last executing test programs: 4.846187193s ago: executing program 0 (id=11349): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r2, 0x711, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000000)={0x1, 0x6}, 0x8) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x86, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x78, 0x67, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local, {[@end]}}, @redirect={0x4, 0x2, 0x0, @multicast2, {0x16, 0x4, 0x0, 0x4, 0x0, 0x64, 0x0, 0x1, 0x11, 0x7, @empty, @dev={0xac, 0x14, 0x14, 0x15}, {[@cipso={0x86, 0x6, 0x3}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x40000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@multicast2}, {@rand_addr=0x80, 0x4}, {@private=0xa010102, 0x1}]}]}}}}}}}, 0x0) 4.575349718s ago: executing program 0 (id=11352): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x4, 0x0, 0x2, {0xa, 0x4e22, 0x8, @private1, 0x8}}}, 0x32) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x202}, 0x15) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x4, 0x0, 0x2, {0xa, 0x4e22, 0x8, @private1, 0x8}}}, 0x32) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x202}, 0x15) (async) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) (async) 4.411894926s ago: executing program 0 (id=11355): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001080)={0x0, @local, @loopback}, &(0x7f00000010c0)=0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a4800ecff050a0b040022000000000000020000072c0004802800018007000100637400001c00028005ffff00000000000800014000000017080002400000000d0900010073797a30000000000900020073797a0600000000140000000b00010000000000000000000000000a"], 0x80}}, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001100)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001180)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x5, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000080)=""/4096, 0x40f00, 0x1a, '\x00', r0, @fallback=0x35, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001140)={0x1, 0x9, 0x6, 0x8}, 0x10, r3, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000011c0)=[{0x1, 0x2, 0x8}], 0x10, 0x10000}, 0x94) r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000001340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000001580)=0x1c) connect$inet6(r4, &(0x7f00000015c0)={0xa, 0x4e24, 0xfffffff1, @local, 0x1}, 0x1c) r5 = accept$inet(0xffffffffffffffff, &(0x7f00000012c0)={0x2, 0x0, @dev}, &(0x7f0000001300)=0x10) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000001380)=@buf={0xfa, &(0x7f0000001480)="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"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xe, [@struct={0x1, 0x1, 0x0, 0x4, 0x0, 0x7, [{0xa, 0x3}]}, @int={0x5, 0x0, 0x0, 0x1, 0x5, 0x22}, @typedef={0x7, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x2e, 0x61, 0x2e, 0x0, 0x2e, 0x30, 0x5f]}}, 0x0, 0x5a}, 0x28) unshare(0x62040000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x44, r7, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@key_params, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}]]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000001440)={'syztnl1\x00', &(0x7f00000013c0)={'erspan0\x00', r0, 0x8000, 0x20, 0x80, 0x2, {{0xb, 0x4, 0x1, 0x3, 0x2c, 0x66, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x88, 0x2}, @timestamp_addr={0x44, 0x14, 0xdd, 0x1, 0x6, [{@private=0xa010102, 0x6}, {@multicast1, 0xe55e}]}]}}}}}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 2.805097037s ago: executing program 3 (id=11368): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x1) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10440}}}}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) (async) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) (async) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r7, 0x4018f514, &(0x7f00000002c0)={0x49b8c6d, 0xc, 0x3}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01"], 0x3c}}, 0x0) 2.404858607s ago: executing program 3 (id=11374): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x1, 0x5, @mcast1, 0x1}, 0x16) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYRES16=0x0, @ANYBLOB="010000000000fedbdf2517000000080003f275f3fed34aeb17818885d2fc0c2ded910c4e5c7b69f55920157f49726f6d291b2b7777b6d478b8aae70f99baa695c66ddca93357d2a59b5e6ddb8c91d504234abc4856e68b672b5760c7248df733e28d843ee82f57184cdbf6b43d203468d0afc37661e7fdcc5b0100f69bcaf2ac0b135144cc2bcd135ca278fa85ae9696baddd379ceaa50cfdb62a50a", @ANYRES32=0x0], 0x74}}, 0x44000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xffffffff00000003}, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x568f70f1176ee2a9, 0x110, r2, 0x852a9000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x41000}, 0x94) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x79, 0x4) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000500)={0x7, {{0x2, 0x4e23, @remote}}}, 0x88) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x8894) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x1006}, 0x38) shutdown(r3, 0x0) unshare(0x20000400) pipe(&(0x7f0000000200)) r4 = socket(0x10, 0x3, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r4], 0x40}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2c020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0xffffffff, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7d, 0x4, 0x1000c, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf4e) writev(0xffffffffffffffff, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0x1}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 2.294208775s ago: executing program 4 (id=11375): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x8, 0xe8a, 0x400}, &(0x7f0000000040)=0x10) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x8, 0xe8a, 0x400}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r1, @in={{0x2, 0x4e23, @multicast2}}, 0x7ff, 0x4a}, 0x90) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r1, @in={{0x2, 0x4e23, @multicast2}}, 0x7ff, 0x4a}, 0x90) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000140)={r1, 0x18, "72a6ae1f89da9f9ed6d97f7028ee0d79683de1a0403f84e5"}, &(0x7f0000000180)=0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x82c}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6ec78338}]}, 0x34}, 0x1, 0x0, 0x0, 0x33cb7c9bc6b43d48}, 0x840) (async) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x82c}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6ec78338}]}, 0x34}, 0x1, 0x0, 0x0, 0x33cb7c9bc6b43d48}, 0x840) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r5, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4002804}, 0x8000) (async) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r5, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4002804}, 0x8000) ioctl$XFS_IOC_SCRUBV_METADATA(r2, 0xc0285840, &(0x7f00000004c0)={0x6dee, 0xf75, 0x4, 0x0, 0x7, 0x6, 0x0, &(0x7f0000000440)=[{0xc, 0x101, 0xbc74}, {0xa, 0xfe, 0x101}, {0x21, 0x101, 0x8001}, {0x1c, 0x1ff, 0xd2}, {0x21, 0x1ff, 0x9}, {0x21, 0x101, 0x1}]}) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r4}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x96, 0x96, 0xb, [@datasec={0x2, 0x3, 0x0, 0xf, 0x2, [{0x4, 0xffff, 0x8}, {0x3, 0x7ff, 0x1}, {0x3, 0x5, 0x9}], "d928"}, @func={0x7, 0x0, 0x0, 0xc, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x8}}, @float={0x1, 0x0, 0x0, 0x10, 0x4}, @enum={0xc, 0x2, 0x0, 0x6, 0x4, [{0xa, 0x77000}, {0xa, 0x1}]}, @restrict={0xe, 0x0, 0x0, 0xb, 0x2}, @volatile={0x10, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x0, 0x0, 0x61, 0x5f, 0x30, 0x0]}}, &(0x7f00000005c0)=""/157, 0xbb, 0x9d, 0x0, 0x2, 0x10000, @value=r6}, 0x28) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x96, 0x96, 0xb, [@datasec={0x2, 0x3, 0x0, 0xf, 0x2, [{0x4, 0xffff, 0x8}, {0x3, 0x7ff, 0x1}, {0x3, 0x5, 0x9}], "d928"}, @func={0x7, 0x0, 0x0, 0xc, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x8}}, @float={0x1, 0x0, 0x0, 0x10, 0x4}, @enum={0xc, 0x2, 0x0, 0x6, 0x4, [{0xa, 0x77000}, {0xa, 0x1}]}, @restrict={0xe, 0x0, 0x0, 0xb, 0x2}, @volatile={0x10, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x0, 0x0, 0x61, 0x5f, 0x30, 0x0]}}, &(0x7f00000005c0)=""/157, 0xbb, 0x9d, 0x0, 0x2, 0x10000, @value=r6}, 0x28) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0xc0e80, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000740)={'syz_tun\x00'}) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000007c0)=@o_path={&(0x7f0000000780)='./file0\x00', r0, 0x4000, r2}, 0x18) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000800)={r3, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xbe1f, 0x7}, &(0x7f00000008c0)=0x90) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup/syz1\x00', 0x200002, 0x0) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r10, 0xc038586c, &(0x7f0000000a40)={r7, &(0x7f0000000940)='&\x00', 0x800, &(0x7f0000000980)={@_ha_fsid={[0x8, 0xd]}, {0x7fff, 0x3, 0xf04, 0xffffffffffffffff}}, 0x5bfd, &(0x7f00000009c0)={@_ha_fsid}, &(0x7f0000000a00)=0x1}) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000a80)={'filter\x00', 0xa7, "f495f12a61697a911323142ab6f4bad29c04a6c273fa257960def588d9d8a0329cfc32d1630ddcf425e64adff26c7cded1f14a0c922b6b809b4ffeaff09733939def3eb9130e55650862427692119f432163264801c948869cdfccdec39dcb3d3986fa3bf10c89b6fe9442a53e6004dd40d2ced97e9e99fb4e46065a9e8f13bffef1d359781cc9cf0106ea3df4cd633ba88483cd9c84a18b4b14dd67249e1cdcc03ed872176310"}, &(0x7f0000000b80)=0xcb) (async) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000a80)={'filter\x00', 0xa7, "f495f12a61697a911323142ab6f4bad29c04a6c273fa257960def588d9d8a0329cfc32d1630ddcf425e64adff26c7cded1f14a0c922b6b809b4ffeaff09733939def3eb9130e55650862427692119f432163264801c948869cdfccdec39dcb3d3986fa3bf10c89b6fe9442a53e6004dd40d2ced97e9e99fb4e46065a9e8f13bffef1d359781cc9cf0106ea3df4cd633ba88483cd9c84a18b4b14dd67249e1cdcc03ed872176310"}, &(0x7f0000000b80)=0xcb) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000000bc0)="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") getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000d00)={{{@in6=@empty, @in6=@private1}}, {{@in=@multicast1}, 0x0, @in6=@private2}}, &(0x7f0000000e00)=0xe8) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000d00)={{{@in6=@empty, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private2}}, &(0x7f0000000e00)=0xe8) sendmsg$nl_generic(r4, &(0x7f0000002040)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002000)={&(0x7f0000000e40)={0x11b0, 0x36, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@generic="2b2139de77a391efb4d8b1e075f86e47ab454f1cc6b625518cffc943f0ced5a62d5f45d8be3cecc30fb978ea9fcac5eb90862f79d9aa2cf2044cb76147ab4e1dc4c2571108d6635638fdb526805e25297b539307decd2440f0138ff5c2d9d5041dfa7f19eb77b1fa906c6f2478046c03c6f1c03a0731f8b81b7673d0137dfdda120e6621dc06c1f80bd2b82be4b3db34129cb5d98b81a863b7", @generic="a7e26d722e44e3b395deeabb46f32301bd5e3279df3bcef0ef18f231458362493d0477a84633cf5c899da847b5cd1febcd6b8a7efe974ab7cd17d07ae3c0e4a62a83f6c0b9e61bc72d8e465d101c63d073c342ab66f72a3d7a693c5b4797e5cbe6173734059c36e7d4b8f41e11661638dba125365969faabf6dbb376762dbc4e023d8f53906fb46133d78d5a71cb179a5b742c44730df682e61a09a1abff2e72a172239dbd99df171893c41e17984930601031dd9e8957439b53a4b23f4cb8bc9a94f251794571fcbf1934", @generic="59289f83cb71ed5d711bc4dd1ca177f5f08ea466971f42a94178db90b45012c1699f5f37eff3090e8c478d", @typed={0x4, 0xa4}, @generic="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", @typed={0x8, 0x28, 0x0, 0x0, @uid=r11}]}, 0x11b0}, 0x1, 0x0, 0x0, 0x4800}, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000002040)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002000)={&(0x7f0000000e40)={0x11b0, 0x36, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@generic="2b2139de77a391efb4d8b1e075f86e47ab454f1cc6b625518cffc943f0ced5a62d5f45d8be3cecc30fb978ea9fcac5eb90862f79d9aa2cf2044cb76147ab4e1dc4c2571108d6635638fdb526805e25297b539307decd2440f0138ff5c2d9d5041dfa7f19eb77b1fa906c6f2478046c03c6f1c03a0731f8b81b7673d0137dfdda120e6621dc06c1f80bd2b82be4b3db34129cb5d98b81a863b7", @generic="a7e26d722e44e3b395deeabb46f32301bd5e3279df3bcef0ef18f231458362493d0477a84633cf5c899da847b5cd1febcd6b8a7efe974ab7cd17d07ae3c0e4a62a83f6c0b9e61bc72d8e465d101c63d073c342ab66f72a3d7a693c5b4797e5cbe6173734059c36e7d4b8f41e11661638dba125365969faabf6dbb376762dbc4e023d8f53906fb46133d78d5a71cb179a5b742c44730df682e61a09a1abff2e72a172239dbd99df171893c41e17984930601031dd9e8957439b53a4b23f4cb8bc9a94f251794571fcbf1934", @generic="59289f83cb71ed5d711bc4dd1ca177f5f08ea466971f42a94178db90b45012c1699f5f37eff3090e8c478d", @typed={0x4, 0xa4}, @generic="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", @typed={0x8, 0x28, 0x0, 0x0, @uid=r11}]}, 0x11b0}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r12, &(0x7f00000023c0)=[{{&(0x7f0000002080)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000002140)=[{&(0x7f0000002100)="79d5de6c44647162a06a7f7adc0fd73db10492374ae7801c5001", 0x1a}], 0x1, &(0x7f0000002180)=[{0x40, 0x29, 0x7, "ebe569e2fa9ed1a31582a8808883286b6f07e944c061029d91566d3d84697604ddd2caf49e5e1ac92f73"}, {0x80, 0x114, 0x0, "15f599082bfbb6de6644d1fdc40c2c88299e03dd132e7dbd54910fc001cf2b0657108fe2a5c3291b2f306caf06a8c06566c4b5859ea88ccbd288521c402246ec643d077ab7f2477e7db329a746265672f1c4d93dc5131f4120c824e00aef60d29869d703cf49762131"}, {0x40, 0x10f, 0x6, "b29de8592239cbf660231d9687b417ff51a36432e69e8a68da9e77864e9ab4201153a866c68a39204ca9"}, {0x70, 0x29, 0x9, "684e4fa1af848990c5595e34521c24d66df7ad1823bb29c2fb1af54a3e96e1ba1d05e65ab5cc41f25d26c960049a632854a00c2c26d5b2e81175478268df1da849f8a03d6e6d3cbf75c4397c02088ca9aef3548dc2618eb8391c58"}, {0xa0, 0x112, 0x558c, "269be5c693c02adbbc5c2be71a7541a96fa2179ef6cc0f3da75a06c6a8a32ef3262dd7e79ff7be506b2656fbbd922c3169ef30ca2f6dfdcdb555a45777420ae8f607598454b216458074cf0f924af2e618a4b6c0ab06d8b373b6e3e8cf7bd3d4e38e64e31ecf88d592bbb409d2f830277276d79b56d6c2ee535a162c44f7b44e45f809eb216d922d46b10d627475"}], 0x210}}], 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000002400), &(0x7f0000002480)=0x68) socket$inet_mptcp(0x2, 0x1, 0x106) socket$tipc(0x1e, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000002580)={r9, 0xa8, &(0x7f00000024c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x6, @dev={0xac, 0x14, 0x14, 0x3f}}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @rand_addr=0x64010102}, @in6={0xa, 0x4e20, 0x5, @mcast1, 0x8}, @in6={0xa, 0x4e24, 0x9, @empty, 0xb3}]}, &(0x7f00000025c0)=0x10) 2.161148183s ago: executing program 1 (id=11377): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000140)=0x1, 0x4) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0xfffd, 0x14}, @ipv4=@dccp={{0xf, 0x4, 0x2, 0x7, 0xa3, 0x64, 0x0, 0x9, 0x21, 0x0, @rand_addr=0x64010102, @multicast1, {[@ssrr={0x89, 0x13, 0x6a, [@remote, @dev={0xac, 0x14, 0x14, 0x32}, @empty, @loopback]}, @lsrr={0x83, 0xb, 0x8e, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x7, 0x8, "2b4f3b7d9956"}, @noop]}}, {{0x4e23, 0x4e21, 0x4, 0x1, 0x8, 0x0, 0x0, 0x9, 0x3, "2aa11a", 0x4, "fe3f60"}, "be26bcd47dd6a8031dc910b72c2ee59d79861db70c0cf62317aefafce9a53d182952969fc6211544411429854343e5b6e21ea573538b9534e849209244358793440f2b247e5aa3c58560dae5aabc4e8989d89aee48d520"}}}, 0xb1) socket$nl_generic(0x10, 0x3, 0x10) 2.131150604s ago: executing program 4 (id=11378): r0 = socket(0x10, 0x80003, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r1, &(0x7f0000003680)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xe}, {{0x0, 0x0, 0x0}, 0xc}], 0x3, 0x10122, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'sit0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000180), 0x4) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0) 2.074605123s ago: executing program 3 (id=11379): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2a, 0x9, 0x9, 0x6, 0x8084, 0x3, 0x2, 0x2]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{}]}]}]}]}, 0x40}}, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x2, 0xb, 0x10, 0x2, 0x0, 0x2, 0xf, 0x6, 0x8, 0x1, 0x8, 0x1, 0x10, 0x4], 0x1, [0xb, 0x101, 0x7fff, 0x2002, 0x7ff, 0x4, 0x2, 0xd06, 0xa9, 0x2, 0xd, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0x2, 0xfff5, 0x4, 0x800, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x15, 0x1, 0xd03]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0x6, 0x82c, 0x12, @private2, @mcast2, 0x0, 0x7, 0xff, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000400)={@loopback, 0x0}, &(0x7f0000000440)=0x14) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0xffff, 0xc}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000a00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='P\t\x00\x00', @ANYRES16=r4, @ANYBLOB="02002abd7000ffdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="c00002803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="7400028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400f075000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000000000008000100", @ANYRES32=r9, @ANYBLOB="2801028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004007f00000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000080000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000010000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400fd00000008000600", @ANYRES32=r10, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000008000100", @ANYRES32=r12, @ANYBLOB="7c000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000200000008000100", @ANYRES32=r13, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040000000000"], 0x350}, 0x1, 0x0, 0x0, 0x404c042}, 0x4040001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24100002}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r2, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x4, 0x8}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) 1.452494275s ago: executing program 2 (id=11380): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x7}, 0x50) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000000900)=0x47) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x17, 0xf, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x34, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x3}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x7, 0xffffff7f}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0x60}, 0x1, 0x7}, 0x0) (async) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect(r4, &(0x7f0000000000)=@ieee802154={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x80) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f0000000700)='syz1\x00', 0x1ff) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x5, 0x0, 0xfc56) (async) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="8f019a74f3afbc1291dac3e360e0a3d6c7483a78dedb68759927ab684d3307969cd71e532687c76ddbee24ada89d80ac7f263559e4120489db576ec984fb5f0a299c80c0530d31b5c3c151c51db30fb2cae112115679b68a9afef77582cf3e675f2465d4fee1a8b0ee0a0b4209f1f11d2f86a642d6521cfd000000008017f205a364cc65f2312c7f9c5d0284722b4eb8daf814e11c90dadf39261547215d03c2f9c2998f8558b909d75eb5a772b155b527b642e8cf47de7f4cb9371aa9e1a09d4ef13556066f31bf739f467616255907f01e58e9fae985ab", @ANYRES32=0x0, @ANYBLOB="00000000420102002c0012800b00010069703667726500001c0002800800040007000000060003008000000006000e0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x2400c090}, 0x24048044) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80"], 0xfdef) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x5, 0x28, 0x0, &(0x7f0000000080)="741ed00d367573d4494262f0072b9ef8fdcf9dac3e777acd3c36df16c2c5d794196e64f64775d721", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x1, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x198e, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2000c010}, 0x8) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000780)={'batadv_slave_1\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000bc0)={'erspan0\x00', &(0x7f0000000a40)={'erspan0\x00', 0x0, 0x91, 0x0, 0x9, 0xd, {{0x1a, 0x4, 0x2, 0x7, 0x68, 0x65, 0x0, 0x8, 0x2f, 0x0, @broadcast, @empty, {[@timestamp_prespec={0x44, 0x44, 0x79, 0x3, 0x8, [{@rand_addr=0x64010100, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x6}, {@multicast2, 0xfffffff7}, {@broadcast, 0x100000}, {@dev={0xac, 0x14, 0x14, 0x39}, 0xb}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @ssrr={0x89, 0xb, 0x99, [@multicast1, @multicast1]}, @rr={0x7, 0x3, 0xd}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c00)={'ip_vti0\x00', 0x0, 0x8000, 0x8, 0x7, 0xdb3, {{0x20, 0x4, 0x3, 0x8, 0x80, 0x66, 0x0, 0x9d, 0x2f, 0x0, @loopback, @rand_addr=0x64010100, {[@rr={0x7, 0xb, 0xc0, [@rand_addr=0x64010101, @multicast1]}, @timestamp_prespec={0x44, 0x14, 0xfe, 0x3, 0x0, [{@multicast2, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x1000}]}, @generic={0x44, 0x7, "3c4f5811a1"}, @noop, @timestamp_addr={0x44, 0x44, 0xd, 0x1, 0x6, [{@rand_addr=0x64010102, 0x766}, {@remote, 0xb6c}, {@loopback, 0x4}, {@multicast1, 0xd051}, {@local, 0x6}, {@loopback, 0xff}, {@broadcast, 0x8}, {@multicast1, 0x4}]}]}}}}}) sendmsg$nl_route(r5, &(0x7f0000000dc0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)=@ipv6_newroute={0x50, 0x18, 0x115, 0x70bd2d, 0x25dfdbfb, {0xa, 0x20, 0x0, 0x4, 0xfc, 0x3, 0xfd, 0x1}, [@RTA_MULTIPATH={0xc, 0x9, {0x7, 0x4, 0x1, r9}}, @RTA_OIF={0x8, 0x4, r10}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_TOS={0x5, 0x5, 0x7}}, @RTA_OIF={0x8, 0x4, r11}, @RTA_MULTIPATH={0xc, 0x9, {0x1, 0x12, 0x8, r12}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0x50}}, 0x4000080) (async) r14 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000005000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) (async) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r15}, 0xc) 1.417761045s ago: executing program 1 (id=11381): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newneigh={0x38, 0x1c, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x18}, [@NDA_DST_IPV6={0x14, 0x1, @rand_addr=' \x01\x00'}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x38}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.344471092s ago: executing program 1 (id=11382): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000580)={0x2, @long={0x3, 