last executing test programs: 5m55.652338833s ago: executing program 3 (id=3111): setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @private=0xa010100}], 0x10) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x4, 0x4, 0x11}, 0x50) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) unshare(0x22020400) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002b40)={r2, &(0x7f0000001a80), 0x0}, 0x20) (async) r3 = socket$inet(0x2, 0x3, 0x2) (async) r4 = epoll_create1(0x80000) epoll_wait(r4, &(0x7f000000affb)=[{}], 0x1, 0x7fff) (async) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000300)={'veth1_virt_wifi\x00', {0x2, 0x0, @empty}}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x2000001c}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r5, 0x5}, 0x10) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x804) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f0000000100)={0x1d, r9}, 0x10) (async) sendmmsg$sock(r8, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000003100)="0100000003000000640000000000000000000000000000000000000000000000000000000000000020a10700000000000200000001000000020000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003200)="0100000003000000640000000000000000000000000000000000000000000000000000000000000000000000000000000200000001000000", 0x38}, {0x0}], 0x2}}], 0x2, 0x20004090) (async) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffff8, @empty, 0x5}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000ff0000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000100000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdffffff000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) 5m54.948481838s ago: executing program 3 (id=3115): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010004000000010000000900000028000380140002007600000008000100020000030600040009000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, 0x0, 0x20044880) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0xc050) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) unshare(0x22020400) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2d, &(0x7f0000000700)=0xfffffffe, 0x4) recvfrom$inet(r1, &(0x7f0000000200)=""/19, 0x13, 0xc9100120, 0x0, 0xfffffffffffffcf2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000000), &(0x7f0000000240)=r0}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x80000000, 0x8}, 0xc) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) 5m53.888489391s ago: executing program 3 (id=3123): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) unshare(0x2040400) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c0001800b000100736f636b657400001c000280080002400000000b080001400000000308000300000000ff0900020073797a32"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000009000000000000000100000d0200000006000000000000000700000000000008020000000000302e5f30615f00"], 0x0, 0x41}, 0x28) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)=[0x0], &(0x7f0000000700), 0x27, 0x1}}, 0x40) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) 5m53.17222513s ago: executing program 3 (id=3128): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x70bd29, 0x25dfdbff, {0xa, 0x80, 0x14, 0x8, 0xfe, 0x2, 0x3, 0x2, 0x100}, [@RTA_MARK={0x8, 0x10, 0xfffffffd}]}, 0x24}}, 0x0) r5 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x34, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m52.486892644s ago: executing program 3 (id=3131): ioctl$NILFS_IOCTL_CHANGE_CPMODE(0xffffffffffffffff, 0x40106e80, &(0x7f0000000000)={0x4}) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2}, [@alu={0x4, 0x1, 0x3, 0x760cda05bcf95fa0}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) 5m52.184671321s ago: executing program 3 (id=3134): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000001680)=""/4096, &(0x7f0000002680)=0x1000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="d60a0000feff00006111a00000000000000000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) clock_gettime(0x8, &(0x7f0000000280)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x46000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x28, r3, 0x411, 0x70bd2a, 0x255fdc00, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4048083) r5 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001001010425bb", @ANYRES32=r6, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000001000180000001800000004000000030000000000000b0300000009000000000000080200000000003000df2d592c2f94b355e22b570e73180bd07c767a43c5e3339c24db3bf7d39f33"], &(0x7f00000005c0)=""/4096, 0x34, 0x1000, 0x1, 0x0, 0x10000}, 0x28) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r10, &(0x7f0000000740)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) sendfile(r10, r9, 0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000001600)=@bloom_filter={0x1e, 0xf, 0x0, 0x5, 0x40b04, 0xffffffffffffffff, 0x7, '\x00', 0x0, r8, 0x1, 0x2, 0x5, 0x9}, 0x50) 5m36.982670458s ago: executing program 32 (id=3134): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000001680)=""/4096, &(0x7f0000002680)=0x1000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="d60a0000feff00006111a00000000000000000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) clock_gettime(0x8, &(0x7f0000000280)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x46000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x28, r3, 0x411, 0x70bd2a, 0x255fdc00, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4048083) r5 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001001010425bb", @ANYRES32=r6, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000001000180000001800000004000000030000000000000b0300000009000000000000080200000000003000df2d592c2f94b355e22b570e73180bd07c767a43c5e3339c24db3bf7d39f33"], &(0x7f00000005c0)=""/4096, 0x34, 0x1000, 0x1, 0x0, 0x10000}, 0x28) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r10, &(0x7f0000000740)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) sendfile(r10, r9, 0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000001600)=@bloom_filter={0x1e, 0xf, 0x0, 0x5, 0x40b04, 0xffffffffffffffff, 0x7, '\x00', 0x0, r8, 0x1, 0x2, 0x5, 0x9}, 0x50) 2m25.903051278s ago: executing program 2 (id=4307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x28, 0x0, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008018}, 0x400d0) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x42510}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 2m25.748493721s ago: executing program 2 (id=4310): socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x600) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001500192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 2m25.664883882s ago: executing program 2 (id=4313): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a5f5fde31abc816a3c47e25a6d0cbe49ba8f9f869f35d1f710db6bfcbc49ec9533ac8127d4fda8164789e9e388271e9c36391f21fff45c1d1f7f6ce7ee817fc1c55153f68f7fc70c5f8a08ec61fefba9683096e59c0d4d7ccc0db823b9dc38069c2336e1630f16e835b390646094d13a13b8257228c34b6c665ca1b31f383239f4b6fe1ab766ca4c337128614dd8f3b5e70283111c2f17fa6a8e67b6453b8fc7f84f3ce1e943219521e80cf60612b3431725290910629c1614aa6e13b92374763bb2d2318166f12e1b0340defc05"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1, r1}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000080000000003500000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000002000940000000c62cdcd440000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 2m25.425282679s ago: executing program 2 (id=4315): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x32, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 2m25.028424986s ago: executing program 2 (id=4318): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) connect$pppl2tp(r3, &(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x3, 0x4, 0x4, {0xa, 0x4e23, 0x9, @mcast2, 0x800}}}, 0x3a) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendto$llc(r3, &(0x7f0000000480)="99eb5afc47c300e5d75d15a7fa89fd75448106986cf5e90d1e2c1909bd3105c7b8cb52cdde1fb8f5c8e61af79cd501eb2ef776bcd27078e6bccbde42fcea27ed1197c78d122690d59da110e6f1cc35578a60645fd076969c11c50708ca85f2cd557973bedc108072074ba621d2d2249bc7dc6eaaea4f806eab0eb1f69286a511e0fd299e48a2d3080324d54d010d1cb5765752e50f6a29955737f4ced9e1521a53245a1f4a2f5e43c534ee0ac2996c3c7044cc929b34358e6497d4a1ee5428f2d386636e0bf4aa13c9c3cfc26ab7a97ea42aba809b6395b5527cf35b", 0xdc, 0x20000000, &(0x7f00000005c0)={0x1a, 0x205, 0x7, 0x6, 0x2, 0x2, @remote}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000008000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000080), &(0x7f00000000c0)=r5}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfa, 0x0, 0x6, 0x100}}, @TCA_CTINFO_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x18, r9, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x800) r10 = socket(0x15, 0x5, 0x0) getsockopt(r10, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000fcdbdf253800000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000000410000000c00580021000000000002000c005800540000000000000081ee274b0c6905a3b97a67102a4911b2916a8d395f02fe040f9b49351b513340210ecf44624a32ba708dd56347474d825ef8d5211d0ee017918100f6fd51b65e91ced53ce4dff248523dc15931c28cfb9d28c7d525aeffe4f9a05a6b15889ab3a46c4f636222"], 0x40}, 0x1, 0x0, 0x0, 0x20040080}, 0x4008801) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x6d}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x1000, 0x1, 0x1, 0x0, {0x0, 0x8, 0x0, 0xdb, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1, 0x7fffffff, 0x8}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) r11 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044040}, 0x4000) ioctl$EXT4_IOC_MIGRATE(r13, 0x6609) recvfrom$unix(r12, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(r12, &(0x7f0000000fc0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r0, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f00000002c0)=0x400, 0x4) 2m23.900561964s ago: executing program 2 (id=4330): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r1 = socket(0x10, 0x3, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c00020008000100069380b14a5ecf72a7223f55ee9861b78ec22535a8d53ecdbad59cdbf99ecf370b746d35d21f9f5ce423be354137c8b2bfac0b177277382455b8a8f6afdc5f0ee458ad504d3b1b65e4056c583c15a64c74e34b6267d55b6d2dde6deecbd255eef88e1614afd12213708470f4a327476dbe87c4a9569b3983992d968125fdaf51d176e7d9"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x78bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}}, 0x20040000) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRESOCT=0x0, @ANYRES8], 0x34}}, 0x8001) r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r12, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r12, 0x29, 0x36, 0x0, 0x8) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r14 = socket(0x10, 0x3, 0x0) sendmmsg(r14, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES16, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0xc001) 2m8.167294162s ago: executing program 33 (id=4330): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r1 = socket(0x10, 0x3, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c00020008000100069380b14a5ecf72a7223f55ee9861b78ec22535a8d53ecdbad59cdbf99ecf370b746d35d21f9f5ce423be354137c8b2bfac0b177277382455b8a8f6afdc5f0ee458ad504d3b1b65e4056c583c15a64c74e34b6267d55b6d2dde6deecbd255eef88e1614afd12213708470f4a327476dbe87c4a9569b3983992d968125fdaf51d176e7d9"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x78bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}}, 0x20040000) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRESOCT=0x0, @ANYRES8], 0x34}}, 0x8001) r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r12, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r12, 0x29, 0x36, 0x0, 0x8) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r14 = socket(0x10, 0x3, 0x0) sendmmsg(r14, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES16, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0xc001) 1m13.528662171s ago: executing program 1 (id=4834): syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) (async) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x10}}, 0x14}}, 0x40040) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000895}, 0xc000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) 1m12.772824828s ago: executing program 1 (id=4844): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xd, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r7) socket(0x28, 0x5, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) splice(r6, &(0x7f0000000680)=0x6, r5, &(0x7f00000006c0)=0x8000000000000000, 0x8001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = accept$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @dev}, &(0x7f0000000300)=0x10) connect$inet(r9, &(0x7f0000000340)={0x2, 0x4e22, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback=0x4d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x0, 0xb7, 0x0, &(0x7f00000008c0)="c51bc6c16f11ba816048a1827a3384e29cf33c511c0b79857e5c25bf57066f16f4bc6b544551b38d1f69baa64fddac98c6a0b8eea46c46f742e9a6c979fb1c2dd2c8e6b83f85a8a07e15e7de6f23d7b0713ee7c4e032d320623ab7c42a03c84194c289a02af7509b37a8b18131347bed1bb41a3c770ffbe4366f0281a6deeb1c5eb144ca36d8f075b341b56ab842e7cda1bd1c6d649126e9b62073480d821844c0e190e021c51d8364b0600b3f35f1bb7dc0f65748d1df", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x932}, 0x50) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) syz_genetlink_get_family_id$smc(&(0x7f0000000200), r10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180072ddfc0100000000005f6fc191a30404e4d45a2185da"], &(0x7f0000000100)='syzkaller\x00', 0x8475, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff80}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8923, &(0x7f0000000040)={'wlan1\x00', @random="2e2ee363a4b1"}) 1m12.516028149s ago: executing program 1 (id=4845): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x11, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x90, 0x28, 0x1, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x9, [0xb, 0x7, 0x2, 0x0, 0x1, 0xc, 0xe, 0x10, 0xf, 0xf, 0x9, 0xa, 0x8, 0xd, 0x8, 0x9], 0x0, [0x3, 0x0, 0x8, 0x3, 0x100, 0xc4cf, 0x4, 0x6, 0x4, 0x7, 0x8, 0xffff, 0x3, 0x8, 0x0, 0xd], [0x765, 0xe, 0x6, 0x9, 0x6, 0xff, 0x401, 0x6, 0xf9d7, 0x9, 0x7, 0x1, 0x6, 0x7f, 0x401, 0x7f]}}}}, @TCA_RATE={0x6, 0x5, {0x3, 0x5}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40098}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x33}]}}, 0x0, 0x26}, 0x20) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x11}}) 1m9.709471151s ago: executing program 1 (id=4849): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9689f2cdbe63959901f5afb841befbb8787b77bc6855e836e2c277f600c31ff7ea5acf0a9525fa1c161d06b23b802aaf4716846d96af165", 0x54}], 0x2}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0xa82a02e4010a08bd}, "1a01c783a8bc563d", "e9a0bd986e338531d1157bc12d1fc364fdbaaa4d2954c1166835dbbe78286228", "0400d8c7"}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r2, &(0x7f00000002c0)=ANY=[], 0x33) sendfile(r2, r1, 0x0, 0x10000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f0000000480)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x100000e, 0x1010, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x2c7}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0xfed, &(0x7f0000000780)=""/4077, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 1m8.719009524s ago: executing program 1 (id=4852): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@getnexthop={0x18, 0x76, 0x1, 0x0, 0x25dfdbff, {0x3}}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x24, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r1}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}]}, 0x24}], 0x1}, 0x800) 1m8.476149774s ago: executing program 1 (id=4856): syz_emit_ethernet(0x52, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60000000001c3c01fe800000000000000000000000000026fe8000000000000000000000000000aa87000101fdff0000dc050000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5d0c36854fd35b8523ca936f182cf6dfc7534f515d3922d14e7fd717442321b031260b30459024e2ec0325ef6921b941084f7d4c9a87a77f6b12b79f079490ebb4c20000000000000007792e3c843ef0"], 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0x1c, 0x68, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x6, 0x1}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x4, 0xe, 0x10, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x300, 0x0, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010100}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x10, 0x1}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2}]}, 0x1c}}, 0x4000880) syz_emit_ethernet(0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000a86dd6c0000000019840020010000000000000000000000000000fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r11, 0x800, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4c0d0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="640000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a31000000003800038034000080300001802c00028008"], 0x64}}, 0x8000) 53.336809048s ago: executing program 34 (id=4856): syz_emit_ethernet(0x52, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60000000001c3c01fe800000000000000000000000000026fe8000000000000000000000000000aa87000101fdff0000dc050000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5d0c36854fd35b8523ca936f182cf6dfc7534f515d3922d14e7fd717442321b031260b30459024e2ec0325ef6921b941084f7d4c9a87a77f6b12b79f079490ebb4c20000000000000007792e3c843ef0"], 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0x1c, 0x68, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x6, 0x1}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x4, 0xe, 0x10, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x300, 0x0, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010100}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x10, 0x1}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2}]}, 0x1c}}, 0x4000880) syz_emit_ethernet(0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000a86dd6c0000000019840020010000000000000000000000000000fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r11, 0x800, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4c0d0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="640000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a31000000003800038034000080300001802c00028008"], 0x64}}, 0x8000) 12.553117399s ago: executing program 7 (id=5234): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x4000, &(0x7f0000000040)={@_ha_fsid={[0x400, 0x401]}, {0x0, 0x3, 0x9, 0x48900}}, 0x7d4c, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x6}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xec, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x44) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000340)={r0, 0x0, 0x10, 0xfffffffffffff801, 0x200, 0x2, [0x2, 0x3, 0xfffffffffffffff7, 0x3, 0x9, 0x1]}) sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@newlink={0x2c, 0x10, 0x20, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x80}, [@IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmsg$kcm(r0, &(0x7f0000002b40)={&(0x7f00000004c0)=@hci={0x1f, 0x2, 0x4}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000540)="7e11cd31db2a0ce2a5cc94ba5c56ccff66a695a61809c0fa5de7fadbed0e1079fe25715155d930f9385736fde71ea4f8b3bad8dfc5e141a3f5505ea704d4c0c28daec60fdb96bdf10867f083390e7c90f6157d65200088622315c92c3110e1419c555cbd910a50e8b985bf92bf0eee54b76139738f343098960de509e079ead9011bf0c7681ba3ee0bcfe0d399e5bed6cd96d1720d076a318fc88946eea0ca34f1a0ea74a63f2f4d4309c7ee4a4d067c77003876248697a905222ab6a6171aee", 0xc0}, {&(0x7f0000000600)="97dba1d52291fc62814e61d4635f7d9a70d8a2c0f4487519275ab42c038773e8b9c466b37b6065f6ff006b3f2ab4f52b51027a16412a53", 0x37}, {&(0x7f0000000640)="05e79c145011260b7bd3970fc36f73260e838631e8b886b47ea499ea844a89ca913616984353f46045505f38024ecc31d8f5ebc0bb8538e367d7e3b40d0cdb582737494c452780c6775db0f666f4224bdebd11ec4b0cdb2760288e7d104d8aaec4311b9ed80991224ea4bb397a7187dd69f51f506cee7f9166520d8f53705904a975b2fb14e6cc0c1b10ec4ccfe821b06a2c0f6310980bf47676507f054b2e53f13bfa8e07ec", 0xa6}, {&(0x7f0000000700)="a47462d1f790f4d50448d93714466ac2bac2f7d3a40ccfe174ab19f87222fe6a268658fa6a20dadd60bccf3adee3cf5b1ee6471e7440b47c9a6f869f91f13fcca16be2f5039b2c0342f460bd7fe81eb619bb41521d795368e6a1aa0e92b17347d4bc884185ce5857d0bc646346266afc14eb80", 0x73}, {&(0x7f0000000780)="28881facb2bed24962c617056463e03809a98bac81539c784a56b49854689b869a7553887e3e53351a4e8531e2b1ae41715f2f8e76b679a4042cac1903fb68abb5589f3c23ba7de7063342cd5a12cbaae17bc397c1337e219be24802a333555f95eee2f444c2bd4359c25f8a64c5505878a8a2286cd3f3acad4ebf053dab76edf6702cb9bd291f74a1b1687fb77088843ccf8231100c6c0ccd3ad6c88a2bfd28a1d616a19d35f4a550baaa7448b765641bbe362c0d526c02562e03bd943d034b9ac4b762d7bf0246ff734929b628f10d267253680558119ef9a9fe30346b3bf13bf63733944b3225274e035cc5094167c759e45da2e284b6380bf0dadeb2f72ce573460bef9cfa22c8401ea5e8e2c61a34fdeb7e294d2fabec22ba5f7b7e8a3aec35ad1220690c60dffdd215fe4b679cf1d9a0077ea98f56af308faf85c865554659fc44de88dc8520d8c4bbdd736f8eb939ded024db413165aacd2d52a49c953b17925cdb1528df67eb418104f20086388bd9a2afc9fba1ab31a5139870a1a87faff2ee6e9454b9230bfeb56c32cec2ccb4821905c90547d4ca3fe58f04fb37496eeb200a199e8f5b71f61042fcb2da9296f5670e8cb5860ca3c73ac7b910690d90703140f41e781e671b508c7c5fb4b5c6d31a7370cbf6bd75c3c82f015644fe626de26ff226c4129d1e60022bfc2fc6403f116ba9929ce7e210fb30691611493b04fd56150583215e9148d449d3d10a462f1546cd80c97de62765c35c227a97cf6d721ebb3e6e778d8e9c547f19b73e2e290ed09f512b16f9b914671bc4bb04d77b4a15105b039d84ed18f10b97bead171560a824af478134c34500a9469817d9e5918ff724a3f77daf329033dda53fc6c413af788e73361b8496eaa0789afc8b1457e102ff15ef306288c547b21208af3d69a5e73858e6d02401b1d4dd831a6bf0a5d482b10b7b17989af75aaedcb30c06ac54893b3971a4749944985c48c8758a3a29cbd00f486b2d2b0018118812b0b9dd0533a0ccc6dd6d58fb036a5525e280914393e46da725f47a38b885931480937deedcfff3fee865a98bff549d06dde2dc475f4fe256925659b395ce31cf7f681150c2175cb1241c2586d8946d96c2a807d548147f3dc610dd8db56949edea3772cb305a371775bec2088f7055ad7562be5902c479791a567e1da9838b14e9351e2d9ac6930e8d5ecccbe8387c32f32305fda24678879fdaab27c6c37a9502580fdfbea211c6b1dc2bb01b6ecadbecd8e47dbcd86d71093183e1513d69749d9292017159ae457fe0e8502a9df86b04f31bf2826c5830ab8b0275206397bdf93c148115b417b54944ea3e94f0eaf44569e2c27d68a225b325788b441f94d3a1183a03246d7c40ee7fc59ca1c19038049e277159edc4d7c493d98ac9c53609a7fb865a48dab938e70a847f33efce01ffa19d978d6c5a65f5f8a8a53ed9e734fb44f069fce55b851ecc1e13c4ffdcc13fb1a9066f3b35c3cd74a8a2e58c4a346adc1b78a03ed1f4008f3fdfe4fa68ab5acca765f1f46cd536d5c0ee04bf3796ec86cd68eb9eab5b8a1686e833baccc719e78c33331de8f29fd633159fba43c2620969d37d6cc45fae059e084a415a49027576ca1d2c1a9e544e31aacad2acf905faa883cfe7ef662a1d999ea60d4141efe7a8a35d74f6333398d1f3e7e94a0f81659c40a1c9ee8df4f08cabbbb97a70a28bcb0ca6b8ab94657bd51e1b3930b0b859185a50f09fbea9490f1904de1b1fe7f9f93d033a5caca376440d4eb4c93f766d440fa9b2d394fcc644ae684ddfa1f94dd0080c5356d0d08102df2d10a3db08acf627d2c6ddfed98e3c400186a25cbf356ebb390c2ec7b349cc36244d118c7a1cb6dca63b0113302670ab0c3ab12cb4fb20ae5c0ee6f7e97ac7f764780ee93fd8bb8464e5f3553adf61bf43a2c51478c9cd2db7cef53eb1e4c91cb664894b2f2b374e4b8fcf0c0ec55c0baa0c51056b69deb2e7fcaa8a6f8c925371932e44807540a7245544905d1756c01b1f80225bc354ab4848610abda83a422231212b770e15426af1838491ff63ba2c641b3e3386623f8719508d67a017536e364f7dc8b26a8aaeb77e5c71902cf08ce5141c899dd6d433bd61a8ef2c2a61566e52b9b27afb6a96b180dc8c8cc76faa461fce33925fc67b02e37e20fe3b6512ff0ad8de0ecfe5bd23099f15bbc096d01804e844ea6f739075eb9024521a815f955a4474f9399329b54d1d4679e56ef7b586162ba18e10ca6b13c6a609b13970424459283a5669891646ce016efafbe7337a0e8add6f48f0bf4ae84ee384a0992ad6c1596833ca131254130acff78e1b9226c9fdd831a78a80529d80b7674297f441bce287e17ff0b9f0aa19ae6b774dd93f891127db319b912a7a661d055b8053b56da9292c3f4af4a3eb2043906efceef93b120341486052e4235bc41403756f277d489c59dfac4b78ff9205a86295c87f52f23f7c87b7c955d3aaa23bf6c239de19173221a5bc22248cc589cbd16e98af42a05a1e58df8de5b3745e80ae59f556a134cfd2018f6a8fd86fada9f71e8c70ad64aa1a759e68