team_slave_1: entered allmulticast mode [ 733.502581][ T3683] bridge0: port 3(team0) entered blocking state [ 733.509063][ T3683] bridge0: port 3(team0) entered disabled state [ 733.523462][ T3683] team0: entered promiscuous mode [ 733.528978][ T3683] team_slave_0: entered promiscuous mode [ 733.535984][ T3683] team_slave_1: entered promiscuous mode [ 733.544043][ T3683] bridge0: port 3(team0) entered blocking state [ 733.550413][ T3683] bridge0: port 3(team0) entered forwarding state [ 733.553283][ T3693] netlink: 'syz.1.7999': attribute type 1 has an invalid length. [ 733.625322][T15703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.678669][ T3706] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 733.693552][ T3706] bond1 (unregistering): Released all slaves [ 733.818262][ T3722] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 733.838645][ T3728] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 733.845983][ T3720] tipc: Enabling of bearer rejected, failed to enable media [ 733.955099][ T3736] netlink: 'syz.4.8013': attribute type 2 has an invalid length. [ 734.041258][ T3749] xt_policy: output policy not valid in PREROUTING and INPUT [ 734.207645][ T3766] xt_HMARK: proto mask must be zero with L3 mode [ 734.217278][ T3764] netlink: 'syz.1.8020': attribute type 10 has an invalid length. [ 734.662528][T19475] Bluetooth: hci6: command tx timeout [ 734.669555][T15703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.671734][ T3803] syzkaller0: entered promiscuous mode [ 734.683475][ T3803] syzkaller0: entered allmulticast mode [ 734.696399][ T3804] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 734.844280][ T3817] netlink: 'syz.9.8033': attribute type 1 has an invalid length. [ 734.913937][ T3819] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 734.922816][ T3823] __nla_validate_parse: 20 callbacks suppressed [ 734.922831][ T3823] netlink: 277 bytes leftover after parsing attributes in process `syz.9.8036'. [ 734.923832][ T3819] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 734.931825][ T3823] netlink: 277 bytes leftover after parsing attributes in process `syz.9.8036'. [ 734.980264][T31286] wlan0: Trigger new scan to find an IBSS to join [ 735.033815][ T3829] syzkaller0: entered promiscuous mode [ 735.040047][ T3829] syzkaller0: entered allmulticast mode [ 735.051513][ T3829] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8037'. [ 735.051760][ T3821] netlink: 'syz.0.8035': attribute type 2 has an invalid length. [ 735.196872][ T3833] x_tables: duplicate underflow at hook 1 [ 735.222279][T31283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.281462][ T3836] nbd: couldn't find a device at index 0 [ 735.408746][ T3847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8044'. [ 735.418860][ T3847] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8044'. [ 735.427379][ T3849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8045'. [ 735.431049][ T3847] netlink: 'syz.2.8044': attribute type 28 has an invalid length. [ 735.446496][ T3847] netlink: 'syz.2.8044': attribute type 3 has an invalid length. [ 735.454473][ T3847] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8044'. [ 735.674243][ T3855] syzkaller0: entered promiscuous mode [ 735.680402][ T3855] syzkaller0: entered allmulticast mode [ 735.706850][T20685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.757888][ T3857] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8050'. [ 735.773126][ T3869] syzkaller1: entered promiscuous mode [ 735.791046][ T3869] syzkaller1: entered allmulticast mode [ 735.859264][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 735.864748][ T3878] netlink: 212 bytes leftover after parsing attributes in process `syz.1.8053'. [ 735.883354][ T3878] NCSI netlink: No device for ifindex 830110067 [ 736.127445][ T3904] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8062'. [ 736.203266][ T3904] openvswitch: netlink: Key type 225 is out of range max 32 [ 736.305484][ T3923] tipc: Failed to remove unknown binding: 66,0,0/0:1283388695/1283388696 [ 736.316096][ T3923] tipc: Failed to remove unknown binding: 66,0,0/0:1283388695/1283388696 [ 