0xffff, {0xc3f162150e0db309}}}, 0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x28, r4, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x891) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_bpf={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{}, {0x35, 0x0, 0x5}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r6, 0x0, 0x2}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0xffffffffffffff2a) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlinkprop={0x5c, 0x6c, 0x20, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, 0x110, 0x2010}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x81}, @IFLA_EXT_MASK={0x8, 0x1d, 0x14}, @IFLA_LINKMODE={0x5, 0x11, 0xe}, @IFLA_MAP={0x24, 0xe, {0xb, 0x9, 0x7, 0x400, 0xa, 0x7}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.341725419s ago: executing program 2 (id=11383): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000200)=[{&(0x7f00000006c0)="e6", 0x1}], 0x1) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000280)="a1818522bafd0096cd3ff43a463d18d07d5466584c20dbc1c17d6e5c30d25719899852afdd71d81c8eaa", 0x2a}, {&(0x7f0000000540)}, {&(0x7f0000000840)}, {0x0}], 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d1400bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x4, 0x4) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x2000012, 0xe, 0x41, &(0x7f0000000080)="257fd3cbb7ba7feb35295a62cd27", 0x0, 0xfffffffd, 0x3000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x1c) sendmsg$tipc(r0, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) 1.240734706s ago: executing program 3 (id=11384): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r2, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xa000}], 0x3}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.240256332s ago: executing program 4 (id=11385): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x20000000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e20, @empty}}, 0xd5, 0x6, 0x57f, 0x8000004, 0x21, 0x1, 0x8}, &(0x7f0000000040)=0x9c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) recvmmsg(r0, &(0x7f0000007b80)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000180)=""/37, 0x25}, {&(0x7f0000000400)=""/171, 0xab}, {&(0x7f00000004c0)=""/55, 0x37}], 0x3}, 0xffffffb6}, {{&(0x7f0000000540)=@nfc, 0x80, &(0x7f0000000980)=[{&(0x7f00000005c0)=""/79, 0x4f}, {&(0x7f0000000780)=""/204, 0xcc}, {&(0x7f0000000880)=""/92, 0x5c}, {&(0x7f0000000900)=""/108, 0x6c}], 0x4, &(0x7f00000009c0)=""/4096, 0x1000}, 0x8000}, {{&(0x7f00000019c0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/234, 0xea}, {&(0x7f0000002b40)=""/34, 0x22}], 0x3, &(0x7f0000002bc0)=""/30, 0x1e}, 0x100}, {{&(0x7f0000002c00)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002c80)=""/213, 0xd5}, {&(0x7f0000002d80)=""/220, 0xdc}, {&(0x7f0000002e80)=""/85, 0x55}], 0x3}, 0xadb}, {{&(0x7f0000002f40)=@nfc, 0x80, &(0x7f0000004480)=[{&(0x7f0000002fc0)=""/79, 0x4f}, {&(0x7f0000003040)=""/36, 0x24}, {&(0x7f0000003080)=""/226, 0xe2}, {&(0x7f0000003180)=""/179, 0xb3}, {&(0x7f0000003240)=""/80, 0x50}, {&(0x7f00000032c0)=""/61, 0x3d}, {&(0x7f0000003300)=""/123, 0x7b}, {&(0x7f0000003380)=""/219, 0xdb}, {&(0x7f0000003480)=""/4096, 0x1000}], 0x9, &(0x7f0000004540)=""/204, 0xcc}, 0x37}, {{&(0x7f0000004640)=@l2, 0x80, &(0x7f0000004a00)=[{&(0x7f00000046c0)=""/73, 0x49}, {&(0x7f0000004740)=""/19, 0x13}, {&(0x7f0000004780)=""/122, 0x7a}, {&(0x7f0000004800)=""/141, 0x8d}, {&(0x7f00000048c0)=""/132, 0x84}, {&(0x7f0000004980)=""/57, 0x39}, {&(0x7f00000049c0)=""/58, 0x3a}], 0x7, &(0x7f0000004a80)=""/4096, 0x1000}, 0x7fff}, {{&(0x7f0000005a80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000005e00)=[{&(0x7f0000005b00)=""/19, 0x13}, {&(0x7f0000005b40)=""/229, 0xe5}, {&(0x7f0000005c40)=""/71, 0x47}, {&(0x7f0000005cc0)=""/19, 0x13}, {&(0x7f0000005d00)=""/79, 0x4f}, {&(0x7f0000005d80)=""/40, 0x28}, {&(0x7f0000005dc0)=""/45, 0x2d}], 0x7, &(0x7f0000005e80)=""/113, 0x71}, 0x7}, {{&(0x7f0000005f00)=@alg, 0x80, &(0x7f0000007300)=[{&(0x7f0000005f80)=""/7, 0x7}, {&(0x7f0000005fc0)=""/113, 0x71}, {&(0x7f0000006040)=""/198, 0xc6}, {&(0x7f0000006140)=""/184, 0xb8}, {&(0x7f0000006200)=""/71, 0x47}, {&(0x7f0000006280)=""/4096, 0x1000}, {&(0x7f0000007280)=""/76, 0x4c}], 0x7, &(0x7f0000007380)=""/253, 0xfd}, 0x7fffffff}, {{&(0x7f0000007480)=@ethernet, 0x80, &(0x7f0000007a80)=[{&(0x7f0000007500)=""/182, 0xb6}, {&(0x7f00000075c0)=""/179, 0xb3}, {&(0x7f0000007680)=""/28, 0x1c}, {&(0x7f00000076c0)=""/176, 0xb0}, {&(0x7f0000007780)=""/96, 0x60}, {&(0x7f0000007800)=""/186, 0xba}, {&(0x7f00000078c0)=""/148, 0x94}, {&(0x7f0000007980)=""/222, 0xde}], 0x8, &(0x7f0000007b00)=""/106, 0x6a}, 0xaff7}], 0x9, 0x181, &(0x7f0000007dc0)) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r5 = socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000005, 0x12, r4, 0x604ae000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x1000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0, 0x2a}, &(0x7f0000000380)=0x40) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000380001033fbd700203dcdf250e"], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x4040) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r3) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000006c0)="1400000016000b63d25a80f77311d12022508ec9a280c1877fb9494b3efd6422b3a1471c070000000000000036a8ec7284e9dfa4b143947091460dfed9682a69b7bf85496a94ac7112c28b08d44b0045d1fcb429e2ec1e9c50e35076de3005251d18ff1c7cc04617871e6bf72833bbcb401f3b770a565f40920055535cd3bf29b167a87d03372f25f602f6d4241d514230dbedc2fbf390266b0d031f00977dc116e966d4b0c2106b8febbfc97038253fc92255723d706166950fa8", 0xbb}], 0x1}, 0x20000080) 1.13334905s ago: executing program 0 (id=11386): r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, 0x0, 0x0, 0x4048800, 0x0, 0x0) bind$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x10001, @private2, 0x10}}, 0x24) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b0000000000000000000000000000fb0000080001"], 0x20}}, 0x4000000) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sed\x00', 0x0, 0xf, 0x5c}, 0x2c) 873.21453ms ago: executing program 0 (id=11387): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 773.136492ms ago: executing program 1 (id=11388): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000000c0000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000780), &(0x7f0000000740)=r1}, 0x22) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000017c0)={r2, &(0x7f00000006c0), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58, 0x3}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}]}, 0x54}}, 0x4000) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x2c, r4, 0x1, 0x72bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x8}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 770.16709ms ago: executing program 3 (id=11389): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0xa, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e1f, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd340}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000240)={r4, 0xe23a, 0x20, 0x10001}, &(0x7f0000000840)=0x18) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448e3, &(0x7f0000000100)={0x0, 0x4000, '\x00', 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000102c0), r7) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffb, {0x0, 0x0, 0x0, r8, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r8, @ANYBLOB="08001b"], 0x30}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x45}, 0x4040040) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x8c}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r10, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) sendto$inet6(r10, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r11, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 752.686126ms ago: executing program 1 (id=11390): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e23, 0xa, 0x4e23, 0x0, 0x2, 0xa0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {0x5, 0x5, 0x4, 0x5, 0xcc, 0x1, 0x804, 0x1}, {0x0, 0x8, 0x66296995, 0x9}, 0x3, 0x6e6bb7, 0x1, 0x1, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x32}, 0xa, @in=@broadcast, 0x3501, 0x0, 0x0, 0x7, 0x7, 0x9, 0x1}}, 0xe8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6400000002060500000003006269746d61703a69702c6d616300000005000400000000000900020073797a30000000001800078005000300ff0000000c001e8008"], 0x64}, 0x1, 0x0, 0x0, 0x8805}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYRES8=r0, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES64=0x0], 0x50) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0xe2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x47f}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMRU1(r5, 0x40047452, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f00000003c0)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e24, 0x6, @loopback, 0x80000001}], 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r3, &(0x7f0000000100), 0x0}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x4}]}, 0x2c}}, 0x24044090) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x1f, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x3, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x488d8}, 0x20004804) ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f00000001c0)={0x0, 0x5, 'P\'h', 0x7, 0x8}) 735.664116ms ago: executing program 4 (id=11391): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000140)=[@timestamp, @window={0x3, 0xf, 0x7fff}, @timestamp, @window={0x3, 0x7ff, 0x6}, @timestamp, @window={0x3, 0xb, 0x3}], 0x6) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0xfffffffffffffeed}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xff}]}, 0x2c}}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x4000, 0xc600, 0x2, 0x4, 0x916}, &(0x7f0000000240)=0x14) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000280)={r5, 0x61, "792497714179eb13b084d9c6868f615117d70c74f9a2e898ec1169db2fa4770ab18db7a0d7db7f1082599734bc4b878d893fd176252851626724ff3f9cb4cfa25bf9b8a4eb0dc7d4e89a1162b93c07bcd8f18c92b2c08fcd0584f1152f7046ff63"}, &(0x7f0000000300)=0x69) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@dellinkprop={0x38, 0x6c, 0x1, 0x70bd23, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1a, 0x2800}, [@IFLA_PROP_LIST={0x4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x4c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x9400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_CARRIER={0x5, 0x21, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000140)=[@timestamp, @window={0x3, 0xf, 0x7fff}, @timestamp, @window={0x3, 0x7ff, 0x6}, @timestamp, @window={0x3, 0xb, 0x3}], 0x6) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0xfffffffffffffeed}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xff}]}, 0x2c}}, 0x80) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x4000, 0xc600, 0x2, 0x4, 0x916}, &(0x7f0000000240)=0x14) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000280)={r5, 0x61, "792497714179eb13b084d9c6868f615117d70c74f9a2e898ec1169db2fa4770ab18db7a0d7db7f1082599734bc4b878d893fd176252851626724ff3f9cb4cfa25bf9b8a4eb0dc7d4e89a1162b93c07bcd8f18c92b2c08fcd0584f1152f7046ff63"}, &(0x7f0000000300)=0x69) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@dellinkprop={0x38, 0x6c, 0x1, 0x70bd23, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1a, 0x2800}, [@IFLA_PROP_LIST={0x4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x4c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x9400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_CARRIER={0x5, 0x21, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) (async) 651.402704ms ago: executing program 0 (id=11392): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000000000010000000a000000090002008d001f106f194eb305000100"], 0x30}}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000040)=')+\'\x00', 0x200, &(0x7f0000000080)={@align=0x401, {0x0, 0x2, 0x69e, 0x8}}, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x1}) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0xd6, 0x4, 0x1}, 0x50) (rerun: 64) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240)="90c44c", 0xff7ffffe, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000001c0), &(0x7f0000000000), 0x2}, 0x20) (async) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000001c0)={'gretap0\x00', {0x2, 0x0, @private}}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x8070bd2c, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0xe13, 0x8, 0x40, 0x7, 0x3, 0x15, 0x7}}, @TCA_CHOKE_STAB={0x104, 0x2, "1cb315f3c5e23d27d29a00dd397b5c11d4cf201c1a0619fc314514ab71788e4079fdbe4f2a0d60b83a7d04c1d709981110401e5e10685abbad9b6f18e303e902c77244658a099a36fa486760c4941ea7df64250af29a4935de5d244f0549d93679b3d4fb358c2076bc6b1c9735ff8243f088e67455ba14975d12e5903ceeb7a23d62ecb5253ad444ef726b58a00f13f22ccc84cc06c9912b621c3ddc5f3229dc84c0880b5c6faefe33413b34a146e592fc15ae234dac030f05bb99eab08dfd2cb5659c6fc21fb7da6c380165ddde4659e75538dc864a53f691e1d785d6e6f73a03abf2120bce67e2d50075fd811b3e03a1cc2d66335bdee19738a0c1fb79b77d"}]}}]}, 0x14c}}, 0x0) (async) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x78, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x4d, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x11, &(0x7f00000007c0)=@raw=[@exit, @map_fd={0x18, 0x1, 0x1, 0x0, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @map_idx={0x18, 0xcbec5b27abcf3151, 0x5, 0x0, 0xb}, @alu={0x4, 0x1, 0xd, 0x9, 0x0, 0x18, 0x8}, @exit, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], &(0x7f0000000880)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000900)={0x5, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000940)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000980)=[{0x2, 0x2}, {0x4, 0x5, 0xc, 0x2}, {0x2, 0x1, 0xb, 0x9}, {0x4, 0x3, 0x0, 0xc}, {0x5, 0x2, 0x10, 0x2}], 0x10, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xd, 0x28, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4fc6f6f5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x3, 0xf, 0x3, 0x8, 0x3ff}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xb3a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff00}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x4eedb5b6b49ae20c}}, @generic={0x10, 0x6, 0x3, 0x60b3}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6d1}}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @ldst={0x3, 0x3, 0x2, 0x9, 0x0, 0x30}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, @sock_ops, r5, 0x8, &(0x7f0000000400)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x8, 0xfffffffe, 0x10000}, 0x10, r6, r7, 0x8, 0x0, &(0x7f0000000ac0)=[{0x0, 0x1, 0x3, 0xa}, {0x5, 0x1, 0xc}, {0x5, 0x1, 0x7, 0xc}, {0x2, 0x4, 0x1, 0xb}, {0x0, 0x1, 0x8, 0xb}, {0x2, 0x2, 0xd, 0x7}, {0x3, 0x5, 0xf, 0x8}, {0x1, 0x3, 0xc, 0x2}], 0x10, 0x8}, 0x94) (async, rerun: 64) r8 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) 558.08152ms ago: executing program 4 (id=11393): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x240088c0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r4, &(0x7f0000000200)="ab28c57e1057d57f01673e21ee49ec47b61323f5900addac82f732dc02c8fb5a72d17a2674f97503c87b26155b96e006078342d823138ef669368e65f326e6004f115253c4c95bd28228d00ec21f63da1b20b55e90b8bacf415cbb7bfb3dd08c9402d80fc448d90f4e60605e9dbcbadbce7fc69ab1d610cc948719d846dd805d7b372d684814a3e4f31064c4ea045aae51d00f1a8876a6f687d1", &(0x7f00000002c0)=@tcp6=r5, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x71746dc3323fb3bd}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x194, r3, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0xbc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x88, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffff8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xf99f021}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1ff}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8000}]}, @NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}]}, @NL802154_ATTR_SEC_DEVKEY={0x74, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x194}, 0x1, 0x0, 0x0, 0x24004000}, 0x8010) r7 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r7, 0x0, 0x483, &(0x7f0000000600), &(0x7f0000000680)=0x68) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000800)={r4, &(0x7f00000006c0)="e5d1fdb8a9f8365f09e07478534f2cb6b133156e788d39bc2879479f8d123431918a4d8ffafd292e5b34a07fb739b8c9fb306b78e87d13056bf7ec6dea0251af7810e9cafc156f24a4f8d8b1c1a683db684e8bb6b41fd29d140dce6db862cecf6a06488b33a971d7a560dea026fa32a962f466d76231755c84d119d6ed344a9fdda20348e9b31a46be1ec0b5939a2d998dd4e071a045f484aeaa904a80f82c749519e34c219b7634fe9fcf1a19a20019d7f8cc6da56db9f0cef66c650e9f2c0607f69d5a78a5a091321c69ec6f19a2f3e9e4f3", &(0x7f00000007c0)=@udp, 0x4}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r8, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, 0x0, 0x7, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x805}, 0x4000000) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000940)={0x27, 0x0}, &(0x7f00000009c0)=0x60) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$BTRFS_IOC_SEND(r10, 0x40489426, &(0x7f0000000a40)={{r12}, 0x1, &(0x7f0000000a00)=[0x9], 0x4, 0x2}) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r0) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000000d80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b40)={0x1e8, r13, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_SE_APDU={0x39, 0x19, "40eea6f51f23a717be331da631a649ee0b036bdd6905452b61db873326aa783d5ca9c68af91cfb22f2e4ffd42b30e943486db8d5b7"}, @NFC_ATTR_SE_APDU={0xe2, 0x19, "1b0ef557c2dde3317db6edcb9fe70630d79e6b16486bde193863fc866eb5324ebee8e72b513c50a35e97742b9a84ba5c123173264ce515250240134f37a351fd9400528cb309b94c9d84ef13f2e582ee1a16db734875b48dd98203c70cc49a720fa235e8b1bec56e84c606aacda599970f166d5f56ade5c591b5eaca2ecee790e1167072a184d096adf8994af84f69b0ea7f95b6528cb94571b354ff15c5028e2aaf275b3cd0ae47cdd99cccc7f03a4433e5138e1819e6bddc22b8f0bc7adfec2298a0347788514cbbcc24796da1390e69e09e2d9a961f8ecdef52cd090c"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_SE_APDU={0x3b, 0x19, "5b1d5e5a2427b689f6d3569f1920b597eed8b839cde49661dc334900b684295662acfe4a20b607a397b474d645585ce53ed84327d89002"}, @NFC_ATTR_SE_APDU={0x67, 0x19, "88795d6da53d12773a68157e785abe98994784bcbd57d1697193a513e775c8484126cf79282a2a365a172106496b1de96d470e443a177d4641da00a543d7819f5c4de3fafb10698079a35d8b5828820cf87ae64e8ec967ed55f74574b7aaeb756050b1"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x1e8}, 0x1, 0x0, 0x0, 0xc014}, 0x440c5) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x68, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f0000001000)={r10, &(0x7f0000000f00)='syz1\x00', 0x0, &(0x7f0000000f40)={@align=0x6, {0x2, 0x6, 0x7f, 0x5}}, 0xffffff80, &(0x7f0000000f80), &(0x7f0000000fc0)=0x7}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000001100)={'ip6tnl0\x00', &(0x7f0000001080)={'ip6tnl0\x00', 0x0, 0x2f, 0x4, 0xe, 0x4, 0x40, @loopback, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1, 0x80, 0x80000001, 0x1}}) sendmsg$nl_route_sched(r14, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)=@newchain={0x2c, 0x64, 0x5, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r15, {0xffff, 0x7}, {0xffe0, 0x7}, {0xfff1, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008084}, 0x4000004) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001200), r0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r12, 0x112, 0x8, &(0x7f0000001240)=0x1, 0x4) r16 = socket$inet(0x2, 0x2, 0xd6ad) sendmmsg$sock(r8, &(0x7f0000003140)=[{{&(0x7f0000001280)=@l2tp6={0xa, 0x0, 0x4, @local, 0x101}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001300)="6081a08ff1c9265d8844d220d7c62a83dc149633aacfda875d6c4dbc67d9d2307e435b9f2314af50cf5ff56e2964ccc07582431df2cbb37d6d6d210ac9a4a023fed99c57a0f02943ff0bdbcb4604aa88e97827f5c8de8ffe5537ca566057988ef9ffceafefbcb8797555e340dc90bcabb9913073107b2482624764c2503b6f53ce648e65e57a470d428bf6a84ccf9e40ddb269c7e1c2016b722a400f", 0x9c}, {&(0x7f00000013c0)="60a8e0443ea1bc11ecf69585d0cca976b062392eaff28690858ff735ef68833a2975d2f60d00de7d3db210939a3ed60b2232b875122abbf7192208f3a4e8cb15ef23988c63bfc301d883b7a4acc4754b", 0x50}, {&(0x7f0000001440)="14e2fa97b326fe983af3406787", 0xd}, {&(0x7f0000001480)="69bd0a171170d6eabfc585311c6fbc1e09ff637be5b0f799f850ba43168958d0632449ab0e3ff54700d64b4c04bb32e5ff29c2cd8473ce64aba89cb66a22f0bfa16f56f00931b87d154a8dc84961707ddbbb04069da34b443dc01abbf21a5dabb94f79f8c0c81930a03ed14559eb4a4560047cd868405d39c1d864655369bbedee6e94d26ea0cd77cbaa13da0f45e53ea05f40d15b7d3f8e0b53afd993a1073e85aa51a94f5ed9668c5431ad94dfb505c64192cf0c2e529c399e9b3454241056c2c5c00a72823f97de2c56183430ef0cf29a9fb37b8aa414f5798fca06906d3d35ce270e7ab17e6beb1c", 0xea}, {&(0x7f0000001580)="c6c005df4ef66035a7db76f45caee1c891a7321cf8817da4edbbeafd0b82c3fd42038eeb1e0326bf9803ba75a97335e75b181eb891037bdc84d9eef78f", 0x3d}, {&(0x7f00000015c0)="d06aa8680f3eb7d5cfb05cab79ad68fa97928844006b9c21dfadad4aa89fec786bf86df77b161e4fb016148da8a59a64a9e2110ccc842b6325e81e651586443ece2ef3de641f53801e3466ed0817a376d72ea6e583182c2938a052a7ea3d3126c8ebff0be039484fdc0eee82944eb3fd0d1e8295405069155a891a5a525759617c192e344d89e1a8a495a4bcecabca3b8ede83b5b5fe4a49818436dd162f58df0eb541cad341e58cd5caa45a2f68c56c02957e72d815e6c0bd159abd42492d", 0xbf}], 0x6, &(0x7f0000001700)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x18}}, {{&(0x7f0000001740)=@pppol2tpin6={0x18, 0x1, {0x0, r16, 0x2, 0x3, 0x4, 0x2, {0xa, 0x4e24, 0x7ff, @private0, 0x4}}}, 0x80, &(0x7f0000001dc0)=[{&(0x7f00000017c0)="3f90598655086feff916b1a5a76b3e981ec21f77e8a18a1027faf355622a0293278f259ad5d913d9c20920c7eb1070476adb5bbfe06e1f589dce979f9118280f2d927565353c39541c5ea8bc2ecfa7509da0f89d4bfb44a0a85316888d6e62d0437907592438105c98146e8bf93d9947ed0d619fc7db740d4a74be27d37ead464aa9c1d536e28d3205b586d33f87328e668aa6bb450f427c82c19afca3af5ea6b085594d964e6d09770b524136deb2aa7164004c21ed6c1cdcce1223c88057c1e08753536913ad52e0ef2dea6d47d65017369f", 0xd3}, {&(0x7f00000018c0)="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", 