last executing test programs: 2m48.395622208s ago: executing program 0 (id=9737): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000080)={0x3ff, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e20, @remote}}}, 0x108) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x6, 0x8, 0xff01, 0x0, 0x2, 0xe, 0xe7a0, {0x2, @in={{0x2, 0x4e23, @empty}}, 0x1, 0x7b1c00, 0x6, 0x4, 0x2}}, &(0x7f0000000280)=0xb0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000002c0)={r1, 0x666a}, 0x8) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000400)={r0, &(0x7f0000000300)='\'}#\x00', 0x8840, &(0x7f0000000340)={@align=0x6d, {0x6, 0xa, 0x40, 0x7}}, 0x2, &(0x7f0000000380), &(0x7f00000003c0)}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x29, 0x3, 0xd, 0x79e0, 0x0, @loopback, @remote, 0x20, 0x20, 0x6, 0xfffffff9}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}}}, &(0x7f0000000700)=0xe8) sendmsg$nl_xfrm(r3, &(0x7f0000000980)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)=@migrate={0x1e4, 0x21, 0x200, 0x70bd2b, 0x25dfdbfd, {{@in6=@empty, @in6=@mcast1, 0x4e20, 0xcdf8, 0x4e20, 0x0, 0xa, 0x20, 0x20, 0x33, r4, 0xffffffffffffffff}, 0x6e6bb0, 0x2}, [@sa={0xe4, 0x6, {{@in6=@mcast1, @in=@local, 0x4e23, 0xb, 0x4e20, 0x8, 0x2, 0x20, 0xb0, 0x11, r5, r7}, {@in6=@dev={0xfe, 0x80, '\x00', 0x27}, 0x4d2, 0xff}, @in=@dev={0xac, 0x14, 0x14, 0x11}, {0x2, 0x7, 0x6, 0x2, 0x6, 0xffffffffffffffff, 0x8, 0xfff}, {0xfffffffffffffffa, 0x1, 0x0, 0x5}, {0x3, 0x3, 0x9}, 0x70bd29, 0x3507, 0x0, 0x4, 0x9, 0x28}}, @user_kmaddress={0x2c, 0x13, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@empty, 0x0, 0xa}}, @address_filter={0x28, 0x1a, {@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in6=@dev={0xfe, 0x80, '\x00', 0x3c}, 0xa, 0x8, 0xff}}, @iptfs_reorder_window={0x6, 0x25, 0xf2f6}, @tfcpad={0x8, 0x16, 0x4}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @lastused={0xc, 0xf, 0x7ff}, @address_filter={0x28, 0x1a, {@in6=@rand_addr=' \x01\x00', @in=@broadcast, 0xa, 0x2, 0x7}}, @tfcpad={0x8, 0x16, 0xfffffffd}, @XFRMA_SET_MARK={0x8, 0x1d, 0x9}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x1, &(0x7f00000009c0)=@raw=[@jmp={0x5, 0x1, 0xd, 0x0, 0x2, 0x1, 0xfffffffffffffffc}], &(0x7f0000000a00)='syzkaller\x00', 0xe5f1, 0x29, &(0x7f0000000a40)=""/41, 0x41000, 0x9bbf254f8d9612ae, '\x00', r5, 0x25, r3, 0x8, &(0x7f0000000a80)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000ac0)={0x4, 0x0, 0x55a, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000b00)=[r0], &(0x7f0000000b40)=[{0x1, 0x8001, 0x10, 0x6}, {0x0, 0x5, 0xe, 0x1}], 0x10, 0x1}, 0x94) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x94, r8, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8000, 0x65}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "c990eb"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c3e42dbe323494924d55f237af"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "344809f4c7"}, @NL80211_ATTR_MAC={0xa}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x18, 0x1b, &(0x7f0000000e40)=@raw=[@map_idx_val={0x18, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xe}], &(0x7f0000000f40)='syzkaller\x00', 0x10, 0xf6, &(0x7f0000000f80)=""/246, 0x40f00, 0xb, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000001080)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000010c0)={0x2, 0x6, 0x80, 0x9d2}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001100)=[{0x5, 0x3, 0x8, 0xc}, {0x0, 0x3, 0x0, 0xb}], 0x10, 0xff}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000001200)=r10, 0x4) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001280), r3) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r11, 0x200, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40050}, 0x20000845) r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r12, 0x106, 0x1, &(0x7f0000001380), &(0x7f00000013c0)=0x4) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001440)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x1e8, 0x1e8, 0x1e8, 0xffffffff, 0x4, &(0x7f0000001400), {[{{@ip={@loopback, @empty, 0xff, 0x0, 'nr0\x00', 'bridge0\x00', {}, {0xff}, 0x1, 0x1, 0x62}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast1, @private=0xa010100, 0xff, 0xffffff00, 'vlan1\x00', 'sit0\x00', {}, {}, 0x5c, 0x3, 0x10}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x33}, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffff00, 0xff, 'rose0\x00', 'veth1\x00', {}, {0xff}, 0x6c, 0x2, 0x2}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) sendmsg$nl_route_sched(r3, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)=@gettclass={0x24, 0x2a, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x3, 0xd}, {0xfff1, 0xe}, {0x8, 0x6}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x40800) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x28, 0x0, 0x814, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x8091}, 0x40800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001940)={'wg0\x00'}) r13 = accept4$nfc_llcp(r3, 0x0, &(0x7f0000001980), 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r13, 0xc0205866, &(0x7f0000002100)={&(0x7f00000019c0)=0x5, 0x4d60, &(0x7f0000001a00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000020c0)}) r14 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_INTERLEAVING_SUPPORTED(r3, 0x84, 0x7d, &(0x7f0000002140)={r2, 0x2}, &(0x7f0000002180)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r14, 0x84, 0x73, &(0x7f00000021c0)={r15, 0x0, 0x10, 0x6, 0x4}, &(0x7f0000002200)=0x18) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x7, &(0x7f0000002240)=[{0xfff7, 0x10, 0x5, 0x3}, {0x42a, 0x8, 0x6, 0x10}, {0x2c4, 0x9, 0x26, 0x8}, {0x1, 0x95, 0x8, 0x1}, {0x1db, 0x50, 0x9, 0x8}, {0xb, 0x2, 0xff, 0x4c}, {0x7f, 0x10, 0x0, 0x200}]}, 0x10) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000002300)) 2m48.016875643s ago: executing program 0 (id=9742): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000280)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000004c0)={0x0, @multicast2, @initdev}, &(0x7f0000000540)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x8, 0x7, 0x5, 0x0, {{0x16, 0x4, 0x0, 0x30, 0x58, 0x67, 0x0, 0x0, 0x2f, 0x0, @private=0xa010100, @empty, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0xe7, 0x3, 0x0, [{@rand_addr=0x64010101, 0xffff}, {@multicast1, 0x8}, {@rand_addr=0x64010101, 0x5}, {@remote, 0x8}]}, @generic={0x82, 0xe, "7997b9054dd775b066eecda7"}, @generic={0x7, 0x5, "8d8858"}, @noop, @ra={0x94, 0x4, 0x1}, @end]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000640)={0x0, @initdev}, &(0x7f0000000680)=0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000b00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700"], 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) r13 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x50, 0x24, 0xf0b, 0x3fff, 0x25dfdbfc, {0x0, 0x0, 0x12, r14, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x16}]}}]}, 0x50}}, 0x4c094) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000a80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x94, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x90}, 0x20004004) syz_emit_ethernet(0x59, &(0x7f0000000000)={@random="5c3ef8fd59d1", @local, @val={@void, {0x8100, 0x6, 0x0, 0x4}}, {@mpls_uc={0x8847, {[{0x6, 0x0, 0x1}, {0xf}, {0x4}], @llc={@llc={0xfc, 0x8e, "cf46", "1a4f1a557234d042cb6acd29f7805cd98e26a35e9e2639eb8f3ffd6640bbfd304b7defdfd3bf3743a82c66c0b3d82b9bd716aabc323e6a"}}}}}}, &(0x7f0000000300)={0x0, 0x1, [0x68e, 0x61c, 0x905, 0xaf]}) r16 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r16, 0x6, 0x2, &(0x7f0000000340)=0x8, 0x4) 2m47.599221914s ago: executing program 0 (id=9751): socket(0x2b, 0x80801, 0x1) (async) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400"/20], 0x14}}, 0x0) 2m47.414069122s ago: executing program 0 (id=9755): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f000018efdc)="240000005a001f0214f9f407000904fcffffff1010000300feffffff0800000000000000", 0x24) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000180)=""/195, 0x1004000, 0x1800, 0x2, 0x1}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x34, 0x19, 0x10, 0x70bd28, 0x25dfdbfe, {0x2, 0x20, 0x14, 0x35, 0xfd, 0x2, 0xfd, 0x8, 0x2400}, [@RTA_GATEWAY={0x8, 0x5, @multicast1}, @RTA_IIF={0x8, 0x3, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) 2m47.343130494s ago: executing program 0 (id=9757): r0 = socket(0x22, 0x1, 0x9) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000001440)={&(0x7f0000001480)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000001500)="18", 0x1}], 0x1}, 0x4008840) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000001540)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r0, 0x7f, 0x7f, &(0x7f00000007c0)="0200000008800089786bc377f73fad0f5b44a25407907d4fb63d45bd8ca5fbe8e08bbe6b00d478ab55edffa725b9f67cf814c0261c8378745c28af38304ece59f676cf3a5cec864e24ca92ff2fd427427b3f451647a5a2a0a3b6a6b1f4da217b802194a4c64d716b3392e10951350edca9e94b81bbf8c25846ddb50b2a6abec0e6913a36e2b0ebbda6832440412b6dd6d1ff2ecc6d08c05c1e7ea8ca", 0x9c) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000480)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f00000004c0)={0x2, 0x4e20}, 0x10) recvmsg(r0, &(0x7f0000000500)={0x0, 0xfe, 0x0}, 0x12160) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000540), &(0x7f0000000580)=0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x9c}, 0x1, 0x0, 0x0, 0x20004014}, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="284451b59d8716f71d0000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000c0002000000000000000000"], 0x28}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001400)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000000400)=""/68, 0xfffffeae, 0x0, &(0x7f0000001ac0)=""/245, 0xfc}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0xf}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r5, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000015c0), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r7, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000000c0)={0x30, r8, 0x601, 0x2000, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x2}]}, 0x30}}, 0x44030) vmsplice(r6, &(0x7f00000003c0)=[{&(0x7f0000000780)="112bb6c5c5", 0x5}, {&(0x7f0000000880)="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", 0x941}, {&(0x7f0000001200)="871b0a38b588", 0x6}, {&(0x7f0000001240)="9046", 0x2}], 0x4, 0xa) ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000001280)) r10 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000680)={{r10}, 0x400, 0x4, 0x4}) pipe(&(0x7f00000002c0)) poll(&(0x7f0000000080)=[{r10, 0x18}], 0x1, 0xff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0x1}, &(0x7f0000000300), &(0x7f0000000340)='%+9llu \x00'}, 0x20) 2m46.335559865s ago: executing program 0 (id=9771): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x6}}, @var={0x1, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x61]}}, 0x0, 0x43, 0x0, 0x1, 0x4}, 0x20) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0xe, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdb01, {0x0, 0x0, 0x0, r5, {0x5, 0xc}, {0x0, 0xfff1}, {0xe, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000000}, 0x4041080) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x24040080) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x74, r1, 0x5, 0x3000000, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @val={0x3, 0x1, 0xa9}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x14, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xa, 0x2, "11f426c83b30"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x74}}, 0x0) 2m41.406007627s ago: executing program 3 (id=9814): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$phonet(0x23, 0x2, 0x1) (async) r1 = socket$phonet(0x23, 0x2, 0x1) close(r1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x18002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'hsr0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) 2m41.292871894s ago: executing program 3 (id=9815): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000500)={0x6, @local, 0x4e20, 0x0, 'lblc\x00', 0x1, 0x12c, 0xffffffff}, 0x2c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000540)={0x2, 0x4e20, @local}, 0x10) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0xff], [], 'veth0_macvtap\x00', 'caif0\x00', {0xff}}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x67, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x1, 0x0, 0x5, 0x0, 0x5, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'pim6reg\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x6}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x80000000, 'syz0\x00', {0x9e}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f0) 2m40.35778219s ago: executing program 3 (id=9820): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x28, r1, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0xf040}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xc}, 0x2d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m40.182995002s ago: executing program 3 (id=9825): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r2, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0x180, 0x218, 0xffffffff, 0xffffffff, 0xe8, 0x180, 0x218, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x1, [0x50]}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x310) syz_emit_ethernet(0x36, &(0x7f0000000900)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @multicast1}, {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r2, &(0x7f0000000180), 0x4000000000001f2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0100f3db2e57000300"/18, @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4089}, 0x0) 2m39.991786091s ago: executing program 3 (id=9827): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, r2, 0x1, 0x0, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0xbc, 0x42, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0xa1, 0x1, 0x0, 0x1, [@generic="2c7c1454a9a72411127773771690d00facf9f93c8b02aa9c75f893ab868b53e9179102245545087857a12981bbb987b3fcfd46473efb0a2f4f5512ccdd9b90e9a7d2b68d64d844bcd2b6c24bc3f9bead7e56c1c12dcdb6cc4a9259bc004092020d66ee58fee5e4da167fa34516723287a4b74516fb8815b31ca9fcb9ccf489db54d2d8e9a73e4b1f172372f5a3ffd621b32c98e4efd88e3dcff11eb676"]}]}, 0xbc}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) listen(r0, 0xc) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000580)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) listen(r4, 0xa1) accept4$bt_l2cap(r4, 0x0, 0x0, 0x0) shutdown(r4, 0x1) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000600), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000500)=ANY=[@ANYBLOB='..']) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600), 0x200002, 0x0) openat$cgroup_devices(r7, &(0x7f0000000640)='devices.deny\x00', 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x18, 0x40, 0x107, 0x70ad27, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x2fc}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x4000044) 2m39.490882603s ago: executing program 3 (id=9834): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x4, 0x8, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x10}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000340)=0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0x4c02}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000003c0)={r3, 0x5}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c06006537900b95c8817f060000000000000000facb017b15b9d8137e7a7fc14458ffd92f98614b5a3ddfff00a27c4730f8e57bfd2e90e11675b0dab73d98ad3832ccf9a0e3c44fe4363b6fb018b81badea8c0ffbad4117c71251eeec921ad0a145e56b79694b7fe1c1e4c6cf1c380a75cf8549705f6f83353d98c3982e03fdfcfc92cb7bb9832354670bcf62000000c90d6dc5aa46584aa7a9ab889b1e51a6bff935ad6e99b1b044db68cd6c70e69cc2bdb85813fc3e456f79982582a7e8d681e1e9045c5306fa81e27c5cec8a5da7030a20df9e9ff4b1e69d9ac4f387bf3c3949c254c80cfe23808cd847c6", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800800020003000000"], 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m31.315031074s ago: executing program 32 (id=9771): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x6}}, @var={0x1, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x61]}}, 0x0, 0x43, 0x0, 0x1, 0x4}, 0x20) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0xe, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdb01, {0x0, 0x0, 0x0, r5, {0x5, 0xc}, {0x0, 0xfff1}, {0xe, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000000}, 0x4041080) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x24040080) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x74, r1, 0x5, 0x3000000, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @val={0x3, 0x1, 0xa9}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x14, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xa, 0x2, "11f426c83b30"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x74}}, 0x0) 2m24.363605317s ago: executing program 33 (id=9834): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x4, 0x8, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x10}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000340)=0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0x4c02}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000003c0)={r3, 0x5}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c06006537900b95c8817f060000000000000000facb017b15b9d8137e7a7fc14458ffd92f98614b5a3ddfff00a27c4730f8e57bfd2e90e11675b0dab73d98ad3832ccf9a0e3c44fe4363b6fb018b81badea8c0ffbad4117c71251eeec921ad0a145e56b79694b7fe1c1e4c6cf1c380a75cf8549705f6f83353d98c3982e03fdfcfc92cb7bb9832354670bcf62000000c90d6dc5aa46584aa7a9ab889b1e51a6bff935ad6e99b1b044db68cd6c70e69cc2bdb85813fc3e456f79982582a7e8d681e1e9045c5306fa81e27c5cec8a5da7030a20df9e9ff4b1e69d9ac4f387bf3c3949c254c80cfe23808cd847c6", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800800020003000000"], 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 1m55.297701282s ago: executing program 4 (id=10316): syz_emit_ethernet(0x52, &(0x7f0000000440)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x0, [{}, {@dev}, {@dev}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x1, 0xfffffffc, 0x800007ff}}]}, {0x4, 0x3f}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\xaa\xaa\xaa\xaa\xaa', 0x0, &(0x7f0000000040)={@align=0x1, {0x326, 0x5, 0xfff000, 0x100000001}}, 0x401, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x1cfc}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS_V2(r3, 0x84, 0x25, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xcb21}}, 0x200, 0x401, 0xaa24}, 0x90) 1m55.212215357s ago: executing program 4 (id=10317): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000240)=@framed={{}, [@call={0x63, 0x11, 0x28}]}, &(0x7f0000000280)='GPL\x00', 0x4, 0xac, &(0x7f0000000cc0)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) write(r0, &(0x7f0000000c80)='n\b', 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0x8, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x4000) 1m55.098735867s ago: executing program 4 (id=10319): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x19c, 0x65, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x170, 0x2, [@TCA_BPF_ACT={0x16c, 0x1, [@m_simple={0x168, 0x1, 0x0, 0x0, {{0xb}, {0x80, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x10, 0x6, 0xce6b, 0x6}}, @TCA_DEF_DATA={0xd, 0x3, '\\[*G=%}#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x876f, 0x10001, 0x3, 0x40, 0x6}}, @TCA_DEF_DATA={0xa, 0x3, '#%@:/\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x6, 0xffffffffffffffff, 0x8, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1000, 0xfffff952, 0x8, 0x4, 0x10}}]}, {0xbe, 0x6, "9209be6ac2eb68ec44c03ad03ccfd5c9aff753ae7cef446e9abdc2009e245df08fa6cf4268a294d87a0186536d0c2458f0e060a1f4dfab45c4880975e027452a67ff09dc0cda2d51a28cf3834caa7aa64015620886e3c095d93664d00664ede4714e13cbf7a559b27b8e74bc4f58e2418eea9cf3966ac82d194b992695034782aaece271e1d165a896011eaa094bd7c84d6a605ffa8776a0332cd9fcb29102eadb485ff46d56bb35c8a8921ac8db7878999c87ae1e512debca89"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}]}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000f40)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000f80), 0xe) listen(r2, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000000c0604042abd7000fddade250a0005000000008881b3380fbccc07781db0dff229010001000000000000000000000069bb2efba8b46ad946e5ac8631b8ab98e19255c1b1131f03812ccc3fcfd0d965747fbcecf1fe05df1a130a0558b8b600eef45a0ef0c4c0077a8c217dc271e30200000000"], 0x1c}}, 0x20005004) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='memory.events\x00', 0x275a, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, 0x0, 0x800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000d80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)={0x3c, r5, 0x9, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000f00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x14, r5, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000011}, 0x4004040) bind$bt_hci(r3, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000001000a200000a24b0a03000000000000000000010000000c000440000000000000000444000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004680000000e0a01010000000000000000010000000900020073797a32000000000900010000007a3000000000300003802c0000802800018023000100118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef8cd8d80000900020073797a3000000000140000001000010000000000000000000000000a"], 0xf4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$bt_hci(r3, &(0x7f0000000700)=ANY=[@ANYBLOB="00000000320100f1"], 0x138) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x10000000013, &(0x7f0000000880)=0x1, 0x4) setsockopt$inet_opts(r9, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f00000008c0)='bridge0\x00', 0x10) connect$inet(r9, &(0x7f0000000900)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000940), 0x4) r10 = socket(0x10, 0x803, 0x0) sendto(r10, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) 1m54.178748872s ago: executing program 4 (id=10340): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x4}, @TCA_SAMPLE_RATE, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x4}, {0xc}, {0x6, 0x4}}}]}]}, 0x60}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x2, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000100)={0xa, 0x4e23, 0xfffffff7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7a}, 0x16, 0x0, 0x0, &(0x7f0000000140)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x2e}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}], 