b86e1bead9dcd000c8bd425d44bf642f3495da336b1e5f7bb5423d6e373ccd8562f1938b863422c1f4fc846fb038c39dff0f8cebb8198750e43ea7f84362bcdfe6174f044e270c8a0f82bb8104420fcebe24778b2486263c8696f6c7246dd742da085dd7061bdb2d1ea0e6b3b5d7e28b9482c3f162737d4921f5b702363e8dd7b1da25e1a6cfef5cc27e61cdac40168fe66559c7dd49fe46682d367757e30e3f3255cfea6047d2863a29664a528dd7305ff2e8b8d0bf0fc67492e7264e41db56d5e88b25591af6c30d00c733e6a1ddfc59b3ea01635715435b3add6bdd69ee1d2de23400cbee0290c32651b69d884a621177b2d818ac1274338927960f5a1be0f7f7788700182d6d0a395fce34c92c1dc52aff48db66c2e51d515b1831777dc6d823c20595c28cb23467bc38d8cdee4d62ef7d5afb307b4190288ee4352c3aa61c1f0dc851ca199229c24c76de0086c57efcd2109b1e401073546c2af594b7fa5ee276910c831c8180fb8f305b4d23245f20814345fed16143494274c48042f5523b8c742bd3b6c1a34a2f0e6bbf54d4a6b2491fdc8d03696b4d5bd1159cff61773549de677773d507c19669426af663523c25c6787cd9f84f370297f1dc0d2acde0a94ffa68b451825619c9a53ffbcc00ef96f69ca7f3354d1e28a36482330776bfd1ef5ce3aacbb0056409aa275d91084e26c56ec8dcfccbd62992fefddb2e866d3cc7db8d1b39f27b268176bba594e08afd21e995e0adbffd78dc55ec9282f070cc3a3e9d9fa1fe34847cbeee9aa1529dad8ed6045a3cf5d5c1da91b85bd300d74dfd095425d1e3c4f861e5c597ca7e8bcdb7bf6f5789408d6d67ec7c683f349ae7acec6b1f08ceb5b1b1ea59c3eb903916e2b06bffd1c3bd69c76d28d38515f2ac077767bfc65ec7b8f3ac871d4205df26458eb2249aff4b427371289e3bebf6b79747e91713ec27ce5f13246abe85efc06d648eb3fa6bfd89bad619acd06bb0142be254a9f79935ebb86fd468a2ad90d10cc378b1d6463a5950083317aca725d03dc68c04b6b3afecd4e37b111a6dd087ae395a2912f8e67cbbedb96790e7d838860c404f172531207b1fd62d3a206e250c87eb5490ccdaa274c352117b7c6bb0563bdf59edad87305f7e32e8ec35da71309254e1fbdbdc9f61e6ac0bc784879d787cd9941e62468b5e63db1a6d4ab3af66aa1cc9595b0a5b07bc01a68ec2f712cdcfeddd61c29f5ba23118992e6933e2c212ae503c5a29cde328671f9b0f533eaca43d1e34397ff642955b753575934da838f2a94feeecabee20e72e3a6213a8770fa7454d5d4cc22173f8ee1d38be0652b587f98b675952c3f3cb1fc9a1fc81ccf1811033f6fb2ee407f93e0bf1ecf35929b3b5ec41dcaaaf38b2cabadd3904fce0793955207648c40f5c08bd5ff044adcacaf670030e800170e3dc894fb6aeef26ac3031d48e50be26e41cbacd0d9eb102e6399e4e27c912582d00fb1acabe1f743b3cd6e6e6a347b4be1f116a13624dfe2f15a70cd62a95e2b13a5fab06cace133c20910040e64a89443e1316aa4c0b4159d55ff48cd98a5c3e09a0da877a8bf3c556bcd5818cd1c261958619bf19fc63b09a9d5e3b7cb18ec49a899e366e2060b14f4f70dea68cd1c3097139bce115b0ff79130afa5a88faf02f760cc29156fc5ec48c13e64e91b4b7b2acc62fca68e7663085dbcab4ae9ddc3722b71f6af2bed58fc840190a3c1db7b6b002b7df3238f052d3f15fc29b0ddb7f54fe9ef46ac0e97a13b4facf563655f4cf9a037e92ae041439a163e9b9edae98f4b317888c96e2dde297d26e9326dba162780f23137ddaa79b2f5e4927d8d3b4876ae1398106abddd3d43adf38e6c0cfad8bebd78298261182113f36ab7bcb6bc6373a5028d902e6c856f9aa0e10f3cba82f33b503293d4f18777dfcd303f0d426eb4e30594c9070fa911508f9608a782a0fff9301764855229677f54f24d3dc11f2c91655dcbd9e47258f9bfae477b0d0640f66007541ad2b2c10408d38dc8b8df8d7355dee441ddc5a9659be64155d7a29bc293b72c6b71f976eee0a925a4674a4d9fd9a55c5c8f325366ce6c6370aa15599e17ca10f11eaf20efd33a43d53c6034163836f56258b53e8a257f78311f4e74b462c5d6a3968005fe8f03d649057e2427b8e3af452718663845cb1dbcbd0b2b96a3e13906d453bea96625f46a4425efadb14948d0d9d965d43512117dfa6745d3a6335bb981faf7ee917ebb17bade790e7b7fbd17c31f9590446088389cab77ce81af2cf73ead7d6fa1bf1ec7d1b5fde22dcb0596e24a7c83b23b720aaa1338a00323f862fbf225a286026608593f5ce1f073db31e3c0939bfaa0e43e5472454161484f164ab1e50247dac1fd65cd72edd7a3d95d2ad6c125acad177f0a13745e376b7c3a412693320b6fc6eb63801a4471d01c8838da02340b06c27e06033bed5604aef63272ea1e8fbaa61c0a8d7c4ba412ef15f82c9999acff6adaf8c83e4561483e96a3086ae719d4826f91eb778a1438a21f64c4f4ff19ca7ef115686adaa63f46a792d3c3b112139e9fd82ef1dac2813a358ae5f4526b41915f6a6fa3d2c1305e761fffd59f9502ca06bdd4468c7fb4cafcf4c197ed5206ddf8015b0662396bc0f0b1d94e213f1f4a0773ce140087efdd0b20abc456a21f6924ff62a82f2a0b657f49e82f0ef14f66ca814836c0c06de1d5903f902930f21f60e117ecd50b72d4f36307c40e53a75790a1c82747cf0176bbabba4c95e347178c7068f8c3107b78cae4a2a68e65ebaa69ddcf0679f2f0727be3627712c81407599c53894a6bd6557eb1905967264844939d2294a13b21ee83788b6c99ccc725b3124b83dc43082db1d8b920926d3ac813aa863b8424558a0c6c4c6e06cd5b2a5a123dae0b4140a42408dbb3e5a84f7ed64b62f8347ff28bc5e9e64a821d758438a531cd19a4e38248d4bbc5d78caf16cdcfae85ec19b6a2b73b4e89fb0f0d43d9553298b9424658518d0ac026e1285fd3763572cf45d8a0e819280183fc5cdbf7129f64c7e1c0f6b16edf453a8c9679bd5adf00697872ec4f48bfbc641102bd6131c72becf42c2763c0882e3197ec09da3f5a166854c89aa802f898186edbefe44c2996a8f6fc08a5592919ee54f21ee9326e4b168e16026b05512668b9e7f6548d067f09adeb636e7e191", 0x1000}, {&(0x7f0000001780)="e2c6088f93579ce4708493f453c54081a869915e26405f98a3839355d8da4749eb49b8085396b701c65589899eedd4f84a9c2271ed462ff909fdb22ff7e796684468dea2c821fdb5dc8dcfe0b0fceec6abd74e", 0x53}, {&(0x7f0000001800)}], 0x7, &(0x7f00000018c0)=[{0x28, 0x117, 0x401, "d612c84098a757e4572c6f78a0f95fdf3e724485d45bfa"}, {0xe0, 0x1, 0x7, "ce1f465cd268209e9f16029654bd10018fe9c8043bbdcd913a78aeca426147a37491bf681976331b07c1df5e41cfeb1d1a9d6f8fc3f2e4f4176eb196b3578439ba1cf192c356875703875e40b2545bc4fc415c95c715119d737a8e353b2602a2e98d40729512d8fcc0dce270e5bea9d7511e3954c53346017a820a277acb3d74f779fc0f3ae1e3245ef449f0d7875ce40fca33a6b4103538ffb6fbb38613d2a33177035e3e371f370fb8c2b34f4795849d6f8e749fb3f2844c8f9ee87912d98c763721c833daa12368d7de"}, {0x1010, 0x103, 0x4a, "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"}, {0x100, 0x0, 0x0, "ef5a6f0d67ade3ecee4bee1fc79ecf4b306ec5f766aee6f89a98bd5829fdc73be137295a8b9182b39dec8d699bbf2d124d54752af9c05ac3313f9f839fd46a92dc63523d5ea19dee195bf84de960f419966687fc8cbda98ebb543e15d66c98445e481c28ba28ccff5b30994b189482525d9c3b39d048d230f653102a768ee93ef439e905c040c218ac15b46bbcf74c982a6b21d1b370978010aeedec7950b811004833f5be2328150262d11c826e75a34bc06e55182afb8e436ecce97083d5758f30db4ca9c284dd1a516054861208ef50dd56337606d7a70c7fcf3c5d4ea97df79bb709a2892d965ba073"}, {0x30, 0x0, 0x7, "8d2250d6c0bc4a574589f8cbe601a0ee19c5f47083d5fc6b5843c2c72a6592"}], 0x1248}, 0x8090) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000002b80)=@ccm_128={{0x303}, "372376f3f4ab5220", "4e97eb354a540e1d8565cbfcb66c4263", "9d625c05", "44a7d38616946dc4"}, 0x28) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000002bc0)={0x0, 0x4}, &(0x7f0000002c00)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000002c40)={0xb61, 0x0, 0x8107, 0xfffffff8, 0x27f, 0x1, 0x6, 0x1, r2}, &(0x7f0000002c80)=0x20) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000002cc0)={0x2, 'syz_tun\x00', 0x4}, 0x18) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000002dc0)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x24, 0x0, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_FLAGS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8000) sendmsg$kcm(r0, &(0x7f00000042c0)={&(0x7f0000002e00)=@tipc=@name={0x1e, 0x2, 0x2, {{0x2}, 0x4}}, 0x80, 0xffffffffffffffff, 0x0, &(0x7f0000002e80)=[{0x100, 0x107, 0x9, "aa04792f27a226d625a5c41b853249b8ea025a622aa2009dcdd022fc5a1c203c416c436ebd6a8bb0c367c8544fe93ab81b98dfd58ceb2a997d422c9656e1453e4021d4adfbbae4884744b758a29a3b8dcb693e973b1c80315085f5fe6a2b92872e8feecd00608725b794635d19bce3c9157badcf403f11006660f0fa8ff41f54777b46bab14178edf163c19db35bd3f48e06a192348c34be88c29580b1c3fe7ff2a467246eb054df24e5c2c4a2049eb41228736bff2f141a6f473fc2d5010162349b4657276f9d13f7c840f8b20fb7ed8e499b4292e123bfe08778b85b246c89cf29422963c517bcfc2fcdbebb6da00d"}, {0x70, 0x112, 0xffffff81, "91f3dee0dadc8f234fc6bfbfd7b6e35c5f33b9612dd9769a7fe5e89e4f0a56cd8a870b07fb5a6f8c3af48c0ad19e430d39af13bbb7b42698c0f106bf1f05ca71a46b03f8249d72447dad01d0a1b9208b013465fabfe92244e7ef2e"}, {0xa0, 0x102, 0x75e1, "b9e38e55796338afd3660e44235b917543b6c4b158bb141e3b8f1b816cd9cdc670ffb7d2bd11e50a030189a2d82c34a7ac59510ba7bb3b520ce23bd8585d1e4c46532c8aa00469aa35392faacf5b124f08a026594456da6cbee9c8974f1efaad39d8d03106eb0ff9832998c4d7f9e7d66cc7ec8fba5b0a8ef0a8d9b4c1302ab83e7a339084cb2059066203071f"}, {0x1010, 0x10a, 0x3, "5a7c65ae0164555184104267f25d454c2f8220584f91c858c2b75e236bdf03156bd32bf44e39a8916a108e0b233327ebaf4d317ff401d1decc4088a2bfea82b68491f633505adf14c4c0650e3e5a099affaf86233df1a7af0a719eb6130eff8e50f2de6a73ef10c46bbe15d4a172e76e062682f4546ff7e4c82a87b3b052d47f58eb14d252b3e1c61d26071d8c05a8a44ed75627fa56f9c5f760ed42e36813f32b4944235d4fd4e61930f49e0863495676e0d84c7a6f94799f7d96d822890b30fc3263c81e77d0bb9974bf3589b65e12bd35d36476678f5e0bae9f38c02b95df2e4efba5df7f883b60c35d2aad2d6db6dd827fae7a47f5bc5f76c63cc910368f1ed8f9076a2b8e5219100d9b0e8fb6b2d10f8f8d226d6485659f808aa7b533474e91b6bb9ea7b838f5d5af2764649112cc5861748f91cc89b529f01683dc8f4b57391d5ac11d6496f5893db7707da5ef569244dec70167cbd05a46057c84b69b8dde8f61ffcd14f776c930766df76a5fc20a530c43ea8a90aa545d64def84071f5122e7e4fc4fc32d854345952f4600e2e6ca7cc86784ba1b723e5262357764c1051d07bc46d9a7672f9308efc03f315279143030d7f94bbd6480d4b014421b7ee68dbe518bc372132820bec5285c2ba036241a8ec7a0945ff5038718e44ca7c4d4c5054d14f3456ce0b6672f6d211a0e330d79d7d0bb430e8b91568d16968c0c3c0bd5707d7654102b3a351dccd79e0c55808a4d7c53edd5bba3766df64692271bbd826dd406712be3d6fb19092c42dcb772a7a92988e8fa4bdc13ee1c06e1f0375321636bfbc85c8305d809a4ffce852b93c247a63e2957eabd508cb1fb1006cbb4145431d53ebdb13c23863c2d1e51dae36dff3c826d6afd5ed9c55700dd533eefea245ec7cf5a0395f809805e3f0bf2691227f20a2c87260f7f443d4aae49f249ff726668c0f621c3224802cf275fc96750e6d6c1da5e711b0449dfc92440706fbb7f31d44007aeb1cafbee8b328de705d2f5510a1ff4cba36bc3f26041ba61835935bcd40266c066ec57636e91954a4734babca142cb6bb4e49db09c53cea275334ed51f1cd60dd581ecc1bbfdfa19c0c37c79b5004bf998bc5dbe7fe75132921261ba781d8511befc01c3d772758441f4e8e6c9f73c15e762fdd2572f37bc61d09fa1bd4ee5302e76f6c4f774ca28223ac5d2c7b1bfb8f6c2791d0df1ac14cc1a75008b6fca68b46e39782d18210fb4963b2a7a2b88a5b9d69ed96091f77d369d586ac011bac5efc5200e783da2e95638e331275311e914fe35c27513a2adc815340e4b69851b0186871e9c30076e30267f98e315d6aa822aea937c77f548bf874dc8163936f18881d3c075c554f5b123ea17daeee54d750faa7fe5aa93a0cefadf352437954811388b09f3533874ee4bc0ba76ff84a522c911ced83f96b242038b845418725e74a4a4dce1eedcd2e2b61b4820dc8156d295963edd3ad477c8225f4febd8387ca86de4a9ea201d854d10ea025ed8029898c7d05e7bac574a898f19ec2c36d7f27d06c02eec6562452649a15af4bbca8686bb9d9d4103a0c5fda2b84c36e7ece9fe149f50ab1a473c9f0986c8fe511b6ddf2264801a5423ee82226a41aba60f6f90d2dfbb2c4d597a24efc6e143ba5d86e9dde126f07874f60ab994def973e617c12ea325910a4f46701fbb72279354327b8e38722e92fbcb82946844c790c702ce185707a1ce42e8a6beb3d025813685db4dd8d49dd8f434dfd582b1d724f27b357e9008aef1ad0cc2f6fcd961ab6da4b75575c5a84d55727450b2298b6d1147c76adbe0e637f90e0328da5d5eb2999d52be846e01326f4c8e51f7ef88287b4311ce7421716b11ea5acd73595fd093ebd87c5054fb948190de72ddbe14b5987974e02b4ee000e6ae8f443bbb3ee7929cd71ab76c82bb07e788751ec077cac9a008737d498b3b2d61897a1c7d5c72d175a64bc31f380c5ce95f00c40ee67362ca59e0e64c029fd875e37b093438e7bbe6c29ea536ea63f9bb4ac481842028ea8c0de092e8abba909730c09c6c90b93cecea3a3bb1274d1f0b60e51046d1f20c18a0a506559a5f92b051bdced260504680d95cf1c7a9a94b89860f1973e1d057165afb5c511230b24a7dc316aa14f91e07696b41052c419f652206f53842e6c66f2b4e640205bfbb95a8f3f9953f5207a372b20e4868eb70b89550f0f08695a4121f267efa23562810607879d2de7d75f042cc4e59dc051be0d52a029790e528a524537643a824196fec9f3d44bd996acb3296bf037e86c338a20ad89fc3a14607318be7a95b5f8dea9d93bd4facf921ac35aea25a746fb2e583d8b9f84594ff89e38ae5bd4f4591a9fa391312d6f91c0b923a4f51e859da61f4fd57356b00da38ed92cd81ac4ca91004fc1f764ffabf71379b7de3ec4c709e39e91cc3448da32af1898ae6cb6e79be04e7be0e97ed5feb3b053520b9be3e24e2cbff7a886fbfe753b9182e04f32360694ce05d3e4f6740f43c224cc98726cd0412a2001dfb10df361c90d21f6b980f74ed792cdba72931fd63b092a5017b3e2a0138c135f654d5cbd9b9a016abc4276749211681cd2b7f6ff80b1cd3279b07f5f32a5107c0e8ab6ed2c4ed5b7911ded7d2036442fe99effa9a291e80fda68dc09eb8b8b1cee122360e77953b6784c6618c5837425d4ea8c5b5f9e8ebba9c1c4c85834568284c437ab9d013b5965a1db3073209d8d970c7f633dfe141c0e6601cd7f727d87f6280fbbd793f62def859a630a8862d0d9db153a50f403ca424218523cc8741099ac7e4a4e5092f09be0a085656694625f34966c498b2f32847c8bec8f694820ab7a9dc214137b08234119ffbf038524456828608fff2820ebe7e34fad1008628cb65319714cdf76a2e579d907f32c95ad80b0961cdb82f2e66f8e495244b1ed7bfc9e6f3c94ae247b1ccebf8e3a9117c873e32bda1635952254a2670cd12f6e8d3767abc592d4d856208db0c9d3f5a15d85216bfe7e13eeaee33d5cd0a565b196db52e6eac2ece4c935f71ca23e80ac97263d43456d070ac201a17527ceeccf67f6ddf44b01d4f03db0c84c65851b2ee188f0fb913bc28c1772f47b5aec2fef18e952b7c8788056b30c30f4a2ca4c1334a9527bab0e7b63617aa648ec07c376314df3d3b4e5a9fca9ec1c54263698072b5d066870f6978e1ff41d2c24eabfe35bfd6d45c71e80884c24201d1ebcd9dae1649e41b8339919ae4291ef7216b392c8d3425438a9c4f3b2ec36a447110fb3599f300bf7b011a78085840aa53c3b06c75c9849458892698ec7be092a3bc386ec2facf2c147309206c9498eb637c18d153daf74adbb6668cc29e9706de0b525e29c7b29cf922a47452661b7d1cbb3a6af51e6eb791f75cc6ea53214ef9e5fd745b5b18def14120497abd60ba8b59ee6f9f3e3d9de46d8c44c3876348690eabf875df65ea518334da1bd0ffbf1760229b898761d4a66f353aa04f015b29f1c188e1892f448b1885abf90151b802de73a25570a39f4ffc5f4afc7926ccb612d9861bda9527243a153bd6db574887db81ccb6208a46aab4ffc30fa25914cc27856f0da61ab43dc3a8eee4df29f909b44cf03f12075d4af61889f49a59b78d4e68d6ddd0e92483c740736ca3e726dbb22a95fd7ea7e5b8aa1ad87200bea703a9e9b3a5dc9e2d574bb17e619b44d73735c6e0189f1c1063d4f53d320c908923b5b06f53e9d3e74d6db524fb0789681764242dc35b5ed75af08cc2dbe0069aafe60612660e702c7fb125c3bfdee8459a08bdbd3e424ee219e388e21666b65463acd6659dd1ebdf013dcfb18efa08305b5fe78f6ee09bbf07af18a6e2e6ed9cfe71760afda03759b5d54a137e861c0ba1751b2f3e0fe7cb735955190b7acb75a00da7e61639a50a7fc0987f6513dba3ab831948e3eb2f4544734df0486b91bfaa3ab99a5bb5e99df2c38666f2476807d7bb2903f42922923c432ee9a1f429469dcae7879556ccc845012c302459192a33c4b17db61b0c378f2391df3521f64a906c24d0766405b74f219c0a2a54c2fd42f1df999a8a3900055fc073b0637d20a4c4d3dd39fcaaaf59f57fe95640f3b1f45ce24da3892d6e838c98d3e8555bfa791299be20d40ad9d86568952b1c8a6a5e60428bebfa92d8b5965a023f90719c01c27780a80d6e63551303e586af5219c07c7e2a40851cc78567ba92402600d63bbdbe1157118d94d1ac136b1d0e540a4838dc6b195c67d94102ac34769fd505e19ef9667a56eee91c93a2cfd66c2556df8e6d471443c78967fc156c06d85c34a2577b8f2859c580d8894d59c1382ab91fccc64311cd8a8ffd280e36b5f3a281f9a9340a8d237dbdaab1ff17eaf3ac2c25017d4cf848e60cb4a45c18b95b15cf4d0d4acd584b323061946f68ba8c6a7e261238eb00f0bab07c4ef49bbc73699f24c850dd4fa53e66c3be3eb542da5c76d4e1c502ef4159f595627f6473b00871005d33c01e8cadb135c3fff587df8c37bc93b8973cd8c9c383e34dea95d9b38e044813f8587a17ea146704bbad8477a8c1d8b2801fc42dd2485a5045e2173875df80ebd214247c5a354a9cb599d98e183a5fdb817cb5e8d8956e6eef5b139903e05e4b42799988d79a66c66c036ee56f0eaf5c37b8c938f8cc9585b9268cb098f3a5f40b190022c8c737bda4560f08a79499d6da7fc408cd2ff1203040aed5292a95d7c3f359174065474b7cbcd20f440704c8720a74fee106ffcafa82a6794c39dcf78376ad4365dd5d23b12c84fec15256563ea8879086b3af94a7d45c4c04a8dfbc9490ea9ebd73f2b5e6e3147b414a4ddc550662476aa9e297d0a97c20fa31cc695a59ac09af06b192a3bd8cea4c45b1dae9db2ac43cd4c79335277e2a1c93e1742f0b428018f51fed684f68d7068fe3d1be72917a2d39e4dac52f1aa51c7d95a5ec8cca7377c7b833b696e5c92cc2b1ce8f6b31930fe6de1e750af5c4073ad41dfc55878fc14e0df389fbd58df77422da274d0c624e7df479060c74faf72176200435272c9e1bc08b0c587896710571d0349025d7b83081d9fdca66e5446552ab2dfbfd68ea79436c4d3ea4a92d5206f0e1105b325853017bb21c91d7e0e2f07b42c8f95e0b84a9cf9156b80d48da97140bd73e36bb61e2c92a8988c9a118cde58e887e087900010955e00f055bd17f22ce522b7a9be582396bea85a674ea8e485988741fe21c990a72d455a8560bbf0961a34fb8ce4352ca4bfec35c3759807f33251d5b25d144305dc181fc402ecccc752fc5f2fc57e9aba9dba8f7fbded0c12163a0f83ddb78aa2daf8b8189fe3298952de6b008ea371ca776af66d98a0671dd1c18e2c8c3e6c3a644872d709ae37b4ac51f4b13a48be89963bf63823f881b329154f676b582a0168a742dbccfe4064fc852f974e87c067d1380ee7601f153e4690c800cf2cd3773c7487f2f9430d427d3e4d5fe48d822b750d7a8897b9d597a7aa932cccf197d8f10f1f0e6903f28340c01e21aa10a52e61e074100fece922d1bfa06fdf31f872f3992305e3affa86552913b286a20314a04b5283fe1a9331627696bdfd320fef63de9c9ad79b2f052ce876526e1e7938d295da1d222f342700ee6a5962b7703f6d0ed94ae9dbfcf27bac5941ec565ec14aa0d86a52fdb516d6fbe7376ff0dd08ece56fa4239ab35c783ab0ba220635953a9c075c356679cf2413785b6ba8ceada3450ebac8b64e05cf7d045c790671bfb246ea3b1621f02869d5528402391f427f"}, {0x18, 0x113, 0x7ff, "b9047df313f8"}, {0x28, 0x0, 0x3, "d1c229d52ecbdb127d080bf25fc1c76db113"}, {0xb0, 0x0, 0x9, "f63b623fc4c622e8ceecf1cbc55c49686ece7b0b1482f7a040be9226cc0335d5b38900ddb2c16bb6eb4885682cf033252e3a2378fcd1d41862ed695b0e62da452bb7ba46bc67d7ffebde27a46e28a537159c1bee15ee31b8815daac9df4f5b94c2c92f9d0a188ea4536a67c7936ff19be45a20788e4a19d7f9a9ead7c733e5795b33e941fdebbdc13bf69681442a9b388da4a68f92879bb0464c"}, {0xa0, 0x56, 0x1, "984c8e9ad9098353d0a98156a5306170bd0b4ed7d10bed28e2e84324c90418039cf4bcfd0fa2694c42732aa2ecc595da905cdf75ac2c98eddeb0afe79ba44b4f839c3993cc9b637b7a9bd9cd818c4d05daeb786d9871bea9d7f0d0258fa775abfd4d5c5ede060fea4c79855fb7d53ad33615ea9ee21b8b90663000bb044ad8889e1993a3c5d2a9a47d6b36c4ee2e094f"}, {0x60, 0x107, 0x3, "e018938a9c48c9e7dde47a7375e17a05d04fca42690d85eedf40d88fc6aebb62901cb3e373404339796f19637953b1b640b03b53395270003db2faff8c99d14e890e8d0eb98c44128c0913bef5b01576"}], 0x1410}, 0x4000049) r4 = socket(0x5, 0x800, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000004300)=@req={0x33b3, 0x2, 0xa0, 0xb5}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000004340)="7c7c0861fe66add5c25ff70ff31d3040", 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000004380), r4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004400), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f00000044c0)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004480)={&(0x7f0000004440)={0x1c, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8050}, 0x8048000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000004500)=0x4, 0x4) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000004540)={r3, 0xc6, "485476f31b1177e73b6363d9bbada3aeeb39b8c6d0396cd6f8ab04a9d7a20ffd8aa9b1098c90d4621c79d7063de8e2dc8ff1905e1aafb3465dfbba92353b80619a281aa48c3f90e546bda21579314ce3b29005907c5627ee2b00cf234c84a59d262c9a4973012b9de42187fcfab1f562bd88a740abca198825da34c24cd61088334ec35fc5716eca44fc6ac8dd2322aa901746a3873edd23738980e32957438cadb56d4fb729b42a2fd9af639c57fc48c400e046835bbb5dd21d5fc18656df22d2bb76a6dbdd"}, &(0x7f0000004640)=0xce) sendto$l2tp6(r4, &(0x7f0000004680)="6c4aafb1e1578bb4c3242514581985937a1b703c8bfb1dc3b1ad3c8e7d3c5f409452b538614249127aa8ca9df4ad18a9318eb9f58711c3ebdbc4273f62901d5dd0008beb5d1cdd69a90b78e517f9bfa6a61111fc9da6676639f356f370caecea83fba937dc6f2b8d47ee233615e162919ccdaab2d2f7cc081b44c88f1b276c2c3096524fdaf6d319a38b0197868a30877bf6a30813847cdd7180dfb245172a86cb6bb6dee17b6dd4fa7c206e64", 0xad, 0x48004, &(0x7f0000004740)={0xa, 0x0, 0x86, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffd, 0x4}, 0x20) setsockopt$inet6_buf(r0, 0x29, 0x1c, &(0x7f0000004780)="b7f457b71e118603fd42c2ebe8df2cde28bd28273310439a3405a09be0cc6b47d98d28786b087bec54ecef5156400b8a3cfff04cf2399b79b25c0d3de98d245526edeb2887272f56c1571d87efd36f102d8039af118842d88c55eaa9e3ffd6", 0x5f) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004800)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000004840)={r7, 0x4, 0x0, 0x100000000}) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000004940)={&(0x7f0000004880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004900)={&(0x7f00000048c0)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x40) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000049c0)={'syztnl2\x00', &(0x7f0000004980)={'gretap0\x00', 0x0, 0x10, 0x1, 0x3ff, 0x1bc0, {{0x6, 0x4, 0x1, 0x8, 0x18, 0x64, 0x0, 0x1, 0x4, 0x0, @private=0xa010101, @rand_addr=0x64010102, {[@noop]}}}}}) connect(r8, &(0x7f0000004a00)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @remote}, 0x1, 0x3, 0x1, 0x4}}, 0x80) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000004b80)={&(0x7f0000004a80)={0x1d, r9}, 0x10, &(0x7f0000004b40)={&(0x7f0000004ac0)={0x6, 0x102, 0x2, {0x77359400}, {}, {0x0, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1}, 0x15, 0x0, 0x0, 0x0, "606192043c32a4faf8f6488cedbf41d396745f3ae3e8df956b866ce4aaa46ae6b32b5a0e960c55842771e841955da34befb3064ce824b72e9d2546067ef2131a"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008104) 12.340725551s ago: executing program 7 (id=5237): unshare(0x7a040d00) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r1, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES64=r2, @ANYBLOB="00000000800000000008a116edfe", @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1806000001000000000000000000000085ffffff9500"/32], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r2, &(0x7f0000000440)={0xa, 0x4e23, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0x1c) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000900000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000c2001d00bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0xf, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x4d}, 0x94) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x8001, 0x6}, 0x10) (async) sendto$inet6(r2, &(0x7f0000847fff)="1e", 0x1, 0xc0e0, &(0x7f000005ffe4)={0xa, 0x4a24, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x2}, 0x1c) (async) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x4, 0x8, 0x44, @empty, @empty, 0x1, 0x8, 0x7fffffff, 0x5}}) (async) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="00000000000000002800128008000100677265001c00028006000f52000000000500130001000000060011"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYRESOCT], 0x58}, 0x1, 0x0, 0x0, 0x8c4}, 0x84) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0xa7a028f7425b35c2, 0x0, 0x0) (async) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc080) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)=ANY=[@ANYRES64=r7, @ANYRESOCT=r4, @ANYRES8=r6], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) recvfrom$inet(r9, &(0x7f0000000080)=""/2, 0x2, 0xc9100120, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 11.277296013s ago: executing program 7 (id=5248): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000cc0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="128b3b8a2c5102e4013618666fa3bb497d", 0x11}], 0x1}], 0x1, 0x600008d0) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/8, 0x8}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x2}, 0x11}], 0x1, 0x40000140, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(0xffffffffffffffff, 0x40109441, &(0x7f0000000280)={0x206, 0x0, 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, 0xffffffffffffffff, 0x21d63000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40090}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@deltfilter={0x24, 0x2d, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {0x1, 0x10}, {0xfff2, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10.443561369s ago: executing program 7 (id=5253): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) write$tun(r1, &(0x7f0000000680)={@void, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @eth={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @val={@val={0x88a8, 0x7, 0x0, 0x2}, {0x8100, 0x7}}, {@llc={0x4, {@llc={0xe, 0xaa, "81", "c44362c82adca97c3aaf8aeb83b5b7c5b4aa1d7a25abb2d20c72cd8cadcd9dae569dc53e904e14af979011f24ef9959a6f74603e148b613c36bacc818e2ca806929e28454c271bde91617c8ee467ebce6d2225d0aec7fb6f343168bedd9c866f701bdc898067da22f9402b04a62d15057f075b1ece49076e56e160a0b2806b3c0ccebe0e45c67098be082b42366cdcb8891b114915e8f1f7b59904182d13e8ca32a46bf77f9de49c67a8808c7d0c98f8f94c74803fbae62bce03cbefdec4abe6c10ff767326b305d9f80479f235430ef99585dcb33d4260f3fb7bbb635e0954229b136f5435b"}}}}}}, 0x109) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = epoll_create(0xf7e8) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000180)={0x70000015}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000d, 0x100011, r4, 0x1000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x3f799000) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000440)="e9", 0x1}], 0x1) writev(r0, &(0x7f0000000980)=[{&(0x7f0000000300)='v', 0x1}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 8.209030207s ago: executing program 7 (id=5268): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0xb, 