0xff}, {&(0x7f00000019c0)="8e6eceb1a02345219a99bad6a68c2f3bd468fee44c61dd88a5c760e725f385f6eac5825af2e0aa22603520a242e159128969539b5d61ed826ab489d2e61d3563707d4b042dc94f0ad53424cd173bb7dbe3e35693c6d01d00bf70f16fe5da82e03a8080f71e2e7dae8dc3682935c3fdcba0db31af7062c9", 0x77}, {&(0x7f0000001a40)="7c82dd96ca13adfad62f4b307496703e8398db809ee3b80059989d3fc7590691f43547", 0x23}, {&(0x7f0000001a80)="2a0c69aeaf839cad10458e65f5f9a6a1b3e209e290080e2ba006d2d5ed2535ff87e4b934ca2e46ca943cce1365fc931690519812fc5f133dfeb03c75f4a7d0f5c7b9d43a0969542c20fde6b981e08735357610221170be1c29216cb4f61b82903b3c80bbbf055c54e12a5b53d99e88c42d14420d38d2b2acac405400e6e809b2fc6f64a294ab078d0dff14f63592fdfd013c06b839a58b1b8661824290affd36e19b8c1b1cb422ce09bd07f2e6937016539e68b84b041a664075fc9acdfa2f122586", 0xc2}, {&(0x7f0000001b80)="69e90e96023bb58d165845cd1600888b5acdf5ba954907391a4183db66337b0bc95390bc948df46c318e62b7ace31f", 0x2f}, {&(0x7f0000001bc0)="7c7edc0efe4a92d1566e76e51a378afb0365849c69296bc0102c288fab2eddacee6da3259de3424268bfd521895fa4f4321a5551894523934c6cc024c1d6210e2bc7d70edfc24f9fe2ca8182994137a385b94b5624698fd8e909133d55438eeb7420af18cc86608a49772cf6a8e9d335692f1ea0719058d4cea9deee87f25c0622bdbf521e92d3cf30a11140fbcfd9306a4cd63ab730335cabfdaa096c267d51fc1aa248e421d3b305812b10dd2f67c14be8747c29b6d6767b", 0xb9}, {&(0x7f0000001c80)="e33127ec8b5426b51848a60bfe84214f08dc9125b4fffb4ca227fc35047a246bb2450df18fd5f6ea61a8120d420b5071f269367d2e2bda388ce8932ccaec2e0290dcf94bbd4445677312a294ffdf02b011e8c3578fb0a2aa2539026eb43ac40aabeb558abb7456f38143ac4bfa90ac1faed9ac8c3ab2d5cd5b61e10ee344f08491ec28b3755597d82f1f0f36414743ef6ff24ab87f6a4b70e95f603258e3231a20d90891a917ad819d966c5103f572c1edd8e03bfbbaae140ec62d023d2b810f86b1f7ffd57002f48d96c5575cb36212b8b538279a5e8bd2b71b25e9", 0xdc}, {&(0x7f0000001d80)="233d5be3162f1a884c2f5f00292365d2e412d67baa72fa005bc9c4a908e97b924e224ded84eb6c542873443866b1b710849ce88d7bcdb6af7a8e", 0x3a}], 0x9, &(0x7f0000001e80)=[@timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x10001}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x10}}, @mark={{0x14}}], 0x78}}, {{&(0x7f0000001f00)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80, &(0x7f0000003100)=[{&(0x7f0000001f80)="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", 0x1000}, {&(0x7f0000002f80)="db8236e15df945a72976b25cb74853c42098316e899e7cc65386ec1ea63a104bf10788be20ceb3b769f6e4bbe4b10cc79904167fd68b5526609380b67ec5b9a17111fb3bb031563b1658f241408cf4bbf258e138b485870acbacc8d7cd77edeeef47cfd8f30f0c4c28bf5127391bca59a489240bce39c7bfbfe3d73e225333e9ca075342f11f714a01a3021c03c010a9c772c016c170c7f947d38387ea", 0x9d}, {&(0x7f0000003040)="15fdcb5336e0b9fd7d2bde6027cec503d420723d83dfdcea68d1a1f657ad40d5f94619a56954108dc8e538636b47b23ce674444933654491d06d3ebc8979d43c71691953f48fc275d5f753f4df4feb21a4f473bcfa6a6c55059f8f6c26d686c554f477d4c8ee7fa63f5ab08a5ed0fac46573bd915740c40d7156fdfb005d1fc27ea9990c1722b1cf2f0bb8a01f2557821976e6d8dee6cea202d3ad7a415d60d4dabafab6004d39518cb7e60695b261f58414e17b6c1d29ad1c1e", 0xba}], 0x3}}], 0x3, 0x24040040) 350.739925ms ago: executing program 2 (id=11394): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40180, 0x11}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x15, 0x1, &(0x7f00000001c0)=@raw=[@exit], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000940)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffff7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 205.054041ms ago: executing program 3 (id=11395): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x4008054) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f0000000000000000000000080004fe01000000", 0x24) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000ac0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076003008b050000008650", 0x0, 0xfe8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x44, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}]}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x24000840}, 0x80) r8 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYRES16=r8], 0x14) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) syz_emit_ethernet(0x86, &(0x7f00000006c0)=ANY=[], 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) listen(0xffffffffffffffff, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) socket$inet6(0xa, 0x3, 0x7) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) close(0x4) 204.027958ms ago: executing program 4 (id=11396): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000180)=0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x14}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 32) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) (async, rerun: 32) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendfile(r3, 0xffffffffffffffff, 0x0, 0x5) 176.800452ms ago: executing program 2 (id=11397): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000f75ff"], 0x0, 0x46}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 113.332522ms ago: executing program 2 (id=11398): syz_emit_ethernet(0x7c, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x46, 0x2f, 0xff, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x892f, [0x80]}, {}, {}, {0xa888}}}}}}}, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x6, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40022}, 0x2000400c) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r3, 0x0}, 0x50) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000006c0)={r5, &(0x7f00000001c0)='\x00', 0x2000, &(0x7f0000000300)={@align=0x10, {0xb, 0x4, 0x0, 0x7fffffff}}, 0x2, &(0x7f0000000340), &(0x7f00000005c0)=0x800}) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000700)="61e358ccbfdb81118a8e829d638c088033136911a63affaa8a5ffc06b3485df6e4abcc1ebfa9d603b743a1e0980c0b55c38d5d5333d080a06b478007fc72955291cd073df5c287027736f883cc5979e3f2b7cf623379b6937ad295dc946992007445a21b9db3f4b2ebd9c69fcf4c235817d0ea5864b5c1d2d7e5c101304d811164d3c4d466c52d19fbfa24451a7cc7f82feffa0e7ebd729dc23ca31759ab8cb3bda74546bb650ad6312c20874265fe1456244fce88542d", 0xb7) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r8, 0x65, 0x5, &(0x7f0000000200)=0x1, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$can_raw(r8, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r9}, 0x10, &(0x7f00000003c0)={&(0x7f0000000280)=@canfd={{0x2, 0x1, 0x1}, 0xfe, 0x1, 0x0, 0x0, "c49bc517a6bdb5a8c574326b3d1a2cd328971128f016c3926cf5c07e97913f4927acf5c385672f9e15f9f096c4a8a50682532ce2971dca06656d719f72acb5a4"}, 0x48}, 0x2, 0x0, 0x0, 0x1}, 0x10044009) (async) recvmmsg(r7, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000002200)=[{0x0}, {0x0}, {&(0x7f0000002100)=""/212, 0xd4}], 0x3}, 0xa}], 0x1, 0x0, 0x0) (async) syz_emit_ethernet(0xbe, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b00000000000119078000000000000000000004e20009c90780000040000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a885c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6dafe0900761fbda9c143f9f74eb6997046699e0e746b1ad91083dbf71cbc539a1dd3887bec8e"], 0x0) (async) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0xffffffffffffff9d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async) connect$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x1, {0x11004e23, 0x4}}, 0x10) 33.206418ms ago: executing program 1 (id=11399): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040), 0x4) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001240)={0x48, 0x2e, 0x1, 0x70bd28, 0x0, "", [@nested={0x4, 0x119}, @nested={0x34, 0x11, 0x0, 0x1, [@nested={0x2f, 0xcf, 0x0, 0x1, [@generic="d478b585fcf4962925eb81095dd3d92e983e841d6ef7368187237f5e91a74d57e8aaee05ec6319", @nested={0x4, 0x95}]}]}]}, 0x48}], 0x1, 0x0, 0x0, 0x84}, 0x300) (async) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x40000) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0xe, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="3eaa0000000000007910bd000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d8407b3310384f3fa121402109c02e59c6902a473fe45a26d6b7d3398260f57d08131081186ea6a89a8d55142f085a43772cf48ef66a26d58608cbbd7d", @ANYRES32=0x0, @ANYRES64=r5, @ANYRES8=r4], 0x6c}, 0x1, 0x0, 0x0, 0xc801}, 0x0) 0s ago: executing program 2 (id=11400): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x20, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x43}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}}, @ldst={0x3, 0x3, 0x6, 0x8, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffc}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) kernel console output (not intermixed with test programs): ver after parsing attributes in process `syz.4.10160'. [ 1341.866928][T14585] ip6erspan0: entered allmulticast mode [ 1341.887240][T14559] lo speed is unknown, defaulting to 1000 [ 1341.893981][T14589] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10162'. [ 1341.894866][T14585] ip6erspan0: left allmulticast mode [ 1341.943605][T14559] lo speed is unknown, defaulting to 1000 [ 1342.102136][T14589] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10162'. [ 1342.131629][T14594] bond0: option lp_interval: invalid value (0) [ 1342.143356][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1342.167050][T14594] bond0: option lp_interval: allowed values 1 - 2147483647 [ 1342.188124][T14594] bond0 (unregistering): Released all slaves [ 1342.269904][T14589] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10162'. [ 1342.799670][T14625] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10170'. [ 1342.952882][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1343.123219][T14632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10172'. [ 1343.182538][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1343.497104][T14648] netlink: 'syz.4.10175': attribute type 1 has an invalid length. [ 1343.624388][T14655] netlink: 'syz.2.10178': attribute type 11 has an invalid length. [ 1343.757898][T14608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1343.912479][T14668] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1343.933758][T14665] IPVS: set_ctl: invalid protocol: 92 172.30.1.5:20002 [ 1344.165539][T14679] bond7 (unregistering): Released all slaves [ 1344.223817][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1344.774711][T14674] lo speed is unknown, defaulting to 1000 [ 1344.803457][T14674] lo speed is unknown, defaulting to 1000 [ 1344.965616][T14728] netlink: 'syz.1.10198': attribute type 1 has an invalid length. [ 1344.989938][T14733] netlink: 'syz.0.10199': attribute type 10 has an invalid length. [ 1345.011906][T14728] NCSI netlink: No device for ifindex 0 [ 1345.021544][T14733] syz_tun: entered promiscuous mode [ 1345.033146][T14734] syzkaller0: entered promiscuous mode [ 1345.040079][T14734] syzkaller0: entered allmulticast mode [ 1345.118791][T14738] netlink: 'syz.2.10200': attribute type 2 has an invalid length. [ 1345.145220][T14738] netlink: 'syz.2.10200': attribute type 11 has an invalid length. [ 1345.158066][T14729] syzkaller0: entered promiscuous mode [ 1345.163859][T14729] syzkaller0: entered allmulticast mode [ 1345.171812][T14740] netlink: 'syz.1.10198': attribute type 12 has an invalid length. [ 1345.263056][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1345.429552][T14744] block nbd3: server does not support multiple connections per device. [ 1345.455700][T14744] block nbd3: shutting down sockets [ 1346.305203][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.784094][T14608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.344176][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.429782][T14608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.752148][T14749] tipc: Enabled bearer , priority 2 [ 1347.904931][T14766] netlink: 'syz.3.10206': attribute type 1 has an invalid length. [ 1348.131038][T14761] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1348.164036][T14781] Bluetooth: MGMT ver 1.23 [ 1348.384050][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1348.415882][T14761] bond3 (unregistering): Released all slaves [ 1348.596408][T14766] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1348.608513][T14788] veth1_to_bond: entered promiscuous mode [ 1348.645890][T14787] veth1_to_bond: left promiscuous mode [ 1348.820578][T14793] __nla_validate_parse: 13 callbacks suppressed [ 1348.820597][T14793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10213'. [ 1348.842026][T14793] netlink: 348 bytes leftover after parsing attributes in process `syz.1.10213'. [ 1348.867045][T14797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10215'. [ 1348.871319][T14793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10213'. [ 1348.876368][ T29] tipc: Node number set to 1 [ 1348.925262][T14793] netlink: 348 bytes leftover after parsing attributes in process `syz.1.10213'. [ 1348.958352][T14793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10213'. [ 1349.404038][T14819] netlink: 'syz.2.10220': attribute type 10 has an invalid length. [ 1349.422490][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1349.424266][T14819] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10220'. [ 1349.728162][T14826] netlink: 67 bytes leftover after parsing attributes in process `syz.3.10223'. [ 1349.822703][T14603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1349.869935][T14826] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1349.923929][ T6601] bridge0: port 2(bridge_slave_1) entered blocking state [ 1349.931126][ T6601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1349.980656][T14843] bridge0: port 3(vlan2) entered blocking state [ 1350.002134][T14843] bridge0: port 3(vlan2) entered disabled state [ 1350.020444][T14843] vlan2: entered allmulticast mode [ 1350.029130][T14843] geneve0: entered allmulticast mode [ 1350.043407][T14843] vlan2: entered promiscuous mode [ 1350.050918][T14843] geneve0: entered promiscuous mode [ 1350.206784][T14865] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1350.249640][T14862] syzkaller1: entered promiscuous mode [ 1350.262070][T14862] syzkaller1: entered allmulticast mode [ 1350.462357][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1350.497147][T14882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10236'. [ 1350.999508][T14897] batman_adv: batadv0: Adding interface: macvtap3 [ 1351.006192][T14897] batman_adv: batadv0: The MTU of interface macvtap3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1351.039734][T14897] batman_adv: batadv0: Not using interface macvtap3 (retrying later): interface not active [ 1351.116950][T14904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10245'. [ 1351.146159][T14904] xt_l2tp: invalid flags combination: 8 [ 1351.154018][T14904] netlink: 'syz.1.10245': attribute type 1 has an invalid length. [ 1351.506360][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1351.703593][T14926] bridge0: port 3(bond0) entered disabled state [ 1351.710912][T14926] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.899323][T14926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1351.930880][T14926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1352.370887][ T6646] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1352.409428][ T6646] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.437483][ T6646] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1352.466485][ T6646] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.543461][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.601604][T14959] 8021q: adding VLAN 0 to HW filter on device ` [ 1352.629151][T14959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1352.788466][T14959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1352.809582][T14959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1352.824926][T14959] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1352.836534][T14959] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1352.849925][T14959] hsr0: left promiscuous mode [ 1352.858774][T14959] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1352.875448][T14603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.890886][ T6646] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1352.904871][ T6646] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.929168][ T6645] bridge0: port 1(bridge_slave_0) entered blocking state [ 1352.936384][ T6645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1352.964568][ T6645] bridge0: port 2(bridge_slave_1) entered blocking state [ 1352.971774][ T6645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1353.054076][ T6646] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1353.075536][ T6646] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.487137][T15006] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1353.530618][T15006] netlink: 'syz.1.10274': attribute type 1 has an invalid length. [ 1353.582504][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1353.604927][T15006] netlink: 'syz.1.10274': attribute type 10 has an invalid length. [ 1353.815619][T15021] netlink: 'syz.4.10279': attribute type 26 has an invalid length. [ 1353.850384][T15021] __nla_validate_parse: 172 callbacks suppressed [ 1353.850401][T15021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10279'. [ 1353.867304][T15027] netlink: 'syz.4.10279': attribute type 21 has an invalid length. [ 1353.899007][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10279'. [ 1353.919782][T15027] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10279'. [ 1353.942778][T15021] netlink: 'syz.4.10279': attribute type 26 has an invalid length. [ 1353.968522][T15032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10282'. [ 1353.989673][T15021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10279'. [ 1354.020144][T15027] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10279'. [ 1354.622532][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.645433][T15078] syzkaller1: entered promiscuous mode [ 1354.665226][T15078] syzkaller1: entered allmulticast mode [ 1354.759311][T15082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.769972][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.785775][T15089] netlink: 'syz.3.10295': attribute type 4 has an invalid length. [ 1354.795977][T15090] netlink: 'syz.3.10295': attribute type 4 has an invalid length. [ 1354.848722][T15095] openvswitch: netlink: Invalid VLAN frame [ 1355.034530][T15114] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10301'. [ 1355.056807][T15114] netlink: 'syz.4.10301': attribute type 2 has an invalid length. [ 1355.077939][T15114] netlink: 'syz.4.10301': attribute type 1 has an invalid length. [ 1355.098434][T15114] netlink: 'syz.4.10301': attribute type 1 has an invalid length. [ 1355.626118][T15152] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10310'. [ 1355.663835][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1355.673844][T15152] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10310'. [ 1355.798467][T15154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10311'. [ 1355.913581][T14603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.108423][T15170] syzkaller0: entered promiscuous mode [ 1356.130747][T15170] syzkaller0: entered allmulticast mode [ 1356.459883][T15181] netlink: 'syz.2.10320': attribute type 12 has an invalid length. [ 1356.703686][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.722050][T15193] netlink: 'syz.2.10325': attribute type 7 has an invalid length. [ 1356.846431][T15198] netlink: 'syz.1.10326': attribute type 1 has an invalid length. [ 1356.872947][T15198] netlink: 'syz.1.10326': attribute type 2 has an invalid length. [ 1356.941296][T15204] netlink: 'syz.1.10328': attribute type 1 has an invalid length. [ 1357.022314][T14603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1357.027176][T15174] lo speed is unknown, defaulting to 1000 [ 1357.067727][T15174] lo speed is unknown, defaulting to 1000 [ 1357.428203][T15219] syzkaller0: entered promiscuous mode [ 1357.441187][T15219] syzkaller0: entered allmulticast mode [ 1357.745787][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1357.802980][T15232] veth1_to_batadv: entered promiscuous mode [ 1358.782429][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1358.831803][T15289] tun0: tun_chr_ioctl cmd 1074025672 [ 1358.848631][T15289] tun0: ignored: set checksum disabled [ 1358.944162][T14603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.191430][T15298] __nla_validate_parse: 9 callbacks suppressed [ 1359.191447][T15298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10356'. [ 1359.229699][T15298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10356'. [ 1359.246858][T15298] netlink: 58 bytes leftover after parsing attributes in process `syz.3.10356'. [ 1359.444887][T15312] team0: Port device bridge0 added [ 1359.458600][T15315] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10359'. [ 1359.470416][T15288] lo speed is unknown, defaulting to 1000 [ 1359.479831][T15317] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10360'. [ 1359.485087][T15312] mac80211_hwsim hwsim116 wlan0: entered allmulticast mode [ 1359.522988][T15288] lo speed is unknown, defaulting to 1000 [ 1359.824422][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.879884][T15328] vlan4: entered promiscuous mode [ 1359.897518][T15328] geneve1: entered promiscuous mode [ 1359.916291][T15328] vlan4: entered allmulticast mode [ 1359.924004][T15335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.938167][T15328] geneve1: entered allmulticast mode [ 1359.944174][T15335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1360.007300][T15341] validate_nla: 3 callbacks suppressed [ 1360.007318][T15341] netlink: 'syz.0.10367': attribute type 1 has an invalid length. [ 1360.081770][T15341] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1360.125952][T15341] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1360.138612][T15341] ip6tnl0: Caught tx_queue_len zero misconfig [ 1360.357130][T15353] veth0: left promiscuous mode [ 1360.396052][T15353] mac80211_hwsim hwsim116 wlan0: left allmulticast mode [ 