0x30}}], 0x2, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3c0000001200010026bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00210100bf0dcf6208001d00f8ffffff140003007866726d30"], 0x3c}, 0x1, 0x0, 0x0, 0x22045054}, 0x4) recvfrom(r0, &(0x7f0000000180)=""/234, 0xea, 0x103, &(0x7f0000000280)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80) 1m53.22892876s ago: executing program 4 (id=10358): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0100000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xc, &(0x7f0000000cc0)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x0, 0xe, 0x0, &(0x7f0000000e00)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000500)="05178100", 0x4, 0x50, &(0x7f0000000540)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a310000000028000480240001800a0001007175657565000000140002800600014000490000d714a79b000000130900020073797a3200000000140000001100010000000000000000000100000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040048) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="bf278ca2a081c947040000000a00000000000000fc66fb7ee0988e163fc7eff1b0c491286a9a39d64d34232e15bfa6ea6c2a76e380bd71a6618d7e9b78e4c48ed5ff852842d272be4c37210ae72f93b87aeb298a658a77814f994861a8bf1fa836a8da02781bcefc6c7ad20b8ef3cf660e7f954606f2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0xaf) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x10, 0x4, &(0x7f0000001000)=ANY=[@ANYBLOB="b4000000000000007910480000000000710421000000000095000000"], &(0x7f0000001040)='GPL\x00', 0x2, 0xfd90, &(0x7f0000001080)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f00000002c0), &(0x7f0000000300), 0x8}, 0x20) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x820000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x1406, 0x100, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c010) pselect6(0x40, &(0x7f0000000340)={0x1, 0x6, 0x2, 0x2bc5, 0x5, 0x5, 0x58c3, 0x9ff}, &(0x7f0000000380)={0x5, 0xd, 0x4, 0x100000000, 0x3, 0x5, 0x10, 0x292588ce}, &(0x7f00000003c0)={0x7f, 0x7, 0x72, 0x401, 0x5d, 0x2, 0x2, 0x6}, &(0x7f0000000400)={0x0}, &(0x7f0000000480)={&(0x7f0000000440), 0x8}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x1, 0x0}, 0x8) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=r9, 0x4) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) bind$packet(r11, &(0x7f0000000a00)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @local}, 0x14) r13 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r13, &(0x7f0000000e40)={&(0x7f0000000e80)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000f00)=[@mark={{0x14, 0x11, 0x24, 0x3}}], 0x18}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x1d, 0x28, &(0x7f0000000b40)=ANY=[@ANYRES64=r8, @ANYRES8=r11, @ANYRESDEC=r8, @ANYRES64, @ANYBLOB="5a1fac807f0c5044dd999dfc9a8e474a810c1366c7487544223bc698b0afea012bcac4eb523ceca9f63a13934e5be53c3de033506fcfb61c47c8b464c55c17d77b16f32fe272287e409ccfd1714f88ba7432479bd0961decdb2b6c649b643677ca4a3c7a2d0e9f97b73b9632fe51144cf7e27a", @ANYRES16=r12, @ANYRESHEX=r3, @ANYRES8=r7, @ANYRES64=r3], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, 0x0, 0x1, 0x0, &(0x7f00000009c0)=[{0x0, 0x22, 0x211, 0xa}], 0x10, 0xfffffffb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71186a000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94) 1m53.006390339s ago: executing program 4 (id=10363): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0x7}}, 0x14}}, 0x4000880) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r4, @ANYRES32=r2], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r5, 0x3, 0x71061}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}]}}}]}, 0x40}}, 0x24008044) 1m48.915597262s ago: executing program 5 (id=10409): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1e, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7328, 0x0, 0x0, 0x0, 0x38}, [@kfunc]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x0, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}}, 0x20000004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newchain={0x3c, 0x64, 0x300, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff3}, {0xffff, 0x3}, {0xffff, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x959}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 1m48.783846896s ago: executing program 5 (id=10412): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x31, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1b}, 0xa1) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000480), &(0x7f0000000500)=0x1c) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000540)={'mangle\x00', 0x2, [{}, {}]}, 0x48) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r2) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r5, 0x200, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2f69}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x12) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$XFS_IOC_GETBMAPX(r2, 0xc0205838, &(0x7f0000000380)={0x7, 0xfffffffffffffff8, 0x327, 0x1ff, 0xe3e5, 0x1f, 0x2}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a0000060001000500000008000b0002000000140008006d64"], 0x48}}, 0x20000034) 1m48.648285358s ago: executing program 5 (id=10417): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000000080)="110000000000060000071a80010061cc", 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}], 0x1c) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100000329bd7000fcdbdf2502801481040000a6896bcbda0502000000080001007f000001"], 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x880) socket(0x11, 0x2, 0x0) (async) setsockopt(r0, 0x107, 0x1, &(0x7f0000000080)="110000000000060000071a80010061cc", 0x10) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}], 0x1c) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100000329bd7000fcdbdf2502801481040000a6896bcbda0502000000080001007f000001"], 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x880) (async) 1m48.474751396s ago: executing program 5 (id=10420): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000c40)={&(0x7f0000000080), 0xc, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x124, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0x108, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x33}}, {0x8}}}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x7cc, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x764, 0x3, 0x0, 0x1, [{0x760, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x25c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xa4, 0x1, "8b41ddf1d2597300f651d49f31d9f005432715b582c927b3966861c282e5e1ecc6f136d1e99772931f37276f7c0728f63da04b3ca21c67d19d1469e6840fc2a662cea6284cdc1df0453e56bb166e386b2058200d65d28f74899fcd6bccdf524144b257d97752e83a4181fa04cc4bde41fe4ab14edb5dd199b553b853acb6953157755c40ace4c356960d9eaa28c658a889f9aac7e538dd5204cf4f26f287d583"}, @NFTA_DATA_VALUE={0x27, 0x1, "81903ed19dcd6e9e7098a756ea329dc0df39064d735f0dc03ba466ef68e961512352c0"}, @NFTA_DATA_VALUE={0x6b, 0x1, "f435d1214f5ebccb83401d6a622a699b777ed3baf364384cc0f8074591af4258d6da4a82aa6b9158baeaf4d79a102d3c53acd7e1630e54fa5b600202ff2beaf080cffbeddbcdf19761a494e71dd32c351294027361607fa9b4641ac30ac5b4ffe227250839522f"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x96, 0x1, "571e1034298ea11ac3fd31453d0b96fe23f98d8c7e6ea6081525c8bd7d98faefd60d16df2e647a659ca11ac2cee7823e268ba4461def5b0ba34dfdf23d7b0188a4603087e0f28e70b4777f55fb9fb286c08652ee71749ce8a68495f42196853463d08497efc2959bb3232102802b8cb1554d9bc195507ff5284788c0b7514ffac4db51b4091bcf874fac1d1124aa10264509"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x7c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4}}}, {0x38, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x6c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x2c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xafd4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfd3b}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0xdc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe, 0x1, "66eced10253dcf6ad73e"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x69, 0x1, "7d832cc39b6d1b01ff28c69677e0b4219771fe123eb8eaf6dcedd939b4b8edbc13944c065aa390bb56b6cac3e6485e59602483ed993efce1d1e27413067a75fb6c75f67a04665171a3103221ab431ad011e6dc79493447f58e90b74372a169460a9d2b382a"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_KEY_END={0x2e0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xd6, 0x1, "2917f71c89287a5345ffce5c0b541ae72e149418becd86886b475830ff081103e4c29893568f2df344c51d38fef77dd439ca061c20611308d5c49340237f1936eb7a2db45f08cc33324a85af5fde9acb4dbdb89541ab3d5b7acdebad9ad2ef5ccac76ec5940ffd6335c5109e0560c68b7c7c78323a4525a5849f746c5ce11bbf0bd1587a5c35eca01f66f6dd85f18eabd4428eff8abc299b5ab84d2bf4cb2d4ff6c98a165174ac6c0a7299ff8400f8ac85d44988f7f768536daa6cf4d6ae82788d9f0d46078a3203ccccbadeb5021413afe3"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x18, 0x1, "68646a3c9ec7e393069d6004e791f58864ab6f21"}, @NFTA_DATA_VALUE={0x26, 0x1, "67c38ac19507f7dc57102a817ae1196c0ed3acc83d429c90557d846e9f96d2cc6c3b"}, @NFTA_DATA_VALUE={0x69, 0x1, "c23e7a179728336df90506e10e04120d17b177824140e1ba730fed1cd5139ac48303ea0382e4f24f18ea9333396eec3cfb80298df4531ad14a8943713823c6dad31fe3999886dbb12ee51ebae072f45e4000ab8455efb03d900887f82257217f11ec0efaf0"}, @NFTA_DATA_VALUE={0x9f, 0x1, "fa9a079b7419ee86c5e8955ff1d7d3543b961be9473e6e2424c0a0404cda761283de81cac4b00a0f550bb2baa2038628f1553aebeffae9443caac3eb168169587bb9a4e67e4a5213369581877dc5bbc2cd922e58a7d8d6df99c9489f4cc085ab08547803d6a01b2bc37e569387a311e96251b404fa1fc2f63bf62afe375cb94bcc9af290e66e79817cd4e5fd3f6fa9b2ad0fcf2fb8fbdb7726f672"}]}, @NFTA_SET_ELEM_KEY_END={0x38, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1ff}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x83}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x401}, @NFTA_LIMIT_TYPE={0x8}]}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x860}}, 0x20000840) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) (async) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000c40)={&(0x7f0000000080), 0xc, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x124, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0x108, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x33}}, {0x8}}}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x7cc, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x764, 0x3, 0x0, 0x1, [{0x760, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x25c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xa4, 0x1, "8b41ddf1d2597300f651d49f31d9f005432715b582c927b3966861c282e5e1ecc6f136d1e99772931f37276f7c0728f63da04b3ca21c67d19d1469e6840fc2a662cea6284cdc1df0453e56bb166e386b2058200d65d28f74899fcd6bccdf524144b257d97752e83a4181fa04cc4bde41fe4ab14edb5dd199b553b853acb6953157755c40ace4c356960d9eaa28c658a889f9aac7e538dd5204cf4f26f287d583"}, @NFTA_DATA_VALUE={0x27, 0x1, "81903ed19dcd6e9e7098a756ea329dc0df39064d735f0dc03ba466ef68e961512352c0"}, @NFTA_DATA_VALUE={0x6b, 0x1, "f435d1214f5ebccb83401d6a622a699b777ed3baf364384cc0f8074591af4258d6da4a82aa6b9158baeaf4d79a102d3c53acd7e1630e54fa5b600202ff2beaf080cffbeddbcdf19761a494e71dd32c351294027361607fa9b4641ac30ac5b4ffe227250839522f"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x96, 0x1, "571e1034298ea11ac3fd31453d0b96fe23f98d8c7e6ea6081525c8bd7d98faefd60d16df2e647a659ca11ac2cee7823e268ba4461def5b0ba34dfdf23d7b0188a4603087e0f28e70b4777f55fb9fb286c08652ee71749ce8a68495f42196853463d08497efc2959bb3232102802b8cb1554d9bc195507ff5284788c0b7514ffac4db51b4091bcf874fac1d1124aa10264509"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x7c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4}}}, {0x38, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x6c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x2c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xafd4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfd3b}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0xdc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe, 0x1, "66eced10253dcf6ad73e"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x69, 0x1, "7d832cc39b6d1b01ff28c69677e0b4219771fe123eb8eaf6dcedd939b4b8edbc13944c065aa390bb56b6cac3e6485e59602483ed993efce1d1e27413067a75fb6c75f67a04665171a3103221ab431ad011e6dc79493447f58e90b74372a169460a9d2b382a"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_KEY_END={0x2e0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xd6, 0x1, "2917f71c89287a5345ffce5c0b541ae72e149418becd86886b475830ff081103e4c29893568f2df344c51d38fef77dd439ca061c20611308d5c49340237f1936eb7a2db45f08cc33324a85af5fde9acb4dbdb89541ab3d5b7acdebad9ad2ef5ccac76ec5940ffd6335c5109e0560c68b7c7c78323a4525a5849f746c5ce11bbf0bd1587a5c35eca01f66f6dd85f18eabd4428eff8abc299b5ab84d2bf4cb2d4ff6c98a165174ac6c0a7299ff8400f8ac85d44988f7f768536daa6cf4d6ae82788d9f0d46078a3203ccccbadeb5021413afe3"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x18, 0x1, "68646a3c9ec7e393069d6004e791f58864ab6f21"}, @NFTA_DATA_VALUE={0x26, 0x1, "67c38ac19507f7dc57102a817ae1196c0ed3acc83d429c90557d846e9f96d2cc6c3b"}, @NFTA_DATA_VALUE={0x69, 0x1, "c23e7a179728336df90506e10e04120d17b177824140e1ba730fed1cd5139ac48303ea0382e4f24f18ea9333396eec3cfb80298df4531ad14a8943713823c6dad31fe3999886dbb12ee51ebae072f45e4000ab8455efb03d900887f82257217f11ec0efaf0"}, @NFTA_DATA_VALUE={0x9f, 0x1, "fa9a079b7419ee86c5e8955ff1d7d3543b961be9473e6e2424c0a0404cda761283de81cac4b00a0f550bb2baa2038628f1553aebeffae9443caac3eb168169587bb9a4e67e4a5213369581877dc5bbc2cd922e58a7d8d6df99c9489f4cc085ab08547803d6a01b2bc37e569387a311e96251b404fa1fc2f63bf62afe375cb94bcc9af290e66e79817cd4e5fd3f6fa9b2ad0fcf2fb8fbdb7726f672"}]}, @NFTA_SET_ELEM_KEY_END={0x38, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1ff}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x83}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x401}, @NFTA_LIMIT_TYPE={0x8}]}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x860}}, 0x20000840) (async) 1m48.43387753s ago: executing program 5 (id=10421): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000003fc0)=[{&(0x7f00000049c0)="a26776f1b7eea31884187b5b1c0ecbd4167a0b69007fa64e01db473a40b42f4cc8adea743079432953693ac3a7bc37939943f188c3b5dcd634715b79ca1a261d0aee45c3f1c7441289cb0ba10b25d5f33a08385d1cad2b58f6b9892d3292fe23f4ee09d01f2fb03d9c29b75d0e7ee8c7cc5e91cd33e8b18bfb9dd7651a74ab5dd12685a77e4e88b57988cf2038cc58ffee2f9d59fc37bbf2ff3023b10802723238dfac38e54fd9a4c8bafefc6c5fc15384b50e048704bd444e2e422cec8cd57423093c8b2d3211a8e605f6c4a88bfac40016e5eaf89d04a93c8e140778d7cd1f97c6c859fb", 0xe5}, {&(0x7f0000003b80)="38d7", 0x2}], 0x2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x80, 0xba, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r4, 0x3007, 0x1000}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) 1m48.361029927s ago: executing program 5 (id=10423): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) listen(r3, 0x5) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000080601010000000000000100000000000500010007000000"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106800000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67100000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 1m37.965256949s ago: executing program 34 (id=10363): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0x7}}, 0x14}}, 0x4000880) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r4, @ANYRES32=r2], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r5, 0x3, 0x71061}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}]}}}]}, 0x40}}, 0x24008044) 1m33.271307273s ago: executing program 35 (id=10423): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) listen(r3, 0x5) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000080601010000000000000100000000000500010007000000"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 3.882638533s ago: executing program 1 (id=11047): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x11, 0x3, 0x8, 0x0, 0x5, 0x2, 0x1, 0x2, 0x6}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESHEX=r0, @ANYRESDEC=r0], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x60388}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001800010300000000000000000a"], 0x24}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@migrate={0xa0, 0x29, 0x1, 0x0, 0x25dfdbfb, {{@in6=@local, @in6=@private2={0xfc, 0x2, '\x00', 0xff}, 0x0, 0x5, 0x0, 0x2, 0xa, 0x0, 0x0, 0xff}, 0x6e6bbf}, [@migrate={0x50, 0x11, [{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x4}, 0x32, 0x4, 0x0, 0x3504, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000007c0), 0x2) connect$inet(r3, &(0x7f0000000580)={0x2, 0x4e22, @remote}, 0x10) getpeername(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000008c0)=ANY=[@ANYRES8=r2, @ANYRESOCT=r3, @ANYRESDEC], 0x7c}}, 0x2400c4d4) sendmsg$NFT_BATCH(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4d, &(0x7f0000000540)=0x200, 0x4) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.150505031s ago: executing program 7 (id=11055): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000040)=0x6, 0x4) (async) syz_emit_ethernet(0x86, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffc, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x2, "e5410e86db87a41f716be8e1fa0fe2fb143899778cc5c15c1337404bb397c0fc", "0c17d7b032591c2a7eb609eb8d2d9d15", {"28cbbe8b3bc8849d1e6124e7e5913283", "0080200000002000d300000000000400"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x1386, &(0x7f0000001380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@mpls_uc={0x8847, {[{0x1}, {0x0, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x3ff}, {0x1, 0x0, 0x1}], @ipv6=@icmpv6={0x7, 0x6, "f10d7e", 0x1338, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x15}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@srh={0x62, 0xa, 0x4, 0x5, 0x0, 0x60, 0x0, [@dev={0xfe, 0x80, '\x00', 0x38}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @private0, @mcast2]}, @hopopts={0x0, 0x16, '\x00', [@ra={0x5, 0x2, 0x2}, @jumbo={0xc2, 0x4, 0x1}, @ra={0x5, 0x2, 0x6}, @generic={0x6b, 0x59, "a40c70759e383c1e3a7614cdd9e5c8dab5dc4b51465535d5213bacb01a09442afc3dd0d80c2f335d3d89604c126c4d3c02b6a785426e37af61ccd79db240ccb46ac5040bfc52a347b8532df8f82db1e151aa0d38d216e52cb1"}, @calipso={0x7, 0x48, {0x0, 0x10, 0x2, 0x8, [0x10, 0x7, 0xe8c, 0x4, 0x10, 0x456b8a27, 0x9, 0x6]}}, @pad1]}, @routing={0x2f, 0xe, 0x1, 0x2, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3d}, @mcast2, @rand_addr=' \x01\x00', @private1, @dev={0xfe, 0x80, '\x00', 0x12}, @local, @loopback]}], @dest_unreach={0x1, 0x1, 0x0, 0x5, '\x00', {0x1, 0x6, "976dc0", 0xffff, 0x33, 0x0, @empty, @mcast2, [@routing={0x5c, 0xe, 0x0, 0x9, 0x0, [@private0, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @private0, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @hopopts={0x4, 0x8, '\x00', [@ra={0x5, 0x2, 0xc}, @enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x20, {0x1, 0x6, 0x10, 0x81, [0x1, 0x3, 0x5]}}, @ra={0x5, 0x2, 0x88}, @hao={0xc9, 0x10, @empty}]}, @srh={0x5e, 0x4, 0x4, 0x2, 0x8, 0x48, 0xffff, [@mcast2, @dev={0xfe, 0x80, '\x00', 0x3c}]}, @srh={0x3b, 0xe, 0x4, 0x7, 0x1, 0x20, 0x18a4, [@remote, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @fragment={0x0, 0x0, 0xc3, 0x0, 0x0, 0x6, 0x66}, @fragment={0x8, 0x0, 0x4, 0x1, 0x0, 0x1d, 