0x1, 0x6}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4004884) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000940)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000b40)={r4, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000d1780)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000d1980)={0x0, 0x0, "fdc2296aa2b0013bc5d5b053e90a6859feeb49550b5481352d2852aa786fad0215780bf776202e4ee08a913a6e24344d9b158e7367399a9653e11dc2a5a8c75ffdd476b0b18ccaf074a76dee0208163d5375149daf2687bfc98de3f75515eb0bb3e3720010177da440d736582b3e8366675ecfc34ff2c8c55f0f1ff128260c6bf7be92605e858fd9a6e94f2f054b8e2cac49615a72d5e8533e6e25b545e4f1bd08a564cd0bba301b84d35f98c207240443dcf0586533e7ae90a2902deced984fc767050e41cbe488f8282de0a8eed5524590d498a84af27812967f795653364e144c28bbf6df77faed8438fc04eb47fb5d57162851837670dc17ef9bcec16798", "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"}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r7}, 0x0, &(0x7f00000006c0)}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000001180)={0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES64=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x200000}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000d2980)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000d2d80)={0xff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r5}, {r6}, {r8, r9}], 0x0, "8f8214df7fea99"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001040)={{r8, 0x48, 0x6, 0x31b, 0x7, 0x2, 0x8, 0xfffffffb, 0x3, 0x7, 0xffffffff, 0x3, 0x47, 0x6, 0x9}}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ec0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x1, 0x0, 0x40000000000000, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000, 0x2}, {0x10, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x73, 0x4c}, [@algo_crypt={0x68, 0x2, {{'cbc(camellia)\x00'}, 0x100, "51ad34d9ea841223e5d0f932af16e92125ccc28f24846c994df42d7b27056624"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 7.016429825s ago: executing program 7 (id=5275): r0 = socket(0x1e, 0x5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000fd7648e1f2fc75ac37c3049ce055ba41eae6e85004258f70ec3a93cf871f34defde22f859027032bb513c77eed0f19825c0dce3bfb960a503fb9bab23c82ca6729ba4b850cbcfe506cb0185123da519bde17ba5534dd1c2de83974bd240d00c080cfcc75f821e9f55501e5acb86d107f78b86711047722dd0b9e790eb77d5f484d9d40ee76c844b2d569fa30370140474e9bcc7d780945ec4a095d288659ad54e488c15c7de62611968d2a1edb96b3eb1b59a814c4ba8d3eff1bf69870065292a035ad"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r5 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) sendmsg$tipc(r5, 0x0, 0x20040001) 3.501330833s ago: executing program 0 (id=5291): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000100)='\b', 0x1}], 0x1, &(0x7f00000002c0)=[@dstaddrv6={0x20, 0x84, 0x8, @empty}], 0x20, 0x4855}, 0x110) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94) getpeername$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) write$tun(r1, &(0x7f0000000800)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe, 0x12, r2, 0x952de000) socket(0xa, 0x5, 0x0) (async) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000100)='\b', 0x1}], 0x1, &(0x7f00000002c0)=[@dstaddrv6={0x20, 0x84, 0x8, @empty}], 0x20, 0x4855}, 0x110) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94) (async) getpeername$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) (async) write$tun(r1, &(0x7f0000000800)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe, 0x12, r2, 0x952de000) (async) 3.048971371s ago: executing program 0 (id=5295): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x7ff, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000000040)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x57, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth0_to_batadv\x00', 0x0}) bind$xdp(r4, &(0x7f00000003c0)={0x2c, 0x2, r7, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r4, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x8001, 0x3, 0x0, 0x0, 0x0, 0x9c2a}, 0x0, &(0x7f0000000200)={0x3ff, 0x4000000000002, 0x8000000000000, 0x9, 0x0, 0x0, 0x8000000000000000, 0x9}, 0x0, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfd, 0x28c, 0x1, 0x0, 0x3}, {0x7}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x2000000, 0x33}, 0x0, @in6=@private0, 0x0, 0x3, 0x0, 0xb9, 0x0, 0x8000000}}, 0xe8) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000380), &(0x7f0000000400)=0x4) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 2.781609886s ago: executing program 4 (id=5296): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x10, 0x10}}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x10}}]}}}]}, 0x40}}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000180)={{0xffffffffffffffff, &(0x7f0000000000)=',-\x00', 0x12080, &(0x7f0000000040)={@align=0x2, {0x5, 0x200, 0x4, 0x500}}, 0xffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x8}, {[0x8, 0xee78, 0x74, 0x803]}, 0x5, 0x80, &(0x7f0000000100)=""/128}) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r6], 0x1c}}, 0x2000040) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064756d6d79"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e24, 0x3e, @dev={0xfe, 0x80, '\x00', 0x13}, 0x1ff}}, 0x2, 0x80, 0x6, 0x1, 0xd}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000480)={r8, 0x6fba, 0x2d7, 0xdc4}, &(0x7f00000004c0)=0x10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x2010, r3, 0xf6d08000) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000014c0)="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", 0xff0) write$cgroup_int(r9, &(0x7f0000000ec0)=0x9, 0x12) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r11, 0x108, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x88) 2.292589363s ago: executing program 6 (id=5297): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0xc1ddfe9aa4c8d4f8, 0xffffffffffffffff, 0xfffff000) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000114010028bd7000fcdbdf2508000100"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000840) 1.896932175s ago: executing program 4 (id=5299): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x815}, 0x4000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0xce04, 0x8}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'pim6reg\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x20000000) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0xb, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_COMPAT_NAME={0x6, 0x1, '/\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000480), &(0x7f00000004c0)=0xc) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000600)={r1, &(0x7f0000000500)='pim6reg\x00', 0x480040, &(0x7f0000000540)={@align=0x101, {0xc, 0x0, 0x5, 0x8}}, 0x0, &(0x7f0000000580)={@_ha_fsid}, &(0x7f00000005c0)=0x1000}) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x8000) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000740)) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000780)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r1) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0xc0, r5, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x8b, 0xc5, "fc90a7222977409cbca4b82c4aa290a98d3f2876f114e9018d85b3b3cd67b19d4f08abe93808209924441ac30b201747eb045ef9e055bc7dc78dd7d5e6fdda24b304ce3d41ba9f0200b3046780ef1a1dc7a4997405015addf29b8122d5d927fb6a7f6b0639bf688c13c3d4dcd51ee2866475ce11e9c860de7ed91c1990bf0247db34531cc688d3"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x861}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x89}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}]}, 0xc0}}, 0x4800) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x48, r5, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x12}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_DURATION={0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x4000) getpid() r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, r7, 0x800, 0x70bd28, 0x8, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c840) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80), r4) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000f40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f00)={&(0x7f0000000cc0)={0x238, r8, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_NODE={0x38, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x100}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa28}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2b0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @loopback, 0x48}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fff}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x57e2, @rand_addr=' \x01\x00', 0x9}}}}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffffff81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x657}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4d53}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044) getsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000f80)=""/88, &(0x7f0000001000)=0x58) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001080)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000011c0)={'syztnl0\x00', &(0x7f00000010c0)={'tunl0\x00', r3, 0x80, 0x40, 0xff, 0x60f3c910, {{0x2c, 0x4, 0x0, 0xc, 0xb0, 0x68, 0x0, 0x7, 0x29, 0x0, @local, @multicast2, {[@cipso={0x86, 0x29, 0x2, [{0x7, 0xd, "af0b5a3bc51430b7ff9fe1"}, {0x2, 0xc, "0325167ef78705d8c2fb"}, {0x7, 0xa, "6ca08825e8b41627"}]}, @lsrr={0x83, 0x17, 0x24, [@multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x13}, @multicast1, @private=0xa010102]}, @timestamp_addr={0x44, 0x1c, 0x8a, 0x1, 0x4, [{@remote, 0x3}, {@remote, 0x400}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xb5f}]}, @timestamp={0x44, 0xc, 0x20, 0x0, 0x2, [0x2, 0x5]}, @cipso={0x86, 0x32, 0x0, [{0x6, 0x6, "858551dc"}, {0x5, 0xb, "4c2e28b3ec9aac586d"}, {0x7, 0x4, "31b7"}, {0x1, 0x8, "33adccda2edd"}, {0x0, 0xf, "acdad4734ec73dd04581b0fc66"}]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001500)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000014c0)={&(0x7f0000001200)={0x29c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_DEBUG_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xf8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xf4, 0x4, "bb8ddb5cd0d3f97f139e2596ba8d785acd3c084d8e1d70edef0b604f907733ca8ae908d97e751f2f1188ecb2ff33c26192d14734560888fca96ecddadc403185a635e19a8bb58924d55256649c1003bf126f9976e1b0a7adf9932e8fad1473177b790b74e79218dfb081e883ab630667eaa6dda69d64c8ce96644129dadf1a92a0f583a79e62e8944d284e68d61934644de815bbb019254537580df77b3aa042655ff1d16e0f904e7b0bfa3cab9e1169bf06fbc8625ca7a8946aa9b1a4fa188edaf844ae37d03f0bbb0e3806f380ceafa3cf394143923ec081b2d069316c1115fcded63c7be5045aab9582a13f7976f4"}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001540)={'wg0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000015c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000001600)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000001700)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)=@RTM_NEWMDB={0x78, 0x54, 0x100, 0x70bd27, 0x25dfdbfb, {0x7, r12}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x2, 0x1, {@ip4=@broadcast, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x1, 0x4, {@in6_addr=@ipv4={'\x00', '\xff\xff', @empty}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x1, 0x1, 0x2, {@ip4=@loopback, 0x800}}}]}, 0x78}}, 0x48880) 1.89668539s ago: executing program 6 (id=5300): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="31ece0786eaf77f01f8d2aa4eef44264f88329bd7050ff9bdf25190000002000018008000100", @ANYRES32=r4, @ANYBLOB="140002006261746164765f736c6176655f310000"], 0x34}, 0x1, 0x0, 0x0, 0x4004110}, 0x28000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.559032365s ago: executing program 6 (id=5302): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x6d, 0x3fb, 0x210, 0x70bd2d, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000005}, 0xd5704868d673d8ed) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000002300)=0x4) socket$phonet_pipe(0x23, 0x5, 0x2) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x6d, 0x3fb, 0x210, 0x70bd2d, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000005}, 0xd5704868d673d8ed) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000002300)=0x4) (async) 1.466798973s ago: executing program 4 (id=5303): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0aac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4) 1.463021748s ago: executing program 0 (id=5305): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0xc0) socket(0x26, 0xa, 0x8) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.317324975s ago: executing program 6 (id=5306): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a5f5fde31abc816a3c47e25a6d0cbe49ba8f9f869f35d1f710db6bfcbc49ec9533ac8127d4fda8164789e9e388271e9c36391f21fff45c1d1f7f6ce7ee817fc1c55153f68f7fc70c5f8a08ec61fefba9683096e59c0d4d7ccc0db823b9dc38069c2336e1630f16e835b390646094d13a13b8257228c34b6c665ca1b31f383239f4b6fe1ab766ca4c337128614dd8f3b5e70283111c2f17fa6a8e67b6453b8fc7f84f3ce1e943219521e80cf60612b3431725290910629c1614aa6e13b92374763bb2d2318166f12e1b0340defc05"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1, r1}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000080000000003500000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000fffd0000940000000c62cdcd440000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 1.270030685s ago: executing program 5 (id=5307): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)='%pI4 \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000bfffffff0000000000000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000100000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0xccee5849be245758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000100)=r2}, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'tunl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x8, 0x7, 0x1, 0x38000, {{0x2e, 0x4, 0x3, 0x1, 0xb8, 0x66, 0x0, 0xe, 0x2b, 0x0, @empty, @multicast2, {[@lsrr={0x83, 0x1f, 0xec, [@private=0xa010102, @empty, @rand_addr=0x64010102, @remote, @remote, @private=0xa010100, @multicast2]}, @end, @lsrr={0x83, 0x1f, 0x97, [@multicast2, @dev={0xac, 0x14, 0x14, 0x2b}, @local, @multicast2, @remote, @multicast1, @private=0xa010101]}, @timestamp_prespec={0x44, 0x54, 0xf4, 0x3, 0x5, [{@remote, 0x7}, {@multicast1, 0x7}, {@loopback}, {@loopback, 0x8}, {@broadcast, 0x5fb}, {@local, 0x800}, {@broadcast, 0xffffff67}, {@local, 0x707b}, {@empty, 0x6}, {@empty, 0x8001}]}, @lsrr={0x83, 0xf, 0xc1, [@local, @multicast1, @local]}]}}}}}) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x80002}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xb, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc89, 0x0, 0x0, 0x0, 0xfffffff7}, [@ldst={0x2, 0x4, 0x4, 0x4, 0x3, 0x20, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @alu={0x7, 0x0, 0x5, 0x7, 0x6, 0xffffffffffffffe0, 0x8}]}, &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, '\x00', r4, 0x0, r6, 0x8, &(0x7f00000004c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xf, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000540)=[r0], &(0x7f0000000580)=[{0x0, 0x4, 0x1, 0x6}, {0x5, 0x4, 0x1, 0x4}, {0x1, 0x1, 0xf, 0x5}, {0x1, 0x2, 0x3, 0x5}, {0x0, 0x1, 0x4, 0x3}], 0x10, 0x8}, 0x94) 1.148283182s ago: executing program 5 (id=5308): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4) sendmsg$netlink(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)={0x101c, 0x20, 0x723, 0x0, 0x0, "", [@nested={0x100c, 0xa9, 0x0, 0x1, [@typed={0x1004, 0x126, 0x0, 0x0, @binary="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"}, @typed={0x4, 0xf}]}]}, 0x101c}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4623, 0x1, @dev={0xfe, 0x80, '\x00', 0x44}, 0x2}, 0x1c) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)="e9", 0x1}, 0x1, 0x0, 0x0, 0x810}, 0x4154) 1.025342445s ago: executing program 4 (id=5309): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000cc0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="128b3b8a2c5102e4013618666fa3bb497d", 0x11}], 0x1}], 0x1, 0x600008d0) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/8, 0x8}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x2}, 0x11}], 0x1, 0x40000140, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(0xffffffffffffffff, 0x40109441, &(0x7f0000000280)={0x206, 0x0, 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, 0xffffffffffffffff, 0x21d63000) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r2, @ANYRES16=r2, @ANYRES64=r2], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40090}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@deltfilter={0x24, 0x2d, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {0x1, 0x10}, {0xfff2, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.017014928s ago: executing program 6 (id=5310): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x17, 0x0, 0x3, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x5, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @multicast1, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xe, "00020000da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x2, 0x12, '\x00'/16}, {0x0, 0x9, "00de6c83d50800"}, {0x7, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x2, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x1, 0xd, "c8f46976e79ea788f03d9d"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000006"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendto$inet6(r4, &(0x7f00000006c0)="600000000014334000e4331e26bff073b302d6b8b34123ca000000000000000000000000000001000013099acf00000000000000", 0x34, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xd9, 0xf1ffffff, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0xd6}}}}]}, 0x78}}, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80000001}]}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 903.665444ms ago: executing program 5 (id=5311): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee1768814002b000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2be27de13db01225280012800b0001006d616373656300001800028005000f00020000000c000600000000000000000008000500", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 644.859921ms ago: executing program 6 (id=5312): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x25dfdbff, {0xa, 0x80, 0x14, 0x8, 0xfe, 0x2, 0x3, 0x2, 0x100}, [@RTA_MARK={0x8, 0x10, 0xfffffffd}, @RTA_OIF={0x8}]}, 0x2c}}, 0x0) r5 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x34, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 487.563386ms ago: executing program 5 (id=5313): r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000080)={0x7, 0x40, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40001) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='memory.numa_stat\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000240)={0x0, 0xe923}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={r3, 0x20, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e23, @empty}]}, &(0x7f0000000340)=0x10) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', r6, 0x29, 0x7, 0xf, 0x9, 0x50, @empty, @local, 0x700, 0x7800, 0x10000, 0x9}}) (async) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000500), r2) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r7, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008004}, 0x2404c844) getsockopt$netlink(r2, 0x10e, 0x5, &(0x7f0000000600)=""/149, &(0x7f00000006c0)=0x95) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r2) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x9c, r8, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xab80000000000000}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x9c}, 0x1, 0x0, 0x0, 0x14}, 0x8840) (async) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000008c0)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000000940)={r3, 0x7, 0x6fc6}, 0x8) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x8010, r9, 0x5411e000) bind$bt_hci(r2, &(0x7f0000000980)={0x1f, 0x0, 0x2}, 0x6) r10 = socket$rxrpc(0x21, 0x2, 0x2) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, r11, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xe, 0x21}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x1f, 0x24, [{0x53, 0x1}, {0x16, 0x1}, {0x24}, {0x48, 0x1}, {0x48}, {0x58}, {0x60}, {0xb, 0x1}, {0x4}, {0x36}, {0x48, 0x1}, {0x12}, {0x9}, {0x24}, {0x60}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x60, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x18, 0x1}, {0x48}, {0xb, 0x1}, {0xc, 0x1}, {0x48, 0x1}, {0x36, 0x1}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000b80)={'ip6gre0\x00', 0x0}) (async) ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f0000000c00)=0x0) sendmsg$AUDIT_SET(r2, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x3c, 0x3e9, 0x20, 0x70bd28, 0x25dfdbfb, {0x0, 0x1, 0x1, r14, 0x7, 0x9, 0x7f, 0x1c19, 0x0, 0x40, 0xfffffffe}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048081}, 0x48811) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), r2) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r9, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x3c, r15, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x4080) (async) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000e40)=""/211, &(0x7f0000000f40)=0xd3) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000f80)={r4, 0x5, 0x10}, &(0x7f0000000fc0)=0xc) 379.947719ms ago: executing program 4 (id=5314): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_getmulticast={0x14, 0x3a, 0x2, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 280.615401ms ago: executing program 0 (id=5315): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000fe7f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0077b638cfa59ab6000000000000000000000000000000c900000000"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x3) r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000280)=0x521f) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r1, 0x0, 0x0, 0x400000000000000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 228.217161ms ago: executing program 0 (id=5316): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x9, &(0x7f0000000300)=ANY=[@ANYBLOB="7b1af8ff00000000850000000500000079a1f8ff0000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000102bfa3000000000000b704000000000000850000003f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 175.588479ms ago: executing program 4 (id=5317): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000200)={'bridge0\x00', @ifru_ivalue=0xf}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7b, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xb8, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000000000000001000000fc0000000000000014000000000000000100000041"], 0x4c}, 0x20001850) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0x24, r5, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x24}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x3, 0x0, 0x80a, 0x100, 0x400, 0x40, r2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000001000f4001000000002000000030000000000ff110100000002"], 0x0, 0x2a, 0x0, 0x1}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x26e1, 0x0) close(r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={r8, &(0x7f0000000400)="9db8cf78608bf721f481a42a71660e280ea8408f86f0f5e5d64447cf76d4dd4c04ec183bc2e0c4841c2a672da400d5860701865ee4295b878f98cee433415795f1bf66ca7a8f85e1c41ccb68", &(0x7f0000000540)=""/205}, 0x20) ioctl$SIOCSIFHWADDR(r8, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r9 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000000)={r0}) 108.920368ms ago: executing program 5 (id=5318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0xc, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x44051}, 0x848a558c5384c739) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) accept(r1, 0x0, 0x0) 53.702864ms ago: executing program 0 (id=5319): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@bridge_newneigh={0x1c, 0x1c, 0x401, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x40, 0x4c, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x44801}, 0x40840) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async, rerun: 64) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x8}, 0xc) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000840)={'sit0\x00', &(0x7f0000000700)={'erspan0\x00', 0x0, 0x10, 0x10, 0x9, 0x8001, {{0x3d, 0x4, 0x3, 0x20, 0xf4, 0x66, 0x0, 0x3, 0x29, 0x0, @private=0xa010100, @local, {[@cipso={0x86, 0x27, 0x3, [{0x0, 0x3, "80"}, {0x1, 0xc, "4da9180120a6d2992004"}, {0x2, 0x6, "da6bc121"}, {0x0, 0xc, "a3e7e517601693548102"}]}, @cipso={0x86, 0x6d, 0x3, [{0x2, 0x5, "aeede9"}, {0x1, 0xd, "76543bcf8e945894daaca0"}, {0x7, 0x6, "0a1f57ce"}, {0x0, 0xf, "34bb082a1216380f9d1842a1f6"}, {0x5, 0xf, "0ff7ddb49e759fd7fa4d35d4ec"}, {0x1, 0xc, "ee2f9e3517680da3ff38"}, {0x5, 0x12, "cfb8d40339c52d5defc35f21a65ba57d"}, {0x6, 0x0, "fda4"}, {0x0, 0xfffffffffffffe0f, "d9c52777e1c3b3eaa009db7e85"}]}, @timestamp_addr={0x44, 0x3c, 0x9b, 0x1, 0x2, [{@local, 0x3}, {@multicast2, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4592}, {@multicast1, 0x7}, {@remote, 0x4}, {@remote, 0x3}, {@private=0xa010101, 0x8}]}, @rr={0x7, 0xf, 0x44, [@broadcast, @rand_addr=0x64010102, @loopback]}]}}}}}) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000ac0)={r1, &(0x7f00000009c0)=',^,|\'.