1360.423022][T15354] netlink: 'syz.1.10369': attribute type 1 has an invalid length. [ 1360.441187][T15353] geneve2: left promiscuous mode [ 1360.450635][T15353] geneve2: left allmulticast mode [ 1360.457352][T15353] macsec1: left promiscuous mode [ 1360.468156][T15353] macsec1: left allmulticast mode [ 1360.475266][T15353] veth3: left promiscuous mode [ 1360.480879][T15353] macsec2: left promiscuous mode [ 1360.487071][T15353] macsec2: left allmulticast mode [ 1360.492893][T15353] bond7: left promiscuous mode [ 1360.497843][T15353] bridge4: left promiscuous mode [ 1360.510917][T15353] macvtap1: left allmulticast mode [ 1360.523842][T15353] macvtap2: left allmulticast mode [ 1360.537133][T15353] geneve3: left promiscuous mode [ 1360.547829][T15353] geneve3: left allmulticast mode [ 1360.560273][T15353] ip6gre1: left promiscuous mode [ 1360.571654][T15353] ip6gre1: left allmulticast mode [ 1360.606344][T15353] vlan4: left promiscuous mode [ 1360.617398][T15353] geneve1: left promiscuous mode [ 1360.635013][T15353] vlan4: left allmulticast mode [ 1360.647131][T15353] geneve1: left allmulticast mode [ 1360.671964][ C1] net_ratelimit: 179 callbacks suppressed [ 1360.671982][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1360.689370][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1360.699066][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1360.707330][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1360.715616][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1360.744747][T15335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1360.865772][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1360.931399][T15357] gretap1: entered allmulticast mode [ 1360.953079][T15357] bond8: (slave gretap1): making interface the new active one [ 1360.962216][T15357] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 1360.991648][T15337] lo speed is unknown, defaulting to 1000 [ 1361.023981][T15337] lo speed is unknown, defaulting to 1000 [ 1361.086868][T15367] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10372'. [ 1361.099523][T15367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1361.108173][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1361.306434][T15377] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10375'. [ 1361.690535][T15395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10378'. [ 1361.709580][T15395] netlink: 'syz.2.10378': attribute type 5 has an invalid length. [ 1361.728401][T15395] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10378'. [ 1361.881100][T15403] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10380'. [ 1361.905340][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1361.960833][T15395] geneve3: entered promiscuous mode [ 1362.005089][T15395] geneve3: entered allmulticast mode [ 1362.049106][ T6649] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 1362.087349][ T6649] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 1362.130882][ T6649] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 1362.176701][ T6649] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 1362.978221][ T8327] lo speed is unknown, defaulting to 1000 [ 1363.005849][ T8327] sy2: Port: 1 Link ACTIVE [ 1363.257437][T15454] syzkaller0: entered promiscuous mode [ 1363.268836][T15454] syzkaller0: entered allmulticast mode [ 1363.450651][T15472] lo: Caught tx_queue_len zero misconfig [ 1363.655871][T15482] netlink: 'syz.2.10402': attribute type 58 has an invalid length. [ 1363.669226][T15484] netlink: 'syz.1.10403': attribute type 12 has an invalid length. [ 1363.860105][T15494] sctp: [Deprecated]: syz.2.10404 (pid 15494) Use of int in maxseg socket option. [ 1363.860105][T15494] Use struct sctp_assoc_value instead [ 1363.889938][T15485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1364.251696][T15519] netlink: 'syz.2.10411': attribute type 1 has an invalid length. [ 1364.353675][T15519] bond0: entered promiscuous mode [ 1364.357134][T15529] __nla_validate_parse: 9 callbacks suppressed [ 1364.357152][T15529] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10415'. [ 1364.359539][T15519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1364.421533][T15529] ip6gre1: entered promiscuous mode [ 1364.432286][T15529] ip6gre1: entered allmulticast mode [ 1364.654586][T15544] netlink: 'syz.1.10419': attribute type 2 has an invalid length. [ 1364.886363][T15558] netlink: 'syz.0.10422': attribute type 1 has an invalid length. [ 1364.934552][T15558] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1364.956909][T15559] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1364.962759][T15559] dvmrp1: linktype set to 0 [ 1364.970833][T15558] ip6_vti0: Caught tx_queue_len zero misconfig [ 1365.074402][T15558] bond8: (slave veth9): Enslaving as an active interface with a down link [ 1365.181096][T15558] bond8 (unregistering): (slave veth9): Releasing active interface [ 1365.219475][T15558] bond8 (unregistering): Released all slaves [ 1366.062119][ T5741] net_ratelimit: 6 callbacks suppressed [ 1366.062137][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1366.087844][T15524] lo speed is unknown, defaulting to 1000 [ 1366.140306][T15524] lo speed is unknown, defaulting to 1000 [ 1366.478618][T15597] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10430'. [ 1366.499700][T15599] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10431'. [ 1366.543275][T15597] bridge4: entered promiscuous mode [ 1366.623146][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1366.635844][T14603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1366.918844][T15615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10436'. [ 1367.106639][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1367.442692][T15634] tipc: Enabled bearer , priority 0 [ 1367.467814][T15639] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1367.749046][T15654] netlink: 124 bytes leftover after parsing attributes in process `syz.1.10447'. [ 1367.765920][T15654] netlink: 108 bytes leftover after parsing attributes in process `syz.1.10447'. [ 1367.799386][T15656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10448'. [ 1367.852889][T15661] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10450'. [ 1368.072773][T14603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1368.146136][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1368.561985][ T5741] tipc: Node number set to 1441156939 [ 1368.972483][T15698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1368.980895][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.109355][T15672] lo speed is unknown, defaulting to 1000 [ 1369.124319][T15672] lo speed is unknown, defaulting to 1000 [ 1369.182214][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.486957][T15719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10464'. [ 1369.524363][T15719] ip6tnl2: entered allmulticast mode [ 1369.599390][T15722] netlink: 'syz.2.10465': attribute type 84 has an invalid length. [ 1369.609482][T15719] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10464'. [ 1369.658947][T15673] lo speed is unknown, defaulting to 1000 [ 1369.685484][T15673] lo speed is unknown, defaulting to 1000 [ 1369.743054][T15726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10466'. [ 1369.845351][T15727] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1280) ! [ 1369.967119][T15731] veth1_macvtap: left promiscuous mode [ 1370.222236][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1370.349572][T15742] nftables ruleset with unbound chain [ 1370.424763][T15742] mac80211_hwsim hwsim127 ;: renamed from wlan0 [ 1370.476354][T15748] syz.4.10470: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1370.551347][T15748] CPU: 0 UID: 0 PID: 15748 Comm: syz.4.10470 Not tainted syzkaller #0 PREEMPT(full) [ 1370.551377][T15748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1370.551391][T15748] Call Trace: [ 1370.551400][T15748] [ 1370.551410][T15748] dump_stack_lvl+0xe8/0x150 [ 1370.551444][T15748] warn_alloc+0x249/0x340 [ 1370.551477][T15748] ? stack_trace_save+0xa9/0x100 [ 1370.551515][T15748] ? __pfx_warn_alloc+0x10/0x10 [ 1370.551552][T15748] ? kasan_save_track+0x4f/0x80 [ 1370.551580][T15748] ? kasan_save_track+0x3e/0x80 [ 1370.551606][T15748] ? __kasan_kmalloc+0x93/0xb0 [ 1370.551642][T15748] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1370.551670][T15748] ? xskq_create+0x56/0x170 [ 1370.551701][T15748] ? xsk_setsockopt+0x54c/0x990 [ 1370.551725][T15748] ? do_sock_setsockopt+0x17c/0x1b0 [ 1370.551748][T15748] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1370.551767][T15748] ? do_syscall_64+0x174/0x580 [ 1370.551792][T15748] __vmalloc_node_range_noprof+0x132/0x1750 [ 1370.551852][T15748] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1370.551884][T15748] ? __kasan_kmalloc+0x93/0xb0 [ 1370.551915][T15748] vmalloc_user_noprof+0xad/0xe0 [ 1370.551941][T15748] ? xskq_create+0xbf/0x170 [ 1370.551970][T15748] xskq_create+0xbf/0x170 [ 1370.552008][T15748] xsk_init_queue+0x8a/0xe0 [ 1370.552039][T15748] xsk_setsockopt+0x54c/0x990 [ 1370.552069][T15748] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1370.552097][T15748] ? __pfx_aa_sk_perm+0x10/0x10 [ 1370.552129][T15748] ? aa_sock_opt_perm+0xff/0x1a0 [ 1370.552162][T15748] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1370.552190][T15748] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1370.552217][T15748] do_sock_setsockopt+0x17c/0x1b0 [ 1370.552239][T15748] __x64_sys_setsockopt+0x13d/0x1b0 [ 1370.552262][T15748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.552284][T15748] do_syscall_64+0x174/0x580 [ 1370.552304][T15748] ? trace_irq_disable+0x3b/0x140 [ 1370.552332][T15748] ? clear_bhb_loop+0x40/0x90 [ 1370.552356][T15748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.552373][T15748] RIP: 0033:0x7efc1a59ce59 [ 1370.552393][T15748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1370.552411][T15748] RSP: 002b:00007efc1b511028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1370.552435][T15748] RAX: ffffffffffffffda RBX: 00007efc1a816090 RCX: 00007efc1a59ce59 [ 1370.552450][T15748] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 1370.552463][T15748] RBP: 00007efc1a632d6f R08: 0000000000000004 R09: 0000000000000000 [ 1370.552475][T15748] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1370.552488][T15748] R13: 00007efc1a816128 R14: 00007efc1a816090 R15: 00007ffe0d1c8c78 [ 1370.552520][T15748] [ 1370.845618][T15748] Mem-Info: [ 1370.848791][T15748] active_anon:10320 inactive_anon:7 isolated_anon:0 [ 1370.848791][T15748] active_file:3024 inactive_file:40795 isolated_file:0 [ 1370.848791][T15748] unevictable:768 dirty:145 writeback:0 [ 1370.848791][T15748] slab_reclaimable:13069 slab_unreclaimable:174510 [ 1370.848791][T15748] mapped:32627 shmem:4174 pagetables:1427 [ 1370.848791][T15748] sec_pagetables:0 bounce:0 [ 1370.848791][T15748] kernel_misc_reclaimable:0 [ 1370.848791][T15748] free:1212282 free_pcp:31017 free_cma:0 [ 1370.861294][T15761] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1370.894914][T15748] Node 0 active_anon:41380kB inactive_anon:28kB active_file:12096kB inactive_file:162968kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32204kB dirty:580kB writeback:0kB shmem:15160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15884kB pagetables:5568kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1370.936643][T15748] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98304kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1370.969696][T15748] Node 0 DMA free:11136kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:128kB local_pcp:72kB free_cma:0kB [ 1371.000374][T15748] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1371.009979][T15748] Node 0 DMA32 free:1296076kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41580kB inactive_anon:28kB active_file:12096kB inactive_file:162968kB unevictable:1536kB writepending:580kB zspages:0kB present:3129332kB managed:2552608kB mlocked:0kB bounce:0kB free_pcp:68584kB local_pcp:46988kB free_cma:0kB [ 1371.049393][T15748] lowmem_reserve[]: 0 0 0 0 0 [ 1371.054236][T15748] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1371.094071][T15748] lowmem_reserve[]: 0 0 0 0 0 [ 1371.102841][T14603] net_ratelimit: 1 callbacks suppressed [ 1371.102857][T14603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1371.109051][T15748] Node 1 Normal free:3541116kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:54892kB local_pcp:29112kB free_cma:0kB [ 1371.219556][T15748] lowmem_reserve[]: 0 0 0 0 0 [ 1371.238681][T15773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10476'. [ 1371.248500][T15748] Node 0 DMA: 0*4kB 2*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11136kB [ 1371.266843][T15772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10476'. [ 1371.276857][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1371.291338][T15748] Node 0 DMA32: 6097*4kB (UME) 8616*8kB (UM) 5758*16kB (UM) 677*32kB (UME) 543*64kB (U) 91*128kB (U) 865*256kB (UM) 521*512kB (UME) 311*1024kB (UME) 115*2048kB (UM) 0*4096kB = 1295684kB [ 1371.329239][T15748] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1371.383873][T15748] Node 1 Normal: 6*4kB (U) 9*8kB (UM) 11*16kB (UM) 5*32kB (UM) 16*64kB (UM) 10*128kB (UM) 8*256kB (UM) 7*512kB (UM) 6*1024kB (UM) 6*2048kB (U) 858*4096kB (UM) = 3541168kB [ 1371.468753][T15748] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1371.473845][T15781] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10477'. [ 1371.499883][T15748] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1371.531934][T15748] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1371.569351][T15748] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1371.604077][T15748] 47989 total pagecache pages [ 1371.611725][T15748] 0 pages in swap cache [ 1371.612143][T15790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10477'. [ 1371.631600][T15748] Free swap = 124996kB [ 1371.651153][T15748] Total swap = 124996kB [ 1371.673334][T15748] 2097051 pages RAM [ 1371.689772][T15748] 0 pages HighMem/MovableOnly [ 1371.714512][T15748] 427116 pages reserved [ 1371.724630][T15748] 0 pages cma reserved [ 1372.138366][T15806] netlink: 'syz.2.10486': attribute type 5 has an invalid length. [ 1372.193872][ T5295] veth1_macvtap: entered promiscuous mode [ 1372.221376][T15809] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10485'. [ 1372.600545][T15822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10490'. [ 1372.720370][T15831] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10491'. [ 1373.275655][T15864] ip6gre1: entered promiscuous mode [ 1373.296783][T15864] ip6gre1: entered allmulticast mode [ 1373.344375][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.690149][T15886] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1373.710272][T15886] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1374.061024][T15874] lo speed is unknown, defaulting to 1000 [ 1374.074784][T15874] lo speed is unknown, defaulting to 1000 [ 1374.147062][T14603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.379258][T15911] syzkaller1: entered promiscuous mode [ 1374.386872][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.398193][T15911] syzkaller1: entered allmulticast mode [ 1374.666312][T15926] x_tables: duplicate underflow at hook 2 [ 1375.423929][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.599852][T15965] netlink: 'syz.4.10527': attribute type 83 has an invalid length. [ 1375.647864][T15965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.659067][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.684683][T15965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.893994][T15980] __nla_validate_parse: 6 callbacks suppressed [ 1375.894012][T15980] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10530'. [ 1375.946536][T15976] netlink: 'syz.4.10529': attribute type 3 has an invalid length. [ 1375.973696][T15980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10530'. [ 1376.001655][T15976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10529'. [ 1376.041259][T15980] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10530'. [ 1376.066125][T15984] netlink: 240 bytes leftover after parsing attributes in process `syz.0.10530'. [ 1376.190617][T15984] netlink: 'syz.0.10530': attribute type 9 has an invalid length. [ 1376.230730][T15986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10531'. [ 1376.253913][T14603] net_ratelimit: 1 callbacks suppressed [ 1376.253932][T14603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1376.425864][T16009] netlink: 'syz.0.10534': attribute type 28 has an invalid length. [ 1376.459478][T16009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10534'. [ 1376.470035][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1376.540466][T16016] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10536'. [ 1376.585061][T16016] IPVS: set_ctl: invalid protocol: 0 100.1.1.5:20004 [ 1376.654617][T16025] netlink: 'syz.2.10536': attribute type 11 has an invalid length. [ 1377.192580][T14603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1377.238408][T16052] IPVS: set_ctl: invalid protocol: 137 224.0.0.1:20001 [ 1377.443647][T16065] netlink: 'syz.0.10548': attribute type 1 has an invalid length. [ 1377.462215][T16065] netlink: 96 bytes leftover after parsing attributes in process `syz.0.10548'. [ 1377.482805][T16065] netlink: 'syz.0.10548': attribute type 1 has an invalid length. [ 1377.494759][T16065] netlink: 634 bytes leftover after parsing attributes in process `syz.0.10548'. [ 1377.508692][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1377.522314][T16067] openvswitch: netlink: IPv4 tun info is not correct [ 1377.590163][T16067] syzkaller1: entered promiscuous mode [ 1377.603635][T16067] syzkaller1: entered allmulticast mode [ 1377.942264][T16072] syzkaller0: entered promiscuous mode [ 1377.950609][T16072] syzkaller0: entered allmulticast mode [ 1377.967797][T16042] lo speed is unknown, defaulting to 1000 [ 1378.050874][T16042] lo speed is unknown, defaulting to 1000 [ 1378.542171][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1379.602054][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.232110][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.240559][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.249409][T14603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.669262][ T5741] net_ratelimit: 1 callbacks suppressed [ 1381.669280][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1382.290142][T16078] lo speed is unknown, defaulting to 1000 [ 1382.305665][T16078] lo speed is unknown, defaulting to 1000 [ 1382.707580][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.274959][T13990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.743992][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1384.782292][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1385.823006][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1385.833253][T13990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1386.312214][T13990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1386.862278][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1387.902241][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.942329][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1389.342341][T13990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1389.982466][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1391.022220][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1392.062470][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1392.392540][T13990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1393.102235][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.142457][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1395.183662][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1395.422941][T14603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1395.431194][T14608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1396.223729][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1397.262275][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1397.678787][T16196] __nla_validate_parse: 3 callbacks suppressed [ 1397.678805][T16196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10559'. [ 1397.724309][T16196] nbd: must specify a size in bytes for the device [ 1397.918107][T16204] syzkaller1: entered promiscuous mode [ 1397.932982][T16204] syzkaller1: entered allmulticast mode [ 1397.935933][T14608] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1397.953925][T16210] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10566'. [ 1398.102480][T16220] netlink: 'syz.1.10569': attribute type 1 has an invalid length. [ 1398.303902][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1398.315391][T16220] bond9: entered promiscuous mode [ 1398.320938][T16220] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1398.462680][T14608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1398.512161][T14608] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1398.590734][T16257] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10575'. [ 1398.828212][T16194] lo speed is unknown, defaulting to 1000 [ 1398.847562][T16194] lo speed is unknown, defaulting to 1000 [ 1398.862261][T15416] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1399.269318][T16295] netlink: 244 bytes leftover after parsing attributes in process `syz.3.10585'. [ 1399.343695][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1399.452520][T16300] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10586'. [ 1399.797570][T16326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10594'. [ 1399.870843][T16336] netlink: 'syz.4.10597': attribute type 39 has an invalid length. [ 1399.964005][T16326] vlan0: entered promiscuous mode [ 1400.099220][ T6649] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1400.146743][ T6649] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1400.203350][T16348] netlink: 'syz.3.10599': attribute type 10 has an invalid length. [ 1400.244583][T16348] netlink: 