0x67}], "63bb72c5fda23d4c80dcd583b1bba01854ac313f9a4bc09f5083a010a506f123d0d83dfa94ea0637d04dbf76e52118e8b3d003833b20e402be5f632e57c81096e6ca77454be4fcf1f88279208890b6452798046af89a0ae8ed80c5cb7830f442e94d811f3bd413ee9c48aadaf84faefc95cabb505aa91f6f47dc584734a2858be42123bf19bfa88340aa69a5cc9e1997b338118da0f02bfae29219e8275543563248fbc7a0c01d06a753f322b31b4bc05e6c7d8486540db75fda33e49de5d39710ff7b56101310695496e834190229a9ee9ac621662868baaa5e21ebb57c94f1e1d732ad8c70d4829bf110c914973a4164e81fc2b008ed5549f110960d21dfbf6ae18ba8ae9a4d4b578a6a616922b50b3c33dff26f365182602febe6c13529e6d9ec19f12ddbec297cffd65e79205722f18f08ab16265d94e0d5d5c425080521d3830476167c0b7616e807a458643c0c2ef5e081146c84b6d29f3f74e8c04e288b30f1b7b638d7a6a543ba0f9b1c54ce8200c045c2a079be54e564ec43661a3c3d4c790fc8268b7be6f7811a976f51b0e360ecf62d7eea224ca1d85550a2501263e21271207510d3dae42f94001eec49821caeae9fe1ac4ba63c214592dfd8094c7c68e91b964fd6a359d2d3b48144b24c9869d832bcb607922dad1c88acaa6567d8f3fdfa331202a6e1a32583fe760ad6c34c4195c0019dd1149d7464cdd6487fcd2e68de927e56ff222a24d0eeb6a3c36555e65c7016c229b48d667123dac98783e9ad16257553ba46118e0888a9a70110c478be992fb25e9ba63269734bdd15f19bf7730631e405e272a3c9fea8b42ad07fc0b896cc95a6dcc8a09f2f86a0c7a0bbde2351b90493a823f02f89d8a3d5bc6f8c0276d8282a465360168d3f24a6c0fa542fc9d7490c145b490e5b4ecd0c40d0b530ad284ada4925d8e3a706377b5ba637db296fe2a4c5c160e507e778ab684d0b0b2a5dfd539fafa8c4f461d696043cea83b2d0489350171a9441dc6dd307ccc2923a0596b3fca00676390d29d470588298db3ff6b1fbd37abaa1435e9e796594ee252df594c0c9ca7ac654a953d18bec01b3c6a8f1c4375090b08d35b4fd51b5bdeb49de313307c80aa485c6a23fbc65fa6cda6b5812e8a6699bccc9644da54fd67fe01fb1dc31c60a9c798b7f34be51e9921ccaa36e64bbc9a3b5afc535b44b00605c7ad5167980c4a9be1295b6792d5b05e22420113d32c3553ac3d4a7932a1475d419347f8fe4255970b28feeae9d68efa0542701a4cd806daf31b3ae6b107b8d5db71ee1d88151137d215111b6e6313c233f33e2ed7d3c20b4342d5cdcbaa45fdf4282e43aaa20342f73a89c200443e3d103400eaf4bc418c2e3d6564aff8afc71242df83c5a80af7d19ba4d1795e81eb6ec8d34163876c7eaf08ac167850182fe8c978a50231c0bb4a741b1ea8509fef807d9c454cae96710d7c502802aceadff6ce5120aca3068b9d9b11de76c4b0cc2ec380307bb4a4f57d25f0b18ef21b0746c98062e7152140134a1574b9f82e98286005501b5c481a74f4fcb755411ea30eddf40e3c988a0ec347cf49e92dd7eb65c9dff3b4a6e7a4d8278ea9cd59e71c80cd8ad78af559d1ec146be55aa4f8ac98f60450d986dcf0071c254676c3797a2feefce330d40cc4ac5224ea6de17ac71639a9185a280fac7a8f2d1d26f7dfed1ca1bfb838dacc2c07cd5e83a000c5e6473eba6d46a33f9d704301828237b1c0bfb49946fc5d9043c69a3d0ab7ac862457d3889414ab6ce7d8a5a8a02474211689135b30df9df7dff654c30f842ae7164a35159ea362a04845f108fbcf6b066fc4ca7896d19bf4a3da7db02ec03dc9ef692bdfc2c9f0b0dd68de17de079a751a376e8d80a7df557792c42b88eb0ca61a726676c81e91296739fad06eb39c4b0de1747ca207c7c192bfa21dab77608d89221b11691747915d5a132ceaa5b7e275ce890a4c846eff341efc13450964178dc201ec153e14a2267820feb0e2b292faa7b6b920c1834e75a7fa580a550ff5361456d5489fdb1f67b10fad69aa63f7426467914114a4b3e0d5d5e6bfe2e745f22f2db582e46e2e785952368124e75e07799f27a8bfac3a3ab67f3deb590131b7033fcee61ef328835f0180ee12607261a645f110b935e33f0ce9c1170348366509b732330491994b22cc128ea9da28eb3e7878c040b6a5a772dfb309300d9816a3d5a56d53231822d13fe250177004ec3248afa56ad4e892790daf813c8985e3e31abff118145df4803eda93d8f33c9ed3fb0b88f9ef5c63db550988cf437bdb7b8dc9c950ae48df0f0fca104862407457734bce0c2dc32ef86be193af668401495ec975f129546c5a1fbda237147b6e475274d32a6f64b5608da5a8b9115acb6abd06d48d19adc37a94b1ad5b73b2f414186511d119d9e2af80499697825f6d0c346b55e7fc598c18548fb409d9f3c6bfa9f530783e301a9cc53781261d93f6fd8deff12f8c9c3156ebb5b4aed28b51a5f0130fca2bb7d4e583fbeedf8d2788ab5f5e4b38b8d25dbe39f6f80ed3255306b97f6b0dd0cda108714fb28f7fb07019f8d5cf63804425fa74524530f1ce57db3d1c91cae376eebd0e4a99fc9da45cbfcadcc450c7bcb14811bdd3f55da01ef74e4b8f9f1fe45459434e6ebec00976c3f989befb9a279264d440d8e3d5b340a5e4149b554542234ccf2e9a5e1251a9a0274615beccfb3bfd0049e93e2480cb6fd6ef615546a0f730859898aeed2eedc4ce2a936443c69eb040fc5934f41f3c4fd75f1eac4eac5d658840391dd8fce51f35717c59727723f5cc6aef4e79f82de61680efb4e73068883b9989182157c5d8abcf33552a54a84b8b861a33c9183badb6aeb1847e02443baee61ac4a408afa88b38b2dae98378d482ed9652c6df9bf04c9062fffca9a82394e9e9df54d55470bc4c53c93c4927033ef274a9ed873a0f31a1856b9dbb0a95385fbb5662b8c187aa132b94e376d5f03dfc5d0a7f0f4aa2b0eb95fa33f6c9ab0928b11c3bb2b9c629715011385b07107bd1f848e7ab47ef3cb9ca65a1419a6217ed80d68bfc57165b5177ce7d6823632f2f460a52fe83e25fcca0ea975f6439ac917672b40863d61fc7f785a34b21260b29718bdb7c02d8d0571472b0b7a1e3c9c9bbacb0df8aba09a0bfbce51dbb6d3fa8889b5e4d54686af38daa2c917f9fd7601a55c27b317caf8c821919538a8845ddd0ad939faf285d7ee9a2b9efc535f1243f2b8e8482e8b49b2bcb22317cd8ed5c418e77a81cb81dad19cca4cc33092e298518a223ebd05b92885f4988b1fca348f3b3d31b950e65fcc4920956d5ec4ab018823de474b7ef32d101f7cf11e65aed0e9dd1c46ec1aaa9ed575cc85c59ec2cdbea31f7aa99f0fc244ecc81a4f391f13794418eb96345948f20dee95378602e6167f957c530b4fc1d5ab9c73c1ec46d1e72a4e3c79422ed1c5b355c2531adc92bd3aeafbe5ecf142d68a7589785e77096c412c2ffa211af670769f794646479d83195523ffc628f52be9a531c762492bd815ff1757edea4f5f4ff185a7a9bc9f6aaecf7ed8bae70a24a95589e7fd9b09e4ed69deb185c10d1d8ba00841020de7cbddc71547d42e0d33d6958a006224a69334acac46a47c3377a677fa70519166a1a8b6cb742399a068c43d8b1ff641d67ff10c019f2614b476f8fa210ed963c61251b98f430cda941fee6b192617264f3d1aa79823b56a0c74f143c0ac0dc65a1a296816cea0a5d74c6dad5acef47827fa2b9cdf7e73a63ec10e874b549dd8bd08c79960f75bf996dbb7a05ec827ad4d85eef235706e24a57ab15c46c647e8fc3813b766b71a75e820fd20b4c533e0ac39ae2f9526f3a550e516f60f3a0bea89cc286cc99292371b09f52711800466cb2cfecdd416ca63cf4f3f034b53453b579497db707c0c05663636d227b8999d1d449a970ea4d584f6b499a09924b11503342473a640ae043968523eb269f39926a5829df4a34d4676393e50b3c69dfedf71a12c584de0af7702c8812ecd6ada1b1c857dfc51245b734232db368896f8e633a6a523cc98ee36450b31a3a56bb66da04b4cac151afa74c0bdebbf78385a19082662d5236c6826bf9808114e81d1df4295ab3398a87142a29830ddecb08ccab21d695ae5389b2c325a9aa616892d14fa3980e947562842b67025fe227429367163363db4639b35c5f7a27aab7417d1d95559a38162b94a5eec82e55388009f505829d93436b5e93dad3145495a1e64cee51303fdecda2929f78a5f9883ea7c4bc17a21e0668b387becb2c5389a172381e2d454b3abddca198cf82542952b5b582f957cfa95175b80292319f89cba824560546ec85aa474b008cb84f9b0911d3ffaa69cbbcc427160de70181610c8d7f570b9834537300ec7f34e28d7890945c9ec0455b7392e801d98bcc334249fdcd39c8556a98ea60cc2e51373a5b253814a6761938144282d4b5548ec219ddfee4db4d3a9799f9fdfcc37927863e0e87287f96020573148d906df2350d42e860bbbbf1e0980faec12252d7ba88079503f65b3c9c3f621eb4731228a4b1549c4675118fb5af31e70102609b74e8872cf32fb416c2743263905b80b4650dacbb0facaed38a84cdb7577f8c4f985e22117262b68450b5ff682b6e1c956538646d16f6b3df7ea8f040c06e9d732790c2096503639498c6f2894fdc73941be582341640987c4bb709fe6fc7276395e24e32586aab22ae700ff76ae69d71a4c89607cbd1b0ccebd661e9b92b1642ac35e51675c6ed0e0358f4a9d6745991b07c274a74ddf61faa82b3c2fe21abe32e0744927d3014742c504adc70e5e00987d663fd9f804e75c04e1c7ba616c9c080e891f7d508f790c20892817a2a84e6560e33efb05f805f5b244b2a48b0ce115ace6cd14bab261e3eba16f30311e57d1201436e6f08bb260dfdef096ab051ce103847062cc8db4ed1fc65c442fa82e1b06cf5a5112c7a77504d0b568dc9de8e933006695621734471de0e807a8d2926b0f0f10351160ac528d618739392706c879c8af7d42d2a17bab4e2a39d2fd8b52deed23f270a58fddcaee2873f2ea4a1f944659c292bd3360f9f2268924aaa3bb82b84347f46cbeb627d3da299fa6f436b2d073dcc77f962daf23f256177f6329625d7674e93f432493e16d15b7f33dbf5e9ceecfff7d75def43e4297af0c3dd72a7c2ecb6d3455b50b1fa92178162985922ef85c18f3aa8317d024391b40dcb51f1e52f672c048fd5257b937de95f7773ceaec83c5f1fc5badec7332c124c8a549d085a9e85637b78c79477bf21732ca76d367b83058ec46e123061ee2014d0803a0635eaf81615d67bf663c11663ba77ee7b8ccd90b28c7cc35198f6fbbc139bd6187725021363dc717ccfb2cd54d3beb8860509bc52a6f48ae4dcf6b5bb152dec28c16ce5bcefb6fc9bf3a5fdbb5d9db50bd56eeb211b720f1282d2bfe309af95ff6538d7ff6dbadd4679d81e9a3299ea4cf6a735cb2c9151e55900b69fc48bdf9a1e248057681bcb330f83feeb1dd3583f4c6ab2288cf93bc766addf134fb1781de53d98641314e94253e0a26459bfc0da2b5751f5e3db50a96578b5030760ef2aab57825c268ea356cb7ea7f6aa0137086af6542a17e8d9df5217c78b1fe39b0913a6326eca586e91b554d8057a81a93f859aa2f99fcbc394155d9f2b0af31b6ad60bd18b5f127a9de688a7e0a5c92221db4ed298d81e78fd608e45fcb9b8abde2bdc5df01db0c7fd9a59b51d06d208a76"}}}}}}}}, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000001340), &(0x7f00000001c0)=0x8) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x3, 0x4, 0x3, 0x1, 0x6, 0x3, 0x4}, 0x1c) 2.796877029s ago: executing program 6 (id=11058): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname(r0, 0x0, &(0x7f0000000000)) r1 = socket$nl_crypto(0x10, 0x3, 0x15) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) getsockname(r0, 0x0, &(0x7f0000000000)) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x1) (async) 2.717441096s ago: executing program 1 (id=11060): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) write(r0, &(0x7f0000000140)="1d4b13aea60ba614bcaa05667b92b6d3d6f4ba513069d3598f2e468d46354c9f7d044949604c916b316e551c0b2f480ad3544aa644448318e8c32ff7ac1193217eb3c3e5af7ec5b5d53ea40249038ce6c357a6e98a9f7569e1", 0x59) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c0000001800050000000000000000002d00000000000001010100000500010008000000080004"], 0x2c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000740), 0x4000000000001f2, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0xc) sendmsg$nl_generic(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000017c0)={0x60, 0x15, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r4}, @typed={0x8, 0x1, 0x0, 0x0, @u32=0x1}, @generic="64f0439d8df6681b5839d619b2f381977a82989d4076d24d87dc04e5d94100eb49cde65b65f819ddc94e9e9958825bcc8911991c997754089b8e"]}, 0x60}}, 0x0) recvfrom(r2, &(0x7f0000000740)=""/4096, 0x1000, 0x2042, &(0x7f0000001740)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x2a}, @in=@broadcast, 0x4e21, 0x3, 0x4e22, 0x6, 0x2, 0x80, 0x80, 0x89, 0x0, r4}, {0x9, 0x2, 0x3, 0xffffffffffffffff, 0x2, 0x101, 0xe, 0x10001}, {0x1000000, 0x200, 0x9, 0x7ff}, 0x559f, 0x6e6bb0, 0x3}, {{@in=@loopback, 0x4d6, 0x3c}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3505, 0x1, 0x1, 0x7, 0x2, 0x8, 0xb}}, 0xe8) r5 = accept4(r0, 0x0, 0x0, 0x800) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000001000000850000000c000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x20) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000000)=@req3={0x3d, 0x400, 0x5, 0x10001, 0x4, 0x8, 0x3}, 0x1c) setsockopt$inet_tcp_int(r0, 0x6, 0x2c, &(0x7f0000000040)=0x2007, 0x4) r8 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 2.615512414s ago: executing program 7 (id=11061): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xd, &(0x7f0000000500)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe95b}}], &(0x7f0000000580)='syzkaller\x00', 0xfffffffb, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000280)=@ringbuf, &(0x7f0000000300)='syzkaller\x00', 0x5, 0x20, &(0x7f0000000340)=""/32, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000380)={0x0, 0x800000}, 0x8}, 0x90) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000200)=0xce0, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x20, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x42004}, 0x80000) 2.487295049s ago: executing program 6 (id=11063): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000006c0)=0x94a, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b405000000000000611081000000000005000000000000009500000000000000b8547d39d17d8517c35f314d5d78aa2d3ba0666035439b9fce31cc739f18a20953ec537a53e8737ee2a44c2dae1b54d23ba985f52a2ad84af6619698fd1b345d9a95cdec7ba1a77cdbf969419c666540b02f42f91c70335768a3fb5cfc8e78f15dcc1792487a45cb9dd2c775b8e255e1228f64209ad00a9857e80be63ae77923c3ac00e367cc919c70f6f4f967ad2eb6a8f8d81dd74c4ed083e310941882c6c5bfbfcf9b34729e2f3d08ef8520955b5dcef4eee464669f7eb692a4e18d63cb188351c00800000000000000000000000015c419cfb6250e663ba65f30f065fc10847cf1c04654d859a85d9082ae941afd854cbdcf9282e9f196a0aa9bfda0816daf455fc7e770ecfd3e1e"], &(0x7f0000000200)='GPL\x00', 0x5, 0xc3, &(0x7f0000000240)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000340), 0x8, 0x10, &(0x7f0000000380), 0x10}, 0x94) syz_emit_ethernet(0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6100000000383a00fc000000000000000000000000000000ff0200000000000000000000000000010301907807000000efcf655ff8620000bd2eda520000000040000000000000000101ff020000000000003e37000000000001713ba29dd07d"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000480)={r1, &(0x7f00000004c0), &(0x7f0000000500)=""/6, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000004c0)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="4a00ffff11"], 0x17) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000003c0)=0x90, 0x4) (async) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1000}], 0x1, 0x40012040, 0x0) 2.263781822s ago: executing program 6 (id=11065): r0 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) bind(r0, &(0x7f0000000140)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x80) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x100400d0}, 0x600a0080) read(r0, &(0x7f00000002c0)=""/160, 0xa0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7800000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000058001a8006000000010000004c0005804800088008000100010000000a000200000000000000000008000300000000000800040000000000080003000000000005000600000000000800070000000000050008"], 0x78}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000001000000000000000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="010000000300"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x10, &(0x7f0000000b80)=ANY=[@ANYBLOB="bfa200000000000007020000d7feffff720200000000000018110000", @ANYRES32=r7, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bfa00000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.159066112s ago: executing program 7 (id=11066): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="86", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/203, 0xcb}], 0x1}, 0x0) (async) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/203, 0xcb}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000001180)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001140)={&(0x7f0000000b80)={0x510, r3, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x34, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1ff}, {0x8, 0x0, 0x51a1}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x9}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x5}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x494, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xbb, 0x2, "20a03eb2b8e92db2344278cee347143dd84377861bb5991646ae837bbe9dc5d71371dfc8182d46f15c4a51a9ca6a09adffb44454911160d4e3c4efce634920aac2de530b51ede687d683a906c0d106b7b4b3b49b2e11d03288326d1181f334596470ee46476ef261f26015acd1d15539eaef7043944eef86b37b240d22ecfda25014fa71efcabe9b75fb2cd2d66a7773bda417adf8d8f9f6ad693b06de0f55eab09a8abde97f0ae7d84e0ee8fcd0cb5a30aa159cdb3c93"}, @NL80211_BAND_2GHZ={0x7d, 0x0, "664b48f2dcd494cd13b788c69dc4be6c6aae9d760ec991ce10cbbf4deda735327f92ad669d3fc30c84b8a4cb41ce4da6543388ddeada1bdd0ee45d7a84cdd9dd3aca3f5a8f90451bdac91df7c98fd389a029d8711930737d44942e9bbe0d9b25bab99f66e044cc9ddfd569c0840a5159bd9b92b02bc2eb04db"}, @NL80211_BAND_60GHZ={0x97, 0x2, "55d823fbbaa73860419b002062f6a2cc5ee4c7472a3ee2a80f4c5ba5a7339e0189cca3509910bc8394bcd141e09b95e97fe877ce83bdb30e68763c3f99151790519333c20e00722fafce7550e18944d9821cd493501d9cbb575f1644d44a80dd2d84183ec798ee01358a6d0d85a265d950d164a7a6d126028e30728497976f7855135c5d5ca35135c60891707cfa510fd1c261"}, @NL80211_BAND_5GHZ={0xa2, 0x1, "35c7e76591ac1e00272cc48e96c9095423341c43b34f4e18bf09c93c3bb2333f23f534d653d47e627f8da2330ab789be0ee559dedfbec42c3c9c4890cf50c315abac806705038d54ff9ca8b227aaac28e6fc524a8365dd3c76274fc99bebe5c7316d5258a69fc5a3673c319d5a67d7b43c190dc685ef23e9396fc6e662c9c38dab55de4b42f56c5b6b9be8e869f19b913cff8fe8200282489e097b931197"}, @NL80211_BAND_6GHZ={0x6b, 0x3, "4dd33c320f30d2ec42675cb5d29668b7be9f3e0120fd28c33befea252e3790c839f3849d65c66ccc67c78542247df7c48883038d8a216dfcc31189c4bcf75b161a606d1bbbe473ee2582fafb26b9a7d64b30c7c3f23e106a3f28253b5df4162d81db30c76870ed"}, @NL80211_BAND_2GHZ={0x48, 0x0, "0d0119dd6edf266a9a4df6bb283c023d6f5bd7dd34b70e97939cfbb56f1121d770b7034d8aa72d0d555ce97d13ba1d56fadaafb396a0412f054eb79db68cebebf0d5544c"}, @NL80211_BAND_2GHZ={0x24, 0x0, "667fda0d5283d6ddaeffc8d9e4479d90d6dc34ce4454ae85cca380e3aec12b7a"}, @NL80211_BAND_2GHZ={0x70, 0x0, "5b47bffc97b4f80770ce307a8a90d161b5cf8eb2e544c2a1a58762709007a1b6638357a7794c4e5c9e84eb580affc215508b8aca88cd25cfa166f25d91e4ab8b36619d7e6e9b57c16b53dc8e22fa8c5481ab1b4501539eb39a04ca4ac49724c72ca880860d9cf110e9fd8f40"}, @NL80211_BAND_5GHZ={0xce, 0x1, "9f3c9f1a60b4ab8c68a456c4a77a2324d4013353cbf3787350588b08fafc0999a53abc904ad82f52aa686a7ea92df735acc50555dc79b51db3d3f89e6351060b47bda5652461ef393bc059d74e5375ca1eda02c7c03ad3db4b0c674d2ae33d5da3734141f51f7b484423f92127d3d359c6efde743a93ccae23e8c87816ce17e8758638f6acfc3700a72a62798dcf94100b98e02e4b474b1638df36f114b0e3ae9cc33ea757511c4126d89d2e5768d259f87c5c232baf6923d8a41fc3446ea8dfb873ba8009449c9139d2"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x510}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r4, 0xd7735000) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r4, 0xd7735000) openat$cgroup_ro(r4, &(0x7f0000000500)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) (async) openat$cgroup_ro(r4, &(0x7f0000000500)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x9}}}}}}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000a80)={0x0, 0x7}, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0x12, &(0x7f0000000ac0)=0x9, 0x4) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000b00)={0x0, 0xb007}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00090005"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) (async) sendmsg$nl_generic(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00090005"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0x40000000015, 0x5, 0x0) (async) r11 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r11, 0x114, 0x6, &(0x7f0000000540)=0x1, 0x4) ppoll(&(0x7f0000000580)=[{r11}], 0x1, &(0x7f00000005c0)={0x0, 0x3938700}, 0x0, 0x0) (async) ppoll(&(0x7f0000000580)=[{r11}], 0x1, &(0x7f00000005c0)={0x0, 0x3938700}, 0x0, 0x0) ioctl$BTRFS_IOC_FS_INFO(r11, 0x8400941f, &(0x7f0000000600)) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000b40)={0x0, 0xfffffffffffffec8, &(0x7f0000000100)={&(0x7f0000000000)={0x24, r10, 0x5, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x3009}]}, 0x24}}, 0x40000) 2.153561502s ago: executing program 8 (id=11067): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@rand_addr, @empty}, &(0x7f0000000100)=0xc) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}]}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x0]}, &(0x7f0000000440)=0x8) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000580)={r2, @in6={{0xa, 0x4e23, 0xef24, @empty, 0xbe0}}, 0x1f2, 0x201}, &(0x7f0000000640)=0x90) 1.994675702s ago: executing program 8 (id=11069): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c) (async) ioctl$int_out(r0, 0x5460, &(0x7f0000000040)) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "08304b1b2c7ab0ab", "2a4e84b766916fb73fadc993b23b7400", "a597d4d4", "d34d721981035054"}, 0x28) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01000001"], 0x100}, 0x0) 1.972348581s ago: executing program 6 (id=11070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x0, 0x2}]}]}}, &(0x7f0000000e40)=""/228, 0x36, 0xe4, 0x1}, 0x20) recvmsg(r1, &(0x7f0000000240)={&(0x7f00000007c0)=@hci, 0x80, &(0x7f0000000840)=[{&(0x7f0000000880)=""/248, 0x200105d0}], 0x1}, 0x1f00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000f40)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000b80)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000c00)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000c40)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000001dc0)="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", 0xcb3}], 0x5, &(0x7f0000002a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002b40)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) sendmsg$tipc(r2, &(0x7f0000003b40)={0x0, 0xfffffff5, &(0x7f0000003b80)=[{&(0x7f0000003bc0)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000001000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x0, 0x0, 0x80000000, 0x4, 0x32, 0x4, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000680)={0x0, @in6={{0xa, 0x0, 0x3, @empty}}, 0x1, 0xfffe, 0x0, 0x9, 0x8a}, 0x9c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000740)="19", 0x1, 0x2004c101, &(0x7f0000000780)={0xa, 0x4e21, 0x8, @remote, 0x10006}, 0x1c) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x40000002) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=@newlink={0x3c, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r9, 0x20194, 0x10014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r12}, &(0x7f0000000140), &(0x7f0000000280)=r11}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r12}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1.795407291s ago: executing program 8 (id=11072): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000017c0)={0xe, 0x4, &(0x7f0000001880)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f00000018c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001900)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001940)={r2, &(0x7f0000001980), &(0x7f00000019c0)=@udp=r1}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001a00)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r4, &(0x7f0000001a40), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) connect$inet6(r1, &(0x7f0000001a80)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000380)={0x8, 0x3, 0xfff, @local, 'ipvlan0\x00'}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x25, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x9c) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000140)="7800000018002507b9409b14ffff00000204be04020506050e0204095c0009003f0000000a0000000d0085a168d0bf46d32345653600648d0a0015000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r6, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="080026bd7000fcdbdf253800000008000300", @ANYRES32=r8, @ANYBLOB="0c0099008100000070b401000400580046000000000000000c0058006a000000000000000c0058004300000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x50) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000001680)={0x1ff, {{0xa, 0x4e20, 0x0, @remote, 0xc37}}}, 0x88) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0x22072a18}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x60) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cpuacct.stat\x00', 0x26e1, 0x0) ppoll(0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0) close(r9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000700)) 1.572836445s ago: executing program 1 (id=11073): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x823}, [@IFLA_LINKINFO={0x1f, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}]}}}, @IFLA_MASTER={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40440e4}, 0x20040000) (async) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r1], 0x38}}, 0x10) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000711214000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async, rerun: 32) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={&(0x7f00000001c0)="9d7f4f865b0cba35485a118a06c8576267cfcea879233e50539ca86ba5a35b0f17a589c1f7e62aba1c97fcbdec7c3d2b48c1f65beb79689b11690902da258c60a26a95a7b23a08b6755da9392813c18af2d8a40d1486dab38e57f26f97f51b743148a2188c6e7cff22e2c986e2bde79f4cfb641c2feaa7a84cea930ef1ee7b2cbb0cdbc9bbd4607561c6d461e92279c2b17510149fd1f55d4be341726a8f6fc32c70f3030ec76e8f30afa2b20ce24af63235499441475385e4dfa35df62a86cec3a346f97a772694ecc6882b365b025cee4d5534f7acfcdb7afab589735fcd66bb5181bf45d49a54424a", &(0x7f00000002c0)=""/85, &(0x7f0000000340)="48972fc0d2d7cf02e91fd9654c439ee78a6436876f21252f8b0e2d81d1447f344cf2cd9736ae36a9b3de0a34d1d4628775d3ff64be1e19caea66", &(0x7f0000000380)="8fd3a77e3b9f9fbf733f6f94cca51093d0c136fc110778ab2abb1d9e780184f0d41eee6549df85e13d8c51c5203c2b40d0bd31030e01dc048d0bd887f2bb86731313caa50b76e34bc47c454b4c1f177f673cd5fcae42b1fda931", 0x1, r1}, 0x38) 1.430234631s ago: executing program 2 (id=11074): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100e4ff"], 0x6c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x50) 1.312086659s ago: executing program 8 (id=11075): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) (rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000002000000000000000100000d00000000fcffffff0200"/58], 0x0, 0x3a}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000009c0)={r3, r3, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000a00)=r4, 0x4) (async, rerun: 64) close(0x4) (rerun: 64) setsockopt$inet_tcp_int(r2, 0x6, 0x4, &(0x7f00000003c0)=0x3ff, 0x4) (async) r5 = socket(0xa, 0x2400000001, 0x0) (async, rerun: 64) r6 = socket$netlink(0x10, 0x3, 0x14) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000001e14010000000000000000000900020073797a30000000000800410072786500140033"], 0x38}}, 0x100) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000001bc0)={0x1, {{0xa, 0x4e22, 0x0, @mcast1, 0x1000003}}}, 0x88) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002000), r1) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002600)={&(0x7f0000002680)={0x5b8, r7, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_FRAME={0x8a, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x4}, @device_a, @broadcast, @random="45de6c1b7789", {0x7, 0x8}, @value=@ver_80211n={0x0, 