736.408821][ T3936] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 736.499430][ T30] INFO: task syz.7.5261:25664 blocked for more than 143 seconds. [ 736.507247][ T30] Not tainted syzkaller #0 [ 736.513132][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 736.522816][ T30] task:syz.7.5261 state:D stack:27640 pid:25664 tgid:25662 ppid:15413 task_flags:0x400140 flags:0x00080002 [ 736.535000][ T30] Call Trace: [ 736.538403][ T30] [ 736.542765][ T30] __schedule+0x17d9/0x56c0 [ 736.547589][ T30] ? kernel_text_address+0xa5/0xe0 [ 736.555205][ T30] ? unwind_get_return_address+0x4d/0x90 [ 736.561967][ T30] ? stack_trace_save+0xa9/0x100 [ 736.567184][ T30] ? __pfx___schedule+0x10/0x10 [ 736.573141][ T30] ? rcu_is_watching+0x15/0xb0 [ 736.578176][ T30] ? rcu_is_watching+0x15/0xb0 [ 736.583313][ T30] ? lock_release+0x4b/0x3c0 [ 736.587993][ T30] ? rcu_is_watching+0x15/0xb0 [ 736.593917][ T30] schedule+0x164/0x360 [ 736.598187][ T30] schedule_preempt_disabled+0x13/0x30 [ 736.604116][ T30] __mutex_lock+0x7bf/0x1550 [ 736.608855][ T30] ? __mutex_lock+0x5d4/0x1550 [ 736.613871][ T30] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 736.619738][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 736.624836][ T30] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 736.631149][ T30] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 736.637475][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 736.644236][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 736.650630][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 736.656289][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 736.662914][ T30] ? bpf_lsm_capable+0x9/0x20 [ 736.667612][ T30] ? security_capable+0x7e/0x2c0 [ 736.672776][ T30] genl_rcv_msg+0x614/0x7a0 [ 736.677309][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 736.682410][ T30] ? clockevents_program_event+0x491/0x630 [ 736.688218][ T30] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 736.694857][ T30] ? __pfx_clockevents_program_event+0x10/0x10 [ 736.701618][ T30] ? rcu_is_watching+0x15/0xb0 [ 736.706452][ T30] netlink_rcv_skb+0x226/0x4a0 [ 736.711571][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 736.716662][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 736.722136][ T30] ? down_read+0x2be/0x330 [ 736.726578][ T30] genl_rcv+0x28/0x40 [ 736.731169][ T30] netlink_unicast+0x7bb/0x940 [ 736.736096][ T30] netlink_sendmsg+0x813/0xb40 [ 736.742341][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 736.747826][ T30] ? futex_unqueue+0x22/0x240 [ 736.752579][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 736.757548][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 736.763361][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 736.768683][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 736.773755][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 736.779594][ T30] ? lock_release+0x4b/0x3c0 [ 736.784212][ T30] ? import_iovec+0x73/0xa0 [ 736.788730][ T30] ___sys_sendmsg+0x2a5/0x360 [ 736.793771][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 736.798992][ T30] ? futex_wait+0x2a2/0x390 [ 736.803700][ T30] ? __fget_files+0x2a/0x420 [ 736.808310][ T30] ? __fget_files+0x3a2/0x420 [ 736.813559][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 736.818517][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 736.824274][ T30] ? rcu_is_watching+0x15/0xb0 [ 736.829040][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.835228][ T30] do_syscall_64+0x174/0x580 [ 736.840484][ T30] ? trace_irq_disable+0x3b/0x140 [ 736.845538][ T30] ? clear_bhb_loop+0x40/0x90 [ 736.851392][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.857384][ T30] RIP: 0033:0x7f6d78d9ce59 [ 736.861896][ T30] RSP: 002b:00007f6d79cbb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 736.870774][ T30] RAX: ffffffffffffffda RBX: 00007f6d79015fa0 RCX: 00007f6d78d9ce59 [ 736.878845][ T30] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000004 [ 736.886899][ T30] RBP: 00007f6d78e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 736.895021][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.903456][ T30] R13: 00007f6d79016038 