228 bytes leftover after parsing attributes in process `syz.3.10599'. [ 1400.284757][T16350] netlink: 'syz.3.10599': attribute type 10 has an invalid length. [ 1400.317321][T16350] netlink: 228 bytes leftover after parsing attributes in process `syz.3.10599'. [ 1400.372640][ T8327] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1400.389574][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1400.564342][T16363] netlink: 'syz.3.10602': attribute type 2 has an invalid length. [ 1400.601997][T16363] netlink: 'syz.3.10602': attribute type 1 has an invalid length. [ 1400.611419][T16363] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10602'. [ 1400.668712][T16368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10601'. [ 1400.784103][T16370] ip6tnl2: entered allmulticast mode [ 1400.908924][T16376] netlink: 'syz.3.10604': attribute type 27 has an invalid length. [ 1401.424116][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1401.503149][T14603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1401.868588][T16418] hsr_slave_0: left promiscuous mode [ 1401.909473][T16418] hsr_slave_1: left promiscuous mode [ 1402.016114][T16424] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1402.108317][T16420] syzkaller0: entered promiscuous mode [ 1402.139712][T16420] syzkaller0: entered allmulticast mode [ 1402.372630][T16444] sctp: [Deprecated]: syz.1.10624 (pid 16444) Use of int in max_burst socket option. [ 1402.372630][T16444] Use struct sctp_assoc_value instead [ 1402.400485][T16449] IPVS: set_ctl: invalid protocol: 33 224.0.0.1:20001 [ 1402.463414][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1402.473371][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1402.515727][T16453] netlink: 'syz.4.10627': attribute type 7 has an invalid length. [ 1402.524722][T16453] netlink: 'syz.4.10627': attribute type 8 has an invalid length. [ 1402.582064][T16453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1402.593225][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1402.607308][T16453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1402.615807][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1402.632006][T16453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1402.640544][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1402.663304][T16453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1402.671721][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1402.686272][T16453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1402.721679][T16457] __nla_validate_parse: 7 callbacks suppressed [ 1402.721700][T16457] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10629'. [ 1402.800704][T16464] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1402.876991][T16464] bond2 (unregistering): Released all slaves [ 1403.072474][T16476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10634'. [ 1403.091505][T16478] ip6tnl1: entered allmulticast mode [ 1403.113377][ T6646] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1403.124680][T16479] netlink: 80 bytes leftover after parsing attributes in process `syz.2.10635'. [ 1403.128366][ T6646] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1403.142084][T14608] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1403.162100][ T5741] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1403.500275][T16493] tls_set_device_offload: netdev not found [ 1403.509750][T14603] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1403.588671][T16500] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10641'. [ 1403.679003][T16506] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10641'. [ 1404.142064][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1407.583316][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1407.592338][ C0] net_ratelimit: 525 callbacks suppressed [ 1407.592351][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.607607][T14603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.662141][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1408.702267][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1409.742332][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.625905][T14603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.782310][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.822142][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1412.062090][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1412.862344][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1413.664851][T14603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1413.902591][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.622580][T14603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.942242][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.982205][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.542206][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1416.703652][T14603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.022416][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.062176][T13059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1419.103627][T13059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1419.742848][T14603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.142922][T13059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1421.182245][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.222407][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.661776][T16525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10648'. [ 1422.710996][T16538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10651'. [ 1422.737345][T16536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10652'. [ 1422.753072][T16536] netlink: 'syz.4.10652': attribute type 9 has an invalid length. [ 1422.785019][T13990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.799002][T16532] ip6gre2: entered promiscuous mode [ 1422.822162][T16532] ip6gre2: entered allmulticast mode [ 1422.825084][T16541] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1422.851230][T16544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.861015][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.896154][T16544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.974673][T16546] geneve0: Caught tx_queue_len zero misconfig [ 1422.986168][ T6600] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1423.010010][ T6600] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1423.049286][ T6600] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1423.074155][ T8327] net_ratelimit: 15 callbacks suppressed [ 1423.074173][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.089456][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.125450][ T6600] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1423.264064][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.411559][T16574] netlink: 'syz.4.10658': attribute type 13 has an invalid length. [ 1423.413809][T16572] netlink: 'syz.4.10658': attribute type 13 has an invalid length. [ 1423.428809][T16574] netlink: 'syz.4.10658': attribute type 17 has an invalid length. [ 1423.429288][T16572] netlink: 'syz.4.10658': attribute type 17 has an invalid length. [ 1423.482850][T16577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10659'. [ 1423.505221][T16571] tipc: Resetting bearer [ 1423.599338][T16577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10659'. [ 1423.617248][T16587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10661'. [ 1423.690677][T16571] ip6gretap0: left allmulticast mode [ 1423.711340][T16577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10659'. [ 1423.780612][T16574] ip6gretap0: left promiscuous mode [ 1423.814541][T16574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1423.822777][T16574] 8021q: adding VLAN 0 to HW filter on device team0 [ 1423.833924][T16574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1423.847984][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.857514][ T6600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.865657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.875608][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.888922][ T6649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.898080][ T6600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.909983][T13990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.980858][T15418] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1423.997240][T15418] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1424.007927][ T5741] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1424.041032][T15416] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1424.061129][T15416] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.071787][T15416] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1424.080379][T15416] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.090396][T15416] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1424.099110][T15416] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.153662][T16602] x_tables: duplicate underflow at hook 2 [ 1424.171580][T15416] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1424.196899][T15416] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.287566][T16607] netlink: 'syz.2.10665': attribute type 8 has an invalid length. [ 1424.474051][T16619] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1424.492143][ T29] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1424.570996][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10671'. [ 1424.592246][T16627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10671'. [ 1424.611576][T16627] netlink: 'syz.1.10671': attribute type 12 has an invalid length. [ 1424.715443][T15418] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1424.724251][T15418] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1424.739703][T15418] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1424.754849][T15418] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1424.770496][T16633] netlink: 'syz.3.10675': attribute type 8 has an invalid length. [ 1424.782316][ T29] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1425.124002][T16653] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10681'. [ 1425.412620][T16673] team_slave_1: Caught tx_queue_len zero misconfig [ 1425.457582][T16675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1425.499626][T16675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1425.538616][T16675] batman_adv: batadv0: Removing interface: macsec2 [ 1425.556336][T16675] batman_adv: batadv0: Removing interface: macvtap3 [ 1426.651394][T16719] syzkaller0: entered promiscuous mode [ 1426.685170][T16719] syzkaller0: entered allmulticast mode [ 1426.735326][T16722] geneve2: entered promiscuous mode [ 1427.254057][T16689] lo speed is unknown, defaulting to 1000 [ 1427.261532][T16689] lo speed is unknown, defaulting to 1000 [ 1427.291290][T16742] tipc: Enabled bearer , priority 0 [ 1427.519459][T16758] xt_hashlimit: size too large, truncated to 1048576 [ 1427.603648][T16742] tipc: Resetting bearer [ 1427.937614][T16778] __nla_validate_parse: 70 callbacks suppressed [ 1427.937633][T16778] netlink: 204 bytes leftover after parsing attributes in process `syz.4.10704'. [ 1428.065039][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1428.137363][T16788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10706'. [ 1428.222080][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1428.877254][T16819] FAULT_INJECTION: forcing a failure. [ 1428.877254][T16819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1428.902527][T16823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10714'. [ 1428.919315][T16819] CPU: 1 UID: 0 PID: 16819 Comm: syz.3.10712 Not tainted syzkaller #0 PREEMPT(full) [ 1428.919341][T16819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1428.919357][T16819] Call Trace: [ 1428.919365][T16819] [ 1428.919376][T16819] dump_stack_lvl+0xe8/0x150 [ 1428.919403][T16819] should_fail_ex+0x412/0x560 [ 1428.919430][T16819] _copy_from_user+0x2d/0xb0 [ 1428.919453][T16819] __sys_bpf+0x229/0x950 [ 1428.919513][T16819] ? __pfx___sys_bpf+0x10/0x10 [ 1428.919552][T16819] ? ksys_write+0x242/0x270 [ 1428.919577][T16819] ? __pfx_ksys_write+0x10/0x10 [ 1428.919605][T16819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.919625][T16819] __x64_sys_bpf+0x7c/0x90 [ 1428.919650][T16819] do_syscall_64+0x174/0x580 [ 1428.919669][T16819] ? trace_irq_disable+0x3b/0x140 [ 1428.919694][T16819] ? clear_bhb_loop+0x40/0x90 [ 1428.919717][T16819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.919734][T16819] RIP: 0033:0x7f939619ce59 [ 1428.919751][T16819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1428.919767][T16819] RSP: 002b:00007f9397104028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1428.919786][T16819] RAX: ffffffffffffffda RBX: 00007f9396415fa0 RCX: 00007f939619ce59 [ 1428.919799][T16819] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 1428.919811][T16819] RBP: 00007f9397104090 R08: 0000000000000000 R09: 0000000000000000 [ 1428.919823][T16819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1428.919834][T16819] R13: 00007f9396416038 R14: 00007f9396415fa0 R15: 00007ffe2b152c78 [ 1428.919864][T16819] [ 1429.082937][T16823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10714'. [ 1429.131205][T16830] x_tables: duplicate underflow at hook 3 [ 1429.162311][ T29] net_ratelimit: 18 callbacks suppressed [ 1429.162328][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.237876][T16823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10714'. [ 1429.273291][T16823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10714'. [ 1429.345010][ T6648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.354421][T14603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.365110][T13991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.386843][T16842] netlink: 220 bytes leftover after parsing attributes in process `syz.4.10718'. [ 1429.399704][T16842] netlink: 'syz.4.10718': attribute type 2 has an invalid length. [ 1429.568812][T16823] syzkaller1: entered promiscuous mode [ 1429.574889][T16823] syzkaller1: entered allmulticast mode [ 1429.657056][T16851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10719'. [ 1429.672717][T16851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10719'. [ 1429.820282][T16861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10723'. [ 1429.829704][T16861] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1429.909115][T16867] FAULT_INJECTION: forcing a failure. [ 1429.909115][T16867] name failslab, interval 1, probability 0, space 0, times 0 [ 1429.946855][T16867] CPU: 1 UID: 0 PID: 16867 Comm: syz.3.10725 Not tainted syzkaller #0 PREEMPT(full) [ 1429.946878][T16867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1429.946888][T16867] Call Trace: [ 1429.946896][T16867] [ 1429.946903][T16867] dump_stack_lvl+0xe8/0x150 [ 1429.946930][T16867] should_fail_ex+0x412/0x560 [ 1429.946956][T16867] should_failslab+0xa8/0x100 [ 1429.946976][T16867] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 1429.947002][T16867] ? __get_vm_area_node+0x13f/0x300 [ 1429.947030][T16867] __get_vm_area_node+0x13f/0x300 [ 1429.947055][T16867] __vmalloc_node_range_noprof+0x36a/0x1750 [ 1429.947078][T16867] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1429.947106][T16867] ? __lock_acquire+0x6b5/0x2cf0 [ 1429.947148][T16867] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1429.947172][T16867] ? __lock_acquire+0x6b5/0x2cf0 [ 1429.947193][T16867] ? _parse_integer_limit+0x1ae/0x1f0 [ 1429.947224][T16867] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1429.947241][T16867] __vmalloc_noprof+0xd2/0x120 [ 1429.947263][T16867] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1429.947283][T16867] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1429.947305][T16867] bpf_prog_alloc+0x3c/0x1a0 [ 1429.947324][T16867] bpf_prog_load+0x779/0x1a10 [ 1429.947353][T16867] ? __pfx_bpf_prog_load+0x10/0x10 [ 1429.947371][T16867] ? __might_fault+0xaf/0x130 [ 1429.947405][T16867] ? bpf_lsm_bpf+0x9/0x20 [ 1429.947421][T16867] ? security_bpf+0x7e/0x2d0 [ 1429.947521][T16867] __sys_bpf+0x618/0x950 [ 1429.947547][T16867] ? __pfx___sys_bpf+0x10/0x10 [ 1429.947586][T16867] ? ksys_write+0x242/0x270 [ 1429.947612][T16867] ? __pfx_ksys_write+0x10/0x10 [ 1429.947641][T16867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.947660][T16867] __x64_sys_bpf+0x7c/0x90 [ 1429.947683][T16867] do_syscall_64+0x174/0x580 [ 1429.947702][T16867] ? trace_irq_disable+0x3b/0x140 [ 1429.947727][T16867] ? clear_bhb_loop+0x40/0x90 [ 1429.947747][T16867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.947764][T16867] RIP: 0033:0x7f939619ce59 [ 1429.947782][T16867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1429.947797][T16867] RSP: 002b:00007f9397104028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1429.947814][T16867] RAX: ffffffffffffffda RBX: 00007f9396415fa0 RCX: 00007f939619ce59 [ 1429.947825][T16867] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 1429.947835][T16867] RBP: 00007f9397104090 R08: 0000000000000000 R09: 0000000000000000 [ 1429.947848][T16867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1429.947858][T16867] R13: 00007f9396416038 R14: 00007f9396415fa0 R15: 00007ffe2b152c78 [ 1429.947883][T16867] [ 1429.981978][T16867] syz.3.10725: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 1430.217610][T14603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1430.231566][T16867] ,cpuset= [ 1430.240124][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1430.251500][T16867] /,mems_allowed=0-1 [ 1430.255997][T16873] syzkaller0: Caught tx_queue_len zero misconfig [ 1430.256490][T16867] CPU: 0 UID: 0 PID: 16867 Comm: syz.3.10725 Not tainted syzkaller #0 PREEMPT(full) [ 1430.256512][T16867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1430.256522][T16867] Call Trace: [ 1430.256530][T16867] [ 1430.256537][T16867] dump_stack_lvl+0xe8/0x150 [ 1430.256562][T16867] warn_alloc+0x249/0x340 [ 1430.256593][T16867] ? __pfx_warn_alloc+0x10/0x10 [ 1430.256618][T16867] ? __get_vm_area_node+0x13f/0x300 [ 1430.256648][T16867] ? __get_vm_area_node+0x2b5/0x300 [ 1430.256676][T16867] __vmalloc_node_range_noprof+0x38f/0x1750 [ 1430.256703][T16867] ? __lock_acquire+0x6b5/0x2cf0 [ 1430.256743][T16867] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1430.256767][T16867] ? __lock_acquire+0x6b5/0x2cf0 [ 1430.256788][T16867] ? _parse_integer_limit+0x1ae/0x1f0 [ 1430.256819][T16867] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1430.256835][T16867] __vmalloc_noprof+0xd2/0x120 [ 1430.256857][T16867] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1430.256877][T16867] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1430.256898][T16867] bpf_prog_alloc+0x3c/0x1a0 [ 1430.256918][T16867] bpf_prog_load+0x779/0x1a10 [ 1430.256945][T16867] ? __pfx_bpf_prog_load+0x10/0x10 [ 1430.256962][T16867] ? __might_fault+0xaf/0x130 [ 1430.256998][T16867] ? bpf_lsm_bpf+0x9/0x20 [ 1430.257013][T16867] ? security_bpf+0x7e/0x2d0 [ 1430.257043][T16867] __sys_bpf+0x618/0x950 [ 1430.257070][T16867] ? __pfx___sys_bpf+0x10/0x10 [ 1430.257108][T16867] ? ksys_write+0x242/0x270 [ 1430.257134][T16867] ? __pfx_ksys_write+0x10/0x10 [ 1430.257162][T16867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1430.257182][T16867] __x64_sys_bpf+0x7c/0x90 [ 1430.257205][T16867] do_syscall_64+0x174/0x580 [ 1430.257223][T16867] ? trace_irq_disable+0x3b/0x140 [ 1430.257245][T16867] ? clear_bhb_loop+0x40/0x90 [ 1430.257266][T16867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1430.257284][T16867] RIP: 0033:0x7f939619ce59 [ 1430.257301][T16867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1430.257315][T16867] RSP: 002b:00007f9397104028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1430.257334][T16867] RAX: ffffffffffffffda RBX: 00007f9396415fa0 RCX: 00007f939619ce59 [ 1430.257346][T16867] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 1430.257357][T16867] RBP: 00007f9397104090 R08: 0000000000000000 R09: 0000000000000000 [ 1430.257369][T16867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1430.257379][T16867] R13: 00007f9396416038 R14: 00007f9396415fa0 R15: 00007ffe2b152c78 [ 1430.257407][T16867] [ 1430.261157][T16867] Mem-Info: [ 1430.536089][T16867] active_anon:7523 inactive_anon:6 isolated_anon:0 [ 1430.536089][T16867] active_file:3024 inactive_file:40813 isolated_file:0 [ 1430.536089][T16867] unevictable:768 dirty:155 writeback:0 [ 1430.536089][T16867] slab_reclaimable:12910 slab_unreclaimable:181705 [ 1430.536089][T16867] mapped:29653 shmem:1434 pagetables:1448 [ 1430.536089][T16867] sec_pagetables:0 bounce:0 [ 1430.536089][T16867] kernel_misc_reclaimable:0 [ 1430.536089][T16867] free:1213958 free_pcp:24498 free_cma:0 [ 1430.581705][T16867] Node 0 active_anon:30092kB inactive_anon:24kB active_file:12096kB inactive_file:163040kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20308kB dirty:620kB writeback:0kB shmem:4200kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15924kB pagetables:5652kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1430.618740][T16867] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98304kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1430.662120][T16867] Node 0 DMA free:11136kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:128kB local_pcp:56kB free_cma:0kB [ 1430.702682][T16867] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1430.709422][T16867] Node 0 DMA32 free:1331284kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29808kB inactive_anon:24kB active_file:12096kB inactive_file:163040kB unevictable:1536kB writepending:660kB zspages:0kB present:3129332kB managed:2552608kB mlocked:0kB bounce:0kB free_pcp:40140kB local_pcp:21292kB free_cma:0kB [ 1430.754223][T16867] lowmem_reserve[]: 0 0 0 0 0 [ 1430.767556][T16867] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1430.798226][T16867] lowmem_reserve[]: 0 0 0 0 0 [ 1430.805769][T16867] Node 1 Normal free:3513812kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:57620kB local_pcp:28840kB free_cma:0kB [ 