0x3, 0x1, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0xa248, 0x3, @random=0x5, @void, @val={0x2d, 0x1a, {0x8000, 0x0, 0x5, 0x0, {0x8, 0xe, 0x0, 0x1ad, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x6, 0xa5c3, 0x55}}, [{0xdd, 0x21, "0ef7c97495186fe0ee3c99907496af55fa20cda2547f217cf980d3f659bbaf9ba2"}, {0xdd, 0xa, "bb867fe31bdbb0109e28"}, {0xdd, 0x17, "d9e086cb1d8c12b1c48ec750c4343437bbca781775b7d7"}]}}, @NL80211_ATTR_FRAME={0x4eb, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x81}, @device_b, @broadcast, @random="45ad200925a8", {0x8, 0x484}, @value=@ver_80211n={0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x5, @default, 0xe46, @void, @void, @val={0x3, 0x1, 0x34}, @val={0x4, 0x6, {0x1, 0x7, 0x0, 0x8001}}, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x9d, 0xb7, 0x90}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, 0x44}}, @void, [{0xdd, 0x48, "5eb4722a130b9f6c35062b8884dcb29a9dd79324615d9c891d4d9bc7a0e1a4f6511738590a597ab33050c8070a102d27528d020a8c82ed5f87ffa53aa174a2515aef4317fe926a8d"}, {0xdd, 0xc2, "16a1c52a3a48074cff428e8a3c4419f77b2a914595eab851fbe5d9f0104142902bdabbdbd7a66a242c57c8989f072904859a409d2a099b0a19566d63320820362d079ba6e429b1b247e9ac884dbc48860520d382be90c587254de479e936eca779e5c88a33bfaecc55993e7211462d42b52581269b736d4a8abba857a84d7047c504b708612a77acf388225c7875737a3178c18157ffafed2b9a780fc91f02b62530b23f49dcf899890980267b59b6dfc54798bd35dfe0f1fcdcab6cc2a858d00c57"}, {0xdd, 0xd5, "3b481f283bbf4059fd45bc18379bc5078f5900a11c2bd132a18c2d8a033972188c006d3379d8fbce3251ccc287de0786e30228a54bb0c8a9e606e3c11552844179763828f1de1835ab25aaf4db308d7bfe7d3c84ba0c07a1b2fbf09cd4fc1eb8a0205ad91bc7a4268d5ccc5b2ddae79f0394befdf0214a02477b15d83b258ffc1ced100630330ba9df292a5cd6c6ef47db8642cbb96bc626c2d515ac12e04c26d310c76433bb5e395a83df85725948102c8040b183d44225e2c70a1ed6a68c6bbe42a11203f0584ddea59aa6a7f2698131b0ea3455"}, {0xdd, 0xff, "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"}, {0xdd, 0xc1, "3d24cca07ceaaeb9414e30ee7b51ad977a1b744a4fe74da55f74d19507c95cf8806723606d15d2a2424dd69232e3f8d3e0de70eb91b4258f9e2c15829ae7d18beb821599413de9dd7fa9896a2e69bde536011096f7d3c0afe9209b3775cfffe53e1ea31175def6571560ed069bfd87d76705adefd6c2d409cd2d48ba7bea9496284553219e97f1460f17c6f5917d2fccf43931bc20ec4a68152e40c5d271e97546882d8bc01fae6c465160762b1515dc0b74eb4994f8efe5ca969459845333bdc8"}, {0xdd, 0xef, "b11cd9c6cbf1917f713d0bf33d2e64ac264319ebb573e2e53c56abeafb498766d7e5aecb0ad11ff15f2488f6edb2d06dcaec171afcaf7bffb58bac409161e55a063056253c5c11155639fe2675e24a59fc4946dc9428ee34833a4f9db8c41dbcc664c088cbee70ee8317d08d2c8b1003899771a8683195b21974afb13fa60432c0a661376feb52e893624c05464abc701d20c35b37c7b9b6eb6e1a41ba7926f35d02f29756758c5a7a17e103d6966b82b610849d497ee11eb78531dcfa964edb0f448d7e5fc003a866b9f19dc28c9aea90964d0f9cba98635dde75bfcb4304c2c8aa544468d936c43bfc07af700a8d"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x124f}]}, 0x5b8}, 0x1, 0x0, 0x0, 0x151}, 0x20000081) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000001c80)={0x5, {{0xa, 0x0, 0x0, @mcast1, 0x1000000}}}, 0x88) (async) getsockopt$inet6_buf(r5, 0x29, 0x10000000000030, &(0x7f0000001d40)=""/144, &(0x7f0000001e00)=0x90) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000340)={{r1, &(0x7f0000000140)='gretap\x00', 0x2200, &(0x7f0000000180)={@align=0xfffffffffffffff8, {0x7, 0x7, 0xb, 0x3}}, 0x6, &(0x7f00000001c0), &(0x7f0000000200)=0x1c}, {[0x7, 0x7450, 0x3, 0x2]}, 0x0, 0x34, &(0x7f00000002c0)=""/52}) (async) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r8, r8}, 0xc) (async) recvmsg$can_raw(r9, &(0x7f0000001b80)={&(0x7f0000000740)=@sco={0x1f, @none}, 0x80, &(0x7f0000001b40)=[{&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000b40)=""/4096, 0x1000}], 0x2}, 0x40000041) (async) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0xffffffffffffff4a, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x40010) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000280)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001f00)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50e35, 0x463}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r13}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) 1.087139586s ago: executing program 2 (id=11076): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x24, r1, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}}, 0x0) 1.012376382s ago: executing program 1 (id=11077): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x2, 0x3, 0xff) connect$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, 0x3}, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'gretap0\x00', {0x2, 0x4e20, @loopback}}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)={0x14, 0x14, 0x1, 0x70bd2d, 0x0, "", [@generic="09fa6c93"]}, 0x14}], 0x1}, 0x0) bind$inet(r1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20010}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40890}, 0x8000) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000240)) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, 0x0) pread64(r4, 0x0, 0x0, 0x100008) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0xe}]}}, &(0x7f0000001f80)=""/237, 0x26, 0xed, 0x2}, 0x1a) 952.449139ms ago: executing program 7 (id=11078): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="30b2cd001d008a00070f0000fa0e5f80d203641f", @ANYRES32=r1, @ANYBLOB="000096040a000200aaaaaaaaaa0c00000600050000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async, rerun: 32) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000010000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="010000000300000000"], 0x48) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) sendmmsg(r3, &(0x7f0000000200), 0x0, 0x24044010) (async, rerun: 32) ioctl$AUTOFS_IOC_READY(r3, 0x400442c8, 0x200000f3) (rerun: 32) 799.303787ms ago: executing program 6 (id=11079): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'syzkaller0\x00', 0x0}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x24, r5, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r3, &(0x7f0000000240), &(0x7f0000000280)=""/182}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r3, 0x34, 0x0, 0x50d778bd, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0]}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1, 0x1}}]}}]}, 0x44}}, 0x4084) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000c00)={'syzkaller0\x00', 0x1}) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000c40)='syzkaller0\x00', 0xb) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000c80)={0x2, 0x4e20, @loopback}, 0x10) 710.591727ms ago: executing program 1 (id=11080): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000003c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x14, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x2, 0x892f}, {}, {}, {0xa888}}}}}}}, 0x0) 616.202012ms ago: executing program 2 (id=11081): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf252600000008000300", @ANYRES32=r2, @ANYBLOB="0a0034000101010101010000080042000100000010009d00000100000300ff07ffff"], 0x40}}, 0xc00) 615.810285ms ago: executing program 7 (id=11082): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a428040000000000140035006d6163766c616e30000000000000003608000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x400880f4) 583.929102ms ago: executing program 8 (id=11083): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x24}}, 0x4000) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="010000000002"}) 452.585242ms ago: executing program 2 (id=11084): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2, 0x1}}, 0x2e) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x6, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r5, &(0x7f0000000040)="bc918bffb3771c2bae5d0e57c3164d2be5", 0xffffffffffffffea, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001980)={r4, 0x20, &(0x7f0000001880)={0x0, 0x0, 0x0, &(0x7f0000000880)=""/4096, 0x1000}}, 0x10) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) 316.158122ms ago: executing program 6 (id=11085): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x10000009, @loopback, 0x9}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x56202326, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)='$|', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)='Q', 0x1}], 0x1}}], 0x2, 0x4040881) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000001640)=0x40) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc04132478543c0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x83e29f5c14b60d7e) 315.69473ms ago: executing program 1 (id=11086): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0xff, 0x2000}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r4, 0x200, 0x470bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x2}, @NL80211_ATTR_TXQ_LIMIT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40488d1}, 0x20040080) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) 309.976998ms ago: executing program 2 (id=11087): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0x190, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0xffff}, {@in=@broadcast, 0x4d4, 0x32}, @in6=@private2, {0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, 0x0, 0x1000, 0xa, 0x4, 0x0, 0x50}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x58, 0x1, {{'xcbc(aes)\x00'}, 0x80, "8478b0098a3a72ec6b13aa7d25e76d54"}}]}, 0x190}, 0x1, 0x0, 0x0, 0x40}, 0x40082) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@ipv6_newnexthop={0x18, 0x68, 0x1}, 0x18}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="380000001714"], 0x38}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40040) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r6) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x30, r7, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0xf, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x8}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, r7, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:nvram_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x13}}]}, 0x60}, 0x1, 0x0, 0x0, 0x84}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0xe63}, @IFLA_GTP_PDP_HASHSIZE={0x8}]}}}]}, 0x40}}, 0x0) 182.911715ms ago: executing program 8 (id=11088): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r1, 0x110, 0x7, 0x0, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB="00000000080000000000000000000000ff53dceb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r3, 0x20, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000001bc0)=""/4096, 0x1000}}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000002bc0)=r3, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000007c0)={'tunl0\x00', &(0x7f0000000700)={'tunl0\x00', 0x0, 0x1, 0x7800, 0x8, 0x10, {{0x22, 0x4, 0x0, 0x11, 0x88, 0x65, 0x0, 0xff, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x19}, {[@generic={0x83, 0x4, 'Ly'}, @timestamp_prespec={0x44, 0xc, 0x56, 0x3, 0x7, [{@empty, 0x7}]}, @timestamp_addr={0x44, 0x34, 0x83, 0x1, 0x1, [{@remote}, {@remote, 0x59}, {@broadcast, 0x40}, {@loopback, 0x6}, {@broadcast, 0xc}, {@loopback, 0x6}]}, @timestamp_addr={0x44, 0x1c, 0x97, 0x1, 0xd, [{@remote, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x35}, 0xa}, {@broadcast, 0x3}]}, @ssrr={0x89, 0x13, 0xe0, [@rand_addr=0x64010101, @remote, @multicast2, @remote]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'syztnl0\x00', r5, 0x29, 0x1, 0x2, 0x2, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x44}, 0x700, 0x80, 0x7f, 0xa}}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x44}}}]}, 0x38}}, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000008c0)=0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000080)=""/7, &(0x7f00000004c0)=0x7) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x884, 0x2c, 0xd27, 0x70bd1e, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x84c, 0x2, [@TCA_CGROUP_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffff7f, 0x8, 0xe, 0x65ff05df, 0xd1b, 0x80000001, 0x9, 0x10000, 0x1, 0x6, 0x3ff, 0x0, 0xc755, 0x6, 0x1, 0xc, 0xfffffff9, 0x1f1, 0x68, 0x642, 0x3, 0x1, 0x9, 0x1, 0xef, 0x9, 0xfff, 0xe, 0x6, 0x3ff, 0x8, 0x7eb1, 0x8, 0x4, 0xd0, 0x7db1b20b, 0x3, 0x6, 0x2, 0xae0, 0x6, 0x8, 0x9, 0x4, 0x1000, 0x2, 0x12e, 0xe32, 0x2, 0x4, 0x1, 0x93, 0x7, 0x5, 0x2, 0x0, 0x52, 0x1, 0x4, 0x8000, 0x8, 0x9, 0x7, 0x80000001, 0x5, 0x7, 0x100, 0x8, 0x2685, 0x3, 0x9, 0x5, 0x8, 0x5, 0xf, 0xb, 0xc89, 0x7, 0x600, 0x6, 0x80000000, 0x3, 0x7, 0x2, 0x46c, 0x4, 0x8, 0x4, 0x0, 0x9, 0x979, 0x5, 0x3ff, 0x3, 0x4, 0x9, 0x4, 0x6, 0xfff, 0x1, 0x9, 0x0, 0x30cd, 0x7fff, 0x2, 0x380, 0x1ccd, 0x8a, 0x8, 0x1a8000, 0x8, 0x7, 0x7fff, 0x1ff, 0x800, 0xd, 0x10, 0xc58, 0x80, 0x1, 0x9, 0x400000, 0x7fff, 0x1000, 0x2e8d, 0x3, 0x1, 0x400, 0x0, 0x3, 0x7, 0x0, 0xb20, 0x75, 0x7, 0x65d, 0x0, 0x401, 0xa0a, 0x7, 0x2, 0x1, 0x9, 0x4, 0x4, 0x9, 0x5, 0xd, 0x7ff, 0x4, 0xd, 0x6, 0x7, 0x9, 0x0, 0x73c7, 0x4, 0x80, 0x6, 0x200, 0x7, 0x80, 0x7, 0x7, 0x8, 0xa, 0x6, 0x0, 0x1, 0x6, 0x8000, 0x1, 0x0, 0x92600000, 0x80, 0xffffbb79, 0xffb, 0xa0e, 0x8, 0x30, 0x2, 0x62, 0x9, 0x0, 0x6c, 0x1, 0x5, 0x8, 0x1, 0x4, 0x0, 0x9, 0xfffffff8, 0x74, 0x6, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x2, 0xfffff4e2, 0xcbb, 0x7, 0xffff, 0x9, 0x2, 0x8001, 0x1, 0x1000000, 0x3, 0x6, 0xcba, 0x1bc, 0x1, 0xe07, 0xac, 0x137487da, 0x0, 0xfffffffa, 0x7fffffff, 0x1000, 0x3, 0x7fffffff, 0x5000, 0x2, 0x5b, 0x2, 0x3ff, 0x1ff, 0x3, 0x1, 0x9, 0x3ffc0, 0x1, 0xff, 0x5, 0x0, 0x299b, 0x0, 0x81, 0xfffffffe, 0x3c4, 0x7, 0x236, 0x5816, 0x53eb, 0x4, 0x101, 0x9, 0x1b3, 0x3, 0x1, 0x6, 0x591, 0x7fffffff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x1, 0x2, 0xffff, 0x0, 0xfffffffc, 0x800, 0x7, 0x100, 0x80000000, 0x4, 0xffffff8e, 0x4, 0x6, 0x4, 0x6, 0x6, 0x8, 0x0, 0x1, 0x8, 0xf0d, 0xb, 0x5ff, 0x2, 0x1, 0x7, 0xfffffffe, 0x8, 0x0, 0x4, 0x1, 0x6, 0x7, 0x6, 0x2, 0x5, 0x100, 0x0, 0xaf0, 0x2, 0x9, 0x3, 0x6, 0x28a, 0x6, 0x6, 0x43cffa48, 0xfffffffa, 0xa, 0x9, 0x9, 0x919, 0x5, 0x1, 0x8000, 0x1, 0x9, 0x0, 0x9, 0x7, 0x2, 0xe, 0x7, 0x8184, 0x5, 0x4, 0x1, 0x0, 0xff, 0x376, 0x7f, 0x2, 0x4000, 0x7, 0x1, 0x4, 0x8, 0x9, 0x1, 0x2, 0x0, 0x0, 0x5, 0x9, 0x8, 0x3, 0x8, 0x7, 0x6, 0x8, 0x400, 0x4, 0x2, 0x3, 0x6e1, 0x4db, 0x2, 0x2, 0x7, 0x2, 0x9, 0x0, 0x5, 0x5, 0x4, 0x800, 0x24, 0x9, 0x3, 0x2, 0x2, 0x0, 0x4db9, 0x200, 0xffffff39, 0xb, 0x4, 0x101, 0xdcc, 0x12af800, 0x1, 0x7ff, 0x9, 0x7cf, 0xd48, 0xb, 0x9, 0x700000, 0x1, 0x1, 0x3, 0x8, 0x10001, 0xb, 0xfffffffd, 0x6, 0xb7, 0x7f, 0x8, 0x2, 0x9, 0x3, 0x9, 0xc29b, 0xffff7eac, 0x3f, 0xf1, 0xf, 0x8, 0x2, 0x4, 0x0, 0x4, 0x0, 0x5, 0xfffffff9, 0x2, 0x2, 0x8, 0x57, 0x9, 0x0, 0x80000001, 0x7, 0x8, 0xffffffff, 0x7fffffff, 0x96, 0x3, 0x5, 0x2, 0x1, 0x1, 0x4, 0x10, 0x2, 0x8001, 0x3516, 0x7, 0x8, 0x6, 0x38, 0xfffffffc, 0x67, 0x2, 0x401, 0x320a, 0x3ff, 0x3, 0x5, 0xfffffffa, 0xbe8f, 0x4, 0x7fffffff, 0x862, 0x5, 0x100, 0x3ff, 0xa, 0x0, 0x8, 0x12bf, 0xffffffff, 0x1, 0xfe32, 0x1, 0x6, 0x10001, 0xf8, 0x6, 0x3, 0xa, 0x4, 0x5, 0x8, 0x0, 0x9, 0x7fffffff, 0x7, 0xfffffffe, 0x80, 0x3, 0x5, 0x1, 0x9, 0xd, 0xfcc, 0xfff, 0x2, 0x7, 0x0, 0x5, 0xb, 0x5, 0x1, 0x5, 0x7, 0xb, 0x3, 0xfffffbff, 0xd839, 0x8, 0x10000, 0x8, 0x7, 0x8, 0x1, 0x0, 0x6, 0xd, 0x10000, 0x8000, 0x7, 0x7cba8000, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd2, 0x1, 0x6, 0x8, 0x7, {0x7, 0x0, 0x5, 0x3, 0x6, 0x5}, {0x9, 0x0, 0xe9, 0x40, 0x8, 0x4}, 0x9, 0x3, 0xdf9}}]}]}}, @TCA_RATE={0x6, 0x5, {0x40, 0x5}}]}, 0x884}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) 143.443339ms ago: executing program 2 (id=11089): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0101f3ffffffffffffff010000030900010073797a310000000040000000030a010400000000000000000100ffff0900030073797a310000000014000480080002400000000008000140000000050900010073797a310000000014000000110001"], 0x88}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x3, 0x3}, 0x10) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000100), 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000780)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@initdev={0xac, 0x1e, 0x20, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xb0}, {@in6=@empty}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) (async) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r4, 0x40047211, &(0x7f0000000440)=0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a00000000000000fe8000000000000000000000000000aabf090000200002004a00000000000005fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) (async) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000380)=[{0x4e}]}) (async) bind$bt_hci(r5, &(0x7f00000003c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r5, &(0x7f0000000400)=ANY=[], 0x6) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x160}}, 0x0) 0s ago: executing program 7 (id=11090): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@restrict={0x3, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x61, 0x2e]}}, 0x0, 0x28, 0x0, 0x1, 0x2}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x25000}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): ompute Engine, BIOS Google 07/24/2026 [ 966.722941][T10644] Call Trace: [ 966.722949][T10644] [ 966.722958][T10644] dump_stack_lvl+0xe8/0x150 [ 966.722990][T10644] should_fail_ex+0x410/0x560 [ 966.723022][T10644] _copy_to_user+0x31/0xb0 [ 966.723043][T10644] simple_read_from_buffer+0xe1/0x170 [ 966.723077][T10644] proc_fail_nth_read+0x1bb/0x230 [ 966.723098][T10644] ? common_file_perm+0x20e/0x2b0 [ 966.723129][T10644] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 966.723154][T10644] ? rw_verify_area+0x24a/0x4c0 [ 966.723175][T10644] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 966.723196][T10644] vfs_read+0x213/0xa80 [ 966.723220][T10644] ? __pfx___mutex_lock+0x10/0x10 [ 966.723244][T10644] ? __pfx_vfs_read+0x10/0x10 [ 966.723264][T10644] ? __fget_files+0x2a/0x420 [ 966.723284][T10644] ? __fget_files+0x3a2/0x420 [ 966.723298][T10644] ? __fget_files+0x2a/0x420 [ 966.723324][T10644] ksys_read+0x150/0x270 [ 966.723345][T10644] ? __pfx_ksys_read+0x10/0x10 [ 966.723376][T10644] do_syscall_64+0x166/0x520 [ 966.723398][T10644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.723417][T10644] ? clear_bhb_loop+0x70/0xc0 [ 966.723440][T10644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.723458][T10644] RIP: 0033:0x7f6c02b5ed8e [ 966.723476][T10644] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 966.723492][T10644] RSP: 002b:00007f6c00df5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 966.723511][T10644] RAX: ffffffffffffffda RBX: 00007f6c00df66c0 RCX: 00007f6c02b5ed8e [ 966.723525][T10644] RDX: 000000000000000f RSI: 00007f6c00df60a0 RDI: 0000000000000004 [ 966.723537][T10644] RBP: 00007f6c00df6090 R08: 0000000000000000 R09: 0000000000000000 [ 966.723549][T10644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.723560][T10644] R13: 00007f6c02e26038 R14: 00007f6c02e25fa0 R15: 00007fffc6ab7008 [ 966.723597][T10644] [ 966.936308][T10652] openvswitch: netlink: Flow key attribute not present in set flow. [ 966.978849][T10657] openvswitch: netlink: Flow key attribute not present in set flow. [ 967.003964][T10648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9692'. [ 967.208518][T10677] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 967.352564][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9698'. [ 967.890465][T10704] erspan0: vlans aren't supported yet for dev_uc|mc_add() [ 967.983192][T10708] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 968.783819][T10766] gre1: entered promiscuous mode [ 969.104467][T10785] batman_adv: batadv0: Adding interface: gretap1 [ 969.104504][T10785] batman_adv: batadv0: Interface activated: gretap1 [ 969.137695][T10789] netlink: 'syz.3.9732': attribute type 2 has an invalid length. [ 969.156073][T10795] veth1_macvtap: left promiscuous mode [ 969.156098][T10795] macsec0: entered allmulticast mode [ 969.730821][T10828] netlink: 'syz.0.9742': attribute type 2 has an invalid length. [ 969.730845][T10828] netlink: 'syz.0.9742': attribute type 8 has an invalid length. [ 969.730857][T10828] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9742'. [ 969.769531][T10833] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9744'. [ 969.776330][T10835] netlink: 'syz.2.9745': attribute type 2 has an invalid length. [ 969.782729][T10828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9742'. [ 969.875869][T10835] : entered promiscuous mode [ 970.104001][T10852] Bluetooth: hci0: Invalid link address type 18 for 00:40:00:00:00:00 [ 970.208927][T10861] netlink: 'syz.4.9752': attribute type 32 has an invalid length. [ 970.208949][T10861] __nla_validate_parse: 1 callbacks suppressed [ 970.208959][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9752'. [ 970.279989][T10867] netlink: 'syz.0.9755': attribute type 3 has an invalid length. [ 970.300115][T10861] bond2: option coupled_control: invalid value (9) [ 970.304189][T10861] bond2 (unregistering): Released all slaves [ 970.463469][T10869] bond1: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 970.467861][T10869] bond1 (unregistering): Released all slaves [ 970.562977][T10883] IPv6: NLM_F_CREATE should be specified when creating new route [ 970.783504][T10892] bond0: (slave ip6tnl0): refused to change device type [ 970.812375][T10892] bond0: (slave ip6tnl0): refused to change device type [ 970.872710][T10904] geneve2: entered promiscuous mode [ 970.872736][T10904] geneve2: entered allmulticast mode [ 970.891808][ T8501] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 970.891853][ T8501] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 970.891884][ T8501] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 970.901486][ T8501] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 971.105856][T10917] netlink: 'syz.3.9767': attribute type 2 has an invalid length. [ 971.105878][T10917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9767'. [ 971.750335][T10941] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 971.754946][T10948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9777'. [ 971.975307][T10954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9778'. [ 972.160477][T10963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 972.205791][T10967] netlink: 'syz.2.9780': attribute type 9 has an invalid length. [ 972.540436][ T3735] bridge_slave_1: left promiscuous mode [ 972.540645][ T3735] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.582750][ T3735] bridge_slave_0: left allmulticast mode [ 972.582777][ T3735] bridge_slave_0: left promiscuous mode [ 972.582997][ T3735] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.847858][T10989] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 973.213251][ T3735] bond12 (unregistering): (slave gretap2): Releasing active interface [ 973.276408][ T3735] bond6 (unregistering): (slave geneve2): Releasing active interface [ 973.324451][ T3735] bond0 (unregistering): (slave bridge2): Releasing active interface [ 973.329785][ T3735] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 973.367511][ T3735] bond1 (unregistering): Released all slaves [ 973.386771][ T3735] bond0 (unregistering): Released all slaves [ 973.400753][ T3735] bond2 (unregistering): (slave veth3): Releasing backup interface [ 973.413181][ T3735] bond2 (unregistering): Released all slaves [ 973.423626][ T3735] bond3 (unregistering): Released all slaves [ 973.436996][ T3735] bond4 (unregistering): Released all slaves [ 973.448155][ T3735] bond5 (unregistering): Released all slaves [ 973.459657][ T3735] bond6 (unregistering): Released all slaves [ 973.475302][ T3735] bond7 (unregistering): Released all slaves [ 973.490161][ T3735] bond8 (unregistering): Released all slaves [ 973.510831][ T3735] bond9 (unregistering): Released all slaves [ 973.522888][ T3735] bond10 (unregistering): (slave veth7): Releasing active interface [ 973.524958][ T3735] bond10 (unregistering): (slave veth0_to_bond): Releasing active interface [ 973.526514][ T3735] bond10 (unregistering): Released all slaves [ 973.558917][ T3735] bond11 (unregistering): Released all slaves [ 973.575548][ T3735] bond12 (unregistering): Released all slaves [ 973.703105][ T3735] : left promiscuous mode [ 973.817756][ T3735] tipc: Left network mode [ 973.829292][T11007] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20002 [ 973.867976][T11004] tipc: Cannot configure node identity twice [ 974.032663][T11010] netlink: 'syz.3.9790': attribute type 16 has an invalid length. [ 974.346199][T11020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9794'. [ 974.664873][T11036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9797'. [ 974.679440][T11040] netlink: 9 bytes leftover after parsing attributes in process `syz.1.9797'. [ 974.682624][T11036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9797'. [ 974.682847][T11036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9797'. [ 974.683046][T11036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9797'. [ 974.684033][T11043] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 974.705202][T11040] gretap0: entered promiscuous mode [ 975.057991][T11053] bridge1: port 1(erspan0) entered blocking state [ 975.058152][T11053] bridge1: port 1(erspan0) entered disabled state [ 975.058325][T11053] erspan0: entered allmulticast mode [ 975.087723][T11053] erspan0: entered promiscuous mode [ 975.089774][T11053] bridge1: port 1(erspan0) entered blocking state [ 975.089886][T11053] bridge1: port 1(erspan0) entered forwarding state [ 975.627307][T11075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 976.124620][T11094] ovs0: entered promiscuous mode [ 976.142382][T11102] __nla_validate_parse: 30 callbacks suppressed [ 976.142415][T11102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9812'. [ 976.168602][ T3735] hsr_slave_0: left promiscuous mode [ 976.169693][ T3735] hsr_slave_1: left promiscuous mode [ 976.170543][ T3735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 976.170561][ T3735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 976.198621][ T3735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 976.198643][ T3735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 976.221338][ T3735] batman_adv: batadv0: Interface deactivated: veth0 [ 976.221361][ T3735] batman_adv: batadv0: Removing interface: veth0 [ 976.245521][ T3735] veth1_macvtap: left promiscuous mode [ 976.245563][ T3735] veth0_macvtap: left promiscuous mode [ 976.245669][ T3735] veth1_vlan: left promiscuous mode [ 976.245698][ T3735] veth0_vlan: left promiscuous mode [ 976.389468][ T8501] IPVS: starting estimator thread 0... [ 976.397853][T11118] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 976.398193][T11115] IPVS: lblc: TCP 172.20.20.170:20000 - no destination available [ 976.481108][T11117] IPVS: using max 38 ests per chain, 91200 per kthread [ 977.406634][ T3735] IPVS: stop unused estimator thread 0... [ 977.544474][T11153] ip_tables: iptables: counters copy to user failed while replacing table [ 977.545652][T11153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9825'. [ 977.545673][T11153] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9825'. [ 978.254882][T11191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 978.259997][T11191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 978.478225][T11200] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 978.719946][T11216] Cannot find map_set index 135 as target [ 978.732129][T11211] Cannot find map_set index 135 as target [ 978.886056][T11230] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9846'. [ 979.135029][T11245] netlink: 'syz.1.9850': attribute type 1 has an invalid length. [ 979.170546][T11245] 8021q: adding VLAN 0 to HW filter on device bond2 [ 979.184469][T11245] bond2: (slave geneve2): making interface the new active one [ 979.192196][T11245] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 979.266939][T11253] netlink: 'syz.1.9853': attribute type 16 has an invalid length. [ 979.266960][T11253] netlink: 'syz.1.9853': attribute type 17 has an invalid length. [ 979.286769][T11253] gretap0: left promiscuous mode [ 979.288834][T11253] erspan0: left promiscuous mode [ 979.288854][T11253] erspan0: left allmulticast mode [ 979.300661][T11253] 8021q: adding VLAN 0 to HW filter on device .` [ 979.388885][T11253] mac80211_hwsim hwsim92 wlan0: left promiscuous mode [ 979.400665][T11253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.411846][ T8501] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.411953][ T8501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 979.446821][T11259] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9855'. [ 979.484374][ T8497] bond1: (slave .`): link status definitely up, 20000 Mbps full duplex [ 979.484454][ T8497] bond1: (slave .`): making interface the new active one [ 979.530450][ T8497] bond1: active interface up! [ 979.606403][T11272] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20002 [ 979.705351][T11277] ip_tables: iptables: counters copy to user failed while replacing table [ 979.855035][T11281] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 980.024435][T11289] syzkaller0: entered promiscuous mode [ 980.024467][T11289] syzkaller0: entered allmulticast mode [ 980.037686][T11285] tipc: Started in network mode [ 980.037713][T11285] tipc: Node identity 66ae0aaf1856, cluster identity 4711 [ 980.038117][T11285] tipc: Enabled bearer , priority 0 [ 980.105000][T11284] tipc: Resetting bearer [ 980.125621][T11284] tipc: Disabling bearer [ 980.414814][T11296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9866'. [ 980.449088][T11296] netlink: 'syz.1.9866': attribute type 10 has an invalid length. [ 980.456822][T11296] mac80211_hwsim hwsim92 wlan0: entered allmulticast mode [ 980.465969][T11296] team0: Port device wlan0 added [ 980.714505][T11315] netlink: 'syz.2.9872': attribute type 7 has an invalid length. [ 980.714527][T11315] netlink: 'syz.2.9872': attribute type 5 has an invalid length. [ 980.714539][T11315] netlink: 17 bytes leftover after parsing attributes in process `syz.2.9872'. [ 980.759700][T11315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 980.759727][T11315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 980.760774][T11315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 980.760793][T11315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 980.768221][T11315] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 980.768242][T11315] batman_adv: batadv0: Removing interface: ipvlan2 [ 980.900511][ T30] audit: type=1804 audit(1792446201.911:55): pid=11321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.9873" name="/newroot/108/cgroup.controllers" dev="tmpfs" ino=560 res=1 errno=0 [ 980.900597][ T30] audit: type=1800 audit(1792446201.911:56): pid=11321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9873" name="cgroup.controllers" dev="tmpfs" ino=560 res=0 errno=0 [ 980.955163][ T30] audit: type=1800 audit(1792446201.971:57): pid=11321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9873" name="cgroup.controllers" dev="tmpfs" ino=560 res=0 errno=0 [ 980.955953][ T30] audit: type=1800 audit(1792446201.971:58): pid=11321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9873" name="cgroup.controllers" dev="tmpfs" ino=560 res=0 errno=0 [ 980.957883][ T30] audit: type=1800 audit(1792446201.971:59): pid=11321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9873" name="cgroup.controllers" dev="tmpfs" ino=560 res=0 errno=0 [ 980.959320][ T30] audit: type=1800 audit(1792446201.971:60): pid=11321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9873" name="cgroup.controllers" dev="tmpfs" ino=560 res=0 errno=0 [ 980.963889][ T30] audit: type=1800 audit(1792446201.981:61): pid=11321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9873" name="cgroup.controllers" dev="tmpfs" ino=560 res=0 errno=0 [ 980.969943][ T30] audit: type=1800 audit(1792446201.981:62): pid=11321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9873" name="cgroup.controllers" dev="tmpfs" ino=560 res=0 errno=0 [ 980.973495][ T30] audit: type=1800 audit(1792446201.991:63): pid=11321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9873" name="cgroup.controllers" dev="tmpfs" ino=560 res=0 errno=0 [ 980.982809][ T30] audit: type=1800 audit(1792446202.001:64): pid=11321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9873" name="cgroup.controllers" dev="tmpfs" ino=560 res=0 errno=0 [ 981.238685][T11332] syz_tun: entered allmulticast mode [ 981.262848][T11331] syz_tun: left allmulticast mode [ 981.775532][T11367] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9886'. [ 981.985793][T11375] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 982.059375][T11381] netlink: 'syz.4.9892': attribute type 75 has an invalid length. [ 982.114038][T11383] bond3 (unregistering): Released all slaves [ 982.755137][T11402] netlink: set zone limit has 4 unknown bytes [ 982.885713][T11405] netlink: 'syz.2.9901': attribute type 1 has an invalid length. [ 982.912814][T11409] netlink: 'syz.4.9903': attribute type 1 has an invalid length. [ 983.037540][T11413] tc action pedit offset must be on 32 bit boundaries [ 983.131728][T11419] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9907'. [ 983.311812][T11430] netlink: 260 bytes leftover after parsing attributes in process `syz.1.9911'. [ 983.453965][T11446] lo: entered promiscuous mode [ 983.465508][T11446] tunl0: entered promiscuous mode [ 983.482852][T11446] gre0: entered promiscuous mode [ 983.524296][T11446] gretap0: entered promiscuous mode [ 983.590794][T11446] erspan0: entered promiscuous mode [ 983.598919][T11446] ip_vti0: entered promiscuous mode [ 983.614546][T11446] ip6_vti0: entered promiscuous mode [ 983.627994][T11446] sit0: entered promiscuous mode [ 983.645874][T11446] ip6tnl0: entered promiscuous mode [ 983.667877][T11446] ip6gre0: entered promiscuous mode [ 983.692126][T11446] syz_tun: entered promiscuous mode [ 983.707083][T11446] ip6gretap0: entered promiscuous mode [ 983.718509][T11446] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.718879][T11446] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.723033][T11446] bridge0: entered promiscuous mode [ 983.742548][T11446] vcan0: entered promiscuous mode [ 983.757766][T11446] bond0: entered promiscuous mode [ 983.757781][T11446] bond_slave_0: entered promiscuous mode [ 983.757910][T11446] bond_slave_1: entered promiscuous mode [ 983.763487][T11446] team0: entered promiscuous mode [ 983.763507][T11446] team_slave_0: entered promiscuous mode [ 983.763705][T11446] team_slave_1: entered promiscuous mode [ 983.795193][T11446] dummy0: entered promiscuous mode [ 983.811841][T11446] nlmon0: entered promiscuous mode [ 983.823552][T11446] batadv0: entered promiscuous mode [ 983.841085][T11446] veth0: entered promiscuous mode [ 983.846580][T11446] veth1: entered promiscuous mode [ 983.873014][T11446] wg0: entered promiscuous mode [ 983.876370][T11446] wg1: entered promiscuous mode [ 983.882607][T11446] wg2: entered promiscuous mode [ 983.907853][T11446] veth0_to_bridge: entered promiscuous mode [ 983.932298][T11446] veth1_to_bridge: entered promiscuous mode [ 983.957856][T11446] veth0_to_bond: entered promiscuous mode [ 983.983220][T11446] veth1_to_bond: entered promiscuous mode [ 984.003369][T11446] veth0_to_team: entered promiscuous mode [ 984.024339][T11446] veth1_to_team: entered promiscuous mode [ 984.047347][T11446] veth0_to_batadv: entered promiscuous mode [ 984.064523][T11446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 984.064562][T11446] batadv_slave_0: entered promiscuous mode [ 984.083506][T11446] veth1_to_batadv: entered promiscuous mode [ 984.100209][T11446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 984.100250][T11446] batadv_slave_1: entered promiscuous mode [ 984.117915][T11446] xfrm0: entered promiscuous mode [ 984.135302][T11446] veth0_to_hsr: entered promiscuous mode [ 984.153444][T11446] veth1_to_hsr: entered promiscuous mode [ 984.176051][T11446] hsr0: entered promiscuous mode [ 984.221521][T11446] veth1_virt_wifi: entered promiscuous mode [ 984.225512][T11446] veth0_virt_wifi: entered promiscuous mode [ 984.248812][T11446] virt_wifi0: entered promiscuous mode [ 984.348047][T11446] vlan0: entered promiscuous mode [ 984.374813][T11446] tipc: Resetting bearer [ 984.374928][T11446] vlan1: entered promiscuous mode [ 984.403827][T11446] macvlan0: entered promiscuous mode [ 984.430239][T11446] macvlan1: entered promiscuous mode [ 984.456928][T11446] ipvlan0: entered promiscuous mode [ 984.457101][T11446] ipvlan1: entered promiscuous mode [ 984.457408][T11446] veth1_macvtap: entered promiscuous mode [ 984.511771][T11446] macvtap0: entered promiscuous mode [ 984.519340][T11446] macsec0: entered promiscuous mode [ 984.519716][T11446] geneve0: entered promiscuous mode [ 984.546343][T11446] geneve1: entered promiscuous mode [ 984.564525][T11446] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 984.580821][T11446] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 984.598732][T11446] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 984.615688][T11446] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 984.634327][T11446] mac80211_hwsim hwsim95 wlan1: entered promiscuous mode [ 984.635651][T11446] pim6reg: entered promiscuous mode [ 984.644185][T11446] bond1: entered promiscuous mode [ 984.644337][T11446] erspan1: entered promiscuous mode [ 984.644448][T11446] syztnl1: entered promiscuous mode [ 984.644642][T11446] dvmrp1: entered promiscuous mode [ 984.673098][T11446] syzkaller0: entered promiscuous mode [ 984.673288][T11446] bond2: entered promiscuous mode [ 984.673497][T11446] sit1: entered promiscuous mode [ 984.721265][ T51] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.721299][ T51] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 984.723442][ T8501] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.723471][ T8501] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 984.723509][ T8501] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.723532][ T8501] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 984.723566][ T8501] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.723589][ T8501] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 984.917233][T11480] netlink: 'syz.2.9922': attribute type 6 has an invalid length. [ 984.942632][T11478] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9920'. [ 984.978711][T11483] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9920'. [ 985.029789][T11490] Bluetooth: hci0: unsupported parameter 5161 [ 985.029813][T11490] Bluetooth: hci0: unsupported parameter 8192 [ 985.029825][T11490] Bluetooth: hci0: unsupported parameter 5161 [ 985.029835][T11490] Bluetooth: hci0: unsupported parameter 8192 [ 985.030103][T11491] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9923'. [ 985.030522][T11490] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9923'. [ 985.428921][T11522] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 985.494731][T11526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9933'. [ 985.554571][T11530] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9935'. [ 985.634009][T11539] Cannot find add_set index 34 as target [ 985.852882][T11557] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9942'. [ 986.287035][T11573] geneve0: left promiscuous mode [ 986.395555][T11586] netlink: 'syz.1.9949': attribute type 5 has an invalid length. [ 986.457626][T11588] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 986.514401][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 986.517416][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 986.518367][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 986.519370][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 986.519991][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 986.970558][T11615] __nla_validate_parse: 3 callbacks suppressed [ 986.970578][T11615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9955'. [ 986.971947][T11615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9955'. [ 987.017517][T11615] netlink: 288 bytes leftover after parsing attributes in process `syz.4.9955'. [ 987.127855][T11589] rxe_eth0 speed is unknown, defaulting to 1000 [ 987.350585][T11589] lo speed is unknown, defaulting to 1000 [ 987.360359][T11589] wg0 speed is unknown, defaulting to 1000 [ 987.593223][T11645] netlink: 6040 bytes leftover after parsing attributes in process `syz.4.9965'. [ 987.661538][T11589] wg0 speed is unknown, defaulting to 1000 [ 988.216052][T11589] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.216231][T11589] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.216366][T11589] bridge_slave_0: entered allmulticast mode [ 988.219291][T11589] bridge_slave_0: entered promiscuous mode [ 988.245043][T11589] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.245192][T11589] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.245383][T11589] bridge_slave_1: entered allmulticast mode [ 988.257143][T11589] bridge_slave_1: entered promiscuous mode [ 988.317636][T11589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 988.366496][T11589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 988.446349][T11589] team0: Port device team_slave_0 added [ 988.467041][T11589] team0: Port device team_slave_1 added [ 988.513154][T11688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9976'. [ 988.515373][T11589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 988.515389][T11589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 988.515409][T11589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 988.519365][T11589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 988.519381][T11589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 988.519404][T11589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 988.584682][T11692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9976'. [ 988.611900][ T4937] Bluetooth: hci2: command tx timeout [ 988.687168][T11589] hsr_slave_0: entered promiscuous mode [ 988.688265][T11589] hsr_slave_1: entered promiscuous mode [ 988.688989][T11589] debugfs: 'hsr0' already exists in 'hsr' [ 988.689008][T11589] Cannot create hsr debugfs directory [ 989.057438][T11713] netlink: 112 bytes leftover after parsing attributes in process `syz.4.9982'. [ 989.071801][T11713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9982'. [ 989.157284][T11719] net wpan0: Using DEBUGing ioctl SIOCSIFADDR isn't recommended! [ 989.197057][T11723] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9986'. [ 989.277126][T11589] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 989.294705][T11589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 989.296218][T11589] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 989.319612][T11589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 989.320534][T11589] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 989.340478][T11589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 989.348636][T11589] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 989.362331][T11589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 989.367992][T11727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 989.595791][T11589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 989.632886][T11589] 8021q: adding VLAN 0 to HW filter on device team0 [ 989.646968][ T3735] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.647068][ T3735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 989.659713][ T3735] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.659829][ T3735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 989.716489][T11744] netlink: 'syz.2.9989': attribute type 8 has an invalid length. [ 989.915398][T11751] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9990'. [ 990.180107][T11760] netlink: 'syz.4.9991': attribute type 10 has an invalid length. [ 990.180142][T11760] macsec0: left promiscuous mode [ 990.180157][T11760] macsec0: left allmulticast mode [ 990.180481][T11760] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 990.290911][T11589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 990.414864][T11773] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 990.417885][T11773] bond3 (unregistering): Released all slaves [ 990.691338][ T4937] Bluetooth: hci2: command tx timeout [ 990.819261][T11589] veth0_vlan: entered promiscuous mode [ 990.845946][T11589] veth1_vlan: entered promiscuous mode [ 990.933808][T11589] veth0_macvtap: entered promiscuous mode [ 990.950725][T11589] veth1_macvtap: entered promiscuous mode [ 991.009769][T11589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 991.028434][T11589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 991.065830][ T8501] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.065965][ T8501] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.065996][ T8501] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.066027][ T8501] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.110918][ T1996] block nbd0: Possible stuck request ffff88807e785080: control (read@0,4096B). Runtime 30 seconds [ 991.288566][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 991.288587][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 991.364108][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 991.364127][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 991.465859][T11827] ipvlan0: entered promiscuous mode [ 991.465916][T11827] ipvlan0: entered allmulticast mode [ 991.465930][T11827] veth0_vlan: entered allmulticast mode [ 991.535742][T11829] openvswitch: netlink: Multiple metadata blocks provided [ 991.838742][T11853] netlink: 'syz.2.10016': attribute type 11 has an invalid length. [ 991.879692][T11854] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 991.884837][T11855] netlink: 'syz.1.10017': attribute type 2 has an invalid length. [ 991.885318][T11861] ip_tables: iptables: counters copy to user failed while replacing table [ 991.887349][T11860] ip_tables: iptables: counters copy to user failed while replacing table [ 992.123345][T11867] __nla_validate_parse: 70 callbacks suppressed [ 992.123368][T11867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10020'. [ 992.123381][T11867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10020'. [ 992.123404][T11867] netlink: 'syz.2.10020': attribute type 15 has an invalid length. [ 992.181173][T11867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10020'. [ 992.181195][T11867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10020'. [ 992.181218][T11867] netlink: 'syz.2.10020': attribute type 15 has an invalid length. [ 992.182339][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10020'. [ 992.182357][T11869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10020'. [ 992.182378][T11869] netlink: 'syz.2.10020': attribute type 15 has an invalid length. [ 992.189221][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10020'. [ 992.189242][T11869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10020'. [ 992.189292][T11869] netlink: 'syz.2.10020': attribute type 15 has an invalid length. [ 992.212735][ T51] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 992.213553][ T51] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 992.244459][ T51] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 992.244504][ T51] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 992.336058][T11879] 8021q: VLANs not supported on wg0 [ 992.336134][T11878] 8021q: VLANs not supported on wg0 [ 992.360671][T11881] Bluetooth: MGMT ver 1.23 [ 992.693286][T11901] Bluetooth: hci0: unsupported parameter 5161 [ 992.693308][T11901] Bluetooth: hci0: unsupported parameter 8192 [ 992.693320][T11901] Bluetooth: hci0: unsupported parameter 5161 [ 992.693330][T11901] Bluetooth: hci0: unsupported parameter 8192 [ 992.748445][T11907] ip_tables: iptables: counters copy to user failed while replacing table [ 992.771522][ T4937] Bluetooth: hci2: command tx timeout [ 993.097239][T11925] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10034'. [ 993.408026][T11935] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10038'. [ 993.427096][T11934] openvswitch: netlink: Tunnel attr 13 has unexpected len 4 expected 16 [ 993.546757][T11944] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 993.547084][T11944] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 993.647201][ T5629] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 993.672753][ T5629] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 993.674485][ T5629] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 993.677555][ T5629] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 993.703084][ T5629] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 994.072353][T11976] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 994.211718][T11985] openvswitch: netlink: Missing key (keys=200040, expected=80) [ 994.248544][T11986] ip_tables: iptables: counters copy to user failed while replacing table [ 994.347032][T11945] rxe_eth0 speed is unknown, defaulting to 1000 [ 994.546051][T11993] net_ratelimit: 1 callbacks suppressed [ 994.546072][T11993] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 994.592256][T11945] lo speed is unknown, defaulting to 1000 [ 994.601556][T11945] wg0 speed is unknown, defaulting to 1000 [ 994.852278][ T5629] Bluetooth: hci2: command tx timeout [ 994.925827][T11945] wg0 speed is unknown, defaulting to 1000 [ 995.119642][T12021] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 995.284271][T12038] team0: Port device macvlan0 added [ 995.420722][T12046] hsr_slave_1 (unregistering): left promiscuous mode [ 995.709816][T12069] netlink: 'syz.4.10074': attribute type 33 has an invalid length. [ 995.731499][ T5629] Bluetooth: hci6: command tx timeout [ 995.743671][T12069] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 995.748731][T12071] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 995.750205][T12069] bond3 (unregistering): Released all slaves [ 995.845960][T11945] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.846122][T11945] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.846252][T11945] bridge_slave_0: entered allmulticast mode [ 995.848268][T11945] bridge_slave_0: entered promiscuous mode [ 995.853545][T11945] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.854001][T11945] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.854399][T11945] bridge_slave_1: entered allmulticast mode [ 995.856955][T11945] bridge_slave_1: entered promiscuous mode [ 995.939191][T11945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 995.944842][T11945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 996.006334][T11945] team0: Port device team_slave_0 added [ 996.009567][T11945] team0: Port device team_slave_1 added [ 996.042284][T11945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 996.042302][T11945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 996.042322][T11945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 996.043683][T11945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.043697][T11945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 996.043719][T11945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.116968][T11945] hsr_slave_0: entered promiscuous mode [ 996.118123][T11945] hsr_slave_1: entered promiscuous mode [ 996.119034][T11945] debugfs: 'hsr0' already exists in 'hsr' [ 996.119054][T11945] Cannot create hsr debugfs directory [ 997.811451][ T5629] Bluetooth: hci6: command tx timeout [ 998.051454][T12021] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 998.116822][T11945] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 998.162598][T11945] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 998.163479][T11945] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 998.196347][T11945] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 998.197168][T11945] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 998.208926][T11945] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 998.210605][T11945] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 998.229637][T11945] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 998.345656][T12098] __nla_validate_parse: 7 callbacks suppressed [ 998.345675][T12098] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10080'. [ 998.367845][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10081'. [ 998.367868][T12096] netlink: 'syz.2.10081': attribute type 1 has an invalid length. [ 998.377081][T12085] syzkaller0: entered promiscuous mode [ 998.377103][T12085] syzkaller0: entered allmulticast mode [ 998.544831][T11945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 998.568995][T11945] 8021q: adding VLAN 0 to HW filter on device team0 [ 998.585031][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.585139][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 998.618470][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.618599][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 998.734932][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10086'. [ 998.797189][T12114] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 998.797682][T12114] gretap1: entered promiscuous mode [ 998.797701][T12114] gretap1: entered allmulticast mode [ 998.995011][T12128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10092'. [ 999.120214][T12134] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10094'. [ 999.327941][T12144] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10096'. [ 999.482952][T11945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 999.617559][T12157] hsr0: entered allmulticast mode [ 999.617580][T12157] hsr_slave_0: entered allmulticast mode [ 999.891612][ T5629] Bluetooth: hci6: command tx timeout [ 999.946770][T12163] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1000.072950][T11945] veth0_vlan: entered promiscuous mode [ 1000.096584][T11945] veth1_vlan: entered promiscuous mode [ 1000.155382][T12177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10103'. [ 1000.189930][T11945] veth0_macvtap: entered promiscuous mode [ 1000.218468][T11945] veth1_macvtap: entered promiscuous mode [ 1000.228999][T12177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10103'. [ 1000.307032][T11945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1000.338614][T11945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1000.373711][T12186] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10108'. [ 1000.396290][T12186] erspan0: entered promiscuous mode [ 1000.413067][T12189] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10108'. [ 1000.415796][T12190] xt_limit: Overflow, try lower: 536871034/0 [ 1000.484115][ T8483] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.484161][ T8483] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.484196][ T8483] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.484228][ T8483] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.618848][T12196] netlink: 'syz.5.10112': attribute type 1 has an invalid length. [ 1000.740800][ T8497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.740822][ T8497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.746438][T12200] netlink: 'syz.4.10113': attribute type 6 has an invalid length. [ 1000.819377][ T8483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.819398][ T8483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.009686][T12206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1001.038058][T12206] sctp: [Deprecated]: syz.4.10115 (pid 12206) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1001.038058][T12206] Use struct sctp_sack_info instead [ 1001.140654][T12220] Cannot find add_set index 0 as target [ 1001.153174][T12214] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 1001.234686][T12229] syzkaller0: entered allmulticast mode [ 1001.237717][T12229] tipc: Enabled bearer , priority 0 [ 1001.972405][ T5629] Bluetooth: hci6: command tx timeout [ 1004.224524][T12229] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1004.362913][T12274] __nla_validate_parse: 1 callbacks suppressed [ 1004.362935][T12274] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10130'. [ 1004.366244][T12277] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10130'. [ 1004.488682][T12285] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10132'. [ 1004.488837][T12285] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10132'. [ 1004.488969][T12285] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10132'. [ 1004.489106][T12285] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10132'. [ 1004.489328][T12285] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10132'. [ 1004.489476][T12285] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10132'. [ 1004.489614][T12285] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10132'. [ 1004.489740][T12285] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10132'. [ 1004.607831][T12293] Bluetooth: MGMT ver 1.23 [ 1005.050169][T12320] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1005.061908][T12320] macvlan2: entered promiscuous mode [ 1005.061931][T12320] macvlan2: entered allmulticast mode [ 1005.063331][T12320] bond3: entered promiscuous mode [ 1005.064112][T12320] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1005.103106][T12320] bond3: left promiscuous mode [ 1005.320793][ T8501] IPVS: starting estimator thread 0... [ 1005.401113][T12339] IPVS: using max 40 ests per chain, 96000 per kthread [ 1005.458511][T12346] netlink: 'syz.4.10148': attribute type 4 has an invalid length. [ 1005.483726][T12341] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1005.514640][T12346] bond0: left promiscuous mode [ 1005.524451][T12346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1005.537161][T12346] bond4: (slave bond0): making interface the new active one [ 1005.548768][T12346] bond4: (slave bond0): Enslaving as an active interface with an up link [ 1005.570107][T12341] netlink: 'syz.4.10148': attribute type 4 has an invalid length. [ 1005.586177][T12341] .`: renamed from bond0 (while UP) [ 1005.775568][ T3735] bond4: (slave .`): link status definitely down, disabling slave [ 1005.803295][ T3735] bond4: now running without any active interface! [ 1005.860810][T12368] bond4: option mode: unable to set because the bond device has slaves [ 1005.878048][T12368] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1005.878087][T12368] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1006.022820][T12385] openvswitch: netlink: VXLAN extension 317 out of range max 1 [ 1006.184365][T12395] netlink: 'syz.2.10164': attribute type 1 has an invalid length. [ 1006.315706][T12395] bond1: entered promiscuous mode [ 1006.318591][T12395] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1006.600676][T12420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1006.618942][T12420] netlink: 'syz.4.10168': attribute type 11 has an invalid length. [ 1006.915027][T12433] netlink: 'syz.4.10170': attribute type 1 has an invalid length. [ 1006.920709][T12434] netlink: 'syz.4.10170': attribute type 1 has an invalid length. [ 1006.979008][T12439] netlink: 'syz.6.10171': attribute type 21 has an invalid length. [ 1006.979036][T12439] IPv6: NLM_F_CREATE should be specified when creating new route [ 1007.091270][T12433] bond0: entered promiscuous mode [ 1007.092719][T12433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1007.158731][T12445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1007.159127][T12445] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1007.159146][T12445] bond0: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1007.204188][T12445] bond0: (slave wireguard0): making interface the new active one [ 1007.204212][T12445] wireguard0: entered promiscuous mode [ 1007.207602][T12445] bond0: (slave wireguard0): Enslaving as an active interface with an up link [ 1007.295467][T12442] netlink: 'syz.1.10172': attribute type 2 has an invalid length. [ 1007.296104][T12455] netlink: 'syz.1.10172': attribute type 2 has an invalid length. [ 1008.063519][T12500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1009.147237][T12529] IPv6: sit1: Disabled Multicast RS [ 1009.356126][T12546] bond3: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 1009.362270][T12546] bond3 (unregistering): Released all slaves [ 1009.446190][T12550] __nla_validate_parse: 39 callbacks suppressed [ 1009.446209][T12550] netlink: 100 bytes leftover after parsing attributes in process `syz.4.10197'. [ 1009.639923][T12551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10197'. [ 1009.640261][T12558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10197'. [ 1009.640592][T12564] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10197'. [ 1009.956054][T12581] netlink: 'syz.4.10203': attribute type 61 has an invalid length. [ 1009.988672][T12576] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10203'. [ 1009.995812][T12576] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1010.576663][T12614] netlink: 'syz.6.10212': attribute type 1 has an invalid length. [ 1010.576684][T12614] netlink: 72 bytes leftover after parsing attributes in process `syz.6.10212'. [ 1010.576900][T12613] netlink: 'syz.6.10212': attribute type 1 has an invalid length. [ 1010.576914][T12613] netlink: 72 bytes leftover after parsing attributes in process `syz.6.10212'. [ 1010.939748][T12626] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1013.121789][T12587] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1013.724085][T12649] bond1: Removing last arp target with arp_interval on [ 1013.758653][T12659] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1013.921509][T12651] syzkaller0: entered promiscuous mode [ 1013.921530][T12651] syzkaller0: entered allmulticast mode [ 1014.149691][T12670] tipc: Failed to remove unknown binding: 66,0,0/0:205565982/205565983 [ 1014.157647][T12672] tipc: Failed to remove unknown binding: 66,0,0/0:205565982/205565983 [ 1014.311952][T12683] x_tables: duplicate underflow at hook 1 [ 1014.425333][T12686] bond1: entered promiscuous mode [ 1014.425797][T12692] netlink: 'syz.4.10234': attribute type 3 has an invalid length. [ 1014.448886][T12687] macvlan2: entered promiscuous mode [ 1014.448907][T12687] macvlan2: entered allmulticast mode [ 1014.449873][T12687] bond1: (slave macvlan2): Opening slave failed [ 1014.606548][T12703] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 1014.754144][T12707] syzkaller0: entered promiscuous mode [ 1014.754168][T12707] syzkaller0: entered allmulticast mode [ 1014.807633][T12719] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10242'. [ 1015.145442][T12725] netlink: 'syz.5.10243': attribute type 1 has an invalid length. [ 1018.563311][T12724] netlink: 'syz.5.10243': attribute type 1 has an invalid length. [ 1018.721570][T12739] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10244'. [ 1019.176249][T12774] ip_tables: iptables: counters copy to user failed while replacing table [ 1019.186466][T12769] netlink: 48 bytes leftover after parsing attributes in process `syz.6.10256'. [ 1019.253436][T12779] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10259'. [ 1019.253535][T12779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1019.259376][T12779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1019.366399][T12782] netlink: Failed to add À helper -22 [ 1019.366433][T12782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1019.483905][T12789] netlink: 56 bytes leftover after parsing attributes in process `syz.6.10262'. [ 1019.562978][T12797] netlink: 'syz.6.10265': attribute type 1 has an invalid length. [ 1019.592195][T12797] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1019.595628][T12797] bond2: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 1019.597369][T12797] bond2: entered allmulticast mode [ 1019.599003][T12797] netlink: 52 bytes leftover after parsing attributes in process `syz.6.10265'. [ 1019.908807][T12819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10271'. [ 1019.908830][T12819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10271'. [ 1020.033026][ T4937] Bluetooth: hci6: Malformed Event: 0x13 [ 1020.297858][T12845] bond2: entered allmulticast mode [ 1020.298267][T12845] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1020.326528][T12845] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1020.328311][T12845] macvlan2: entered allmulticast mode [ 1020.328330][T12845] bond0: entered allmulticast mode [ 1020.328344][T12845] bond_slave_0: entered allmulticast mode [ 1020.328360][T12845] bond_slave_1: entered allmulticast mode [ 1020.328421][T12845] bond_slave_0: entered promiscuous mode [ 1020.328458][T12845] bond_slave_1: entered promiscuous mode [ 1020.331045][T12845] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 1020.352678][T12845] ip6gretap1: entered allmulticast mode [ 1020.353207][T12845] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1020.606970][T12862] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10285'. [ 1020.647672][T12865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10284'. [ 1020.935674][T12878] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10289'. [ 1021.032483][T12877] netlink: 'syz.1.10288': attribute type 12 has an invalid length. [ 1021.032502][T12877] netlink: 'syz.1.10288': attribute type 29 has an invalid length. [ 1021.032513][T12877] netlink: 148 bytes leftover after parsing attributes in process `syz.1.10288'. [ 1021.032530][T12877] netlink: 59 bytes leftover after parsing attributes in process `syz.1.10288'. [ 1021.173900][ T1996] block nbd0: Possible stuck request ffff88807e785080: control (read@0,4096B). Runtime 60 seconds [ 1021.210849][T12895] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 1021.318907][T12895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10296'. [ 1021.346508][T12895] netlink: 'syz.4.10296': attribute type 2 has an invalid length. [ 1021.346529][T12895] netlink: 'syz.4.10296': attribute type 2 has an invalid length. [ 1021.358942][T12904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10298'. [ 1021.365641][T12904] netlink: 572 bytes leftover after parsing attributes in process `syz.1.10298'. [ 1021.423997][T12908] openvswitch: netlink: IP tunnel dst address not specified [ 1021.925551][T12938] netlink: 'syz.2.10306': attribute type 1 has an invalid length. [ 1021.925572][T12938] netlink: 'syz.2.10306': attribute type 2 has an invalid length. [ 1022.307379][T12962] ip_tables: iptables: counters copy to user failed while replacing table [ 1022.308866][T12964] ip_tables: iptables: counters copy to user failed while replacing table [ 1022.338785][T12966] netlink: 'syz.5.10315': attribute type 1 has an invalid length. [ 1022.350259][T12966] netlink: 'syz.5.10315': attribute type 3 has an invalid length. [ 1022.350281][T12966] netlink: 'syz.5.10315': attribute type 2 has an invalid length. [ 1022.614312][T12980] gretap0: entered promiscuous mode [ 1022.620038][T12980] gretap0: left promiscuous mode [ 1022.900794][T12996] vlan2: entered promiscuous mode [ 1022.911853][T12996] vlan2: entered allmulticast mode [ 1022.911875][T12996] bridge0: entered allmulticast mode [ 1023.447326][T13039] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1023.448152][T13039] batman_adv: batadv0: Adding interface: gretap1 [ 1023.448167][T13039] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1023.448196][T13039] batman_adv: batadv0: Interface activated: gretap1 [ 1023.529689][T13043] xt_nat: multiple ranges no longer supported [ 