[', 0x0, &(0x7f0000000a00)={@align=0x5, {0x9, 0x9, 0x401, 0xffffffffffffff61}}, 0x401, &(0x7f0000000a40), &(0x7f0000000a80)}) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x17, 0x25, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @alu={0x4, 0x0, 0x9, 0x0, 0x4, 0xffffffffffffffc0, 0x8}, @ldst={0x0, 0x3, 0x6, 0x1, 0x7, 0x20, 0xffffffffffffffff}, @exit, @generic={0xff, 0xe, 0x4, 0x200, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x53}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_fd={0x18, 0x6, 0x1, 0x0, r2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='syzkaller\x00', 0x6, 0x5d, &(0x7f0000000580)=""/93, 0x40f00, 0x4, '\x00', r3, @cgroup_sysctl=0x12, r0, 0x8, &(0x7f0000000940)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000b00)=[r0, r1, r0, r1, r0, r1, r1, r0, r4]}, 0x94) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) (async, rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x80000002}) (async, rerun: 64) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r9 = socket$inet(0x2, 0x2, 0x73) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000e00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c00)={0x178, 0x1403, 0x100, 0x70bd2b, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv_slave_0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dvmrp0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pim6reg1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x178}, 0x1, 0x0, 0x0, 0x40}, 0x48880) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4ffd, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)='\b', 0x1}, {0x0}], 0x2, 0x0, 0x0, 0x60000000}, 0x884) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x5}, 0x10) 0s ago: executing program 5 (id=5320): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a5f5fde31abc816a3c47e25a6d0cbe49ba8f9f869f35d1f710db6bfcbc49ec9533ac8127d4fda8164789e9e388271e9c36391f21fff45c1d1f7f6ce7ee817fc1c55153f68f7fc70c5f8a08ec61fefba9683096e59c0d4d7ccc0db823b9dc38069c2336e1630f16e835b390646094d13a13b8257228c34b6c665ca1b31f383239f4b6fe1ab766ca4c337128614dd8f3b5e70283111c2f17fa6a8e67b6453b8fc7f84f3ce1e943219521e80cf60612b3431725290910629c1614aa6e13b92374763bb2d2318166f12e1b0340defc05"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1, r1}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000080000000003500000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000fffe0000940000000c62cdcd440000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) kernel console output (not intermixed with test programs): 24282 Comm: syz.4.4491 Not tainted syzkaller #0 PREEMPT(full) [ 777.444544][T24282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 777.444558][T24282] Call Trace: [ 777.444569][T24282] [ 777.444580][T24282] dump_stack_lvl+0xe8/0x150 [ 777.444621][T24282] should_fail_ex+0x410/0x560 [ 777.444654][T24282] _copy_from_user+0x2d/0xb0 [ 777.444689][T24282] ___sys_sendmsg+0x1c6/0x360 [ 777.444721][T24282] ? __lock_acquire+0x747/0x2de0 [ 777.444751][T24282] ? __pfx____sys_sendmsg+0x10/0x10 [ 777.444822][T24282] ? __fget_files+0x2a/0x420 [ 777.444852][T24282] ? __fget_files+0x3a2/0x420 [ 777.444896][T24282] __x64_sys_sendmsg+0x1b1/0x290 [ 777.444930][T24282] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 777.445015][T24282] do_syscall_64+0x166/0x520 [ 777.445041][T24282] ? trace_irq_disable+0x3b/0x140 [ 777.445063][T24282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.445087][T24282] ? clear_bhb_loop+0x70/0xc0 [ 777.445116][T24282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.445139][T24282] RIP: 0033:0x7fcc1759e159 [ 777.445161][T24282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.445181][T24282] RSP: 002b:00007fcc184dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 777.445205][T24282] RAX: ffffffffffffffda RBX: 00007fcc17825fa0 RCX: 00007fcc1759e159 [ 777.445222][T24282] RDX: 0000000004004000 RSI: 0000200000000dc0 RDI: 0000000000000003 [ 777.445237][T24282] RBP: 00007fcc184dc090 R08: 0000000000000000 R09: 0000000000000000 [ 777.445251][T24282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.445265][T24282] R13: 00007fcc17826038 R14: 00007fcc17825fa0 R15: 00007fffc06e0b58 [ 777.445301][T24282] [ 777.534454][ T6165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.750533][ T6156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.769856][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.890211][T17933] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 777.922938][T17933] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 777.922967][T17933] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 778.057141][T24303] netlink: 'syz.4.4496': attribute type 1 has an invalid length. [ 778.088696][T24303] netlink: 'syz.4.4496': attribute type 62 has an invalid length. [ 778.094322][ T8419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.349115][T24325] block nbd4: server does not support multiple connections per device. [ 778.349498][T24325] block nbd4: shutting down sockets [ 778.499353][T24322] bond4: (slave bond_slave_1): Device is not bonding slave [ 778.499405][T24322] bond4: option active_slave: invalid value (bond_slave_1) [ 778.528586][T24322] bond4 (unregistering): Released all slaves [ 778.668600][T24343] sctp: [Deprecated]: syz.6.4503 (pid 24343) Use of struct sctp_assoc_value in delayed_ack socket option. [ 778.668600][T24343] Use struct sctp_sack_info instead [ 778.965458][T24357] gretap0: entered promiscuous mode [ 778.986491][T24357] gretap0: left promiscuous mode [ 778.991800][T24351] netlink: 'syz.1.4505': attribute type 10 has an invalid length. [ 779.041494][T24358] gretap0: entered promiscuous mode [ 779.047271][T24358] gretap0: left promiscuous mode [ 779.208240][T24331] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 779.208269][T24331] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 779.210357][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 779.294789][T24331] tipc: Resetting bearer [ 779.338987][T24331] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 779.339011][T24331] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 779.437759][T24331] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 779.437784][T24331] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 779.528836][T24331] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 779.528872][T24331] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 779.623022][T24331] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 779.623047][T24331] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 779.694855][T24331] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 779.694879][T24331] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 779.993416][T24381] gretap1: entered promiscuous mode [ 780.042783][T24331] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 780.042811][T24331] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 780.141519][T24390] __nla_validate_parse: 7 callbacks suppressed [ 780.141543][T24390] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4514'. [ 780.397625][T24399] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4517'. [ 780.460167][T24399] Cannot find add_set index 0 as target [ 780.683305][T24416] tc_dump_action: action bad kind [ 781.076094][T24439] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 781.098734][T24439] batman_adv: batadv0: Removing interface: ipvlan2 [ 781.575774][T24464] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 781.624935][T24467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4535'. [ 781.625145][T24467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4535'. [ 781.676209][T24464] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 781.754165][T24469] sctp: [Deprecated]: syz.4.4538 (pid 24469) Use of struct sctp_assoc_value in delayed_ack socket option. [ 781.754165][T24469] Use struct sctp_sack_info instead [ 781.754688][T24464] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 781.837190][T24477] FAULT_INJECTION: forcing a failure. [ 781.837190][T24477] name failslab, interval 1, probability 0, space 0, times 0 [ 781.837230][T24477] CPU: 0 UID: 0 PID: 24477 Comm: syz.5.4539 Not tainted syzkaller #0 PREEMPT(full) [ 781.837252][T24477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 781.837265][T24477] Call Trace: [ 781.837273][T24477] [ 781.837283][T24477] dump_stack_lvl+0xe8/0x150 [ 781.837318][T24477] should_fail_ex+0x410/0x560 [ 781.837347][T24477] should_failslab+0xa8/0x100 [ 781.837372][T24477] ? skb_clone+0x212/0x3a0 [ 781.837399][T24477] kmem_cache_alloc_noprof+0xa1/0x600 [ 781.837433][T24477] ? skb_clone+0x212/0x3a0 [ 781.837465][T24477] skb_clone+0x212/0x3a0 [ 781.837495][T24477] __netlink_deliver_tap+0x413/0x860 [ 781.837536][T24477] ? netlink_deliver_tap+0x2e/0x1b0 [ 781.837566][T24477] netlink_deliver_tap+0x19c/0x1b0 [ 781.837600][T24477] netlink_unicast+0x781/0x940 [ 781.837636][T24477] netlink_sendmsg+0x813/0xb40 [ 781.837674][T24477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 781.837711][T24477] ? apparmor_socket_sendmsg+0x98/0x360 [ 781.837733][T24477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 781.837762][T24477] sock_sendmsg_nosec+0x13a/0x180 [ 781.837795][T24477] ____sys_sendmsg+0x54e/0x850 [ 781.837826][T24477] ? __pfx_____sys_sendmsg+0x10/0x10 [ 781.837861][T24477] ? import_iovec+0x73/0xa0 [ 781.837889][T24477] ___sys_sendmsg+0x2a5/0x360 [ 781.837913][T24477] ? __lock_acquire+0x747/0x2de0 [ 781.837938][T24477] ? __pfx____sys_sendmsg+0x10/0x10 [ 781.837998][T24477] ? __fget_files+0x2a/0x420 [ 781.838025][T24477] ? __fget_files+0x3a2/0x420 [ 781.838062][T24477] __x64_sys_sendmsg+0x1b1/0x290 [ 781.838091][T24477] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 781.838138][T24477] do_syscall_64+0x166/0x520 [ 781.838160][T24477] ? trace_irq_disable+0x3b/0x140 [ 781.838181][T24477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.838202][T24477] ? clear_bhb_loop+0x70/0xc0 [ 781.838238][T24477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.838258][T24477] RIP: 0033:0x7f3d2b79e159 [ 781.838277][T24477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.838295][T24477] RSP: 002b:00007f3d2c6ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 781.838318][T24477] RAX: ffffffffffffffda RBX: 00007f3d2ba25fa0 RCX: 00007f3d2b79e159 [ 781.838333][T24477] RDX: 0000000004004000 RSI: 0000200000000dc0 RDI: 0000000000000003 [ 781.838347][T24477] RBP: 00007f3d2c6ef090 R08: 0000000000000000 R09: 0000000000000000 [ 781.838360][T24477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 781.838372][T24477] R13: 00007f3d2ba26038 R14: 00007f3d2ba25fa0 R15: 00007fff03f49058 [ 781.838404][T24477] [ 781.936695][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c408800: rx timeout, send abort [ 781.938728][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888079eae400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 782.158614][T24464] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 782.202182][T24479] netlink: 136 bytes leftover after parsing attributes in process `syz.4.4540'. [ 782.258308][T24483] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4542'. [ 782.346349][T24484] v: renamed from veth0_vlan (while UP) [ 782.429942][T17931] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.429995][T17931] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.436993][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c408800: abort rx timeout. Force session deactivation [ 782.499874][T17931] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.499940][ T6145] net_ratelimit: 40 callbacks suppressed [ 782.499954][ T6145] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 782.509889][T17933] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 782.509917][T17933] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 782.609871][ T6145] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.684213][T24498] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4546'. [ 782.804229][T24504] netlink: 564 bytes leftover after parsing attributes in process `syz.4.4549'. [ 782.894330][T12044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.897408][T24513] xt_hashlimit: size too large, truncated to 1048576 [ 782.897426][T24513] xt_hashlimit: max too large, truncated to 1048576 [ 783.012153][ T6145] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 783.038050][ T6145] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 783.038082][ T6145] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 783.119511][T24523] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4558'. [ 783.120086][ T6156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.143566][T24523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4558'. [ 783.145201][T24523] netlink: 'syz.4.4558': attribute type 1 has an invalid length. [ 783.342473][ T6156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.469617][T24542] FAULT_INJECTION: forcing a failure. [ 783.469617][T24542] name failslab, interval 1, probability 0, space 0, times 0 [ 783.469652][T24542] CPU: 0 UID: 0 PID: 24542 Comm: syz.6.4561 Not tainted syzkaller #0 PREEMPT(full) [ 783.469676][T24542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 783.469693][T24542] Call Trace: [ 783.469702][T24542] [ 783.469712][T24542] dump_stack_lvl+0xe8/0x150 [ 783.469749][T24542] should_fail_ex+0x410/0x560 [ 783.469776][T24542] ? __alloc_skb+0x1db/0x7a0 [ 783.469800][T24542] should_failslab+0xa8/0x100 [ 783.469833][T24542] ? __alloc_skb+0x1db/0x7a0 [ 783.469854][T24542] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 783.469887][T24542] ? __alloc_skb+0x18d/0x7a0 [ 783.469911][T24542] ? __alloc_skb+0x1db/0x7a0 [ 783.469941][T24542] __alloc_skb+0x1db/0x7a0 [ 783.469979][T24542] __ip_append_data+0x2aa9/0x3cf0 [ 783.470146][T24542] ? __pfx_ip_reply_glue_bits+0x10/0x10 [ 783.470186][T24542] ? ipv4_mtu+0x23/0x670 [ 783.470244][T24542] ? __pfx___ip_append_data+0x10/0x10 [ 783.470274][T24542] ? ipv4_mtu+0x561/0x670 [ 783.470307][T24542] ? ip_setup_cork+0x512/0x920 [ 783.470343][T24542] ip_send_unicast_reply+0x97a/0x18b0 [ 783.470368][T24542] ? check_path+0x21/0x40 [ 783.470419][T24542] ? __pfx_ip_send_unicast_reply+0x10/0x10 [ 783.470466][T24542] ? tcp_v4_destroy_sock+0x38a/0x570 [ 783.470551][T24542] tcp_v4_send_reset+0x1626/0x27d0 [ 783.470581][T24542] ? tcp_v4_send_reset+0x685/0x27d0 [ 783.470618][T24542] ? __pfx_tcp_v4_send_reset+0x10/0x10 [ 783.470645][T24542] ? tcp_rcv_state_process+0x2dce/0x4980 [ 783.470726][T24542] tcp_v4_do_rcv+0xb1f/0x13b0 [ 783.470752][T24542] ? __local_bh_enable_ip+0xd6/0x140 [ 783.470826][T24542] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 783.470850][T24542] __release_sock+0x25b/0x390 [ 783.470888][T24542] ? __tcp_close+0x69a/0xe70 [ 783.470910][T24542] __tcp_close+0x6be/0xe70 [ 783.470934][T24542] ? __mptcp_close_ssk+0x77/0x12c0 [ 783.471002][T24542] ? __local_bh_enable_ip+0xd6/0x140 [ 783.471035][T24542] __mptcp_close_ssk+0x58e/0x12c0 [ 783.471079][T24542] mptcp_destroy_common+0x15c/0x330 [ 783.471129][T24542] ? timer_delete+0x247/0x340 [ 783.471182][T24542] mptcp_destroy+0x82/0x120 [ 783.471208][T24542] __mptcp_destroy_sock+0x156/0x370 [ 783.471243][T24542] __mptcp_close+0x8a4/0xd10 [ 783.471277][T24542] ? mptcp_close+0x28/0x1a0 [ 783.471305][T24542] mptcp_close+0x28/0x1a0 [ 783.471329][T24542] inet_release+0x143/0x190 [ 783.471387][T24542] __sock_release+0xa0/0x1f0 [ 783.471450][T24542] ? __pfx_sock_close+0x10/0x10 [ 783.471482][T24542] sock_close+0x1c/0x30 [ 783.471528][T24542] __fput+0x418/0xa50 [ 783.471592][T24542] fput_close_sync+0x11f/0x240 [ 783.471622][T24542] ? __pfx_fput_close_sync+0x10/0x10 [ 783.471666][T24542] __x64_sys_close+0x7e/0x110 [ 783.471698][T24542] do_syscall_64+0x166/0x520 [ 783.471722][T24542] ? trace_irq_disable+0x3b/0x140 [ 783.471745][T24542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.471769][T24542] ? clear_bhb_loop+0x70/0xc0 [ 783.471798][T24542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.471822][T24542] RIP: 0033:0x7f035fb9e159 [ 783.471843][T24542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.471863][T24542] RSP: 002b:00007f0360983028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 783.471887][T24542] RAX: ffffffffffffffda RBX: 00007f035fe25fa0 RCX: 00007f035fb9e159 [ 783.471929][T24542] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 783.471942][T24542] RBP: 00007f0360983090 R08: 0000000000000000 R09: 0000000000000000 [ 783.471957][T24542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.471978][T24542] R13: 00007f035fe26038 R14: 00007f035fe25fa0 R15: 00007ffd18bbfda8 [ 783.472016][T24542] [ 783.530552][ T6156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 784.262556][T24574] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0 [ 785.179770][T24603] __nla_validate_parse: 1 callbacks suppressed [ 785.179789][T24603] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4579'. [ 785.188961][T24602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4579'. [ 785.208375][T24608] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4579'. [ 785.266403][T24605] bridge1: port 1(erspan0) entered blocking state [ 785.266553][T24605] bridge1: port 1(erspan0) entered disabled state [ 785.266714][T24605] erspan0: entered allmulticast mode [ 785.291180][T24605] erspan0: entered promiscuous mode [ 785.339510][T24615] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4582'. [ 785.682223][T24631] FAULT_INJECTION: forcing a failure. [ 785.682223][T24631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.684006][T24631] CPU: 0 UID: 0 PID: 24631 Comm: syz.6.4587 Not tainted syzkaller #0 PREEMPT(full) [ 785.684036][T24631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 785.684051][T24631] Call Trace: [ 785.684061][T24631] [ 785.684072][T24631] dump_stack_lvl+0xe8/0x150 [ 785.684114][T24631] should_fail_ex+0x410/0x560 [ 785.684147][T24631] _copy_to_user+0x31/0xb0 [ 785.684179][T24631] simple_read_from_buffer+0xe1/0x170 [ 785.684222][T24631] proc_fail_nth_read+0x1bb/0x230 [ 785.684259][T24631] ? common_file_perm+0x20e/0x2b0 [ 785.684291][T24631] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 785.684332][T24631] ? rw_verify_area+0x24a/0x4c0 [ 785.684371][T24631] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 785.684416][T24631] vfs_read+0x213/0xa80 [ 785.684457][T24631] ? __pfx___mutex_lock+0x10/0x10 [ 785.684496][T24631] ? __pfx_vfs_read+0x10/0x10 [ 785.684531][T24631] ? __fget_files+0x2a/0x420 [ 785.684568][T24631] ? __fget_files+0x3a2/0x420 [ 785.684605][T24631] ? __fget_files+0x2a/0x420 [ 785.684648][T24631] ksys_read+0x150/0x270 [ 785.684694][T24631] ? __pfx_ksys_read+0x10/0x10 [ 785.684742][T24631] do_syscall_64+0x166/0x520 [ 785.684766][T24631] ? trace_irq_disable+0x3b/0x140 [ 785.684789][T24631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.684813][T24631] ? clear_bhb_loop+0x70/0xc0 [ 785.684843][T24631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.684867][T24631] RIP: 0033:0x7f035fb5e98e [ 785.684889][T24631] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 785.684910][T24631] RSP: 002b:00007f0360982fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 785.684985][T24631] RAX: ffffffffffffffda RBX: 00007f03609836c0 RCX: 00007f035fb5e98e [ 785.685004][T24631] RDX: 000000000000000f RSI: 00007f03609830a0 RDI: 0000000000000004 [ 785.685019][T24631] RBP: 00007f0360983090 R08: 0000000000000000 R09: 0000000000000000 [ 785.685034][T24631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.685048][T24631] R13: 00007f035fe26038 R14: 00007f035fe25fa0 R15: 00007ffd18bbfda8 [ 785.685086][T24631] [ 786.796007][T24679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4600'. [ 786.796397][T24674] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4599'. [ 786.995143][T24682] SET target dimension over the limit! [ 787.264752][T24689] rdma_rxe: rxe_newlink: failed to add lo [ 787.274264][T24689] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4605'. [ 787.277411][T24691] netlink: 'syz.5.4604': attribute type 11 has an invalid length. [ 787.345758][T24696] netlink: 'syz.1.4606': attribute type 4 has an invalid length. [ 787.374604][T24699] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4608'. [ 787.521433][T24706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4609'. [ 787.559173][T24701] net_ratelimit: 38 callbacks suppressed [ 787.559205][T24701] openvswitch: netlink: Missing key (keys=40, expected=100) [ 787.591292][ T6165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.613348][T17931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 787.624767][T17931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 787.624868][T17931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 787.677702][T24715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4609'. [ 787.780309][T17931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.122450][T17933] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 788.137146][T17933] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 788.137177][T17933] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 788.353562][T24749] tipc: Enabling of bearer rejected, failed to enable media [ 788.370098][T24750] tipc: Resetting bearer [ 788.557682][T24750] tipc: Disabling bearer [ 788.630361][ T6165] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 788.753308][ T6165] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 788.753780][ T6165] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 788.753823][ T6165] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 788.753861][ T6165] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 789.361269][T24788] syzkaller0: entered promiscuous mode [ 789.361295][T24788] syzkaller0: entered allmulticast mode [ 789.393748][T24790] netlink: 'syz.4.4629': attribute type 4 has an invalid length. [ 789.393767][T24790] netlink: 'syz.4.4629': attribute type 17 has an invalid length. [ 790.049972][T17933] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.050030][T17933] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.050066][T17933] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.050100][T17933] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.345703][T24827] __nla_validate_parse: 7 callbacks suppressed [ 790.345723][T24827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4637'. [ 790.510548][T24838] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4640'. [ 790.511118][T24838] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4640'. [ 790.671410][T24844] netlink: 'syz.6.4642': attribute type 1 has an invalid length. [ 790.671433][T24844] netlink: 756 bytes leftover after parsing attributes in process `syz.6.4642'. [ 790.674301][T24844] netlink: 108 bytes leftover after parsing attributes in process `syz.6.4642'. [ 