1430.888922][T16867] lowmem_reserve[]: 0 0 0 0 0 [ 1430.898542][T16867] Node 0 DMA: 0*4kB 2*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11136kB [ 1430.903046][T16896] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1430.950275][T16896] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1430.951892][T16867] Node 0 DMA32: 7797*4kB (UM) 8593*8kB (UM) 6006*16kB (UME) 405*32kB (UME) 790*64kB (UME) 248*128kB (UME) 868*256kB (UM) 514*512kB (UME) 308*1024kB (UME) 117*2048kB (UM) 0*4096kB = 1331676kB [ 1431.057642][T16867] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1431.069584][T16867] Node 1 Normal: 6*4kB (U) 8*8kB (UM) 13*16kB (UM) 5*32kB (UM) 15*64kB (UM) 11*128kB (UM) 9*256kB (UM) 7*512kB (UM) 7*1024kB (UM) 6*2048kB (U) 851*4096kB (UM) = 3513864kB [ 1431.114955][T16867] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1431.142799][T16867] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1431.155477][T16903] netlink: 'syz.1.10736': attribute type 1 has an invalid length. [ 1431.156338][T16867] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1431.173863][T16867] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1431.183235][T16867] 45267 total pagecache pages [ 1431.212431][T16867] 0 pages in swap cache [ 1431.222727][T16867] Free swap = 124996kB [ 1431.229741][T16867] Total swap = 124996kB [ 1431.239695][T16867] 2097051 pages RAM [ 1431.246565][T16903] bond10: entered promiscuous mode [ 1431.247127][T16867] 0 pages HighMem/MovableOnly [ 1431.255370][T16903] bond10: entered allmulticast mode [ 1431.262579][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.269515][T16867] 427116 pages reserved [ 1431.296651][T16903] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1431.302045][T16867] 0 pages cma reserved [ 1431.669653][T16918] erspan1: entered allmulticast mode [ 1431.707045][T16918] bond10: (slave erspan1): making interface the new active one [ 1431.730888][T16918] erspan1: entered promiscuous mode [ 1431.764489][T16918] bond10: (slave erspan1): Enslaving as an active interface with an up link [ 1431.980115][T16937] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 1431.994069][T16937] bond2 (unregistering): Released all slaves [ 1432.037859][T16945] block nbd3: Unsupported socket: should be TCP or UNIX. [ 1432.238199][T16938] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 1432.255949][T16938] bond2 (unregistering): Released all slaves [ 1432.897556][T16987] erspan0: left promiscuous mode [ 1432.947524][T16987] bridge0: port 3(bond0) entered blocking state [ 1432.953973][T16987] bridge0: port 3(bond0) entered listening state [ 1432.960905][T16987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1432.970754][T16987] 8021q: adding VLAN 0 to HW filter on device team0 [ 1432.980595][T16987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1433.014265][T16987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1433.027503][T16987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1433.039739][T16987] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1433.050592][T16987] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1433.131312][ T6644] bridge0: port 2(bridge_slave_1) entered blocking state [ 1433.138599][ T6644] bridge0: port 2(bridge_slave_1) entered listening state [ 1433.347679][T16995] __nla_validate_parse: 5 callbacks suppressed [ 1433.347698][T16995] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10758'. [ 1433.376094][T16994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10759'. [ 1433.393943][T16995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10758'. [ 1433.428549][T16995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10758'. [ 1433.653350][T17015] netlink: 'syz.4.10764': attribute type 1 has an invalid length. [ 1433.822085][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1434.173800][T17046] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10771'. [ 1434.384412][ T8327] net_ratelimit: 8 callbacks suppressed [ 1434.384429][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.496996][T17063] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10777'. [ 1434.517949][T17063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.526600][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.771748][T17079] sctp: [Deprecated]: syz.0.10782 (pid 17079) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1434.771748][T17079] Use struct sctp_sack_info instead [ 1434.787894][T17081] bridge6: entered promiscuous mode [ 1434.794834][T17081] bridge6: entered allmulticast mode [ 1434.804549][T17081] team0: Port device bridge6 added [ 1434.815163][T17081] bridge0: port 3(team0) entered blocking state [ 1434.822499][T17081] bridge0: port 3(team0) entered disabled state [ 1434.829147][T17081] team0: entered allmulticast mode [ 1434.836398][T17081] team_slave_0: entered allmulticast mode [ 1434.852060][T17081] team_slave_1: entered allmulticast mode [ 1434.858175][T17081] bridge0: entered allmulticast mode [ 1434.875894][T17081] team0: left allmulticast mode [ 1434.880856][T17081] team_slave_0: left allmulticast mode [ 1434.888424][T17081] team_slave_1: left allmulticast mode [ 1434.894751][T17081] bridge0: left allmulticast mode [ 1434.922984][T17089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10785'. [ 1435.112435][T15416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.123793][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.142879][T13991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.194147][T17105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10790'. [ 1435.203891][T17102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10789'. [ 1435.215393][T17105] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10790'. [ 1435.422269][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.808923][T17134] can: request_module (can-proto-3) failed. [ 1436.052193][T17148] tipc: Started in network mode [ 1436.065241][T17148] tipc: Node identity 32b8f8ceb1da, cluster identity 4711 [ 1436.088256][T17148] tipc: Enabled bearer , priority 0 [ 1436.219009][T17154] syzkaller0: entered promiscuous mode [ 1436.231645][T17154] syzkaller0: entered allmulticast mode [ 1436.242534][T17154] tipc: Resetting bearer [ 1436.290991][T17147] tipc: Resetting bearer [ 1436.302797][T13991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1436.399773][T17153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1436.418034][T17153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.030718][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1438.877119][T17147] tipc: Disabling bearer [ 1438.886643][T17161] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1438.887195][T14603] tipc: Node number set to 2204301518 [ 1438.902081][T17160] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1438.911432][T17160] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1438.922154][T17160] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1439.582445][ T29] net_ratelimit: 309 callbacks suppressed [ 1439.582464][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1440.622164][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1441.662279][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1442.392323][T13991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1442.702250][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1443.742263][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1444.702954][T14603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1444.782364][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.422350][T14603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.822294][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1446.862160][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.903508][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.463815][T14603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.543217][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1448.546575][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1448.559501][ C0] bridge0: port 3(bond0) entered learning state [ 1448.942245][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1449.982159][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.022231][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.502592][T14603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.062219][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1453.102261][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1454.142205][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1454.303955][T14603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1454.542259][T14603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1454.942258][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1455.182365][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.530772][T17174] __nla_validate_parse: 4 callbacks suppressed [ 1455.530791][T17174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10806'. [ 1455.563553][T17179] netlink: 'syz.2.10805': attribute type 1 has an invalid length. [ 1455.580713][T17174] netlink: 112 bytes leftover after parsing attributes in process `syz.3.10806'. [ 1455.594142][T17176] netlink: 'syz.2.10805': attribute type 1 has an invalid length. [ 1455.600441][T17179] netlink: 'syz.2.10805': attribute type 2 has an invalid length. [ 1455.610425][T17179] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10805'. [ 1455.635324][T17176] netlink: 'syz.2.10805': attribute type 2 has an invalid length. [ 1455.652752][T17176] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10805'. [ 1455.789219][T17189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1455.855425][T17189] netlink: 156 bytes leftover after parsing attributes in process `syz.1.10804'. [ 1455.894766][T17202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10812'. [ 1456.205151][T17221] netlink: 'syz.0.10817': attribute type 1 has an invalid length. [ 1456.215543][T17224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.223700][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.241417][T17227] netlink: 67 bytes leftover after parsing attributes in process `syz.3.10819'. [ 1456.245331][T17224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.259282][T17224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.279989][T17224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.290996][T17227] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1456.320798][T17224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.329688][T17224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.363688][T17224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.444049][T17233] bond8: Unable to set up delay as MII monitoring is disabled [ 1456.456537][T17233] bond8 (unregistering): Released all slaves [ 1456.596836][T17245] netlink: 67 bytes leftover after parsing attributes in process `syz.1.10824'. [ 1456.769536][T17259] netlink: 120 bytes leftover after parsing attributes in process `syz.1.10829'. [ 1457.035228][T17273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10833'. [ 1457.193300][T17294] tipc: Resetting bearer [ 1457.221814][T17294] tipc: Disabling bearer [ 1457.467284][T17313] syz.1.10842: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1457.496408][T17313] CPU: 0 UID: 0 PID: 17313 Comm: syz.1.10842 Not tainted syzkaller #0 PREEMPT(full) [ 1457.496456][T17313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1457.496479][T17313] Call Trace: [ 1457.496487][T17313] [ 1457.496496][T17313] dump_stack_lvl+0xe8/0x150 [ 1457.496525][T17313] warn_alloc+0x249/0x340 [ 1457.496553][T17313] ? stack_trace_save+0xa9/0x100 [ 1457.496583][T17313] ? __pfx_warn_alloc+0x10/0x10 [ 1457.496614][T17313] ? kasan_save_track+0x4f/0x80 [ 1457.496637][T17313] ? kasan_save_track+0x3e/0x80 [ 1457.496658][T17313] ? __kasan_kmalloc+0x93/0xb0 [ 1457.496681][T17313] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1457.496703][T17313] ? xskq_create+0x56/0x170 [ 1457.496728][T17313] ? xsk_setsockopt+0x54c/0x990 [ 1457.496748][T17313] ? do_sock_setsockopt+0x17c/0x1b0 [ 1457.496766][T17313] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1457.496782][T17313] ? do_syscall_64+0x174/0x580 [ 1457.496803][T17313] __vmalloc_node_range_noprof+0x132/0x1750 [ 1457.496855][T17313] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1457.496887][T17313] ? __kasan_kmalloc+0x93/0xb0 [ 1457.496917][T17313] vmalloc_user_noprof+0xad/0xe0 [ 1457.496940][T17313] ? xskq_create+0xbf/0x170 [ 1457.496965][T17313] xskq_create+0xbf/0x170 [ 1457.496992][T17313] xsk_init_queue+0x8a/0xe0 [ 1457.497018][T17313] xsk_setsockopt+0x54c/0x990 [ 1457.497043][T17313] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1457.497065][T17313] ? __pfx_aa_sk_perm+0x10/0x10 [ 1457.497093][T17313] ? aa_sock_opt_perm+0xff/0x1a0 [ 1457.497120][T17313] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1457.497148][T17313] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1457.497172][T17313] do_sock_setsockopt+0x17c/0x1b0 [ 1457.497197][T17313] __x64_sys_setsockopt+0x13d/0x1b0 [ 1457.497219][T17313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.497239][T17313] do_syscall_64+0x174/0x580 [ 1457.497256][T17313] ? trace_irq_disable+0x3b/0x140 [ 1457.497281][T17313] ? clear_bhb_loop+0x40/0x90 [ 1457.497303][T17313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.497321][T17313] RIP: 0033:0x7f07aab9ce59 [ 1457.497338][T17313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1457.497353][T17313] RSP: 002b:00007f07aba9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1457.497373][T17313] RAX: ffffffffffffffda RBX: 00007f07aae15fa0 RCX: 00007f07aab9ce59 [ 1457.497392][T17313] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 1457.497404][T17313] RBP: 00007f07aac32d6f R08: 0000000000000004 R09: 0000000000000000 [ 1457.497415][T17313] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1457.497426][T17313] R13: 00007f07aae16038 R14: 00007f07aae15fa0 R15: 00007ffca06a3cf8 [ 1457.497458][T17313] [ 1457.497524][T17313] Mem-Info: [ 1457.556141][T17316] netlink: 'syz.2.10843': attribute type 6 has an invalid length. [ 1457.557753][T17313] active_anon:7422 inactive_anon:6 isolated_anon:0 [ 1457.557753][T17313] active_file:3024 inactive_file:40821 isolated_file:0 [ 1457.557753][T17313] unevictable:768 dirty:69 writeback:0 [ 1457.557753][T17313] slab_reclaimable:12937 slab_unreclaimable:180984 [ 1457.557753][T17313] mapped:29688 shmem:1459 pagetables:1417 [ 1457.557753][T17313] sec_pagetables:0 bounce:0 [ 1457.557753][T17313] kernel_misc_reclaimable:0 [ 1457.557753][T17313] free:1215007 free_pcp:24040 free_cma:0 [ 1457.570126][T17316] netlink: 'syz.2.10843': attribute type 5 has an invalid length. [ 1457.573314][T17313] Node 0 active_anon:29688kB inactive_anon:24kB active_file:12096kB inactive_file:163072kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20448kB dirty:276kB writeback:0kB shmem:4300kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15844kB pagetables:5528kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1457.592757][T17317] netlink: 'syz.2.10843': attribute type 6 has an invalid length. [ 1457.601447][T17313] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98304kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1457.652086][T17317] netlink: 'syz.2.10843': attribute type 5 has an invalid length. [ 1457.655045][T17313] Node 0 DMA free:11136kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:128kB local_pcp:72kB free_cma:0kB [ 1457.975453][T17313] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1457.981377][T17313] Node 0 DMA32 free:1332808kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29672kB inactive_anon:24kB active_file:12096kB inactive_file:163072kB unevictable:1536kB writepending:296kB zspages:0kB present:3129332kB managed:2552608kB mlocked:0kB bounce:0kB free_pcp:40728kB local_pcp:20108kB free_cma:0kB [ 1458.047880][T17313] lowmem_reserve[]: 0 0 0 0 0 [ 1458.053051][T17313] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1458.083440][T17313] lowmem_reserve[]: 0 0 0 0 0 [ 1458.088983][T17313] Node 1 Normal free:3516080kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:55352kB local_pcp:28780kB free_cma:0kB [ 1458.095250][T17329] netlink: 'syz.0.10848': attribute type 1 has an invalid length. [ 1458.122758][T17313] lowmem_reserve[]: 0 0 0 0 0 [ 1458.135890][T17313] Node 0 DMA: 0*4kB 2*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11136kB [ 1458.151167][T17313] Node 0 DMA32: 7553*4kB (UME) 9018*8kB (UM) 5880*16kB (UME) 514*32kB (UME) 756*64kB (UME) 277*128kB (UME) 869*256kB (UM) 513*512kB (UME) 308*1024kB (UME) 115*2048kB (UM) 0*4096kB = 1332756kB [ 1458.181646][T17313] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1458.194858][T17329] bond8: entered promiscuous mode [ 1458.200367][T17329] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1458.202301][T17313] Node 1 Normal: 7*4kB (U) 7*8kB (UM) 13*16kB (UM) 4*32kB (UM) 15*64kB (UM) 11*128kB (UM) 8*256kB (UM) 6*512kB (UM) 6*1024kB (UM) 6*2048kB (U) 852*4096kB (UM) = 3516132kB [ 1458.227572][T17313] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1458.237601][T17313] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1458.249318][T17313] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1458.259215][T17313] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1458.268726][T17313] 45625 total pagecache pages [ 1458.273677][T17313] 0 pages in swap cache [ 1458.274320][T17331] bond8: (slave bridge5): making interface the new active one [ 1458.277852][T17313] Free swap = 124996kB [ 1458.277863][T17313] Total swap = 124996kB [ 1458.277873][T17313] 2097051 pages RAM [ 1458.277881][T17313] 0 pages HighMem/MovableOnly [ 1458.277889][T17313] 427116 pages reserved [ 1458.300335][T17331] bridge5: entered promiscuous mode [ 1458.302826][T17313] 0 pages cma reserved [ 1458.317512][T17331] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 1458.581066][T17347] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1459.372852][T17371] vlan3: entered allmulticast mode [ 1459.386898][T17371] bond0: entered allmulticast mode [ 1459.411650][T17378] tipc: Enabling of bearer rejected, failed to enable media [ 1460.110398][T17423] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1460.375098][T17433] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1460.382714][ T29] net_ratelimit: 9 callbacks suppressed [ 1460.382730][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1460.398357][T17434] bond9: entered allmulticast mode [ 1460.577445][T17448] __nla_validate_parse: 20 callbacks suppressed [ 1460.577463][T17448] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10881'. [ 1460.632019][T13990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1460.721456][T17456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10882'. [ 1460.921412][T17469] mac80211_hwsim hwsim116 syzkaller0: entered promiscuous mode [ 1460.962086][T17469] mac80211_hwsim hwsim116 syzkaller0: entered allmulticast mode [ 1461.019813][T17472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10887'. [ 1461.045746][T17430] lo speed is unknown, defaulting to 1000 [ 1461.056237][T17430] lo speed is unknown, defaulting to 1000 [ 1461.065225][T17472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10887'. [ 1461.179078][T17476] syzkaller1: entered promiscuous mode [ 1461.195258][T17478] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10888'. [ 1461.209175][T17476] syzkaller1: entered allmulticast mode [ 1461.296544][T17478] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10888'. [ 1461.343041][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1461.423628][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1461.495836][T17486] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.10889'. [ 1461.505764][T17478] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10888'. [ 1461.906951][T17501] batadv_slave_1: entered promiscuous mode [ 1461.924253][T17500] batadv_slave_1: left promiscuous mode [ 1462.139001][T17511] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10895'. [ 1462.164956][T17510] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10895'. [ 1462.467473][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1462.523910][T17519] tipc: Enabled bearer , priority 0 [ 1462.686353][T17522] validate_nla: 3 callbacks suppressed [ 1462.686373][T17522] netlink: 'syz.1.10900': attribute type 4 has an invalid length. [ 1462.821407][T17517] tipc: Disabling bearer [ 1462.959346][T17552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1463.033480][T17546] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1463.046213][T17551] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1463.165051][T17565] netlink: 'syz.0.10911': attribute type 1 has an invalid length. [ 1463.279701][T17570] netlink: 'syz.3.10913': attribute type 21 has an invalid length. [ 1463.288589][T17570] netlink: 'syz.3.10913': attribute type 22 has an invalid length. [ 1463.297111][T17570] netlink: 'syz.3.10913': attribute type 23 has an invalid length. [ 1463.504457][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1463.672079][T14603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1463.716686][T17599] netlink: 'syz.3.10919': attribute type 8 has an invalid length. [ 1463.755993][T17599] sch_fq: defrate 0 ignored. [ 1463.905939][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1463.913221][ C1] bridge0: topology change detected, propagating [ 1463.919892][ C0] bridge0: port 3(bond0) entered forwarding state [ 1463.926357][ C0] bridge0: topology change detected, propagating [ 1463.937597][T14603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.194029][T17619] bond0: Caught tx_queue_len zero misconfig [ 1464.538692][T17635] netlink: 'syz.4.10927': attribute type 1 has an invalid length. [ 1464.547362][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.676845][T17635] bond5: (slave dummy0): making interface the new active one [ 1464.715641][T17635] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 1464.726118][T17644] bond5: entered promiscuous mode [ 1464.780440][T17644] dummy0: entered