1023.538980][T13038] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1023.561724][T13045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1023.653910][ T8483] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 1023.655025][ T8483] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1023.655049][ T8483] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1023.655067][ T8483] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 1024.066762][ T4986] udevd[4986]: worker [10158] /devices/virtual/block/nbd0 is taking a long time [ 1024.759107][T13118] netdevsim netdevsim5: Firmware load for './file0/file0/..' refused, path contains '..' component [ 1024.852578][ T5629] Bluetooth: hci6: command 0x0405 tx timeout [ 1024.929490][T13125] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1024.935380][T13125] __nla_validate_parse: 14 callbacks suppressed [ 1024.935399][T13125] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10369'. [ 1024.935666][ T1132] IPVS: starting estimator thread 0... [ 1024.937128][T13125] IPVS: sh: FWM 1 0x00000001 - no destination available [ 1025.009870][T13133] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10368'. [ 1025.021486][T13127] IPVS: using max 31 ests per chain, 74400 per kthread [ 1025.029911][T13133] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10368'. [ 1025.039321][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10370'. [ 1025.074535][T13129] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10370'. [ 1025.164004][T13140] veth0: entered promiscuous mode [ 1025.267187][T13143] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10372'. [ 1025.369314][T13135] veth0: left promiscuous mode [ 1025.477163][T13156] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10377'. [ 1025.625049][T13166] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10380'. [ 1025.692897][T13171] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 1025.758091][T13176] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10382'. [ 1025.855977][ T1132] netdevsim netdevsim5 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 1025.883406][ T1132] netdevsim netdevsim5 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 1025.883448][ T1132] netdevsim netdevsim5 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 1025.883483][ T1132] netdevsim netdevsim5 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 1025.894429][T13182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1025.926394][T13182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1026.014826][T13176] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10382'. [ 1026.127281][T13190] bridge_slave_0: left allmulticast mode [ 1026.127306][T13190] bridge_slave_0: left promiscuous mode [ 1026.127507][T13190] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.158014][T13190] bridge_slave_1: left allmulticast mode [ 1026.158039][T13190] bridge_slave_1: left promiscuous mode [ 1026.158304][T13190] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.197223][T13190] bond0: (slave bond_slave_0): Releasing backup interface [ 1026.220084][T13190] bond0: (slave bond_slave_1): Releasing backup interface [ 1026.250913][T13190] team0: Port device team_slave_0 removed [ 1026.274148][T13190] team0: Port device team_slave_1 removed [ 1026.275030][T13190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1026.275049][T13190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1026.300769][T13190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1026.300791][T13190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1026.329476][T13190] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1026.374622][T13189] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1026.589008][T13201] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1026.708176][T13216] validate_nla: 4 callbacks suppressed [ 1026.708197][T13216] netlink: 'syz.1.10388': attribute type 1 has an invalid length. [ 1026.786083][T13216] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1026.844603][T13216] bond3: (slave gretap2): making interface the new active one [ 1026.846954][T13216] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 1026.854479][T13221] netlink: 'syz.5.10389': attribute type 1 has an invalid length. [ 1026.868814][T13221] netlink: 'syz.5.10389': attribute type 2 has an invalid length. [ 1026.955671][T13237] xt_policy: too many policy elements [ 1026.972380][T13229] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1026.998728][T13234] syz_tun: entered allmulticast mode [ 1027.031825][T13219] syz_tun: left allmulticast mode [ 1027.631284][T13271] netlink: 'syz.6.10396': attribute type 1 has an invalid length. [ 1027.687215][T13276] netlink: 'syz.1.10398': attribute type 9 has an invalid length. [ 1027.804252][T13271] bridge1: entered promiscuous mode [ 1027.818555][T13271] bond4: (slave bridge1): making interface the new active one [ 1027.828863][T13271] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 1028.005072][T13291] netlink: 'syz.6.10401': attribute type 21 has an invalid length. [ 1028.037662][T13291] bond6: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 1028.058592][T13291] bond6 (unregistering): Released all slaves [ 1028.156513][T13299] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1028.491799][T13315] xt_hashlimit: size too large, truncated to 1048576 [ 1028.768589][T13332] netlink: 'syz.5.10409': attribute type 83 has an invalid length. [ 1029.064407][T13346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.111709][T13350] netlink: 'syz.6.10418': attribute type 16 has an invalid length. [ 1029.265955][T13366] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.266415][T13366] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.916720][T13412] syzkaller0: entered promiscuous mode [ 1029.916740][T13412] syzkaller0: entered allmulticast mode [ 1030.067693][T13416] __nla_validate_parse: 19 callbacks suppressed [ 1030.067713][T13416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10434'. [ 1030.067840][T13416] xt_cgroup: path and classid specified [ 1030.208766][T13427] ksmbd: Unknown IPC event: 1, ignore. [ 1030.327776][T13434] FAULT_INJECTION: forcing a failure. [ 1030.327776][T13434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1030.327805][T13434] CPU: 0 UID: 0 PID: 13434 Comm: syz.2.10440 Not tainted syzkaller #0 PREEMPT(full) [ 1030.327817][T13434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1030.327824][T13434] Call Trace: [ 1030.327829][T13434] [ 1030.327834][T13434] dump_stack_lvl+0xe8/0x150 [ 1030.327854][T13434] should_fail_ex+0x410/0x560 [ 1030.327871][T13434] _copy_from_user+0x2d/0xb0 [ 1030.327887][T13434] ___sys_sendmsg+0x1c6/0x360 [ 1030.327899][T13434] ? __lock_acquire+0x747/0x2de0 [ 1030.327913][T13434] ? __pfx____sys_sendmsg+0x10/0x10 [ 1030.327941][T13434] ? __fget_files+0x2a/0x420 [ 1030.327951][T13434] ? __fget_files+0x3a2/0x420 [ 1030.327965][T13434] __x64_sys_sendmsg+0x1b1/0x290 [ 1030.327977][T13434] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1030.328000][T13434] do_syscall_64+0x166/0x520 [ 1030.328011][T13434] ? trace_irq_disable+0x3b/0x140 [ 1030.328029][T13434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.328039][T13434] ? clear_bhb_loop+0x70/0xc0 [ 1030.328052][T13434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.328062][T13434] RIP: 0033:0x7f1a07f9e559 [ 1030.328073][T13434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1030.328082][T13434] RSP: 002b:00007f1a08e1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1030.328095][T13434] RAX: ffffffffffffffda RBX: 00007f1a08225fa0 RCX: 00007f1a07f9e559 [ 1030.328102][T13434] RDX: 0000000000008000 RSI: 0000200000001580 RDI: 0000000000000003 [ 1030.328109][T13434] RBP: 00007f1a08e1a090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.328116][T13434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1030.328122][T13434] R13: 00007f1a08226038 R14: 00007f1a08225fa0 R15: 00007ffd5c033fc8 [ 1030.328138][T13434] [ 1030.441744][T13437] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10441'. [ 1030.497150][T13437] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10441'. [ 1030.742983][T13447] Bluetooth: hci0: unsupported parameter 5161 [ 1030.743004][T13447] Bluetooth: hci0: unsupported parameter 8192 [ 1030.743023][T13447] Bluetooth: hci0: unsupported parameter 5161 [ 1030.743034][T13447] Bluetooth: hci0: unsupported parameter 8192 [ 1030.846295][T13452] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10445'. [ 1030.984307][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10446'. [ 1030.984391][T13459] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1030.985612][T13459] netlink: 152 bytes leftover after parsing attributes in process `syz.6.10446'. [ 1031.209089][T13467] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10450'. [ 1031.214751][T13467] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10450'. [ 1031.272649][T13471] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10451'. [ 1031.272682][T13471] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 1031.366800][T13480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10453'. [ 1031.366835][T13480] netlink: 'syz.1.10453': attribute type 14 has an invalid length. [ 1031.366848][T13480] netlink: 'syz.1.10453': attribute type 13 has an invalid length. [ 1031.566866][T13491] ip6gretap1: entered allmulticast mode [ 1031.931919][T13508] FAULT_INJECTION: forcing a failure. [ 1031.931919][T13508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1031.931951][T13508] CPU: 0 UID: 0 PID: 13508 Comm: syz.1.10464 Not tainted syzkaller #0 PREEMPT(full) [ 1031.931973][T13508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1031.931984][T13508] Call Trace: [ 1031.931992][T13508] [ 1031.932001][T13508] dump_stack_lvl+0xe8/0x150 [ 1031.932033][T13508] should_fail_ex+0x410/0x560 [ 1031.932065][T13508] _copy_from_user+0x2d/0xb0 [ 1031.932094][T13508] __sys_bpf+0x2e7/0xd90 [ 1031.932126][T13508] ? __pfx___sys_bpf+0x10/0x10 [ 1031.932160][T13508] ? __fget_files+0x2a/0x420 [ 1031.932195][T13508] ? ksys_write+0x242/0x270 [ 1031.932218][T13508] ? __pfx_ksys_write+0x10/0x10 [ 1031.932244][T13508] __x64_sys_bpf+0xba/0xd0 [ 1031.932266][T13508] do_syscall_64+0x166/0x520 [ 1031.932286][T13508] ? trace_irq_disable+0x3b/0x140 [ 1031.932305][T13508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.932324][T13508] ? clear_bhb_loop+0x70/0xc0 [ 1031.932347][T13508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.932366][T13508] RIP: 0033:0x7f7b1a19e559 [ 1031.932384][T13508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1031.932400][T13508] RSP: 002b:00007f7b1b011028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1031.932428][T13508] RAX: ffffffffffffffda RBX: 00007f7b1a425fa0 RCX: 00007f7b1a19e559 [ 1031.932442][T13508] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 1031.932455][T13508] RBP: 00007f7b1b011090 R08: 0000000000000000 R09: 0000000000000000 [ 1031.932466][T13508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1031.932478][T13508] R13: 00007f7b1a426038 R14: 00007f7b1a425fa0 R15: 00007ffc02e0b358 [ 1031.932509][T13508] [ 1032.657204][T13553] netlink: 'syz.6.10473': attribute type 8 has an invalid length. [ 1032.670121][T13553] bridge0: port 3(veth0) entered blocking state [ 1032.670340][T13553] bridge0: port 3(veth0) entered disabled state [ 1032.670511][T13553] veth0: entered allmulticast mode [ 1032.674133][T13553] veth0: entered promiscuous mode [ 1033.243464][T13591] rdma_rxe: rxe_newlink: failed to add lo [ 1033.535046][T13614] ip_tables: iptables: counters copy to user failed while replacing table [ 1033.613071][T13620] netlink: 'syz.2.10491': attribute type 10 has an invalid length. [ 1033.614898][T13620] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.637648][T13620] bridge_slave_1: left allmulticast mode [ 1033.637667][T13620] bridge_slave_1: left promiscuous mode [ 1033.637827][T13620] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.639909][T13620] bridge_slave_0: left allmulticast mode [ 1033.639925][T13620] bridge_slave_0: left promiscuous mode [ 1033.640058][T13620] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.688832][T13621] pim6reg: entered allmulticast mode [ 1033.770883][T13623] FAULT_INJECTION: forcing a failure. [ 1033.770883][T13623] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.770916][T13623] CPU: 0 UID: 0 PID: 13623 Comm: syz.2.10492 Not tainted syzkaller #0 PREEMPT(full) [ 1033.770939][T13623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1033.770950][T13623] Call Trace: [ 1033.770957][T13623] [ 1033.770965][T13623] dump_stack_lvl+0xe8/0x150 [ 1033.770997][T13623] should_fail_ex+0x410/0x560 [ 1033.771030][T13623] should_failslab+0xa8/0x100 [ 1033.771059][T13623] __kmalloc_noprof+0xfe/0x720 [ 1033.771082][T13623] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1033.771109][T13623] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1033.771145][T13623] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1033.771188][T13623] genl_family_rcv_msg_doit+0xda/0x340 [ 1033.771223][T13623] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1033.771261][T13623] ? apparmor_capable+0x126/0x170 [ 1033.771285][T13623] ? bpf_lsm_capable+0x9/0x20 [ 1033.771304][T13623] ? security_capable+0x7e/0x2c0 [ 1033.771338][T13623] genl_rcv_msg+0x614/0x7a0 [ 1033.771373][T13623] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1033.771399][T13623] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1033.771422][T13623] ? __pfx_nl80211_del_pmksa+0x10/0x10 [ 1033.771440][T13623] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1033.771479][T13623] netlink_rcv_skb+0x226/0x4a0 [ 1033.771503][T13623] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1033.771533][T13623] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1033.771573][T13623] ? down_read+0x2be/0x330 [ 1033.771602][T13623] genl_rcv+0x28/0x40 [ 1033.771627][T13623] netlink_unicast+0x8ef/0xa80 [ 1033.771666][T13623] netlink_sendmsg+0x813/0xb40 [ 1033.771700][T13623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1033.771733][T13623] ? apparmor_socket_sendmsg+0x98/0x360 [ 1033.771760][T13623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1033.771783][T13623] sock_sendmsg_nosec+0x13a/0x180 [ 1033.771812][T13623] ____sys_sendmsg+0x54e/0x850 [ 1033.771839][T13623] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1033.771870][T13623] ? import_iovec+0x73/0xa0 [ 1033.771902][T13623] ___sys_sendmsg+0x2a5/0x360 [ 1033.771921][T13623] ? __lock_acquire+0x747/0x2de0 [ 1033.771948][T13623] ? __pfx____sys_sendmsg+0x10/0x10 [ 1033.772007][T13623] ? __fget_files+0x2a/0x420 [ 1033.772025][T13623] ? __fget_files+0x3a2/0x420 [ 1033.772054][T13623] __x64_sys_sendmsg+0x1b1/0x290 [ 1033.772078][T13623] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1033.772122][T13623] do_syscall_64+0x166/0x520 [ 1033.772143][T13623] ? trace_irq_disable+0x3b/0x140 [ 1033.772169][T13623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.772189][T13623] ? clear_bhb_loop+0x70/0xc0 [ 1033.772212][T13623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.772231][T13623] RIP: 0033:0x7f1a07f9e559 [ 1033.772249][T13623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1033.772265][T13623] RSP: 002b:00007f1a08e1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1033.772286][T13623] RAX: ffffffffffffffda RBX: 00007f1a08225fa0 RCX: 00007f1a07f9e559 [ 1033.772300][T13623] RDX: 0000000000008000 RSI: 0000200000001580 RDI: 0000000000000003 [ 1033.772313][T13623] RBP: 00007f1a08e1a090 R08: 0000000000000000 R09: 0000000000000000 [ 1033.772325][T13623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1033.772336][T13623] R13: 00007f1a08226038 R14: 00007f1a08225fa0 R15: 00007ffd5c033fc8 [ 1033.772370][T13623] [ 1033.795349][T13625] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1034.206519][T13637] netlink: 'syz.6.10496': attribute type 12 has an invalid length. [ 1034.663139][T13657] netlink: 'syz.6.10501': attribute type 8 has an invalid length. [ 1034.663289][T13658] netlink: 'syz.6.10501': attribute type 8 has an invalid length. [ 1034.726586][ T3735] nci: nci_ntf_packet: unknown ntf opcode 0x4 [ 1035.078149][T13668] __nla_validate_parse: 11 callbacks suppressed [ 1035.078168][T13668] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10504'. [ 1035.078185][T13668] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10504'. [ 1035.079004][T13668] netlink: 220 bytes leftover after parsing attributes in process `syz.1.10504'. [ 1035.079021][T13668] tc_dump_action: action bad kind [ 1035.079620][T13668] netlink: 'syz.1.10504': attribute type 2 has an invalid length. [ 1035.079636][T13668] netlink: 'syz.1.10504': attribute type 8 has an invalid length. [ 1035.079647][T13668] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10504'. [ 1036.055030][ T4937] Bluetooth: hci4: command 0x0406 tx timeout [ 1037.662103][T13657] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1037.793707][T13683] netlink: 524 bytes leftover after parsing attributes in process `syz.2.10508'. [ 1038.142347][T13685] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1038.147728][T13698] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10515'. [ 1038.167731][T13698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10515'. [ 1038.342939][T13711] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10519'. [ 1038.342984][T13711] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10519'. [ 1038.345500][T13711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10519'. [ 1038.534602][T13721] TC_ACT_REPEAT abuse ? [ 1038.998361][T13738] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1039.133885][T13744] netdevsim netdevsim2 : renamed from netdevsim0 [ 1039.305836][T13755] netlink: 'syz.6.10535': attribute type 21 has an invalid length. [ 1039.309823][T13755] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:19999 [ 1039.321501][ T1132] IPVS: starting estimator thread 0... [ 1039.401633][T13757] IPVS: using max 31 ests per chain, 74400 per kthread [ 1039.403144][T13764] netlink: 'syz.2.10537': attribute type 4 has an invalid length. [ 1039.514379][T13770] syzkaller0: entered promiscuous mode [ 1039.514394][T13770] syzkaller0: entered allmulticast mode [ 1039.890545][ T4937] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1039.908562][ T4937] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1039.910242][ T4937] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1039.932136][ T4937] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1039.934717][ T4937] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1040.044484][T13793] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 1040.215165][T13801] __nla_validate_parse: 8 callbacks suppressed [ 1040.215184][T13801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10548'. [ 1040.216086][T13802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10548'. [ 1040.219932][T13801] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1040.220306][T13802] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1040.365731][T13809] xt_recent: Unsupported userspace flags (000000b1) [ 1040.548806][T13785] rxe_eth0 speed is unknown, defaulting to 1000 [ 1040.552293][T13824] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10554'. [ 1040.715988][T13828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10556'. [ 1040.716118][T13828] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1040.716893][T13828] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10556'. [ 1040.785167][T13834] netlink: 84 bytes leftover after parsing attributes in process `syz.1.10558'. [ 1040.785198][T13834] netlink: 84 bytes leftover after parsing attributes in process `syz.1.10558'. [ 1040.787230][T13834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10558'. [ 1040.787260][T13834] netlink: 'syz.1.10558': attribute type 8 has an invalid length. [ 1040.864884][T13836] netlink: 'syz.6.10559': attribute type 6 has an invalid length. [ 1040.875178][T13785] lo speed is unknown, defaulting to 1000 [ 1040.881921][T13785] wg0 speed is unknown, defaulting to 1000 [ 1041.122401][T13785] wg0 speed is unknown, defaulting to 1000 [ 1041.524178][T13874] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10568'. [ 1041.566306][T13877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10569'. [ 1041.620780][T13785] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.622799][T13785] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.622914][T13785] bridge_slave_0: entered allmulticast mode [ 1041.624339][T13785] bridge_slave_0: entered promiscuous mode [ 1041.626708][T13785] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.626802][T13785] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.626925][T13785] bridge_slave_1: entered allmulticast mode [ 1041.629278][T13785] bridge_slave_1: entered promiscuous mode [ 1041.727476][T13785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1041.730561][T13785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1041.798559][T13883] netlink: 'syz.6.10571': attribute type 22 has an invalid length. [ 1041.822370][T13785] team0: Port device team_slave_0 added [ 1041.824326][T13883] netlink: 'syz.6.10571': attribute type 22 has an invalid length. [ 1041.836535][T13785] team0: Port device team_slave_1 added [ 1041.957901][T13785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1041.957914][T13785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.957927][T13785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1041.959282][T13892] openvswitch: netlink: Message has 8 unknown bytes. [ 1041.960011][T13785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1041.960025][T13785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.960046][T13785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1041.999685][T13893] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1042.019002][T13785] hsr_slave_0: entered promiscuous mode [ 1042.020235][T13785] hsr_slave_1: entered promiscuous mode [ 1042.021827][T13785] debugfs: 'hsr0' already exists in 'hsr' [ 1042.021847][T13785] Cannot create hsr debugfs directory [ 1042.052942][ T4937] Bluetooth: hci7: command tx timeout [ 1042.074597][ T1132] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1042.124016][T13892] netlink: 'syz.6.10575': attribute type 1 has an invalid length. [ 1042.241394][ T3735] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1042.272607][ T3735] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1042.274223][ T1132] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1042.553452][T13785] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1042.557624][T13785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1042.558428][T13785] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1042.560712][T13785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1042.563589][T13785] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1042.593321][T13785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1042.595654][T13785] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1042.606457][T13785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1042.737201][T13785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1042.803440][T13785] 8021q: adding VLAN 0 to HW filter on device team0 [ 1042.810549][ T3735] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.810704][ T3735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1042.820654][ T3735] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.820773][ T3735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1042.982858][T13921] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1042.984090][T13921] bond6 (unregistering): Released all slaves [ 1043.666320][T13960] syzkaller0: entered promiscuous mode [ 1043.666345][T13960] syzkaller0: entered allmulticast mode [ 1043.697505][T13960] tipc: Enabled bearer , priority 0 [ 1043.710605][T13785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1043.751619][T13960] tipc: Resetting bearer [ 1043.753891][T13957] tipc: Resetting bearer [ 1043.798552][T13957] tipc: Disabling bearer [ 1044.131641][ T4937] Bluetooth: hci7: command tx timeout [ 1044.158419][T13978] netlink: 'syz.1.10592': attribute type 1 has an invalid length. [ 1044.217471][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.319357][T13785] veth0_vlan: entered promiscuous mode [ 1044.353038][T13785] veth1_vlan: entered promiscuous mode [ 1044.465752][T13785] veth0_macvtap: entered promiscuous mode [ 1044.482929][T13785] veth1_macvtap: entered promiscuous mode [ 1044.509000][T13785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1044.527731][T13785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1044.638247][ T8497] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.781426][ T8497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1044.781450][ T8497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1044.846517][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1044.846538][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1044.863654][ T8497] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.875254][ T1132] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.885454][ T8497] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.968214][T13983] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1044.985360][T14008] netlink: 'syz.1.10600': attribute type 10 has an invalid length. [ 1044.986854][T13983] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1044.989271][T13983] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1045.027284][T13983] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1045.028763][T13983] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1045.033398][T14008] wlan0: mtu less than device minimum [ 1045.033416][T14008] team0: Device wlan0 failed to change mtu [ 1045.108577][T14008] .