790.843957][T24847] syzkaller0: entered promiscuous mode [ 790.843985][T24847] syzkaller0: entered allmulticast mode [ 790.844448][T24855] tipc: Enabling of bearer rejected, already enabled [ 790.909450][T24859] netlink: 'syz.1.4646': attribute type 11 has an invalid length. [ 790.909476][T24859] netlink: 'syz.1.4646': attribute type 4 has an invalid length. [ 790.909492][T24859] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4646'. [ 790.952534][T24847] netlink: 'syz.4.4641': attribute type 4 has an invalid length. [ 791.477604][T17933] IPVS: starting estimator thread 0... [ 791.547048][T24893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4652'. [ 791.560816][T24892] IPVS: using max 29 ests per chain, 69600 per kthread [ 791.580595][T24895] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4654'. [ 791.665251][T24886] tap0: tun_chr_ioctl cmd 1074025677 [ 791.665330][T24886] tap0: linktype set to 804 [ 792.751080][T17931] net_ratelimit: 42 callbacks suppressed [ 792.751104][T17931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 792.751133][T17931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 792.751254][T17931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 793.135705][T12044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.150299][ T6156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.260256][ T6156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 793.260369][ T6156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 793.260393][ T6156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 793.340367][ T6156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.771929][ T6156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 795.850047][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 796.886622][T24905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.888367][T24905] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.906250][T24905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 796.948357][T24905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 796.964633][T24905] 1·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 796.964662][T24905] 1·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 797.183769][T24921] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4658'. [ 797.184316][T24921] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4658'. [ 797.386509][T24934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4660'. [ 797.851337][T17931] net_ratelimit: 38 callbacks suppressed [ 797.851359][T17931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 797.851383][T17931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 797.851469][T17931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 797.951898][T24952] batman_adv: batadv0: Adding interface: syzkaller0 [ 797.951918][T24952] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.951952][T24952] batman_adv: batadv0: Interface activated: syzkaller0 [ 797.985342][T24952] xt_bpf: check failed: parse error [ 798.218606][T24951] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 798.362835][T24951] batman_adv: batadv0: Removing interface: syzkaller0 [ 798.376848][T17933] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 798.377170][T17933] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 798.377236][T17933] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 798.461413][ T4936] block nbd4: Receive control failed (result -32) [ 798.670319][T17933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.755435][T24987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4674'. [ 798.834950][T24985] FAULT_INJECTION: forcing a failure. [ 798.834950][T24985] name failslab, interval 1, probability 0, space 0, times 0 [ 798.834987][T24985] CPU: 1 UID: 0 PID: 24985 Comm: syz.0.4673 Not tainted syzkaller #0 PREEMPT(full) [ 798.835012][T24985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 798.835025][T24985] Call Trace: [ 798.835036][T24985] [ 798.835046][T24985] dump_stack_lvl+0xe8/0x150 [ 798.835085][T24985] should_fail_ex+0x410/0x560 [ 798.835136][T24985] should_failslab+0xa8/0x100 [ 798.835164][T24985] ? skb_clone+0x212/0x3a0 [ 798.835196][T24985] kmem_cache_alloc_noprof+0xa1/0x600 [ 798.835246][T24985] ? skb_clone+0x212/0x3a0 [ 798.835282][T24985] skb_clone+0x212/0x3a0 [ 798.835316][T24985] __netlink_deliver_tap+0x413/0x860 [ 798.835362][T24985] ? netlink_deliver_tap+0x2e/0x1b0 [ 798.835397][T24985] netlink_deliver_tap+0x19c/0x1b0 [ 798.835426][T24985] netlink_unicast+0x781/0x940 [ 798.835478][T24985] netlink_sendmsg+0x813/0xb40 [ 798.835522][T24985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 798.835564][T24985] ? apparmor_socket_sendmsg+0x98/0x360 [ 798.835592][T24985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 798.835624][T24985] sock_sendmsg_nosec+0x13a/0x180 [ 798.835663][T24985] ____sys_sendmsg+0x54e/0x850 [ 798.835699][T24985] ? __pfx_____sys_sendmsg+0x10/0x10 [ 798.835738][T24985] ? import_iovec+0x73/0xa0 [ 798.835770][T24985] ___sys_sendmsg+0x2a5/0x360 [ 798.835798][T24985] ? __lock_acquire+0x747/0x2de0 [ 798.835827][T24985] ? __pfx____sys_sendmsg+0x10/0x10 [ 798.835898][T24985] ? __fget_files+0x2a/0x420 [ 798.835930][T24985] ? __fget_files+0x3a2/0x420 [ 798.835982][T24985] __x64_sys_sendmsg+0x1b1/0x290 [ 798.836015][T24985] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 798.836068][T24985] do_syscall_64+0x166/0x520 [ 798.836094][T24985] ? trace_irq_disable+0x3b/0x140 [ 798.836118][T24985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.836142][T24985] ? clear_bhb_loop+0x70/0xc0 [ 798.836171][T24985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.836194][T24985] RIP: 0033:0x7f5da019e159 [ 798.836216][T24985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.836236][T24985] RSP: 002b:00007f5da106d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 798.836261][T24985] RAX: ffffffffffffffda RBX: 00007f5da0425fa0 RCX: 00007f5da019e159 [ 798.836279][T24985] RDX: 00000000000000c4 RSI: 0000200000000140 RDI: 0000000000000004 [ 798.836366][T24985] RBP: 00007f5da106d090 R08: 0000000000000000 R09: 0000000000000000 [ 798.836380][T24985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.836394][T24985] R13: 00007f5da0426038 R14: 00007f5da0425fa0 R15: 00007ffd35083f98 [ 798.836438][T24985] [ 798.842884][T24985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4673'. [ 798.867456][T17931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.890585][ T6156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 798.890617][ T6156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 799.241592][T25000] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4677'. [ 799.390044][T25003] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4679'. [ 799.399095][T25003] tipc: Enabling of bearer rejected, already enabled [ 799.625685][T25009] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4681'. [ 799.887513][T25019] syzkaller1: entered promiscuous mode [ 799.887555][T25019] syzkaller1: entered allmulticast mode [ 799.907090][T25017] x_tables: duplicate underflow at hook 3 [ 800.284746][T25041] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4689'. [ 800.369466][T25031] syzkaller1: entered promiscuous mode [ 800.369486][T25031] syzkaller1: entered allmulticast mode [ 800.412669][T25045] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4690'. [ 800.554259][T25054] tipc: Enabling of bearer rejected, already enabled [ 800.906895][T25074] syzkaller0: entered promiscuous mode [ 800.906920][T25074] syzkaller0: entered allmulticast mode [ 801.213695][T25083] lo speed is unknown, defaulting to 1000 [ 801.215556][T25083] wg2 speed is unknown, defaulting to 1000 [ 801.617036][T25099] veth0_to_team: entered allmulticast mode [ 801.827169][T25106] tipc: Enabling of bearer rejected, failed to enable media [ 802.301009][T25124] __nla_validate_parse: 5 callbacks suppressed [ 802.301030][T25124] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4706'. [ 802.523098][T25128] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4707'. [ 802.637012][T25131] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4708'. [ 802.783603][T25133] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4708'. [ 803.005233][T17933] net_ratelimit: 36 callbacks suppressed [ 803.005255][T17933] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 803.005280][T17933] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 803.005367][T17933] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 803.151077][ T6156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.294415][T17923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.511186][T17933] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 803.511302][T17933] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 803.511328][T17933] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 803.839060][T25173] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4716'. [ 803.994133][T25177] wg1: left promiscuous mode [ 803.994159][T25177] wg1: left allmulticast mode [ 804.026252][T17923] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 804.026277][T17923] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 804.139169][T25184] sctp: [Deprecated]: syz.0.4719 (pid 25184) Use of int in max_burst socket option deprecated. [ 804.139169][T25184] Use struct sctp_assoc_value instead [ 804.471086][T25194] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4721'. [ 805.596846][T25226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4726'. [ 805.649383][T25227] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4728'. [ 805.680471][T25231] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4731'. [ 805.680495][T25231] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4731'. [ 805.934207][T25247] tc_dump_action: action bad kind [ 806.043424][T25262] netlink: 'syz.1.4735': attribute type 23 has an invalid length. [ 806.482056][T25279] netlink: 'syz.0.4739': attribute type 1 has an invalid length. [ 806.524064][T25279] geneve2: entered promiscuous mode [ 806.528829][T25279] netlink: 'syz.0.4739': attribute type 1 has an invalid length. [ 806.727887][T25294] tipc: Enabling of bearer rejected, already enabled [ 807.912260][T25342] __nla_validate_parse: 3 callbacks suppressed [ 807.912282][T25342] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4757'. [ 807.963779][T25345] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4758'. [ 807.980624][T25314] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4745'. [ 808.130183][T17923] net_ratelimit: 38 callbacks suppressed [ 808.130206][T17923] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 808.130240][T17923] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 808.130325][T17923] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 808.223902][T25349] netlink: 136 bytes leftover after parsing attributes in process `syz.4.4759'. [ 808.267050][T25354] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4760'. [ 808.268940][T25349] tipc: Enabling of bearer rejected, already enabled [ 808.331555][ T8419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.493856][T25359] x_tables: duplicate entry at hook 1 [ 808.603354][T25359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4762'. [ 808.620243][T25359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4762'. [ 808.640855][T17933] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 808.640973][T17933] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 808.641053][T17933] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 808.647166][T25363] netlink: 'syz.1.4762': attribute type 1 has an invalid length. [ 808.722419][ T6145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.806883][T25373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4764'. [ 808.830942][T17923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.046618][T25388] netlink: 'syz.5.4767': attribute type 1 has an invalid length. [ 809.067213][T25392] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4768'. [ 809.068637][T25392] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4768'. [ 809.151230][T17933] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 809.153130][T25388] bond4: entered promiscuous mode [ 809.153650][T25388] 8021q: adding VLAN 0 to HW filter on device bond4 [ 809.258753][T25389] bond4: (slave bridge2): making interface the new active one [ 809.258778][T25389] bridge2: entered promiscuous mode [ 809.273296][T25389] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 809.296049][T25396] bond4: (slave bridge3): Enslaving as a backup interface with an up link [ 810.001262][T25414] tipc: Enabling of bearer rejected, already enabled [ 810.218371][T25428] netlink: 'syz.4.4776': attribute type 1 has an invalid length. [ 810.278052][T25427] netlink: 'syz.4.4776': attribute type 1 has an invalid length. [ 810.797298][T25454] netlink: 'syz.4.4781': attribute type 10 has an invalid length. [ 810.816936][T25454] team0: Port device dummy0 added [ 811.841123][T25484] tipc: Enabling of bearer rejected, already enabled [ 812.102835][T25504] vlan2: entered allmulticast mode [ 812.102863][T25504] dummy0: entered allmulticast mode [ 812.182691][T25508] netlink: 'syz.1.4795': attribute type 16 has an invalid length. [ 812.182716][T25508] netlink: 'syz.1.4795': attribute type 3 has an invalid length. [ 812.982148][T25534] bond4: option min_links: invalid value (18446744073709551612) [ 812.982180][T25534] bond4: option min_links: allowed values 0 - 2147483647 [ 812.986038][T25534] bond4 (unregistering): Released all slaves [ 813.170291][T17923] net_ratelimit: 39 callbacks suppressed [ 813.170312][T17923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.174145][T25536] 8021q: adding VLAN 0 to HW filter on device bond4 [ 813.174982][T25536] bridge0: port 1(bond4) entered blocking state [ 813.175099][T25536] bridge0: port 1(bond4) entered disabled state [ 813.175268][T25536] bond4: entered allmulticast mode [ 813.206993][T25536] bond4: entered promiscuous mode [ 813.230544][T17923] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 813.230626][T17923] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 813.230879][T17923] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 813.306808][T17923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.348689][T25548] __nla_validate_parse: 29 callbacks suppressed [ 813.348710][T25548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4802'. [ 813.542857][T25554] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4803'. [ 813.559470][T25558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4804'. [ 813.609337][T25566] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4803'. [ 813.635447][T25567] xt_IDLETIMER: timeout value is zero [ 813.699915][T25560] bridge0: port 2(vlan3) entered blocking state [ 813.700192][T25560] bridge0: port 2(vlan3) entered disabled state [ 813.700347][T25560] vlan3: entered allmulticast mode [ 813.700364][T25560] geneve0: entered allmulticast mode [ 813.704320][T25560] vlan3: entered promiscuous mode [ 813.704340][T25560] geneve0: entered promiscuous mode [ 813.743540][T17923] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 813.743601][T17923] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 813.743616][T17923] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 813.796791][T25566] bridge0: left promiscuous mode [ 813.796834][T25566] bridge0: left allmulticast mode [ 813.811722][T25566] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4803'. [ 814.174102][T25590] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4815'. [ 814.256109][ T6146] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 814.256133][ T6146] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 814.504397][T25605] netlink: 'syz.6.4816': attribute type 26 has an invalid length. [ 814.695811][T25612] veth5: entered allmulticast mode [ 814.949438][T25624] bridge0: port 3(wlan1) entered blocking state [ 814.949529][T25624] bridge0: port 3(wlan1) entered disabled state [ 814.951438][T25624] mac80211_hwsim hwsim65 wlan1: entered allmulticast mode [ 815.021860][T25624] mac80211_hwsim hwsim65 wlan1: entered promiscuous mode [ 815.046257][T25636] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4821'. [ 815.287345][T25650] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4823'. [ 816.564299][T25708] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4829'. [ 816.641406][T25710] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4829'. [ 817.042532][T25733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 817.077347][T25734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 817.177848][T25741] lo speed is unknown, defaulting to 1000 [ 817.189448][T25741] wg2 speed is unknown, defaulting to 1000 [ 817.358858][T25753] netlink: 'syz.6.4837': attribute type 4 has an invalid length. [ 817.890282][T25765] syzkaller0: entered promiscuous mode [ 817.890324][T25765] syzkaller0: entered allmulticast mode [ 817.949513][T25775] mac80211_hwsim hwsim36 ..ãc¤±…Ú•: renamed from wlan1 [ 818.341255][T17931] net_ratelimit: 36 callbacks suppressed [ 818.341278][T17931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 818.341303][T17931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 818.341388][T17931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 818.735874][T17923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.851810][ T6146] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 818.851905][ T6146] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 818.851929][ T6146] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 818.873889][ T6165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.914926][ T6146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.915075][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.731385][T25761] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.786565][T25781] __nla_validate_parse: 4 callbacks suppressed [ 820.786597][T25781] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4845'. [ 821.035556][T25761] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.109295][T25802] netlink: 'syz.5.4850': attribute type 4 has an invalid length. [ 821.145330][T25796] lo speed is unknown, defaulting to 1000 [ 821.266499][T25761] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.390361][T25796] wg2 speed is unknown, defaulting to 1000 [ 821.561985][T25761] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.820924][T17931] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.030364][ T6145] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.223564][T25826] syz_tun: entered allmulticast mode [ 822.243708][T25828] netlink: 'syz.6.4857': attribute type 1 has an invalid length. [ 822.280400][ T6145] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.280536][ T6145] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.445335][T25834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4858'. [ 822.867307][T25849] netlink: 'syz.5.4861': attribute type 4 has an invalid length. [ 823.024045][T25824] syz_tun: left allmulticast mode [ 823.105632][T25864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4865'. [ 823.208056][T25868] netlink: 'syz.5.4866': attribute type 1 has an invalid length. [ 823.268076][T25871] veth7: entered allmulticast mode [ 823.287994][T25871] bond5: (slave veth7): Enslaving as an active interface with a down link [ 823.460092][ T6145] net_ratelimit: 37 callbacks suppressed [ 823.460114][ T6145] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 823.460139][ T6145] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 823.460234][ T6145] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 823.533225][ T8419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.615013][T25890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.615309][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.745812][T17923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.746607][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.747641][ T6145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.913964][T25897] bridge3: entered promiscuous mode [ 823.913988][T25897] bridge3: entered allmulticast mode [ 823.930562][ T6165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.951339][T25897] team0: Port device bridge3 added [ 823.951541][T25899] bridge0: port 2(team0) entered blocking state [ 823.951706][T25899] bridge0: port 2(team0) entered disabled state [ 823.951855][T25899] team0: entered allmulticast mode [ 823.954534][T25899] team0: entered promiscuous mode [ 823.954555][T25899] dummy0: entered promiscuous mode [ 823.959305][T25903] netlink: 'syz.6.4874': attribute type 4 has an invalid length. [ 824.373681][T25931] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4879'. [ 824.753167][T25947] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4882'. [ 824.917803][T25942] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4882'. [ 824.968039][T25947] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4882'. [ 825.218331][T25970] netlink: 'syz.5.4888': attribute type 4 has an invalid length. [ 825.313511][T25975] lo: left promiscuous mode [ 825.313532][T25975] lo: left allmulticast mode [ 825.333366][T25975] tunl0: left promiscuous mode [ 825.333387][T25975] tunl0: left allmulticast mode [ 825.337688][T25975] gre0: left promiscuous mode [ 825.337705][T25975] gre0: left allmulticast mode [ 825.377810][T25975] gretap0: left promiscuous mode [ 825.377831][T25975] gretap0: left allmulticast mode [ 825.407528][T25975] erspan0: left promiscuous mode [ 825.407609][T25975] erspan0: left allmulticast mode [ 825.430468][T25975] ip_vti0: left promiscuous mode [ 825.430488][T25975] ip_vti0: left allmulticast mode [ 825.435490][T25975] ip6_vti0: left promiscuous mode [ 825.435507][T25975] ip6_vti0: left allmulticast mode [ 825.481083][T25975] sit0: left promiscuous mode [ 825.481102][T25975] sit0: left allmulticast mode [ 825.549118][T25975] ip6tnl0: left promiscuous mode [ 825.549140][T25975] ip6tnl0: left allmulticast mode [ 825.569388][T25975] ip6gre0: left promiscuous mode [ 825.569409][T25975] ip6gre0: left allmulticast mode [ 825.596707][T25975] ip6gretap0: left promiscuous mode [ 825.596791][T25975] ip6gretap0: left allmulticast mode [ 825.617494][T25975] bond0: left promiscuous mode [ 825.617515][T25975] bond0: left allmulticast mode [ 825.635327][T25975] team0: left promiscuous mode [ 825.635534][T25975] team0: left allmulticast mode [ 825.635548][T25975] xfrm0: left allmulticast mode [ 825.637731][T25975] batman_adv: batadv0: Interface deactivated: dummy0 [ 825.637780][T25975] dummy0: left promiscuous mode [ 825.637794][T25975] dummy0: left allmulticast mode [ 825.674149][T25975] nlmon0: left promiscuous mode [ 825.674209][T25975] nlmon0: left allmulticast mode [ 825.689034][T25975] batadv0: left promiscuous mode [ 825.689049][T25975] batadv0: left allmulticast mode [ 825.705975][T25975] vxcan0: left promiscuous mode [ 825.705994][T25975] vxcan0: left allmulticast mode [ 825.707373][T25975] vxcan1: left promiscuous mode [ 825.707390][T25975] vxcan1: left allmulticast mode [ 825.708727][T25975] veth0: left promiscuous mode [ 825.708744][T25975] veth0: left allmulticast mode [ 825.742936][T25975] veth1: left promiscuous mode [ 825.742950][T25975] veth1: left allmulticast mode [ 825.766133][T25975] wg0: left promiscuous mode [ 825.766155][T25975] wg0: left allmulticast mode [ 825.781547][T25975] wg2: left promiscuous mode [ 825.781566][T25975] wg2: left allmulticast mode [ 825.783844][T25975] veth1_to_bridge: left promiscuous mode [ 825.783862][T25975] veth1_to_bridge: left allmulticast mode [ 825.814680][T25975] veth0_to_bond: left promiscuous mode [ 825.814699][T25975] veth0_to_bond: left allmulticast mode [ 825.816904][T25975] bond_slave_0: left promiscuous mode [ 825.816922][T25975] bond_slave_0: left allmulticast mode [ 825.818946][T25975] veth1_to_bond: left promiscuous mode [ 825.818972][T25975] veth1_to_bond: left allmulticast mode [ 825.855032][T25975] bond_slave_1: left promiscuous mode [ 825.855064][T25975] bond_slave_1: left allmulticast mode [ 825.872948][T25975] veth0_to_team: left promiscuous mode [ 825.872966][T25975] veth0_to_team: left allmulticast mode [ 825.874824][T25975] team_slave_0: left promiscuous mode [ 825.874842][T25975] team_slave_0: left allmulticast mode [ 825.877086][T25975] C: left promiscuous mode [ 825.877102][T25975] C: left allmulticast mode [ 825.879308][T25975] team_slave_1: left promiscuous mode [ 825.879326][T25975] team_slave_1: left allmulticast mode [ 825.915201][T25975] veth0_to_batadv: left promiscuous mode [ 825.915219][T25975] veth0_to_batadv: left allmulticast mode [ 825.962335][T25975] batadv_slave_0: left promiscuous mode [ 825.962356][T25975] batadv_slave_0: left allmulticast mode [ 825.977753][T25975] veth1_to_batadv: left promiscuous mode [ 825.977805][T25975] veth1_to_batadv: left allmulticast mode [ 825.993900][T25975] batadv_slave_1: left promiscuous mode [ 825.993936][T25975] batadv_slave_1: left allmulticast mode [ 825.999431][T25975] xfrm0: left promiscuous mode [ 826.026700][T25975] veth0_to_hsr: left promiscuous mode [ 826.026721][T25975] veth0_to_hsr: left allmulticast mode [ 826.050607][T25975] veth1_to_hsr: left promiscuous mode [ 826.050626][T25975] veth1_to_hsr: left allmulticast mode [ 826.076245][T25975] hsr0: left promiscuous mode [ 826.076264][T25975] hsr0: left allmulticast mode [ 826.076277][T25975] hsr_slave_0: left allmulticast mode [ 826.076302][T25975] hsr_slave_1: left allmulticast mode [ 826.107089][T25975] veth1_virt_wifi: left promiscuous mode [ 826.107108][T25975] veth1_virt_wifi: left allmulticast mode [ 826.122891][T25975] veth0_virt_wifi: left promiscuous mode [ 826.122911][T25975] veth0_virt_wifi: left allmulticast mode [ 826.146310][T25975] vlan0: left promiscuous mode [ 826.148126][T25975] vlan0: left allmulticast mode [ 826.148273][T25975] vlan1: left promiscuous mode [ 826.148433][T25975] vlan1: left allmulticast mode [ 826.172012][T25975] macvlan0: left promiscuous mode [ 826.179398][T25975] veth1_vlan: left allmulticast mode [ 826.185994][T25975] macvlan1: left promiscuous mode [ 826.186012][T25975] macvlan1: left allmulticast mode [ 826.204851][T25975] ipvlan0: left promiscuous mode [ 826.204870][T25975] ipvlan0: left allmulticast mode [ 826.222140][T25975] ipvlan1: left promiscuous mode [ 826.222161][T25975] ipvlan1: left allmulticast mode [ 826.222175][T25975] v: left allmulticast mode [ 826.245962][T25975] veth0_macvtap: left allmulticast mode [ 826.256919][T25975] macvtap0: left promiscuous mode [ 826.256940][T25975] macvtap0: left allmulticast mode [ 826.259261][T25975] veth1_macvtap: left allmulticast mode [ 826.259449][T25975] macsec0: left promiscuous mode [ 826.259464][T25975] macsec0: left allmulticast mode [ 826.289185][T25975] geneve0: left promiscuous mode [ 826.289207][T25975] geneve0: left allmulticast mode [ 826.378433][T25975] geneve1: left promiscuous mode [ 826.378454][T25975] geneve1: left allmulticast mode [ 826.434450][T25993] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 826.454176][T25975] mac80211_hwsim hwsim47 wlan1: left promiscuous mode [ 826.454193][T25975] mac80211_hwsim hwsim47 wlan1: left allmulticast mode [ 826.454348][T25975] mac80211_hwsim hwsim48 wlan2: left promiscuous mode [ 826.454360][T25975] mac80211_hwsim hwsim48 wlan2: left allmulticast mode [ 826.454527][T25975] gre1: left promiscuous mode [ 826.454591][T25975] gre1: left allmulticast mode [ 826.485874][T25975] mac80211_hwsim hwsim51 wlan3: left promiscuous mode [ 826.485936][T25975] mac80211_hwsim hwsim51 wlan3: left allmulticast mode [ 826.491556][T25975] virt_wifi0: left allmulticast mode [ 826.493361][T25975] macsec1: left promiscuous mode [ 826.493378][T25975] macsec1: left allmulticast mode [ 826.577920][T25975] mac80211_hwsim hwsim54 wlan4: left promiscuous mode [ 826.577940][T25975] mac80211_hwsim hwsim54 wlan4: left allmulticast mode [ 826.578569][T25975] bond1: left promiscuous mode [ 826.578587][T25975] bond1: left allmulticast mode [ 826.580398][T25975] bridge_slave_1.: left promiscuous mode [ 826.580418][T25975] bridge_slave_1: left promiscuous mode [ 826.580597][T25975] bridge_slave_1.: left allmulticast mode [ 826.580611][T25975] bridge_slave_1: left allmulticast mode [ 826.633777][T25975] veth2: left promiscuous mode [ 826.633791][T25975] veth2: left allmulticast mode [ 826.663672][T25975] veth3: left promiscuous mode [ 826.663691][T25975] veth3: left allmulticast mode [ 826.665730][T25975] batadv1: left promiscuous mode [ 826.665748][T25975] batadv1: left allmulticast mode [ 826.725613][T25975] bond4: left promiscuous mode [ 826.725634][T25975] bridge2: left promiscuous mode [ 826.748413][T25975] veth7: left allmulticast mode [ 826.769930][T17923] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.769972][T17923] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.770006][T17923] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.770064][T17923] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.891752][T26000] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4896'. [ 827.078322][T26013] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4899'. [ 827.143922][T26015] netlink: 'syz.4.4900': attribute type 4 has an invalid length. [ 827.180833][T26017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4901'. [ 827.299177][T26025] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4903'. [ 827.473487][T26024] x_tables: unsorted underflow at hook 1 [ 827.573967][T26044] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4908'. [ 827.578730][T26042] debugfs: '.PÑè'óG!DEÒSˆ' already exists in 'ieee80211' [ 827.587070][T26043] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4908'. [ 827.675675][T26047] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.717438][T26049] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4909'. [ 827.747508][T26047] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.817999][T26047] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.861886][T26047] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.949955][T17931] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 827.950003][T17931] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 827.968189][T17931] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 827.968244][T17931] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 828.122928][T26056] C: renamed from veth1_to_team [ 828.127748][T26056] netlink: 'syz.4.4912': attribute type 1 has an invalid length. [ 828.127762][T26056] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4912'. [ 828.155555][T26059] netlink: 'syz.4.4912': attribute type 1 has an invalid length. [ 828.155574][T26059] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4912'. [ 828.350235][T26071] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4915'. [ 828.410862][T26076] lo: entered allmulticast mode [ 828.490646][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 828.560171][T17931] net_ratelimit: 59 callbacks suppressed [ 828.560190][T17931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 828.560211][T17931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 828.597806][T26082] netlink: 'syz.0.4918': attribute type 30 has an invalid length. [ 828.780496][T17965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.893058][T17931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.939205][T26097] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 828.955798][T26073] lo: left allmulticast mode [ 828.970842][T17965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.971010][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.060199][T26105] batadv1: entered promiscuous mode [ 829.060222][T26105] batadv1: entered allmulticast mode [ 829.073737][T17929] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 829.073823][T17929] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 829.127615][T26107] netlink: 'syz.5.4923': attribute type 2 has an invalid length. [ 829.142334][T17965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.767101][T26123] netlink: 'syz.0.4927': attribute type 4 has an invalid length. [ 831.005943][T26190] batman_adv: batadv0: Adding interface: dummy0 [ 831.005969][T26190] batman_adv: batadv0: Interface activated: dummy0 [ 831.968479][T26228] netlink: 'syz.6.4948': attribute type 11 has an invalid length. [ 831.978657][T26228] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 832.036546][ T31] audit: type=1804 audit(1789718601.259:13): pid=26232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4949" name="/newroot/343/cgroup.controllers" dev="tmpfs" ino=1774 res=1 errno=0 [ 832.040307][ T31] audit: type=1800 audit(1789718601.259:14): pid=26232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4949" name="cgroup.controllers" dev="tmpfs" ino=1774 res=0 errno=0 [ 832.245690][T26223] syzkaller0: entered promiscuous mode [ 832.245707][T26223] syzkaller0: entered allmulticast mode [ 832.277613][T26239] netlink: 'syz.6.4951': attribute type 2 has an invalid length. [ 832.278352][T26239] veth1_to_bond: entered allmulticast mode [ 832.278687][T26239] veth1_to_bond: entered promiscuous mode [ 832.279119][T26239] __nla_validate_parse: 9 callbacks suppressed [ 832.279135][T26239] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4951'. [ 832.316713][T26239] veth1_to_bond (unregistering): left allmulticast mode [ 832.316752][T26239] veth1_to_bond (unregistering): left promiscuous mode [ 832.339173][T26239] bond0: (slave bond_slave_1): Releasing backup interface [ 832.520890][T26247] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4953'. [ 832.584511][T26242] warn_alloc: 1 callbacks suppressed [ 832.584531][T26242] syz.5.4952: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 832.584598][T26242] CPU: 1 UID: 0 PID: 26242 Comm: syz.5.4952 Not tainted syzkaller #0 PREEMPT(full) [ 832.584621][T26242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 832.584635][T26242] Call Trace: [ 832.584673][T26242] [ 832.584684][T26242] dump_stack_lvl+0xe8/0x150 [ 832.584730][T26242] warn_alloc+0x24d/0x270 [ 832.584778][T26242] ? kasan_save_track+0x4f/0x80 [ 832.584801][T26242] ? kasan_save_track+0x3e/0x80 [ 832.584825][T26242] ? __pfx_warn_alloc+0x10/0x10 [ 832.584841][T26242] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 832.584869][T26242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.584909][T26242] __vmalloc_node_range_noprof+0x127/0x1540 [ 832.585004][T26242] ? rcu_is_watching+0x16/0xb0 [ 832.585077][T26242] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 832.585119][T26242] ? __kmalloc_cache_noprof+0x321/0x600 [ 832.585140][T26242] ? __kmalloc_cache_noprof+0x14d/0x600 [ 832.585157][T26242] ? xskq_create+0x56/0x220 [ 832.585182][T26242] xskq_create+0x148/0x220 [ 832.585202][T26242] ? xsk_init_queue+0x8a/0xe0 [ 832.585266][T26242] xsk_init_queue+0x8a/0xe0 [ 832.585299][T26242] xsk_setsockopt+0x52a/0x960 [ 832.585331][T26242] ? __pfx_xsk_setsockopt+0x10/0x10 [ 832.585363][T26242] ? __pfx_aa_sk_perm+0x10/0x10 [ 832.585397][T26242] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 832.585423][T26242] ? __pfx_xsk_setsockopt+0x10/0x10 [ 832.585452][T26242] do_sock_setsockopt+0x17c/0x1b0 [ 832.585482][T26242] __x64_sys_setsockopt+0x13d/0x1b0 [ 832.585511][T26242] do_syscall_64+0x166/0x520 [ 832.585534][T26242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.585555][T26242] ? clear_bhb_loop+0x70/0xc0 [ 832.585579][T26242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.585599][T26242] RIP: 0033:0x7f3d2b79e159 [ 832.585617][T26242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 832.585633][T26242] RSP: 002b:00007f3d2c6ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 832.585654][T26242] RAX: ffffffffffffffda RBX: 00007f3d2ba25fa0 RCX: 00007f3d2b79e159 [ 832.585669][T26242] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 832.585680][T26242] RBP: 00007f3d2b83506b R08: 0000000000000004 R09: 0000000000000000 [ 832.585691][T26242] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 832.585703][T26242] R13: 00007f3d2ba26038 R14: 00007f3d2ba25fa0 R15: 00007fff03f49058 [ 832.585745][T26242] [ 832.585798][T26242] Mem-Info: [ 832.585807][T26242] active_anon:6823 inactive_anon:0 isolated_anon:0 [ 832.585807][T26242] active_file:16 inactive_file:43929 isolated_file:0 [ 832.585807][T26242] unevictable:0 dirty:163 writeback:0 [ 832.585807][T26242] slab_reclaimable:12926 slab_unreclaimable:127617 [ 832.585807][T26242] mapped:41586 shmem:1001 pagetables:3469 [ 832.585807][T26242] sec_pagetables:0 bounce:0 [ 832.585807][T26242] kernel_misc_reclaimable:0 [ 832.585807][T26242] free:1243767 free_pcp:12236 free_cma:0 [ 832.586661][T26242] Node 0 active_anon:27292kB inactive_anon:0kB active_file:64kB inactive_file:175516kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:166344kB dirty:652kB writeback:0kB shmem:4004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16732kB pagetables:13756kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 832.586731][T26242] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 832.586780][T26242] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 832.586835][T26242] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 832.586874][T26242] Node 0 DMA32 free:1019736kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:27292kB inactive_anon:0kB active_file:64kB inactive_file:175516kB unevictable:0kB writepending:652kB zspages:0kB present:3129332kB managed:2546612kB mlocked:0kB bounce:0kB free_pcp:48804kB local_pcp:29252kB free_cma:0kB [ 832.586928][T26242] lowmem_reserve[]: 0 0 0 0 0 [ 832.587034][T26242] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 832.587107][T26242] lowmem_reserve[]: 0 0 0 0 0 [ 832.587186][T26242] Node 1 Normal free:3939972kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 832.587240][T26242] lowmem_reserve[]: 0 0 0 0 0 [ 832.587277][T26242] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 832.587391][T26242] Node 0 DMA32: 3055*4kB (UM) 1470*8kB (UME) 742*16kB (UM) 470*32kB (UM) 97*64kB (UM) 59*128kB (UME) 347*256kB (UME) 234*512kB (UM) 99*1024kB (UM) 5*2048kB (UM) 155*4096kB (UM) = 1019788kB [ 832.587551][T26242] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 832.587652][T26242] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 10*16kB (UM) 6*32kB (UM) 8*64kB (UM) 6*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3939972kB [ 832.587967][T26242] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 832.587986][T26242] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 832.588005][T26242] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 832.588024][T26242] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 832.588043][T26242] 44942 total pagecache pages [ 832.588053][T26242] 0 pages in swap cache [ 832.588062][T26242] Free swap = 124996kB [ 832.588072][T26242] Total swap = 124996kB [ 832.588545][T26242] 2097051 pages RAM [ 832.588557][T26242] 0 pages HighMem/MovableOnly [ 832.588565][T26242] 428782 pages reserved [ 832.588586][T26242] 0 pages cma reserved [ 833.333976][T26243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 833.337638][T26258] xt_LOG: prefix is not null-terminated [ 833.408977][T26259] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4956'. [ 833.699810][ T6146] net_ratelimit: 51 callbacks suppressed [ 833.699837][ T6146] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 833.699854][ T6146] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 834.210195][ T6146] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 834.210229][ T6146] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 834.251263][ T6146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.251464][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.375942][T26271] netlink: 'syz.5.4960': attribute type 3 has an invalid length. [ 834.391722][T17929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.441985][T26274] Bluetooth: hci0: unsupported parameter 5135 [ 834.442004][T26274] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 834.500800][T17923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.587673][T26278] netlink: 564 bytes leftover after parsing attributes in process `syz.5.4962'. [ 834.726282][T17931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 834.726318][T17931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 834.937056][T26280] bond3: (slave dummy0): Releasing active interface [ 834.937088][T26280] dummy0: left promiscuous mode [ 835.300223][T26298] netlink: 'syz.4.4968': attribute type 3 has an invalid length. [ 835.687868][T26318] netlink: 'syz.4.4972': attribute type 1 has an invalid length. [ 835.783817][T26318] 8021q: adding VLAN 0 to HW filter on device bond4 [ 835.889368][T26318] bond4: (slave geneve2): making interface the new active one [ 835.925912][T26318] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 835.996350][T17933] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.005619][T17923] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.009354][ T6145] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.010276][ T6145] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.040873][T26321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4972'. [ 836.403548][T26335] IPVS: set_ctl: invalid protocol: 2 100.1.1.0:0 [ 836.664708][T26346] dummy0: left promiscuous mode [ 836.948593][T26346] team0: Port device dummy0 removed [ 837.765547][T26374] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4986'. [ 837.816051][T26374] FAULT_INJECTION: forcing a failure. [ 837.816051][T26374] name failslab, interval 1, probability 0, space 0, times 0 [ 837.816089][T26374] CPU: 1 UID: 0 PID: 26374 Comm: syz.4.4986 Not tainted syzkaller #0 PREEMPT(full) [ 837.816115][T26374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 837.816130][T26374] Call Trace: [ 837.816140][T26374] [ 837.816151][T26374] dump_stack_lvl+0xe8/0x150 [ 837.816192][T26374] should_fail_ex+0x410/0x560 [ 837.816224][T26374] ? __alloc_skb+0x1db/0x7a0 [ 837.816250][T26374] should_failslab+0xa8/0x100 [ 837.816282][T26374] ? __alloc_skb+0x1db/0x7a0 [ 837.816306][T26374] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 837.816343][T26374] ? __alloc_skb+0x18d/0x7a0 [ 837.816370][T26374] ? __alloc_skb+0x1db/0x7a0 [ 837.816404][T26374] __alloc_skb+0x1db/0x7a0 [ 837.816436][T26374] netlink_ack+0x136/0xb30 [ 837.816468][T26374] ? __pfx_genl_rcv_msg+0x10/0x10 [ 837.816496][T26374] ? __pfx_nl80211_post_doit+0x10/0x10 [ 837.816566][T26374] netlink_rcv_skb+0x2a4/0x4a0 [ 837.816601][T26374] ? __pfx_genl_rcv_msg+0x10/0x10 [ 837.816630][T26374] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 837.816682][T26374] ? down_read+0x2be/0x330 [ 837.816750][T26374] genl_rcv+0x28/0x40 [ 837.816774][T26374] netlink_unicast+0x7bd/0x940 [ 837.816819][T26374] netlink_sendmsg+0x813/0xb40 [ 837.816877][T26374] ? __pfx_netlink_sendmsg+0x10/0x10 [ 837.816919][T26374] ? apparmor_socket_sendmsg+0x98/0x360 [ 837.816947][T26374] ? __pfx_netlink_sendmsg+0x10/0x10 [ 837.816979][T26374] sock_sendmsg_nosec+0x13a/0x180 [ 837.817017][T26374] ____sys_sendmsg+0x54e/0x850 [ 837.817055][T26374] ? __pfx_____sys_sendmsg+0x10/0x10 [ 837.817094][T26374] ? import_iovec+0x73/0xa0 [ 837.817126][T26374] ___sys_sendmsg+0x2a5/0x360 [ 837.817153][T26374] ? __lock_acquire+0x747/0x2de0 [ 837.817181][T26374] ? __pfx____sys_sendmsg+0x10/0x10 [ 837.817248][T26374] ? __fget_files+0x2a/0x420 [ 837.817278][T26374] ? __fget_files+0x3a2/0x420 [ 837.817320][T26374] __x64_sys_sendmsg+0x1b1/0x290 [ 837.817352][T26374] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 837.817406][T26374] do_syscall_64+0x166/0x520 [ 837.817440][T26374] ? trace_irq_disable+0x3b/0x140 [ 837.817461][T26374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.817541][T26374] ? clear_bhb_loop+0x70/0xc0 [ 837.817567][T26374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.817588][T26374] RIP: 0033:0x7fcc1759e159 [ 837.817608][T26374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 837.817627][T26374] RSP: 002b:00007fcc184dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 837.817650][T26374] RAX: ffffffffffffffda RBX: 00007fcc17825fa0 RCX: 00007fcc1759e159 [ 837.817665][T26374] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000003 [ 837.817679][T26374] RBP: 00007fcc184dc090 R08: 0000000000000000 R09: 0000000000000000 [ 837.817692][T26374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 837.817705][T26374] R13: 00007fcc17826038 R14: 00007fcc17825fa0 R15: 00007fffc06e0b58 [ 837.817745][T26374] [ 837.901915][ T5636] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 837.955007][ T5636] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 837.963010][ T5636] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 838.029305][ T5636] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 838.040040][ T5636] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 838.491705][ T4936] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 838.493013][ T4936] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 838.493796][ T4936] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 838.510278][ T4936] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 838.535992][ T4936] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 838.690180][T26390] netlink: 176 bytes leftover after parsing attributes in process `syz.6.4989'. [ 838.730190][ T8419] net_ratelimit: 37 callbacks suppressed [ 838.730213][ T8419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.852101][T26390] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4989'. [ 838.942776][T26394] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4989'. [ 838.980729][T17923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.110890][ T6146] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 839.110921][ T6146] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 839.160325][T17931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.371954][T26400] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4992'. [ 839.375658][T26400] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4992'. [ 839.375681][T26400] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4992'. [ 839.377432][T26401] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4992'. [ 839.377453][T26401] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4992'. [ 839.470636][T26405] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4993'. [ 839.623454][T17931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 839.623488][T17931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 839.883795][T26422] FAULT_INJECTION: forcing a failure. [ 839.883795][T26422] name failslab, interval 1, probability 0, space 0, times 0 [ 839.883835][T26422] CPU: 1 UID: 0 PID: 26422 Comm: syz.6.4997 Not tainted syzkaller #0 PREEMPT(full) [ 839.883862][T26422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 839.883877][T26422] Call Trace: [ 839.883888][T26422] [ 839.883898][T26422] dump_stack_lvl+0xe8/0x150 [ 839.883939][T26422] should_fail_ex+0x410/0x560 [ 839.883970][T26422] ? __alloc_skb+0x1db/0x7a0 [ 839.883997][T26422] should_failslab+0xa8/0x100 [ 839.884029][T26422] ? __alloc_skb+0x1db/0x7a0 [ 839.884062][T26422] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 839.884102][T26422] ? __alloc_skb+0x18d/0x7a0 [ 839.884129][T26422] ? __alloc_skb+0x1db/0x7a0 [ 839.884164][T26422] __alloc_skb+0x1db/0x7a0 [ 839.884196][T26422] netlink_ack+0x136/0xb30 [ 839.884227][T26422] ? __pfx_genl_rcv_msg+0x10/0x10 [ 839.884290][T26422] ? __pfx_nl80211_post_doit+0x10/0x10 [ 839.884339][T26422] netlink_rcv_skb+0x2a4/0x4a0 [ 839.884374][T26422] ? __pfx_genl_rcv_msg+0x10/0x10 [ 839.884403][T26422] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 839.884455][T26422] ? down_read+0x2be/0x330 [ 839.884489][T26422] genl_rcv+0x28/0x40 [ 839.884514][T26422] netlink_unicast+0x7bd/0x940 [ 839.884557][T26422] netlink_sendmsg+0x813/0xb40 [ 839.884604][T26422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 839.884648][T26422] ? apparmor_socket_sendmsg+0x98/0x360 [ 839.884678][T26422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 839.884713][T26422] sock_sendmsg_nosec+0x13a/0x180 [ 839.884754][T26422] ____sys_sendmsg+0x54e/0x850 [ 839.884792][T26422] ? __pfx_____sys_sendmsg+0x10/0x10 [ 839.884834][T26422] ? import_iovec+0x73/0xa0 [ 839.884868][T26422] ___sys_sendmsg+0x2a5/0x360 [ 839.884896][T26422] ? __lock_acquire+0x747/0x2de0 [ 839.884926][T26422] ? __pfx____sys_sendmsg+0x10/0x10 [ 839.885000][T26422] ? __fget_files+0x2a/0x420 [ 839.885031][T26422] ? __fget_files+0x3a2/0x420 [ 839.885082][T26422] __x64_sys_sendmsg+0x1b1/0x290 [ 839.885117][T26422] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 839.885194][T26422] do_syscall_64+0x166/0x520 [ 839.885221][T26422] ? trace_irq_disable+0x3b/0x140 [ 839.885245][T26422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.885270][T26422] ? clear_bhb_loop+0x70/0xc0 [ 839.885301][T26422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.885326][T26422] RIP: 0033:0x7f035fb9e159 [ 839.885349][T26422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.885370][T26422] RSP: 002b:00007f0360983028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 839.885397][T26422] RAX: ffffffffffffffda RBX: 00007f035fe25fa0 RCX: 00007f035fb9e159 [ 839.885415][T26422] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000003 [ 839.885431][T26422] RBP: 00007f0360983090 R08: 0000000000000000 R09: 0000000000000000 [ 839.885447][T26422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.885463][T26422] R13: 00007f035fe26038 R14: 00007f035fe25fa0 R15: 00007ffd18bbfda8 [ 839.885503][T26422] [ 840.159296][ T6145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.159509][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.271844][T17923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.650370][ T4936] Bluetooth: hci7: command tx timeout [ 841.315082][T26444] x_tables: duplicate underflow at hook 1 [ 841.381082][T26437] 8021q: adding VLAN 0 to HW filter on device bond6 [ 841.442691][T26440] bond6 (unregistering): Released all slaves [ 841.657394][T26373] lo speed is unknown, defaulting to 1000 [ 841.701864][T26373] wg2 speed is unknown, defaulting to 1000 [ 842.225425][T26468] netlink: 'syz.0.5009': attribute type 1 has an invalid length. [ 842.297351][T26468] tipc: Enabled bearer , priority 26 [ 842.357381][T26468] sctp: [Deprecated]: syz.0.5009 (pid 26468) Use of struct sctp_assoc_value in delayed_ack socket option. [ 842.357381][T26468] Use struct sctp_sack_info instead [ 842.730278][ T4936] Bluetooth: hci7: command tx timeout [ 842.884333][T26483] __nla_validate_parse: 73 callbacks suppressed [ 842.884356][T26483] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5014'. [ 843.204408][T26496] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5015'. [ 843.491834][T26490] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.747286][T26490] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.801136][T26509] net_ratelimit: 25 callbacks suppressed [ 843.801176][T26509] openvswitch: netlink: Message has 8 unknown bytes. [ 843.857785][T17931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.857994][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.858581][T26373] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.858785][T26373] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.858941][T26373] bridge_slave_0: entered allmulticast mode [ 843.899959][T26373] bridge_slave_0: entered promiscuous mode [ 843.988150][T26373] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.988327][T26373] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.988572][T26373] bridge_slave_1: entered allmulticast mode [ 844.014006][T26373] bridge_slave_1: entered promiscuous mode [ 844.129485][T26506] lo speed is unknown, defaulting to 1000 [ 844.142447][T26373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.146781][T17931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 844.146810][T17931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 844.176540][T26373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.225907][T26515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 844.251099][T26490] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.277430][T26506] wg2 speed is unknown, defaulting to 1000 [ 844.353646][T26373] team0: Port device team_slave_0 added [ 844.372590][T26373] team0: Port device team_slave_1 added [ 844.388879][T26490] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.660402][ T6165] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 844.660437][ T6165] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 844.676064][T26373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.676122][T26373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.676189][T26373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.686361][T26373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.686397][T26373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.686473][T26373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 844.699501][ T6146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.810927][ T8419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.813407][ T4936] Bluetooth: hci7: command tx timeout [ 844.876878][T17931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.097347][T26373] hsr_slave_0: entered promiscuous mode [ 845.101133][T26373] hsr_slave_1: entered promiscuous mode [ 845.102087][T26373] debugfs: 'hsr0' already exists in 'hsr' [ 845.102108][T26373] Cannot create hsr debugfs directory [ 845.194795][T26525] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5023'. [ 845.236683][T26523] pimreg: entered allmulticast mode [ 845.580176][ T6165] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.580671][T17931] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.580710][T17931] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.773598][ T6146] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.229063][T26540] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5027'. [ 846.340440][T26534] macvtap1: entered promiscuous mode [ 846.340465][T26534] vlan0: entered promiscuous mode [ 846.340977][T26534] macvtap1: entered allmulticast mode [ 846.340995][T26534] vlan0: entered allmulticast mode [ 846.341010][T26534] veth0_vlan: entered allmulticast mode [ 846.533466][T26536] macvtap2: entered promiscuous mode [ 846.533725][T26536] macvtap2: entered allmulticast mode [ 846.763118][T26373] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 846.782694][T26373] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 846.783483][T26373] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 846.805449][T26373] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 846.807587][T26373] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 846.842287][T26373] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 846.846290][T26373] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 846.876303][T26373] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 846.890128][ T4936] Bluetooth: hci7: command tx timeout [ 847.121031][T26558] FAULT_INJECTION: forcing a failure. [ 847.121031][T26558] name failslab, interval 1, probability 0, space 0, times 0 [ 847.121064][T26558] CPU: 0 UID: 0 PID: 26558 Comm: syz.6.5029 Not tainted syzkaller #0 PREEMPT(full) [ 847.121086][T26558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 847.121099][T26558] Call Trace: [ 847.121171][T26558] [ 847.121181][T26558] dump_stack_lvl+0xe8/0x150 [ 847.121233][T26558] should_fail_ex+0x410/0x560 [ 847.121263][T26558] should_failslab+0xa8/0x100 [ 847.121291][T26558] ? skb_clone+0x212/0x3a0 [ 847.121320][T26558] kmem_cache_alloc_noprof+0xa1/0x600 [ 847.121355][T26558] ? skb_clone+0x212/0x3a0 [ 847.121388][T26558] skb_clone+0x212/0x3a0 [ 847.121421][T26558] __netlink_deliver_tap+0x413/0x860 [ 847.121464][T26558] ? netlink_deliver_tap+0x2e/0x1b0 [ 847.121496][T26558] netlink_deliver_tap+0x19c/0x1b0 [ 847.121566][T26558] netlink_unicast+0x781/0x940 [ 847.121642][T26558] netlink_sendmsg+0x813/0xb40 [ 847.121686][T26558] ? __pfx_netlink_sendmsg+0x10/0x10 [ 847.121729][T26558] ? apparmor_socket_sendmsg+0x98/0x360 [ 847.121758][T26558] ? __pfx_netlink_sendmsg+0x10/0x10 [ 847.121790][T26558] sock_sendmsg_nosec+0x13a/0x180 [ 847.121828][T26558] ____sys_sendmsg+0x54e/0x850 [ 847.121864][T26558] ? __pfx_____sys_sendmsg+0x10/0x10 [ 847.121904][T26558] ? import_iovec+0x73/0xa0 [ 847.121936][T26558] ___sys_sendmsg+0x2a5/0x360 [ 847.121964][T26558] ? __lock_acquire+0x747/0x2de0 [ 847.121993][T26558] ? __pfx____sys_sendmsg+0x10/0x10 [ 847.122063][T26558] ? __fget_files+0x2a/0x420 [ 847.122093][T26558] ? __fget_files+0x3a2/0x420 [ 847.122146][T26558] __x64_sys_sendmsg+0x1b1/0x290 [ 847.122177][T26558] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 847.122228][T26558] do_syscall_64+0x166/0x520 [ 847.122251][T26558] ? trace_irq_disable+0x3b/0x140 [ 847.122273][T26558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.122295][T26558] ? clear_bhb_loop+0x70/0xc0 [ 847.122321][T26558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.122343][T26558] RIP: 0033:0x7f035fb9e159 [ 847.122362][T26558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.122381][T26558] RSP: 002b:00007f0360983028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 847.122406][T26558] RAX: ffffffffffffffda RBX: 00007f035fe25fa0 RCX: 00007f035fb9e159 [ 847.122422][T26558] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 847.122436][T26558] RBP: 00007f0360983090 R08: 0000000000000000 R09: 0000000000000000 [ 847.122449][T26558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 847.122462][T26558] R13: 00007f035fe26038 R14: 00007f035fe25fa0 R15: 00007ffd18bbfda8 [ 847.122496][T26558] [ 847.486382][T26373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 847.572347][T26373] 8021q: adding VLAN 0 to HW filter on device team0 [ 847.607015][ T6145] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.607134][ T6145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 847.675416][ T6146] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.675556][ T6146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 847.999506][T26575] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5035'. [ 848.044857][T26569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5034'. [ 848.146779][T26578] vlan2: entered allmulticast mode [ 848.146800][T26578] bridge2: entered allmulticast mode [ 848.151065][T26580] bridge2: port 1(erspan0) entered blocking state [ 848.153734][T26580] bridge2: port 1(erspan0) entered disabled state [ 848.154058][T26580] erspan0: entered allmulticast mode [ 848.186286][T26580] erspan0: entered promiscuous mode [ 848.197292][T26580] bridge2: port 1(erspan0) entered blocking state [ 848.197456][T26580] bridge2: port 1(erspan0) entered forwarding state [ 848.532987][T26596] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5038'. [ 848.533017][T26596] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5038'. [ 848.562432][T26588] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5036'. [ 848.632087][T26596] ipvlan2: entered promiscuous mode [ 848.637856][T26596] team0: Device ipvlan2 failed to register rx_handler [ 849.102838][T17929] net_ratelimit: 28 callbacks suppressed [ 849.102922][T17929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.270194][T17929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.331120][T17931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 849.331153][T17931] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 849.541597][T26373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 849.568719][T26621] openvswitch: netlink: Message has 8 unknown bytes. [ 849.621773][ T6145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.622020][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.712200][T26627] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5043'. [ 849.841248][ T6156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 849.841280][ T6156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 849.953122][T26627] ±ÿ: renamed from lo [ 850.201995][T17929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.267838][T26638] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5048'. [ 850.330136][ T6145] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 850.330222][ T6145] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 850.330257][ T6145] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 850.330306][ T6145] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 850.393006][T26641] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.5050'. [ 850.906457][T26373] veth0_vlan: entered promiscuous mode [ 850.943191][T26373] veth1_vlan: entered promiscuous mode [ 851.050411][T26658] netlink: 136 bytes leftover after parsing attributes in process `syz.4.5053'. [ 851.074239][T26373] veth0_macvtap: entered promiscuous mode [ 851.085038][T26658] tipc: Enabling of bearer rejected, already enabled [ 851.106834][T26373] veth1_macvtap: entered promiscuous mode [ 851.184663][T26373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 851.232280][T26373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 851.442576][ T6146] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.442620][ T6146] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.442652][ T6146] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.442683][ T6146] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.665688][T26669] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5058'. [ 851.744335][T26673] xt_cgroup: invalid path, errno=-2 [ 851.841449][T17929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.841470][T17929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.113441][ T6145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.113465][ T6145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.661984][T26691] netlink: 'syz.0.5063': attribute type 83 has an invalid length. [ 852.953445][T26698] tipc: Enabling of bearer rejected, already enabled [ 853.217120][T26712] __nla_validate_parse: 1 callbacks suppressed [ 853.217142][T26712] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5067'. [ 853.852653][T26702] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 854.404962][T26747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5075'. [ 854.443793][ T6156] net_ratelimit: 29 callbacks suppressed [ 854.443813][ T6156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 854.443837][ T6156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 854.584666][T26749] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5077'. [ 854.620162][ T6156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.720214][T26753] netlink: 136 bytes leftover after parsing attributes in process `syz.4.5079'. [ 854.789195][T26753] tipc: Enabling of bearer rejected, already enabled [ 854.793305][T17929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.941769][T26763] openvswitch: netlink: Message has 8 unknown bytes. [ 854.957451][ T6146] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 854.957480][ T6146] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 855.258598][T26775] xt_l2tp: invalid flags combination: 8 [ 855.287094][T26772] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5083'. [ 855.374171][ T6156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.374374][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.471108][ T6165] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 855.520578][T26783] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5085'. [ 855.590061][T26785] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5088'. [ 855.590085][T26785] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5088'. [ 855.744266][T26793] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5089'. [ 856.185898][T26800] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5091'. [ 856.540894][T26804] tipc: Enabling of bearer rejected, failed to enable media [ 856.587683][T26810] syzkaller1: entered promiscuous mode [ 856.587707][T26810] syzkaller1: entered allmulticast mode [ 856.925079][T26821] netlink: 'syz.7.5099': attribute type 1 has an invalid length. [ 856.925103][T26821] netlink: 'syz.7.5099': attribute type 3 has an invalid length. [ 857.425380][T26838] netlink: 'syz.4.5101': attribute type 1 has an invalid length. [ 857.438354][T26835] netlink: 'syz.5.5100': attribute type 4 has an invalid length. [ 859.548305][T26827] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.549186][T26827] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.620814][T17965] net_ratelimit: 26 callbacks suppressed [ 859.620836][T17965] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 859.620863][T17965] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 860.041574][T20153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.130596][ T6156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 860.130629][ T6156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 860.170081][ T6156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.262219][T26827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 860.310179][ T6146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.342270][T26827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 860.641871][ T6156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 860.641984][ T6156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 861.121281][ T6165] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.121341][ T6165] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.121385][ T6165] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.121427][ T6165] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.123764][T26838] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 861.144903][ T6145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.491381][T26848] tipc: Resetting bearer [ 861.560009][T12044] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 861.777666][T14769] wg2 speed is unknown, defaulting to 1000 [ 861.806949][T26866] __nla_validate_parse: 5 callbacks suppressed [ 861.806973][T26866] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5105'. [ 861.831689][T26861] geneve0: entered promiscuous mode [ 861.837043][T26861] geneve0: left promiscuous mode [ 861.895867][T26868] netlink: 136 bytes leftover after parsing attributes in process `syz.4.5106'. [ 862.179933][ T5641] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 862.381554][T26877] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5107'. [ 862.425970][T26882] batman_adv: batadv0: Adding interface: dummy0 [ 862.425987][T26882] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 862.426017][T26882] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 862.764226][T26891] Cannot find map_set index 4 as target [ 863.035560][T26896] syzkaller0: entered promiscuous mode [ 863.035584][T26896] syzkaller0: entered allmulticast mode [ 863.140783][T26902] x_tables: duplicate underflow at hook 2 [ 863.347275][T26914] netlink: 136 bytes leftover after parsing attributes in process `syz.6.5121'. [ 864.154674][T26927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5123'. [ 864.675803][ T6146] net_ratelimit: 24 callbacks suppressed [ 864.675824][ T6146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.739887][T26954] netlink: 'syz.6.5131': attribute type 1 has an invalid length. [ 864.739906][T26954] netlink: 248 bytes leftover after parsing attributes in process `syz.6.5131'. [ 864.778390][T26961] syzkaller1: left promiscuous mode [ 864.778450][T26961] syzkaller1: left allmulticast mode [ 864.800855][ T6165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.098450][T26972] tipc: Enabling of bearer rejected, already enabled [ 865.413337][T26981] netlink: 136 bytes leftover after parsing attributes in process `syz.7.5135'. [ 865.478213][ T6156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 865.478246][ T6156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 865.617988][T26987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5137'. [ 865.694919][T26987] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5137'. [ 865.839723][T17965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.951161][ T6146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.020289][ T6146] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 866.020321][ T6146] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 866.058850][T26999] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5139'. [ 866.058873][T26999] IPv6: NLM_F_CREATE should be specified when creating new route [ 866.078573][T26999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 866.091544][T20184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.130314][T27031] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5148'. [ 867.707032][T27049] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5152'. [ 867.913700][T27057] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5154'. [ 867.972894][T27060] xt_l2tp: invalid flags combination: 8 [ 868.463557][T27071] netlink: 'syz.7.5158': attribute type 1 has an invalid length. [ 868.791997][T27078] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5159'. [ 869.202157][T27091] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5164'. [ 869.394087][T27099] xfrm1: entered allmulticast mode [ 869.513141][T27101] netlink: 136 bytes leftover after parsing attributes in process `syz.6.5167'. [ 869.865377][T27107] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 870.143117][ T6146] net_ratelimit: 25 callbacks suppressed [ 870.143140][ T6146] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 870.143176][ T6146] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 870.227410][T27121] sit0: entered promiscuous mode [ 870.228023][T27121] netlink: 'syz.7.5172': attribute type 1 has an invalid length. [ 870.228039][T27121] netlink: 9 bytes leftover after parsing attributes in process `syz.7.5172'. [ 870.392347][ T6165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.458593][T27126] veth3: entered allmulticast mode [ 870.510489][ T6146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.803279][T27135] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5174'. [ 870.892996][ T6165] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 870.893031][ T6165] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 871.368296][T27147] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5179'. [ 871.410108][ T6156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 871.410137][ T6156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 871.501811][ T6156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.627596][ T6165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.750301][T27169] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5183'. [ 872.272208][T27189] x_tables: duplicate entry at hook 3 [ 872.277916][T27186] __nla_validate_parse: 2 callbacks suppressed [ 872.277933][T27186] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5187'. [ 872.312105][T27189] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5188'. [ 872.638580][T27201] netlink: 'syz.6.5191': attribute type 1 has an invalid length. [ 873.006081][T27197] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5191'. [ 873.076524][T27197] netlink: 'syz.6.5191': attribute type 10 has an invalid length. [ 873.076548][T27197] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5191'. [ 873.582934][T27197] dummy0: entered promiscuous mode [ 873.584687][T27197] batman_adv: batadv0: Interface deactivated: dummy0 [ 873.584871][T27197] batman_adv: batadv0: Removing interface: dummy0 [ 873.657277][T27218] netlink: 'syz.4.5194': attribute type 1 has an invalid length. [ 873.657298][T27218] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5194'. [ 873.814974][T27222] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5197'. [ 874.036501][T27229] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5198'. [ 874.059613][T27231] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5199'. [ 874.686280][T27255] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5204'. [ 875.205740][T27276] netlink: 'syz.0.5210': attribute type 4 has an invalid length. [ 875.214960][ T5641] net_ratelimit: 24 callbacks suppressed [ 875.214978][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.243290][ T6156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 875.243329][ T6156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 875.283135][T27253] ip_tables: iptables: counters copy to user failed while replacing table [ 875.322351][T27276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5210'. [ 875.506912][T27282] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 875.754399][ T6145] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 875.754436][ T6145] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 875.875998][T27298] ip6gretap1: entered promiscuous mode [ 876.010283][T17931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.123034][ T6165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.325755][T27314] netlink: 'syz.0.5217': attribute type 2 has an invalid length. [ 876.340562][T27316] netlink: 'syz.0.5217': attribute type 2 has an invalid length. [ 876.500664][T17965] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 877.052885][T27342] netlink: 'syz.4.5224': attribute type 10 has an invalid length. [ 877.054324][T27342] syz_tun: entered promiscuous mode [ 877.121901][T27342] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 877.631515][T27368] __nla_validate_parse: 3 callbacks suppressed [ 877.631550][T27368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5231'. [ 877.668493][T27375] netlink: 'syz.6.5230': attribute type 21 has an invalid length. [ 877.668514][T27375] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5230'. [ 877.826833][T27375] netlink: 'syz.6.5230': attribute type 21 has an invalid length. [ 877.826855][T27375] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5230'. [ 877.900071][T17933] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 877.900126][T17933] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 877.900162][T17933] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 877.900195][T17933] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 878.362077][T27388] syzkaller0: entered promiscuous mode [ 878.362103][T27388] syzkaller0: entered allmulticast mode [ 878.406454][T27388] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5236'. [ 878.476715][T27398] tipc: Enabling of bearer rejected, failed to enable media [ 878.732690][T27404] netlink: 'syz.0.5241': attribute type 50 has an invalid length. [ 878.732729][T27404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5241'. [ 878.875036][T27411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5244'. [ 878.875075][T27411] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5244'. [ 878.918264][T27411] geneve3: entered promiscuous mode [ 878.918358][T27411] geneve3: entered allmulticast mode [ 878.960439][ T6165] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.963390][ T6165] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.963485][ T6165] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.963521][ T6165] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.226622][T27419] netlink: 'syz.6.5246': attribute type 1 has an invalid length. [ 879.226643][T27419] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5246'. [ 879.480430][T27425] netlink: 'syz.7.5248': attribute type 21 has an invalid length. [ 879.480451][T27425] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5248'. [ 879.598712][T27425] netlink: 'syz.7.5248': attribute type 21 has an invalid length. [ 879.598732][T27425] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5248'. [ 879.680040][T17929] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 879.680540][T17929] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 879.680579][T17929] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 879.687672][T17929] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 879.898757][T27433] netlink: 'syz.5.5249': attribute type 3 has an invalid length. [ 880.426249][T27451] syzkaller0: left promiscuous mode [ 880.426452][T27451] syzkaller0: left allmulticast mode [ 880.591109][T17929] net_ratelimit: 27 callbacks suppressed [ 880.591130][T17929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.663246][T17923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.692278][T17929] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 880.692309][T17929] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 880.982712][T27464] bond5: (slave geneve3): making interface the new active one [ 880.986724][T27464] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 881.090723][T27459] 8021q: adding VLAN 0 to HW filter on device bond5 [ 881.203850][T17933] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 881.203886][T17933] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 881.279360][T27459] tipc: Resetting bearer [ 881.290650][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.362272][ T8424] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 881.394176][T12044] wg2 speed is unknown, defaulting to 1000 [ 881.402812][T17923] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 881.403636][T17923] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 881.403731][T17923] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 881.403816][T17923] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 881.699946][T17933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.717887][T17929] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 881.717914][T17929] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 882.090743][T12044] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 882.328349][T27498] validate_nla: 2 callbacks suppressed [ 882.328368][T27498] netlink: 'syz.5.5266': attribute type 2 has an invalid length. [ 882.395656][T27489] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 882.395691][T27489] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.777284][T27489] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 882.777323][T27489] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.106941][T27489] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 883.107041][T27489] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.143466][T27515] __nla_validate_parse: 6 callbacks suppressed [ 883.143485][T27515] netlink: 136 bytes leftover after parsing attributes in process `syz.4.5269'. [ 883.238927][T27489] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 883.239015][T27489] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.648386][T27526] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 883.648433][T27526] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.648462][T27526] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 883.723411][T27529] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5273'. [ 883.723446][T27529] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5273'. [ 883.778202][T27529] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5273'. [ 883.778232][T27529] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5273'. [ 883.940192][T27535] syzkaller0: entered promiscuous mode [ 883.940216][T27535] syzkaller0: entered allmulticast mode [ 884.002539][T27526] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 884.002579][T27526] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.002612][T27526] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 884.050950][T27537] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5276'. [ 884.070065][T17933] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 884.070097][T17933] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.160780][T17933] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 884.160812][T17933] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.252645][ T6165] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 884.252681][ T6165] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.348296][T27526] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 884.348331][T27526] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.348360][T27526] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 884.718081][T27526] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 884.718121][T27526] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.718150][T27526] netdevsim netdevsim6 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 884.835472][ T6145] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 884.835507][ T6145] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.080008][ T6146] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 885.080044][ T6146] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 885.080071][ T6146] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 885.089822][T17933] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 885.089855][T17933] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 885.089880][T17933] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 885.270140][T27556] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5279'. [ 885.279867][T27556] siw: device registration error -23 [ 885.340275][ T6165] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 885.340307][ T6165] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 885.340333][ T6165] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 885.344713][T17933] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 885.344743][T17933] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 885.344769][T17933] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 885.607438][T27564] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5280'. [ 885.870518][T17933] net_ratelimit: 20 callbacks suppressed [ 885.870540][T17933] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 885.870566][T17933] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 885.954733][T27580] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5287'. [ 886.240221][ T6165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.254471][ T6146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.461376][T27591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5289'. [ 886.778496][ T6145] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 886.778527][ T6145] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 886.883314][T27580] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 887.200477][ T31] audit: type=1800 audit(1789718656.429:15): pid=27603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5291" name=B702 dev="tmpfs" ino=2158 res=0 errno=0 [ 887.280755][ T6165] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 887.280785][ T6165] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 887.284944][ T31] audit: type=1800 audit(1789718656.509:16): pid=27611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5291" name=B702 dev="tmpfs" ino=2158 res=0 errno=0 [ 887.404565][ T6146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.411406][ T6165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.800880][T27605] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 887.825738][T27605] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 888.086654][T27605] vda: unable to read partition table [ 888.158055][T27626] __nla_validate_parse: 1 callbacks suppressed [ 888.158074][T27626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5296'. [ 888.504085][T27632] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5297'. [ 889.752911][T27665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5309'. [ 889.837727][T27670] netlink: 'syz.5.5311': attribute type 6 has an invalid length. [ 889.957562][T27672] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 889.957602][T27672] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 889.957630][T27672] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 890.003590][T27673] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5312'. [ 890.003621][T27673] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5312'. [ 890.130279][T27673] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5312'. [ 890.130313][T27673] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5312'. [ 890.282491][T27672] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 890.282533][T27672] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 890.282566][T27672] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 890.410131][T27672] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 890.410167][T27672] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 890.410194][T27672] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 890.570927][ T32] INFO: task syz.2.4330:23651 blocked for more than 143 seconds. [ 890.570951][ T32] Not tainted syzkaller #0 [ 890.570963][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 890.570974][ T32] task:syz.2.4330 state:D stack:22664 pid:23651 tgid:23650 ppid:18333 task_flags:0x400140 flags:0x00080002 [ 890.571035][ T32] Call Trace: [ 890.571044][ T32] [ 890.571085][ T32] __schedule+0x17db/0x58f0 [ 890.571191][ T32] ? __pfx___schedule+0x10/0x10 [ 890.571271][ T32] ? schedule+0x90/0x2b0 [ 890.571296][ T32] schedule+0x164/0x2b0 [ 890.571320][ T32] schedule_preempt_disabled+0x13/0x30 [ 890.571342][ T32] __mutex_lock+0x7c1/0x1550 [ 890.571371][ T32] ? __mutex_lock+0x5d4/0x1550 [ 890.571399][ T32] ? nfsd_nl_unlock_export_doit+0x2ef/0x580 [ 890.571469][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 890.571495][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 890.571550][ T32] ? kern_path+0xd1/0x150 [ 890.571629][ T32] nfsd_nl_unlock_export_doit+0x2ef/0x580 [ 890.571662][ T32] ? __nla_parse+0x40/0x60 [ 890.571696][ T32] ? __pfx_nfsd_nl_unlock_export_doit+0x10/0x10 [ 890.571729][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 890.571759][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 890.571797][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 890.571835][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 890.571878][ T32] ? bpf_lsm_capable+0x9/0x20 [ 890.571901][ T32] ? security_capable+0x7e/0x2c0 [ 890.571938][ T32] genl_rcv_msg+0x614/0x7a0 [ 890.571973][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 890.572001][ T32] ? __pfx_nfsd_nl_unlock_export_doit+0x10/0x10 [ 890.572050][ T32] netlink_rcv_skb+0x226/0x4a0 [ 890.572086][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 890.572142][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 890.572196][ T32] ? down_read+0x2be/0x330 [ 890.572230][ T32] genl_rcv+0x28/0x40 [ 890.572262][ T32] netlink_unicast+0x7bd/0x940 [ 890.572307][ T32] netlink_sendmsg+0x813/0xb40 [ 890.572353][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 890.572399][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 890.572429][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 890.572464][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 890.572506][ T32] ____sys_sendmsg+0x54e/0x850 [ 890.572544][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 890.572587][ T32] ? import_iovec+0x73/0xa0 [ 890.572622][ T32] ___sys_sendmsg+0x2a5/0x360 [ 890.572653][ T32] ? __lock_acquire+0x747/0x2de0 [ 890.572683][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 890.572730][ T32] ? futex_wait+0x2a2/0x390 [ 890.572851][ T32] ? __fget_files+0x2a/0x420 [ 890.572879][ T32] ? __fget_files+0x3a2/0x420 [ 890.572919][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 890.572949][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 890.572999][ T32] do_syscall_64+0x166/0x520 [ 890.573022][ T32] ? trace_irq_disable+0x3b/0x140 [ 890.573044][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.573067][ T32] ? clear_bhb_loop+0x70/0xc0 [ 890.573113][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.573135][ T32] RIP: 0033:0x7fc1b5b9e159 [ 890.573155][ T32] RSP: 002b:00007fc1b6ae4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 890.573177][ T32] RAX: ffffffffffffffda RBX: 00007fc1b5e25fa0 RCX: 00007fc1b5b9e159 [ 890.573194][ T32] RDX: 0000000004000080 RSI: 00002000000000c0 RDI: 000000000000000c [ 890.573209][ T32] RBP: 00007fc1b5c3506b R08: 0000000000000000 R09: 0000000000000000 [ 890.573223][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 890.573236][ T32] R13: 00007fc1b5e26038 R14: 00007fc1b5e25fa0 R15: 00007ffd5872b588 [ 890.573276][ T32] [ 890.573326][ T32] [ 890.573326][ T32] Showing all locks held in the system: [ 890.573364][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 890.573456][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 890.573615][ T32] locks held by getty/5376: 2, on CPU#1: [ 890.573631][ T32] #0: ffff8880355a90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 890.573740][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 890.573808][ T32] locks held by kworker/u8:10/17929: 2, last CPU#0: [ 890.573824][ T32] #0: ffff88803226a140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 890.573907][ T32] #1: ffffc90003ab7c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 890.573966][ T32] locks held by kworker/u8:16/17933: 2, on CPU#0: [ 890.573982][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 890.574039][ T32] #1: ffffc90003b17c40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 890.574103][ T32] locks held by syz.3.3134/18741: 2, on CPU#1: [ 890.574118][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 890.574169][ T32] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 890.574227][ T32] locks held by syz-executor/19096: 1, last CPU#1: [ 890.574241][ T32] #0: ffff888031a8cce0 (&xt[i].mutex){+.+.}-{4:4}, at: xt_find_table_lock+0x55/0x400 [ 890.574333][ T32] locks held by syz-executor/19519: 2, last CPU#0: [ 890.574348][ T32] #0: ffff88803eb441c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 890.574448][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: count_memcg_event_mm+0x21/0x260 [ 890.574509][ T32] locks held by syz.2.4330/23651: 2, on CPU#0: [ 890.574524][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 890.574575][ T32] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_export_doit+0x2ef/0x580 [ 890.574633][ T32] locks held by syz.1.4856/25826: 2, on CPU#0: [ 890.574648][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 890.574724][ T32] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 890.574781][ T32] locks held by syz.7.5275/27531: 3, on CPU#1: [ 890.574796][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 890.574846][ T32] #1: ffff88807b1506e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 890.574905][ T32] #2: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_get_reqs_dumpit+0xf7/0xc40 [ 890.574982][ T32] locks held by syz.6.5312/27672: 4, on CPU#1: [ 890.574998][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 890.575048][ T32] #1: ffff88805201d128 (&dev->mutex){....}-{4:4}, at: devlink_get_from_attrs_lock+0x34a/0x490 [ 890.575148][ T32] #2: ffff88807ead5258 (&devlink->lock_key#12){+.+.}-{4:4}, at: devlink_get_from_attrs_lock+0x360/0x490 [ 890.575215][ T32] #3: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 890.575281][ T32] locks held by syz.4.5317/27688: 2, on CPU#1: [ 890.575297][ T32] #0: ffff8880557ee0e0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3e/0x100 [ 890.575416][ T32] #1: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 890.575474][ T32] [ 890.575504][ T32] ============================================= [ 890.575504][ T32] [ 890.803505][ T32] NMI backtrace for cpu 0 [ 890.803525][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 890.803556][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 890.803595][ T32] Call Trace: [ 890.803626][ T32] [ 890.803652][ T32] dump_stack_lvl+0xe8/0x150 [ 890.803751][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 890.803893][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 890.804032][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 890.804108][ T32] sys_info+0x135/0x170 [ 890.804223][ T32] watchdog+0xfd7/0x1030 [ 890.804322][ T32] ? watchdog+0x1c7/0x1030 [ 890.804389][ T32] kthread+0x38b/0x480 [ 890.804466][ T32] ? __pfx_watchdog+0x10/0x10 [ 890.804513][ T32] ? __pfx_kthread+0x10/0x10 [ 890.804568][ T32] ret_from_fork+0x514/0xb70 [ 890.804676][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 890.804775][ T32] ? __switch_to+0xc89/0x1420 [ 890.804885][ T32] ? __pfx_kthread+0x10/0x10 [ 890.804942][ T32] ret_from_fork_asm+0x1a/0x30 [ 890.805112][ T32] [ 890.805142][ T32] Sending NMI from CPU 0 to CPUs 1: [ 890.805331][ C1] NMI backtrace for cpu 1 [ 890.805347][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 890.805371][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 890.805383][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 890.805444][ C1] Code: e8 fe 24 55 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ef 24 c5 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 890.805462][ C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 890.805480][ C1] RAX: 1ffffffff35a7400 RBX: 00000000000003fd RCX: 0000000000000000 [ 890.805492][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 890.805503][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 890.805514][ C1] R10: dffffc0000000000 R11: ffffffff8572a560 R12: dffffc0000000000 [ 890.805527][ C1] R13: 0000000000000000 R14: ffffffff9ad3a0c0 R15: 0000000000000000 [ 890.805539][ C1] FS: 0000000000000000(0000) GS:ffff888124dd1000(0000) knlGS:0000000000000000 [ 890.805553][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 890.805565][ C1] CR2: 00007f3d2c5556c8 CR3: 0000000073e76000 CR4: 00000000003526f0 [ 890.805580][ C1] Call Trace: [ 890.805611][ C1] [ 890.805620][ C1] wait_for_lsr+0x184/0x2f0 [ 890.805641][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 890.805694][ C1] serial8250_console_write+0xaa1/0x1200 [ 890.805718][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 890.805741][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 890.805758][ C1] ? __schedule+0x17f1/0x58f0 [ 890.805801][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 890.805864][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 890.805886][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 890.805911][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 890.805939][ C1] nbcon_kthread_func+0x679/0x880 [ 890.805959][ C1] ? nbcon_kthread_func+0x163/0x880 [ 890.805976][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 890.805996][ C1] ? __kthread_parkme+0x71/0x1f0 [ 890.806020][ C1] ? __kthread_parkme+0x199/0x1f0 [ 890.806046][ C1] kthread+0x38b/0x480 [ 890.806061][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 890.806077][ C1] ? __pfx_kthread+0x10/0x10 [ 890.806093][ C1] ret_from_fork+0x514/0xb70 [ 890.806110][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 890.806135][ C1] ? __switch_to+0xc89/0x1420 [ 890.806159][ C1] ? __pfx_kthread+0x10/0x10 [ 890.806175][ C1] ret_from_fork_asm+0x1a/0x30 [ 890.806208][ C1] [ 890.900963][T12044] net_ratelimit: 19 callbacks suppressed [ 890.900981][T12044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.006705][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 891.687281][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 891.696415][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 891.706500][ T32] Call Trace: [ 891.709807][ T32] [ 891.712785][ T32] vpanic+0x56d/0xa60 [ 891.716876][ T32] ? __pfx___schedule+0x10/0x10 [ 891.721767][ T32] ? __pfx_vpanic+0x10/0x10 [ 891.726330][ T32] panic+0xc5/0xd0 [ 891.730093][ T32] ? __pfx_panic+0x10/0x10 [ 891.734542][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 891.740037][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 891.745452][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 891.751652][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 891.757850][ T32] watchdog+0x1030/0x1030 [ 891.762236][ T32] ? watchdog+0x1c7/0x1030 [ 891.766695][ T32] kthread+0x38b/0x480 [ 891.770807][ T32] ? __pfx_watchdog+0x10/0x10 [ 891.775518][ T32] ? __pfx_kthread+0x10/0x10 [ 891.780137][ T32] ret_from_fork+0x514/0xb70 [ 891.784763][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 891.789945][ T32] ? __switch_to+0xc89/0x1420 [ 891.794676][ T32] ? __pfx_kthread+0x10/0x10 [ 891.799298][ T32] ret_from_fork_asm+0x1a/0x30 [ 891.804124][ T32] [ 891.807915][ T32] Kernel Offset: disabled [ 891.812274][ T32] Rebooting in 86400 seconds..