promiscuous mode [ 1464.942915][T17635] bond5: (slave dummy0): Releasing active interface [ 1464.952528][T17635] dummy0: left promiscuous mode [ 1464.996756][T17635] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1465.069274][T17634] bond5: left promiscuous mode [ 1465.152237][T17653] bridge_slave_1: Caught tx_queue_len zero misconfig [ 1465.166437][T17653] sch_fq: defrate 8 ignored. [ 1465.181813][T17655] netlink: 'syz.2.10935': attribute type 4 has an invalid length. [ 1465.226909][T17655] netlink: 'syz.2.10935': attribute type 4 has an invalid length. [ 1465.255853][T17653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1465.265472][T17653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1465.404167][T14603] net_ratelimit: 2 callbacks suppressed [ 1465.404185][T14603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1465.443117][T17670] netlink: 'syz.4.10938': attribute type 4 has an invalid length. [ 1465.462183][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1465.519486][T17682] tipc: Enabled bearer , priority 0 [ 1465.601502][T17685] __nla_validate_parse: 9 callbacks suppressed [ 1465.601519][T17685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10942'. [ 1465.760494][T17697] sctp: [Deprecated]: syz.3.10946 (pid 17697) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1465.760494][T17697] Use struct sctp_sack_info instead [ 1465.877528][T17704] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10947'. [ 1466.145650][T17719] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1466.380234][T17728] bond2: entered promiscuous mode [ 1466.387080][T17728] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1466.423024][T17710] lo speed is unknown, defaulting to 1000 [ 1466.449166][T17710] lo speed is unknown, defaulting to 1000 [ 1466.580869][T17743] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 1466.622931][T17743] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 1466.884794][T17756] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1467.028903][T17761] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10960'. [ 1467.072933][T17758] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10961'. [ 1467.082701][T17758] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10961'. [ 1467.102073][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1467.855619][T17773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10966'. [ 1467.890618][T17773] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1468.205105][T17800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10971'. [ 1468.313757][T17807] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 1468.736461][T17836] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10981'. [ 1468.738491][T17833] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10983'. [ 1468.757128][T17834] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10981'. [ 1469.413995][T17874] x_tables: duplicate entry at hook 2 [ 1469.753505][T17897] validate_nla: 4 callbacks suppressed [ 1469.753524][T17897] netlink: 'syz.4.11000': attribute type 21 has an invalid length. [ 1469.769250][T17897] netlink: 'syz.4.11000': attribute type 22 has an invalid length. [ 1469.778033][T17897] netlink: 'syz.4.11000': attribute type 23 has an invalid length. [ 1469.796393][T17897] netlink: 'syz.4.11000': attribute type 25 has an invalid length. [ 1469.836957][T17897] netlink: 'syz.4.11000': attribute type 26 has an invalid length. [ 1469.955335][T17893] dvmrp0: entered allmulticast mode [ 1470.186780][T17915] netlink: 'syz.4.11005': attribute type 13 has an invalid length. [ 1470.238508][T17918] netlink: 'syz.1.11007': attribute type 1 has an invalid length. [ 1470.239236][T17920] netlink: 'syz.1.11007': attribute type 1 has an invalid length. [ 1470.311395][T17926] netlink: 'syz.2.11008': attribute type 1 has an invalid length. [ 1470.333795][T17918] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1470.339200][T17920] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1470.352838][T17925] sch_tbf: peakrate 2173 is lower than or equals to rate 2972 ! [ 1470.433303][T17933] netlink: 'syz.1.11009': attribute type 7 has an invalid length. [ 1470.441704][T17930] macvlan0: entered promiscuous mode [ 1470.457602][T17930] macvlan0: entered allmulticast mode [ 1470.475859][T17930] bond3: entered promiscuous mode [ 1470.489771][T17930] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1470.497045][T17937] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 1470.511729][T17930] bond3: left promiscuous mode [ 1470.756219][T17955] __nla_validate_parse: 3 callbacks suppressed [ 1470.756236][T17955] netlink: 5 bytes leftover after parsing attributes in process `syz.2.11014'. [ 1470.779377][T17955] 0{X: renamed from gretap0 (while UP) [ 1470.804035][T17955] 0{X: entered allmulticast mode [ 1470.816629][T17955] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 1470.817964][T17957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11015'. [ 1470.911171][T17970] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1470.974383][T17970] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11018'. [ 1471.111254][T17983] vlan4: entered promiscuous mode [ 1471.116553][T17983] bridge0: entered promiscuous mode [ 1471.343775][T17994] gtp0: entered allmulticast mode [ 1471.417851][T18001] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11025'. [ 1471.636287][T18018] netlink: 280 bytes leftover after parsing attributes in process `syz.1.11028'. [ 1471.705274][T18022] netlink: 'syz.0.11029': attribute type 11 has an invalid length. [ 1471.835256][T18026] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1471.849837][T18032] tipc: Enabled bearer , priority 0 [ 1471.874558][T18032] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1472.388636][T18036] tipc: Resetting bearer [ 1472.419760][T18037] tipc: Enabling of bearer rejected, already enabled [ 1472.430902][T18023] lo speed is unknown, defaulting to 1000 [ 1472.458425][T18023] lo speed is unknown, defaulting to 1000 [ 1472.780853][T18055] netlink: 76 bytes leftover after parsing attributes in process `syz.1.11037'. [ 1472.927152][T18065] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11040'. [ 1473.040625][T18070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11039'. [ 1473.283588][T18077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11042'. [ 1473.329298][T18077] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11042'. [ 1473.375551][T18077] ip6gre3: entered promiscuous mode [ 1473.380948][T18077] ip6gre3: entered allmulticast mode [ 1473.401357][T18058] lo speed is unknown, defaulting to 1000 [ 1473.421020][T18058] lo speed is unknown, defaulting to 1000 [ 1474.660285][T18121] tipc: Invalid UDP bearer configuration [ 1474.660342][T18121] tipc: Enabling of bearer rejected, failed to enable media [ 1474.886884][T18128] tls_set_device_offload: netdev not found [ 1475.026214][T18130] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1475.553256][T18149] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1475.601309][T18151] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1475.623007][T18151] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 1475.634983][T18151] bond7: (slave vti0): Error -95 calling set_mac_address [ 1475.667632][T18149] bond7: (slave dummy0): Error -99 calling set_mac_address [ 1475.806078][T18157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1475.826631][T18157] __nla_validate_parse: 8 callbacks suppressed [ 1475.826650][T18157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11064'. [ 1475.864813][T18157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11064'. [ 1475.878543][T18141] lo speed is unknown, defaulting to 1000 [ 1475.893236][T18141] lo speed is unknown, defaulting to 1000 [ 1476.502029][T18179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11070'. [ 1476.619900][T18181] syzkaller0 speed is unknown, defaulting to 1000 [ 1476.632775][T18181] syzkaller0 speed is unknown, defaulting to 1000 [ 1476.641058][T18181] syzkaller0 speed is unknown, defaulting to 1000 [ 1476.679257][T18181] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1476.705986][T18181] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1476.804529][T18181] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1476.851069][T18181] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1476.917983][T18181] syzkaller0 speed is unknown, defaulting to 1000 [ 1476.971322][T18181] syzkaller0 speed is unknown, defaulting to 1000 [ 1477.054415][T18181] syzkaller0 speed is unknown, defaulting to 1000 [ 1477.069954][T18181] syzkaller0 speed is unknown, defaulting to 1000 [ 1477.091086][T18181] syzkaller0 speed is unknown, defaulting to 1000 [ 1477.136763][T18181] syzkaller0 speed is unknown, defaulting to 1000 [ 1477.195137][T18181] syzkaller0 speed is unknown, defaulting to 1000 [ 1477.250536][T18181] syzkaller0 speed is unknown, defaulting to 1000 [ 1477.360490][T18197] validate_nla: 2 callbacks suppressed [ 1477.360507][T18197] netlink: 'syz.3.11075': attribute type 2 has an invalid length. [ 1477.538983][T18205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11077'. [ 1478.264743][T18221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11083'. [ 1478.272054][T18222] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11083'. [ 1478.719875][T18244] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 1478.755279][T18244] batman_adv: batadv0: Adding interface: gretap0 [ 1478.765131][T18244] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1478.793013][T18244] batman_adv: batadv0: Interface activated: gretap0 [ 1479.036587][T18262] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11093'. [ 1479.341293][T18285] netlink: 108 bytes leftover after parsing attributes in process `syz.3.11096'. [ 1479.425344][T18285] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11096'. [ 1479.503076][T18285] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11096'. [ 1479.659561][T18296] netlink: 'syz.4.11101': attribute type 1 has an invalid length. [ 1479.733806][T18296] netlink: 'syz.4.11101': attribute type 10 has an invalid length. [ 1479.758740][T18296] netlink: 'syz.4.11101': attribute type 10 has an invalid length. [ 1479.804406][T18301] netlink: 'syz.0.11103': attribute type 1 has an invalid length. [ 1479.817501][T18302] netlink: 'syz.3.11102': attribute type 1 has an invalid length. [ 1480.013019][T18283] lo speed is unknown, defaulting to 1000 [ 1480.028641][T18283] lo speed is unknown, defaulting to 1000 [ 1480.322124][T18283] syzkaller0 speed is unknown, defaulting to 1000 [ 1480.658495][T18313] netlink: 'syz.2.11106': attribute type 3 has an invalid length. [ 1481.024735][T18334] netlink: 'syz.4.11110': attribute type 1 has an invalid length. [ 1481.104217][T18329] netlink: 'syz.3.11112': attribute type 1 has an invalid length. [ 1481.127082][T18338] __nla_validate_parse: 2 callbacks suppressed [ 1481.127100][T18338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11111'. [ 1481.238191][T18344] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11111'. [ 1481.328332][T18348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11114'. [ 1481.351464][T18351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11113'. [ 1481.419846][T18338] bond5 (unregistering): Released all slaves [ 1481.499144][T18352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11111'. [ 1481.727652][T18363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11117'. [ 1481.738452][T18363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11117'. [ 1481.751383][T18363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11117'. [ 1481.760922][T18363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11117'. [ 1481.776937][T18363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11117'. [ 1482.048664][T18376] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1482.075854][T18376] bond5 (unregistering): Released all slaves [ 1482.157826][T18385] netlink: 'syz.0.11124': attribute type 8 has an invalid length. [ 1482.267341][T18390] syzkaller0: Caught tx_queue_len zero misconfig [ 1482.301554][T18391] ip6tnl0: Caught tx_queue_len zero misconfig [ 1482.837330][T18382] lo speed is unknown, defaulting to 1000 [ 1482.859953][T18382] lo speed is unknown, defaulting to 1000 [ 1483.254234][T18382] syzkaller0 speed is unknown, defaulting to 1000 [ 1483.437204][T18434] netlink: 'syz.4.11138': attribute type 8 has an invalid length. [ 1483.464053][T18435] netlink: 'syz.4.11138': attribute type 8 has an invalid length. [ 1483.511277][T18434] lo: Caught tx_queue_len zero misconfig [ 1483.707689][ T30] audit: type=1804 audit(1780194169.190:30): pid=18441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.11141" name="/newroot/381/memory.events" dev="tmpfs" ino=1959 res=1 errno=0 [ 1485.031693][T18498] x_tables: duplicate underflow at hook 2 [ 1485.234140][T18443] lo speed is unknown, defaulting to 1000 [ 1485.263536][T18443] lo speed is unknown, defaulting to 1000 [ 1485.368760][T18518] netlink: 'syz.2.11162': attribute type 1 has an invalid length. [ 1485.744775][T18533] netlink: 'syz.0.11168': attribute type 3 has an invalid length. [ 1485.759057][T18533] netlink: 'syz.0.11168': attribute type 3 has an invalid length. [ 1485.850363][T18443] syzkaller0 speed is unknown, defaulting to 1000 [ 1485.857198][T18537] hsr0: entered promiscuous mode [ 1486.079072][T18547] syzkaller1: entered promiscuous mode [ 1486.110713][T18547] syzkaller1: entered allmulticast mode [ 1486.288529][T18564] __nla_validate_parse: 51 callbacks suppressed [ 1486.288549][T18564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11173'. [ 1486.374572][T18565] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11173'. [ 1486.481759][T18567] netlink: 'syz.0.11174': attribute type 1 has an invalid length. [ 1486.625691][T18574] netlink: 'syz.3.11177': attribute type 1 has an invalid length. [ 1486.664067][T18574] netlink: 280 bytes leftover after parsing attributes in process `syz.3.11177'. [ 1486.717686][T18581] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11178'. [ 1486.728226][T18582] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11179'. [ 1486.786576][T18585] ip6tnl2: entered allmulticast mode [ 1486.804560][ T6649] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1486.833177][T18582] bridge0: port 2(bridge_slave_1) entered disabled state [ 1486.844735][T18582] bridge0: port 1(bridge_slave_0) entered disabled state [ 1487.007586][T18588] netlink: 'syz.3.11181': attribute type 16 has an invalid length. [ 1487.053642][T18588] netlink: 'syz.3.11181': attribute type 17 has an invalid length. [ 1487.149799][T18602] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11185'. [ 1487.268125][T18588] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1487.586214][T18619] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11189'. [ 1487.644921][T18624] openvswitch: netlink: Flow actions attr not present in new flow. [ 1487.777938][T18630] syzkaller1: entered promiscuous mode [ 1487.794640][T18630] syzkaller1: entered allmulticast mode [ 1487.827844][T18638] netlink: 'syz.2.11194': attribute type 1 has an invalid length. [ 1487.905116][T18640] openvswitch: netlink: Missing valid actions attribute. [ 1487.917688][T18638] syzkaller1: entered promiscuous mode [ 1487.918387][T18640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1487.924474][T18638] syzkaller1: entered allmulticast mode [ 1488.317117][T18663] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11203'. [ 1488.433567][T18678] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11206'. [ 1488.507687][T18684] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11207'. [ 1488.663433][T18698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1488.738482][T18698] nbd: nbd64 already in use [ 1488.963298][T17196] udevd[17196]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1488.980185][T18712] sit0: entered promiscuous mode [ 1489.045672][T18711] validate_nla: 2 callbacks suppressed [ 1489.045690][T18711] netlink: 'syz.3.11213': attribute type 27 has an invalid length. [ 1489.235658][T18721] batadv_slave_1: entered promiscuous mode [ 1489.401136][T18720] batadv_slave_1: left promiscuous mode [ 1489.506942][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1489.557133][T18733] vxcan0: tx address claim with dest, not broadcast [ 1489.577250][T18729] bond11: up delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 1489.590993][T18729] bond11: down delay (128) is not a multiple of miimon (100), value rounded to 100 ms [ 1489.632098][T18735] hma(kX: entered promiscuous mode [ 1490.081438][T18757] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20003 [ 1490.310327][T18781] netlink: 'syz.4.11232': attribute type 1 has an invalid length. [ 1490.453595][T18775] bond1: left allmulticast mode [ 1490.458578][T18775] vlan2: left allmulticast mode [ 1490.467318][T18775] geneve1: left allmulticast mode [ 1490.476037][T18775] bond2: left allmulticast mode [ 1490.481166][T18775] macvtap1: left promiscuous mode [ 1490.488148][T18775] macvtap1: left allmulticast mode [ 1490.493629][T18775] macvtap2: left promiscuous mode [ 1490.498703][T18775] macvtap2: left allmulticast mode [ 1490.505282][T18775] veth3: left promiscuous mode [ 1490.510958][T18775] tipc: Resetting bearer [ 1490.517825][T18775] syzkaller0: left promiscuous mode [ 1490.523981][T18775] syzkaller0: left allmulticast mode [ 1490.530209][T18775] ip6tnl2: left allmulticast mode [ 1490.539116][T18775] ip6gre1: left promiscuous mode [ 1490.545307][T18775] ip6gre1: left allmulticast mode [ 1490.550770][T18775] geneve2: left promiscuous mode [ 1490.564183][T18775] vlan4: left promiscuous mode [ 1490.569095][T18775] bridge0: left promiscuous mode [ 1490.691470][T18787] gretap1: entered allmulticast mode [ 1490.715440][T18787] bond8: (slave gretap1): making interface the new active one [ 1490.728425][T18787] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 1490.785654][T18733] lo speed is unknown, defaulting to 1000 [ 1490.811504][T18733] lo speed is unknown, defaulting to 1000 [ 1490.925029][T18802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1490.938153][T18802] 8021q: adding VLAN 0 to HW filter on device team0 [ 1490.982716][T18802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1491.065019][T18802] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1491.182089][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1491.196526][T18733] syzkaller0 speed is unknown, defaulting to 1000 [ 1492.013004][T18837] __nla_validate_parse: 10 callbacks suppressed [ 1492.013024][T18837] netlink: 84 bytes leftover after parsing attributes in process `syz.2.11248'. [ 1492.470803][T18844] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11250'. [ 1492.926509][T18866] FAULT_INJECTION: forcing a failure. [ 1492.926509][T18866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1492.958798][T18869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11256'. [ 1492.983798][T18866] CPU: 0 UID: 0 PID: 18866 Comm: syz.3.11257 Not tainted syzkaller #0 PREEMPT(full) [ 1492.983823][T18866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1492.983834][T18866] Call Trace: [ 1492.983841][T18866] [ 1492.983848][T18866] dump_stack_lvl+0xe8/0x150 [ 1492.983874][T18866] should_fail_ex+0x412/0x560 [ 1492.983900][T18866] _copy_from_user+0x2d/0xb0 [ 1492.983923][T18866] __sys_bpf+0x229/0x950 [ 1492.983952][T18866] ? __pfx___sys_bpf+0x10/0x10 [ 1492.983987][T18866] ? ksys_write+0x242/0x270 [ 1492.984015][T18866] ? __pfx_ksys_write+0x10/0x10 [ 1492.984042][T18866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1492.984061][T18866] __x64_sys_bpf+0x7c/0x90 [ 1492.984083][T18868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11256'. [ 1492.984084][T18866] do_syscall_64+0x174/0x580 [ 1492.984103][T18866] ? trace_irq_disable+0x3b/0x140 [ 1492.984124][T18866] ? clear_bhb_loop+0x40/0x90 [ 1492.984143][T18866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1492.984160][T18866] RIP: 0033:0x7f939619ce59 [ 1492.984178][T18866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1492.984193][T18866] RSP: 002b:00007f9397104028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1492.984212][T18866] RAX: ffffffffffffffda RBX: 00007f9396415fa0 RCX: 00007f939619ce59 [ 1492.984226][T18866] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 1492.984239][T18866] RBP: 00007f9397104090 R08: 0000000000000000 R09: 0000000000000000 [ 1492.984250][T18866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1492.984261][T18866] R13: 00007f9396416038 R14: 00007f9396415fa0 R15: 00007ffe2b152c78 [ 1492.984290][T18866] [ 1493.053025][T18869] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1493.196557][T18868] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1493.222206][T18878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11259'. [ 1493.274493][T18883] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11259'. [ 1493.290985][ T6644] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.310347][T18878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11259'. [ 1493.310852][ T6644] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.385168][ T6644] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.396914][ T6644] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.513549][T18893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11265'. [ 1493.529806][T18893] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11265'. [ 1493.550994][T18893] erspan0: entered promiscuous mode [ 1493.558995][T18893] gretap0: entered promiscuous mode [ 1493.581352][T18893] set match dimension is over the limit! [ 1493.793380][T18918] netlink: 3 bytes leftover after parsing attributes in process `syz.3.11272'. [ 1493.799397][T18920] FAULT_INJECTION: forcing a failure. [ 1493.799397][T18920] name failslab, interval 1, probability 0, space 0, times 0 [ 1493.816453][T18918] 0X: renamed from batadv0 (while UP) [ 1493.825997][T18918] 0X: entered allmulticast mode [ 1493.833455][T18918] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 