R14: 00007f6d79015fa0 R15: 00007ffd8f7365f8 [ 736.911662][ T30] [ 736.914730][ T30] INFO: task syz.8.5314:25872 blocked for more than 143 seconds. [ 736.923365][ T30] Not tainted syzkaller #0 [ 736.928381][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 736.937526][ T30] task:syz.8.5314 state:D stack:26744 pid:25872 tgid:25869 ppid:20270 task_flags:0x400140 flags:0x00080002 [ 736.950752][ T30] Call Trace: [ 736.954066][ T30] [ 736.956995][ T30] __schedule+0x17d9/0x56c0 [ 736.961656][ T30] ? lock_release+0x4b/0x3c0 [ 736.966326][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 736.971721][ T30] ? __pfx___schedule+0x10/0x10 [ 736.976608][ T30] ? rcu_is_watching+0x15/0xb0 [ 736.982871][ T30] ? rcu_is_watching+0x15/0xb0 [ 736.987739][ T30] ? lock_release+0x4b/0x3c0 [ 736.992949][ T30] ? rcu_is_watching+0x15/0xb0 [ 736.997750][ T30] schedule+0x164/0x360 [ 737.002045][ T30] schedule_preempt_disabled+0x13/0x30 [ 737.007523][ T30] __mutex_lock+0x7bf/0x1550 [ 737.012597][ T30] ? __mutex_lock+0x5d4/0x1550 [ 737.017502][ T30] ? nfsd_nl_listener_set_doit+0x135/0x1750 [ 737.023474][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 737.028512][ T30] ? __asan_memset+0x22/0x50 [ 737.033316][ T30] ? __nla_validate_parse+0x2429/0x2d50 [ 737.038974][ T30] nfsd_nl_listener_set_doit+0x135/0x1750 [ 737.045317][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 737.051203][ T30] ? rcu_is_watching+0x15/0xb0 [ 737.055992][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 737.062786][ T30] ? __nla_parse+0x40/0x60 [ 737.067314][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 737.074030][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 737.080454][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 737.086034][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 737.092150][ T30] ? bpf_lsm_capable+0x9/0x20 [ 737.096842][ T30] ? security_capable+0x7e/0x2c0 [ 737.102551][ T30] genl_rcv_msg+0x614/0x7a0 [ 737.107100][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 737.112211][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 737.118386][ T30] ? __netlink_lookup+0xc6/0x8b0 [ 737.123470][ T30] ? rcu_is_watching+0x15/0xb0 [ 737.128268][ T30] netlink_rcv_skb+0x226/0x4a0 [ 737.133413][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 737.138456][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 737.146488][ T30] ? down_read+0x2be/0x330 [ 737.151156][ T30] genl_rcv+0x28/0x40 [ 737.155240][ T30] netlink_unicast+0x7bb/0x940 [ 737.160520][ T30] netlink_sendmsg+0x813/0xb40 [ 737.165322][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 737.170680][ T30] ? futex_unqueue+0x22/0x240 [ 737.175366][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 737.180449][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 737.185755][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 737.191462][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 737.196230][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 737.201665][ T30] ? lock_release+0x4b/0x3c0 [ 737.206279][ T30] ? import_iovec+0x73/0xa0 [ 737.210937][ T30] ___sys_sendmsg+0x2a5/0x360 [ 737.215668][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 737.221487][ T30] ? futex_wait+0x2a2/0x390 [ 737.226031][ T30] ? __fget_files+0x2a/0x420 [ 737.230688][ T30] ? __fget_files+0x3a2/0x420 [ 737.235384][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 737.240475][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 737.245961][ T30] ? rcu_is_watching+0x15/0xb0 [ 737.251310][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.257400][ T30] do_syscall_64+0x174/0x580 [ 737.262144][ T30] ? trace_irq_disable+0x3b/0x140 [ 737.267195][ T30] ? clear_bhb_loop+0x40/0x90 [ 737.271902][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.277797][ T30] RIP: 0033:0x7f8f4439ce59 [ 737.282654][ T30] RSP: 002b:00007f8f45247028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 737.291143][ T30] RAX: ffffffffffffffda RBX: 00007f8f44615fa0 RCX: 00007f8f4439ce59 [ 737.299319][ T30] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 737.307358][ T30] RBP: 00007f8f44432e6f R08: 0000000000000000 R09: 0000000000000000 [ 