1493.843200][T18920] CPU: 0 UID: 0 PID: 18920 Comm: syz.4.11271 Not tainted syzkaller #0 PREEMPT(full) [ 1493.843225][T18920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1493.843236][T18920] Call Trace: [ 1493.843244][T18920] [ 1493.843254][T18920] dump_stack_lvl+0xe8/0x150 [ 1493.843281][T18920] should_fail_ex+0x412/0x560 [ 1493.843306][T18920] should_failslab+0xa8/0x100 [ 1493.843326][T18920] __kmalloc_noprof+0xe8/0x760 [ 1493.843351][T18920] ? bpf_test_init+0x9f/0x150 [ 1493.843459][T18920] bpf_test_init+0x9f/0x150 [ 1493.843483][T18920] bpf_prog_test_run_xdp+0x529/0x1160 [ 1493.843517][T18920] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1493.843542][T18920] ? __fget_files+0x2a/0x420 [ 1493.843568][T18920] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1493.843589][T18920] bpf_prog_test_run+0x2c7/0x340 [ 1493.843611][T18920] __sys_bpf+0x643/0x950 [ 1493.843637][T18920] ? __pfx___sys_bpf+0x10/0x10 [ 1493.843676][T18920] ? ksys_write+0x242/0x270 [ 1493.843702][T18920] ? __pfx_ksys_write+0x10/0x10 [ 1493.843729][T18920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.843748][T18920] __x64_sys_bpf+0x7c/0x90 [ 1493.843776][T18920] do_syscall_64+0x174/0x580 [ 1493.843794][T18920] ? trace_irq_disable+0x3b/0x140 [ 1493.843819][T18920] ? clear_bhb_loop+0x40/0x90 [ 1493.843840][T18920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.843857][T18920] RIP: 0033:0x7efc1a59ce59 [ 1493.843875][T18920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1493.843889][T18920] RSP: 002b:00007efc1b532028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1493.843907][T18920] RAX: ffffffffffffffda RBX: 00007efc1a815fa0 RCX: 00007efc1a59ce59 [ 1493.843920][T18920] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 1493.843937][T18920] RBP: 00007efc1b532090 R08: 0000000000000000 R09: 0000000000000000 [ 1493.843947][T18920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1493.843958][T18920] R13: 00007efc1a816038 R14: 00007efc1a815fa0 R15: 00007ffe0d1c8c78 [ 1493.843987][T18920] [ 1494.497550][T18945] pim6reg1: entered promiscuous mode [ 1494.518227][T18945] pim6reg1: entered allmulticast mode [ 1494.544441][T18966] netlink: 'syz.2.11285': attribute type 13 has an invalid length. [ 1494.569126][T18966] netlink: 'syz.2.11285': attribute type 17 has an invalid length. [ 1494.640529][T18966] 0{X: left allmulticast mode [ 1494.934571][T18966] hsr0: left promiscuous mode [ 1494.944312][T18966] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1495.009493][T19000] No such timeout policy "syz1" [ 1495.677657][T18976] lo speed is unknown, defaulting to 1000 [ 1495.702601][T18976] lo speed is unknown, defaulting to 1000 [ 1495.754996][T19022] tipc: Resetting bearer [ 1496.230172][T18976] syzkaller0 speed is unknown, defaulting to 1000 [ 1496.367264][T19038] sch_fq: defrate 255 ignored. [ 1497.099899][T19066] __nla_validate_parse: 3 callbacks suppressed [ 1497.099919][T19066] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11310'. [ 1497.716950][T19089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11317'. [ 1497.818920][T19093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1497.939211][T19102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11322'. [ 1497.995031][T19108] netlink: 'syz.1.11323': attribute type 62 has an invalid length. [ 1498.331260][T19138] tipc: Enabling of bearer rejected, already enabled [ 1498.377987][T19137] xt_policy: output policy not valid in PREROUTING and INPUT [ 1498.432510][T19142] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11333'. [ 1498.493531][T19142] bond5: entered allmulticast mode [ 1498.506558][T19145] netlink: 'syz.3.11334': attribute type 1 has an invalid length. [ 1498.566308][T19137] bond9: (slave bond_slave_1): Device is not bonding slave [ 1498.587360][T19137] bond9: option active_slave: invalid value (bond_slave_1) [ 1498.608587][T19137] bond9 (unregistering): Released all slaves [ 1498.669743][T19142] bond5: entered promiscuous mode [ 1498.676989][T19142] macvlan0: entered promiscuous mode [ 1498.689642][T19142] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1498.694565][T19151] netlink: 'syz.2.11333': attribute type 58 has an invalid length. [ 1498.705559][T19152] netlink: 'syz.3.11335': attribute type 1 has an invalid length. [ 1498.705731][T19151] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11333'. [ 1498.762953][T19152] bond7: entered promiscuous mode [ 1498.768182][T19152] bond7: entered allmulticast mode [ 1498.775308][T19152] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1498.850916][T19157] SET target dimension over the limit! [ 1498.874339][T19157] netlink: 508 bytes leftover after parsing attributes in process `syz.3.11337'. [ 1498.968985][T19166] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11339'. [ 1498.984977][T19168] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1499.454534][T19201] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11347'. [ 1499.742471][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1499.837676][T19216] netlink: 14 bytes leftover after parsing attributes in process `syz.3.11353'. [ 1500.286685][T19231] netlink: 'syz.1.11356': attribute type 1 has an invalid length. [ 1500.389577][T19231] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1500.601064][T19220] lo speed is unknown, defaulting to 1000 [ 1500.614724][T19220] lo speed is unknown, defaulting to 1000 [ 1500.826099][T19256] FAULT_INJECTION: forcing a failure. [ 1500.826099][T19256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1500.841089][T19256] CPU: 1 UID: 0 PID: 19256 Comm: syz.1.11362 Not tainted syzkaller #0 PREEMPT(full) [ 1500.841114][T19256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1500.841125][T19256] Call Trace: [ 1500.841132][T19256] [ 1500.841140][T19256] dump_stack_lvl+0xe8/0x150 [ 1500.841166][T19256] should_fail_ex+0x412/0x560 [ 1500.841192][T19256] _copy_to_user+0x31/0xb0 [ 1500.841216][T19256] bpf_test_finish+0x53c/0x6b0 [ 1500.841246][T19256] ? __pfx_bpf_test_finish+0x10/0x10 [ 1500.841273][T19256] ? _copy_from_user+0x94/0xb0 [ 1500.841294][T19256] ? bpf_test_init+0x113/0x150 [ 1500.841316][T19256] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 1500.841353][T19256] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1500.841379][T19256] ? __fget_files+0x2a/0x420 [ 1500.841406][T19256] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1500.841428][T19256] bpf_prog_test_run+0x2c7/0x340 [ 1500.841451][T19256] __sys_bpf+0x643/0x950 [ 1500.841478][T19256] ? __pfx___sys_bpf+0x10/0x10 [ 1500.841518][T19256] ? ksys_write+0x242/0x270 [ 1500.841545][T19256] ? __pfx_ksys_write+0x10/0x10 [ 1500.841573][T19256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1500.841594][T19256] __x64_sys_bpf+0x7c/0x90 [ 1500.841633][T19256] do_syscall_64+0x174/0x580 [ 1500.841652][T19256] ? trace_irq_disable+0x3b/0x140 [ 1500.841684][T19256] ? clear_bhb_loop+0x40/0x90 [ 1500.841706][T19256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1500.841724][T19256] RIP: 0033:0x7f07aab9ce59 [ 1500.841741][T19256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1500.841757][T19256] RSP: 002b:00007f07aba9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1500.841777][T19256] RAX: ffffffffffffffda RBX: 00007f07aae15fa0 RCX: 00007f07aab9ce59 [ 1500.841790][T19256] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 1500.841802][T19256] RBP: 00007f07aba9d090 R08: 0000000000000000 R09: 0000000000000000 [ 1500.841813][T19256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1500.841824][T19256] R13: 00007f07aae16038 R14: 00007f07aae15fa0 R15: 00007ffca06a3cf8 [ 1500.841856][T19256] [ 1501.146004][T19220] syzkaller0 speed is unknown, defaulting to 1000 [ 1501.271335][T19262] netlink: 108 bytes leftover after parsing attributes in process `syz.4.11364'. [ 1502.171154][T19311] syzkaller1: entered promiscuous mode [ 1502.192046][T19311] syzkaller1: entered allmulticast mode [ 1502.767663][T19318] netlink: 'syz.3.11379': attribute type 1 has an invalid length. [ 1502.817287][T19321] bond9: option lacp_rate: invalid value (128) [ 1502.826853][T19321] bond9 (unregistering): Released all slaves [ 1502.998204][T19335] netlink: 'syz.1.11382': attribute type 1 has an invalid length. [ 1503.094665][T19343] xt_hashlimit: size too large, truncated to 1048576 [ 1503.110472][T19339] netlink: 'syz.3.11384': attribute type 1 has an invalid length. [ 1503.120353][T19335] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1503.140222][T19339] __nla_validate_parse: 1 callbacks suppressed [ 1503.140239][T19339] netlink: 224 bytes leftover after parsing attributes in process `syz.3.11384'. [ 1503.202782][T19341] bond12: (slave geneve4): making interface the new active one [ 1503.225704][T19347] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1503.235726][T19341] bond12: (slave geneve4): Enslaving as an active interface with an up link [ 1503.254993][ T6644] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.339959][ T6644] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.354747][ T6644] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.368304][ T6644] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.559101][T19365] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11391'. [ 1503.619362][T19363] netlink: 'syz.1.11390': attribute type 13 has an invalid length. [ 1503.771608][T19361] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1503.796321][T19361] bond8: (slave lo): Enslaving as an active interface with an up link [ 1503.820995][T19361] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1503.886974][T19363] gretap0: refused to change device tx_queue_len [ 1503.909915][T19363] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1503.965643][T14608] lo speed is unknown, defaulting to 1000 [ 1503.977036][T14608] sy2: Port: 1 Link DOWN [ 1504.202959][T19392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11396'. [ 1504.244847][T19392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11396'. [ 1504.283778][ T6600] [ 1504.286142][ T6600] ============================================ [ 1504.286569][T19403] ieee80211 !: Selected rate control algorithm 'minstrel_ht' [ 1504.292384][ T6600] WARNING: possible recursive locking detected [ 1504.292483][ T6600] syzkaller #0 Not tainted [ 1504.292522][ T6600] -------------------------------------------- [ 1504.292555][ T6600] kworker/u8:25/6600 is trying to acquire lock: [ 1504.292567][ T6600] ffff88806ab76958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1504.292713][ T6600] [ 1504.292713][ T6600] but task is already holding lock: [ 1504.292721][ T6600] ffff88806a101158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1504.292771][ T6600] [ 1504.292771][ T6600] other info that might help us debug this: [ 1504.292779][ T6600] Possible unsafe locking scenario: [ 1504.292779][ T6600] [ 1504.292819][ T6600] CPU0 [ 1504.292852][ T6600] ---- [ 1504.292863][ T6600] lock(&qdisc_xmit_lock_key#4); [ 1504.292907][ T6600] lock(&qdisc_xmit_lock_key#4); [ 1504.292924][ T6600] [ 1504.292924][ T6600] *** DEADLOCK *** [ 1504.292924][ T6600] [ 1504.312528][T19392] netlink: 'syz.4.11396': attribute type 6 has an invalid length. [ 1504.316968][ T6600] May be due to missing lock nesting notation [ 1504.316968][ T6600] [ 1504.406247][ T6600] 11 locks held by kworker/u8:25/6600: [ 1504.411694][ T6600] #0: ffff8880b3055140 ((wq_completion)bond10#5){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1504.422825][ T6600] #1: ffffc90004f47c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1504.435690][ T6600] #2: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf8/0x17e0 [ 1504.445339][ T6600] #3: ffffffff8e95cd40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 1504.455332][ T6600] #4: ffff8880216d7228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 1504.467933][ T6600] #5: ffff88806a101158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1504.478196][ T6600] #6: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 1504.487146][ T6600] #7: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 1504.496917][ T6600] #8: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 1504.505756][ T6600] #9: ffffffff8e95cd40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 1504.515666][ T6600] #10: ffff8880abd75228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 1504.528356][ T6600] [ 1504.528356][ T6600] stack backtrace: [ 1504.534232][ T6600] CPU: 0 UID: 0 PID: 6600 Comm: kworker/u8:25 Not tainted syzkaller #0 PREEMPT(full) [ 1504.534249][ T6600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1504.534259][ T6600] Workqueue: bond10 bond_alb_monitor [ 1504.534283][ T6600] Call Trace: [ 1504.534291][ T6600] [ 1504.534299][ T6600] dump_stack_lvl+0xe8/0x150 [ 1504.534315][ T6600] print_deadlock_bug+0x279/0x290 [ 1504.534334][ T6600] __lock_acquire+0x253f/0x2cf0 [ 1504.534351][ T6600] ? unwind_next_frame+0xa6/0x2550 [ 1504.534371][ T6600] ? sch_direct_xmit+0x15f/0x4c0 [ 1504.534390][ T6600] lock_acquire+0x106/0x350 [ 1504.534403][ T6600] ? sch_direct_xmit+0x15f/0x4c0 [ 1504.534425][ T6600] _raw_spin_lock+0x2e/0x40 [ 1504.534507][ T6600] ? sch_direct_xmit+0x15f/0x4c0 [ 1504.534525][ T6600] sch_direct_xmit+0x15f/0x4c0 [ 1504.534545][ T6600] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1504.534563][ T6600] ? arp_create+0xe0/0x980 [ 1504.534584][ T6600] __dev_queue_xmit+0x180f/0x3950 [ 1504.534603][ T6600] ? __dev_queue_xmit+0x2b6/0x3950 [ 1504.534621][ T6600] ? arpt_do_table+0x256/0x1e30 [ 1504.534666][ T6600] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1504.534684][ T6600] ? __pfx_arpt_do_table+0x10/0x10 [ 1504.534699][ T6600] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1504.534722][ T6600] ? NF_HOOK+0xa2/0x3c0 [ 1504.534740][ T6600] NF_HOOK+0x33a/0x3c0 [ 1504.534758][ T6600] ? __pfx_arp_xmit_finish+0x10/0x10 [ 1504.534776][ T6600] ? NF_HOOK+0xa2/0x3c0 [ 1504.534792][ T6600] ? __pfx_NF_HOOK+0x10/0x10 [ 1504.534808][ T6600] ? lock_acquire+0x106/0x350 [ 1504.534821][ T6600] ? __pfx_arp_xmit_finish+0x10/0x10 [ 1504.534839][ T6600] ? inet_addr_type_dev_table+0x25/0x190 [ 1504.534902][ T6600] arp_xmit+0x16c/0x270 [ 1504.534918][ T6600] ? arp_xmit+0x23/0x270 [ 1504.534936][ T6600] arp_solicit+0xbe0/0xe40 [ 1504.534955][ T6600] ? arp_solicit+0x119/0xe40 [ 1504.534973][ T6600] ? __pfx_arp_solicit+0x10/0x10 [ 1504.534994][ T6600] ? __pfx_arp_solicit+0x10/0x10 [ 1504.535011][ T6600] __neigh_event_send+0xf05/0x14d0 [ 1504.535063][ T6600] neigh_resolve_output+0x198/0x750 [ 1504.535082][ T6600] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 1504.535099][ T6600] ? ip_finish_output2+0x3c2/0x1070 [ 1504.535111][ T6600] ip_finish_output2+0xca9/0x1070 [ 1504.535123][ T6600] ? ip_skb_dst_mtu+0x80b/0xa50 [ 1504.535142][ T6600] ? ip_finish_output+0x40e/0x530 [ 1504.535161][ T6600] ip_output+0x29f/0x450 [ 1504.535178][ T6600] ? ip_output+0x5b/0x450 [ 1504.535195][ T6600] iptunnel_xmit+0x621/0xd10 [ 1504.535236][ T6600] ip_tunnel_xmit+0x193a/0x1f20 [ 1504.535261][ T6600] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 1504.535285][ T6600] ? __pfx_gre_build_header+0x10/0x10 [ 1504.535348][ T6600] ? kfree+0x1c5/0x640 [ 1504.535362][ T6600] ? pskb_expand_head+0x458/0x1390 [ 1504.535380][ T6600] __gre_xmit+0x19e/0x240 [ 1504.535397][ T6600] ? __pfx___gre_xmit+0x10/0x10 [ 1504.535415][ T6600] erspan_xmit+0xa41/0x14d0 [ 1504.535435][ T6600] ? ret_from_fork_asm+0x1a/0x30 [ 1504.535451][ T6600] ? __pfx_erspan_xmit+0x10/0x10 [ 1504.535470][ T6600] dev_hard_start_xmit+0x2cd/0x830 [ 1504.535491][ T6600] sch_direct_xmit+0x251/0x4c0 [ 1504.535511][ T6600] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1504.535529][ T6600] ? kthread+0x2b0/0x470 [ 1504.535547][ T6600] __dev_queue_xmit+0x180f/0x3950 [ 1504.535565][ T6600] ? __dev_queue_xmit+0x2b6/0x3950 [ 1504.535584][ T6600] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1504.535601][ T6600] ? rcu_is_watching+0x15/0xb0 [ 1504.535617][ T6600] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1504.535633][ T6600] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 1504.535656][ T6600] ? alb_send_lp_vid+0x14e/0x550 [ 1504.535698][ T6600] alb_send_lp_vid+0x348/0x550 [ 1504.535713][ T6600] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 1504.535728][ T6600] ? psi_group_change+0xab8/0x1050 [ 1504.535747][ T6600] alb_send_learning_packets+0x12c/0x300 [ 1504.535762][ T6600] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 1504.535776][ T6600] ? bond_alb_monitor+0xf8/0x17e0 [ 1504.535792][ T6600] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 1504.535813][ T6600] bond_alb_monitor+0x3d5/0x17e0 [ 1504.535828][ T6600] ? bond_alb_monitor+0xf8/0x17e0 [ 1504.535841][ T6600] ? __pfx_bond_alb_monitor+0x10/0x10 [ 1504.535856][ T6600] ? process_scheduled_works+0xa70/0x1860 [ 1504.535868][ T6600] ? process_scheduled_works+0xa70/0x1860 [ 1504.535882][ T6600] process_scheduled_works+0xb5d/0x1860 [ 1504.535896][ T6600] ? trace_contention_end+0x3b/0x160 [ 1504.535921][ T6600] ? __pfx_process_scheduled_works+0x10/0x10 [ 1504.535937][ T6600] ? assign_work+0x3d5/0x5e0 [ 1504.535951][ T6600] worker_thread+0xa53/0xfc0 [ 1504.535973][ T6600] kthread+0x389/0x470 [ 1504.535989][ T6600] ? __pfx_worker_thread+0x10/0x10 [ 1504.536001][ T6600] ? __pfx_kthread+0x10/0x10 [ 1504.536017][ T6600] ret_from_fork+0x514/0xb70 [ 1504.536043][ T6600] ? __pfx_ret_from_fork+0x10/0x10 [ 1504.536056][ T6600] ? __switch_to+0xc79/0x1410 [ 1504.536075][ T6600] ? __pfx_kthread+0x10/0x10 [ 1504.536091][ T6600] ret_from_fork_asm+0x1a/0x30 [ 1504.536111][ T6600] [ 1504.548541][T19403] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1505.039836][T19403] CPU: 1 UID: 0 PID: 19403 Comm: syz.1.11399 Not tainted syzkaller #0 PREEMPT(full) [ 1505.039860][T19403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1505.039871][T19403] Call Trace: [ 1505.039879][T19403] [ 1505.039886][T19403] dump_stack_lvl+0xe8/0x150 [ 1505.039910][T19403] sysfs_warn_dup+0x8e/0xa0 [ 1505.039932][T19403] sysfs_do_create_link_sd+0xc0/0x110 [ 1505.039954][T19403] device_add_class_symlinks+0x1cf/0x240 [ 1505.039984][T19403] device_add+0x475/0xbb0 [ 1505.040010][T19403] wiphy_register+0x1fb1/0x2fe0 [ 1505.040043][T19403] ? __pfx_wiphy_register+0x10/0x10 [ 1505.040066][T19403] ? __pfx_netdev_run_todo+0x10/0x10 [ 1505.040088][T19403] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1505.040110][T19403] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1505.040137][T19403] ieee80211_register_hw+0x3c53/0x4910 [ 1505.040159][T19403] ? ieee80211_register_hw+0x1971/0x4910 [ 1505.040185][T19403] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1505.040202][T19403] ? __asan_memset+0x22/0x50 [ 1505.040221][T19403] ? __hrtimer_setup+0x1b7/0x260 [ 1505.040240][T19403] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1505.040262][T19403] mac80211_hwsim_new_radio+0x3306/0x57b0 [ 1505.040292][T19403] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1505.040312][T19403] ? __asan_memcpy+0x40/0x70 [ 1505.040334][T19403] hwsim_new_radio_nl+0xd96/0xfa0 [ 1505.040357][T19403] genl_family_rcv_msg_doit+0x22a/0x330 [ 1505.040385][T19403] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1505.040413][T19403] ? bpf_lsm_capable+0x9/0x20 [ 1505.040430][T19403] ? security_capable+0x7e/0x2c0 [ 1505.040457][T19403] genl_rcv_msg+0x61c/0x7a0 [ 1505.040481][T19403] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1505.040503][T19403] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1505.040526][T19403] netlink_rcv_skb+0x232/0x4b0 [ 1505.040545][T19403] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1505.040567][T19403] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1505.040592][T19403] ? down_read+0x270/0x2e0 [ 1505.040610][T19403] ? genl_rcv+0xd/0x40 [ 1505.040631][T19403] genl_rcv+0x28/0x40 [ 1505.040651][T19403] netlink_unicast+0x75c/0x8e0 [ 1505.040673][T19403] netlink_sendmsg+0x813/0xb40 [ 1505.040703][T19403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1505.040724][T19403] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1505.040749][T19403] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1505.040772][T19403] ____sys_sendmsg+0x972/0x9f0 [ 1505.040791][T19403] ? __might_fault+0xaf/0x130 [ 1505.040813][T19403] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1505.040835][T19403] ? import_iovec+0x73/0xa0 [ 1505.040855][T19403] ___sys_sendmsg+0x2a5/0x360 [ 1505.040872][T19403] ? __lock_acquire+0x6b5/0x2cf0 [ 1505.040892][T19403] ? __pfx____sys_sendmsg+0x10/0x10 [ 1505.040912][T19403] ? futex_wait+0x2a2/0x390 [ 1505.040946][T19403] ? __fget_files+0x2a/0x420 [ 1505.040964][T19403] ? __fget_files+0x3a0/0x420 [ 1505.040988][T19403] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1505.041008][T19403] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1505.041030][T19403] ? rcu_is_watching+0x15/0xb0 [ 1505.041053][T19403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.041071][T19403] do_syscall_64+0x174/0x580 [ 1505.041088][T19403] ? trace_irq_disable+0x3b/0x140 [ 1505.041112][T19403] ? clear_bhb_loop+0x40/0x90 [ 1505.041132][T19403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.041148][T19403] RIP: 0033:0x7f07aab9ce59 [ 1505.041164][T19403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1505.041179][T19403] RSP: 002b:00007f07aba9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1505.041214][T19403] RAX: ffffffffffffffda RBX: 00007f07aae15fa0 RCX: 00007f07aab9ce59 [ 1505.041226][T19403] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006 [ 1505.041237][T19403] RBP: 00007f07aac32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1505.041249][T19403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1505.041260][T19403] R13: 00007f07aae16038 R14: 00007f07aae15fa0 R15: 00007ffca06a3cf8 [ 1505.041281][T19403] [ 1505.053755][T19392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11396'. [ 1505.449739][T19392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11396'. [ 1505.458771][T19392] netlink: 'syz.4.11396': attribute type 6 has an invalid length.