737.315782][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 737.324016][ T30] R13: 00007f8f44616038 R14: 00007f8f44615fa0 R15: 00007ffce6d55b88 [ 737.332300][ T30] [ 737.335517][ T30] INFO: lockdep is turned off. [ 737.340429][ T30] NMI backtrace for cpu 0 [ 737.340449][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 737.340472][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 737.340481][ T30] Call Trace: [ 737.340488][ T30] [ 737.340496][ T30] dump_stack_lvl+0xe8/0x150 [ 737.340518][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 737.340604][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 737.340642][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 737.340660][ T30] sys_info+0x135/0x170 [ 737.340675][ T30] watchdog+0xfd7/0x1030 [ 737.340708][ T30] ? watchdog+0x1c7/0x1030 [ 737.340728][ T30] kthread+0x388/0x470 [ 737.340743][ T30] ? __pfx_watchdog+0x10/0x10 [ 737.340760][ T30] ? __pfx_kthread+0x10/0x10 [ 737.340775][ T30] ret_from_fork+0x514/0xb70 [ 737.340809][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 737.340824][ T30] ? __switch_to+0xc89/0x1420 [ 737.340852][ T30] ? __pfx_kthread+0x10/0x10 [ 737.340866][ T30] ret_from_fork_asm+0x1a/0x30 [ 737.340890][ T30] [ 737.340896][ T30] Sending NMI from CPU 0 to CPUs 1: [ 737.455847][ C1] NMI backtrace for cpu 1 [ 737.455864][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 737.455883][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 737.455893][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 737.455923][ C1] Code: fc 7f 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 97 21 00 fb f4 7c 03 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 737.455938][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000246 [ 737.455953][ C1] RAX: ffff88812537c000 RBX: ffffffff819a5170 RCX: 0000000080000001 [ 737.455965][ C1] RDX: 0000000000000001 RSI: ffffffff8c291100 RDI: ffffffff819a5170 [ 737.455977][ C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b [ 737.455989][ C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000 [ 737.456001][ C1] R13: 1ffff11003b5f000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 737.456013][ C1] FS: 0000000000000000(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000 [ 737.456026][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 737.456038][ C1] CR2: 00007fa839fea2f8 CR3: 000000007ffde000 CR4: 00000000003526f0 [ 737.456052][ C1] Call Trace: [ 737.456059][ C1] [ 737.456065][ C1] default_idle+0x9/0x20 [ 737.456087][ C1] default_idle_call+0x72/0xb0 [ 737.456111][ C1] do_idle+0x2e0/0x540 [ 737.456134][ C1] ? __pfx_do_idle+0x10/0x10 [ 737.456160][ C1] cpu_startup_entry+0x43/0x60 [ 737.456183][ C1] start_secondary+0x101/0x110 [ 737.456206][ C1] common_startup_64+0x13e/0x157 [ 737.456233][ C1] [ 737.620504][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 737.627374][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 737.636474][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 737.646521][ T30] Call Trace: [ 737.649827][ T30] [ 737.652759][ T30] vpanic+0x56c/0xa60 [ 737.656746][ T30] ? __pfx___schedule+0x10/0x10 [ 737.661614][ T30] ? __pfx_vpanic+0x10/0x10 [ 737.666124][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 737.672290][ T30] panic+0xc5/0xd0 [ 737.676008][ T30] ? __pfx_panic+0x10/0x10 [ 737.680416][ T30] ? preempt_schedule_common+0x82/0xd0 [ 737.685911][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 737.691327][ T30] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 737.697494][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 737.703657][ T30] watchdog+0x1030/0x1030 [ 737.707985][ T30] ? watchdog+0x1c7/0x1030 [ 737.712390][ T30] kthread+0x388/0x470 [ 737.716444][ T30] ? __pfx_watchdog+0x10/0x10 [ 737.721110][ T30] ? __pfx_kthread+0x10/0x10 [ 737.725690][ T30] ret_from_fork+0x514/0xb70 [ 737.730266][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 737.735370][ T30] ? __switch_to+0xc89/0x1420 [ 737.740037][ T30] ? __pfx_kthread+0x10/0x10 [ 737.744614][ T30] ret_from_fork_asm+0x1a/0x30 [ 737.749376][ T30] [ 737.752661][ T30] Kernel Offset: disabled [ 737.756971][ T30] Rebooting in 86400 seconds..