`: (slave team0): Error -22 calling dev_set_mtu [ 1045.304145][T14019] syzkaller1: entered promiscuous mode [ 1045.304167][T14019] syzkaller1: entered allmulticast mode [ 1045.308530][T14019] __nla_validate_parse: 13 callbacks suppressed [ 1045.308551][T14019] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10543'. [ 1045.343579][T14019] netlink: 'syz.7.10543': attribute type 83 has an invalid length. [ 1045.387964][T14024] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10604'. [ 1045.470702][T14027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10605'. [ 1045.549130][T14027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10605'. [ 1045.549159][T14027] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10605'. [ 1045.650471][T14035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10605'. [ 1045.810659][T14035] team0: Port device team_slave_0 removed [ 1046.182241][T14005] rxe_eth0 speed is unknown, defaulting to 1000 [ 1046.212574][ T3861] Bluetooth: hci7: command tx timeout [ 1046.291952][ T3861] Bluetooth: hci1: command 0x0406 tx timeout [ 1046.291969][T13983] Bluetooth: hci5: command 0x0406 tx timeout [ 1046.599386][ T3735] IPVS: starting estimator thread 0... [ 1046.607298][T14062] netlink: 72 bytes leftover after parsing attributes in process `syz.7.10611'. [ 1046.681995][T14065] IPVS: using max 31 ests per chain, 74400 per kthread [ 1046.767048][T14005] lo speed is unknown, defaulting to 1000 [ 1046.768968][T14005] wg0 speed is unknown, defaulting to 1000 [ 1046.777716][T14070] netlink: 'syz.7.10613': attribute type 1 has an invalid length. [ 1047.103330][ T4937] Bluetooth: hci8: command tx timeout [ 1047.133429][T14005] wg0 speed is unknown, defaulting to 1000 [ 1047.238361][T14093] netlink: 'syz.7.10620': attribute type 12 has an invalid length. [ 1047.268017][T14095] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10621'. [ 1047.453499][T14105] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1047.465882][T14106] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1047.579174][T14112] netlink: 'syz.7.10624': attribute type 17 has an invalid length. [ 1047.579195][T14112] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10624'. [ 1047.579220][T14112] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10624'. [ 1047.601855][T14112] gretap0: entered promiscuous mode [ 1047.616837][T14112] gretap0: left promiscuous mode [ 1048.015245][T14005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.015421][T14005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.015571][T14005] bridge_slave_0: entered allmulticast mode [ 1048.017351][T14005] bridge_slave_0: entered promiscuous mode [ 1048.020868][T14005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.021295][T14005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.021624][T14005] bridge_slave_1: entered allmulticast mode [ 1048.023517][T14005] bridge_slave_1: entered promiscuous mode [ 1048.057296][T14005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1048.060529][T14005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1048.102399][T14005] team0: Port device team_slave_0 added [ 1048.117872][T14005] team0: Port device team_slave_1 added [ 1048.223175][T14005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1048.223192][T14005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1048.223215][T14005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.291771][ T4937] Bluetooth: hci7: command tx timeout [ 1048.318918][T14005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1048.318935][T14005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1048.318959][T14005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1048.615739][T14005] hsr_slave_0: entered promiscuous mode [ 1048.620641][T14005] hsr_slave_1: entered promiscuous mode [ 1048.626191][T14005] debugfs: 'hsr0' already exists in 'hsr' [ 1048.626214][T14005] Cannot create hsr debugfs directory [ 1048.684346][T14152] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 1048.685292][T14155] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 1049.151594][T14172] netlink: 'syz.6.10637': attribute type 4 has an invalid length. [ 1049.171323][ T4937] Bluetooth: hci8: command tx timeout [ 1049.491114][T14192] netlink: 'syz.2.10646': attribute type 1 has an invalid length. [ 1049.657034][T14005] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1049.669942][T14005] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1049.670894][T14005] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1049.718167][T14005] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1049.719163][T14005] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1049.742968][T14005] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1049.744697][T14005] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1049.770514][T14005] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1049.884689][T14005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1049.937492][T14005] 8021q: adding VLAN 0 to HW filter on device team0 [ 1049.965152][T14213] ebt_among: dst integrity fail: 101 [ 1049.977848][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.977908][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.997477][ T8492] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.997565][ T8492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1050.478223][T14232] __nla_validate_parse: 8 callbacks suppressed [ 1050.478245][T14232] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10655'. [ 1050.486274][T14232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10655'. [ 1050.498760][ T49] hid-generic 0005:000A:63AA.0003: hidraw0: BLUETOOTH HID v0.03 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1050.589503][T14235] ip_tables: iptables: counters copy to user failed while replacing table [ 1050.715308][T14239] fido_id[14239]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci8/hci8:200/report_descriptor': No such file or directory [ 1050.830891][T14243] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1051.240525][T14005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1051.254434][ T4937] Bluetooth: hci8: command tx timeout [ 1051.279393][ T1996] block nbd0: Possible stuck request ffff88807e785080: control (read@0,4096B). Runtime 90 seconds [ 1051.383321][T14274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10666'. [ 1052.012285][ T8501] nci: nci_rsp_packet: unknown rsp opcode 0x120 [ 1052.201330][T14300] netlink: 'syz.1.10669': attribute type 10 has an invalid length. [ 1053.351553][ T4937] Bluetooth: hci8: command tx timeout [ 1054.920899][T14291] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1056.157077][T14325] netlink: 'syz.6.10674': attribute type 32 has an invalid length. [ 1056.782226][T14005] veth0_vlan: entered promiscuous mode [ 1056.818745][T14005] veth1_vlan: entered promiscuous mode [ 1056.894080][T14005] veth0_macvtap: entered promiscuous mode [ 1056.913741][T14005] veth1_macvtap: entered promiscuous mode [ 1056.956321][T14005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1056.996566][T14005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1057.071701][ T8483] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.071744][ T8483] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.071775][ T8483] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.071806][ T8483] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.347332][T14359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10682'. [ 1057.386922][T14359] ipvlan3: entered allmulticast mode [ 1057.403785][ T272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1057.403806][ T272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.560831][ T8501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1057.560853][ T8501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.887998][T14380] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10689'. [ 1057.888175][T14380] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10689'. [ 1057.898750][T14381] netlink: 'syz.2.10688': attribute type 21 has an invalid length. [ 1057.898771][T14381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10688'. [ 1057.901538][T14381] netlink: 'syz.2.10688': attribute type 21 has an invalid length. [ 1057.901556][T14381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10688'. [ 1057.962582][T14386] netlink: 'syz.7.10689': attribute type 1 has an invalid length. [ 1058.625144][T14418] syzkaller0: entered promiscuous mode [ 1058.625168][T14418] syzkaller0: entered allmulticast mode [ 1058.667175][T14420] ip_tables: iptables: counters copy to user failed while replacing table [ 1058.998145][T14436] netlink: 256 bytes leftover after parsing attributes in process `syz.8.10702'. [ 1059.120366][T14439] netlink: 144 bytes leftover after parsing attributes in process `syz.8.10703'. [ 1059.134224][T14440] openvswitch: netlink: IP tunnel dst address not specified [ 1059.278726][T14445] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10706'. [ 1059.307685][T14442] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1059.446538][T14445] veth1_to_bond: entered allmulticast mode [ 1059.458696][T14444] veth1_to_bond: left allmulticast mode [ 1059.609964][T14461] netlink: 48 bytes leftover after parsing attributes in process `syz.6.10709'. [ 1060.006632][T14477] syzkaller1: entered promiscuous mode [ 1060.006655][T14477] syzkaller1: entered allmulticast mode [ 1060.149292][T14482] netlink: 'syz.6.10715': attribute type 4 has an invalid length. [ 1060.632478][T14485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10718'. [ 1062.290017][T14552] x_tables: duplicate underflow at hook 2 [ 1062.411119][ T8483] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.420905][T14554] __nla_validate_parse: 2 callbacks suppressed [ 1062.420926][T14554] netlink: 132 bytes leftover after parsing attributes in process `syz.7.10738'. [ 1062.467757][T14554] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10738'. [ 1062.480759][ T4937] Bluetooth: hci5: unexpected event for opcode 0x0c6d [ 1062.489879][T14554] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10738'. [ 1062.795468][T14567] netlink: 576 bytes leftover after parsing attributes in process `syz.7.10741'. [ 1062.923244][T14569] netlink: 'syz.7.10742': attribute type 7 has an invalid length. [ 1062.924836][T14569] netlink: 64 bytes leftover after parsing attributes in process `syz.7.10742'. [ 1064.443297][T14531] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1064.769636][T14581] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.10747'. [ 1064.815494][T14581] netlink: 'syz.1.10747': attribute type 11 has an invalid length. [ 1065.165102][T14591] FAULT_INJECTION: forcing a failure. [ 1065.165102][T14591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1065.165140][T14591] CPU: 1 UID: 0 PID: 14591 Comm: syz.7.10750 Not tainted syzkaller #0 PREEMPT(full) [ 1065.165163][T14591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1065.165176][T14591] Call Trace: [ 1065.165184][T14591] [ 1065.165193][T14591] dump_stack_lvl+0xe8/0x150 [ 1065.165226][T14591] should_fail_ex+0x410/0x560 [ 1065.165256][T14591] _copy_from_user+0x2d/0xb0 [ 1065.165283][T14591] generic_map_update_batch+0x662/0xae0 [ 1065.165326][T14591] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1065.165356][T14591] ? __fget_files+0x2a/0x420 [ 1065.165381][T14591] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1065.165410][T14591] bpf_map_do_batch+0x391/0x630 [ 1065.165440][T14591] __sys_bpf+0xbe5/0xd90 [ 1065.165470][T14591] ? __pfx___sys_bpf+0x10/0x10 [ 1065.165503][T14591] ? __fget_files+0x2a/0x420 [ 1065.165538][T14591] ? ksys_write+0x242/0x270 [ 1065.165561][T14591] ? __pfx_ksys_write+0x10/0x10 [ 1065.165586][T14591] __x64_sys_bpf+0xba/0xd0 [ 1065.165610][T14591] do_syscall_64+0x166/0x520 [ 1065.165632][T14591] ? trace_irq_disable+0x3b/0x140 [ 1065.165652][T14591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.165672][T14591] ? clear_bhb_loop+0x70/0xc0 [ 1065.165695][T14591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.165714][T14591] RIP: 0033:0x7f764b39e559 [ 1065.165732][T14591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1065.165749][T14591] RSP: 002b:00007f764c353028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1065.165770][T14591] RAX: ffffffffffffffda RBX: 00007f764b625fa0 RCX: 00007f764b39e559 [ 1065.165784][T14591] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 1065.165797][T14591] RBP: 00007f764c353090 R08: 0000000000000000 R09: 0000000000000000 [ 1065.165809][T14591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1065.165823][T14591] R13: 00007f764b626038 R14: 00007f764b625fa0 R15: 00007ffd83634108 [ 1065.165855][T14591] [ 1065.332619][T14592] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10749'. [ 1065.746998][T14603] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10754'. [ 1065.750633][T14604] netlink: 'syz.8.10753': attribute type 1 has an invalid length. [ 1065.757060][T14605] netlink: 48 bytes leftover after parsing attributes in process `syz.7.10752'. [ 1065.885834][T14601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10755'. [ 1066.035486][T14614] netlink: 'syz.2.10756': attribute type 1 has an invalid length. [ 1066.107329][T14604] batadv_slave_0: entered promiscuous mode [ 1066.107352][T14604] batadv_slave_0: entered allmulticast mode [ 1066.270506][T14614] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1066.429366][T14629] x_tables: duplicate underflow at hook 4 [ 1066.601979][T14634] can: request_module (can-proto-0) failed. [ 1066.656628][T14643] openvswitch: netlink: IPv4 tun info is not correct [ 1069.837250][ T8492] mac80211_hwsim hwsim61 wlan0: left allmulticast mode [ 1069.840040][ T8492] mac80211_hwsim hwsim61 wlan0: left promiscuous mode [ 1069.840315][ T8492] bridge0: port 3(wlan0) entered disabled state [ 1069.868099][ T8492] gretap0: left allmulticast mode [ 1069.868126][ T8492] gretap0: left promiscuous mode [ 1069.868350][ T8492] bridge0: port 1(gretap0) entered disabled state [ 1069.870811][ T8492] bridge_slave_1: left promiscuous mode [ 1069.897950][ T8492] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.933718][ T8492] pim6reg527: left allmulticast mode [ 1069.938004][ T8492] tipc: Resetting bearer [ 1072.210180][ T8492] tipc: Disabling bearer [ 1072.309667][ T8492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1072.323895][ T8492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1072.326148][ T8492] bond0 (unregistering): Released all slaves [ 1072.358082][ T8492] bond1 (unregistering): Released all slaves [ 1072.387836][ T8492] bond2 (unregistering): Released all slaves [ 1072.412596][ T8492] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1072.414877][ T8492] bond3 (unregistering): Released all slaves [ 1072.450125][ T8492] bond4 (unregistering): Released all slaves [ 1072.477652][ T8492] bond5 (unregistering): Released all slaves [ 1072.499616][ T8492] bond6 (unregistering): Released all slaves [ 1072.522482][ T8492] bond7 (unregistering): Released all slaves [ 1072.583807][ T8492] bond8 (unregistering): Released all slaves [ 1072.790062][ T8492] : left promiscuous mode [ 1072.938154][ T8492] tipc: Left network mode [ 1074.336700][ T8492] hsr_slave_0: left promiscuous mode [ 1074.337535][ T8492] hsr_slave_1: left promiscuous mode [ 1074.379370][ T8492] veth0_macvtap: left promiscuous mode [ 1074.379501][ T8492] veth1_vlan: left promiscuous mode [ 1074.379573][ T8492] veth0_vlan: left promiscuous mode [ 1075.222884][ T8492] team0 (unregistering): Port device macvlan0 removed [ 1075.439061][ T8492] team0 (unregistering): Port device team_slave_1 removed [ 1075.462016][ T8492] team0 (unregistering): Port device team_slave_0 removed [ 1076.063035][ T8492] IPVS: stop unused estimator thread 0... [ 1081.333222][ T1996] block nbd0: Possible stuck request ffff88807e785080: control (read@0,4096B). Runtime 120 seconds [ 1092.382537][ T4937] Bluetooth: hci3: command 0x0406 tx timeout [ 1094.276912][T14767] __nla_validate_parse: 3 callbacks suppressed [ 1094.276931][T14767] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10768'. [ 1094.299626][T14768] netlink: 'syz.2.10768': attribute type 1 has an invalid length. [ 1094.654084][T14786] netlink: 'syz.1.10773': attribute type 1 has an invalid length. [ 1094.654107][T14786] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10773'. [ 1094.710997][T14790] netlink: 'syz.7.10774': attribute type 3 has an invalid length. [ 1094.888537][T14798] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10777'. [ 1094.955380][T14796] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10777'. [ 1095.608360][T14832] netlink: 'syz.8.10785': attribute type 1 has an invalid length. [ 1095.693301][T14832] bond1: entered promiscuous mode [ 1095.693706][T14832] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1095.707225][T14827] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1095.708178][T14827] team0: Device ipvlan2 is already an upper device of the team interface [ 1095.930613][T14841] ipvlan2: entered allmulticast mode [ 1095.930635][T14841] vlan1: entered allmulticast mode [ 1095.930647][T14841] veth0_vlan: entered allmulticast mode [ 1096.056556][T14853] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1096.366157][T14857] netlink: 32 bytes leftover after parsing attributes in process `syz.6.10791'. [ 1096.753067][T14872] netlink: 76 bytes leftover after parsing attributes in process `syz.2.10797'. [ 1096.830413][T14872] netlink: 76 bytes leftover after parsing attributes in process `syz.2.10797'. [ 1097.834221][T14893] tipc: Enabling of bearer rejected, media not registered [ 1098.083000][T14906] x_tables: duplicate underflow at hook 2 [ 1098.152614][T14907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10806'. [ 1098.152642][T14907] netlink: 'syz.1.10806': attribute type 1 has an invalid length. [ 1098.161811][T14910] netlink: 524 bytes leftover after parsing attributes in process `syz.6.10808'. [ 1098.369459][T14917] syzkaller0: entered promiscuous mode [ 1098.369482][T14917] syzkaller0: entered allmulticast mode [ 1098.559182][T14922] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10810'. [ 1099.052779][T14929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1099.086868][T14929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1099.249614][T14942] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1099.696632][T14964] openvswitch: netlink: Flow key attribute not present in set flow. [ 1099.839065][T14967] tipc: Can't bind to reserved service type 0 [ 1100.501761][T14986] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10825'. [ 1100.502174][T14986] netlink: 160 bytes leftover after parsing attributes in process `syz.8.10825'. [ 1100.503174][T14986] netlink: 200 bytes leftover after parsing attributes in process `syz.8.10825'. [ 1102.497604][T14951] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1102.883557][T15004] netlink: 'syz.8.10831': attribute type 1 has an invalid length. [ 1102.948034][T15004] netlink: 32 bytes leftover after parsing attributes in process `syz.8.10831'. [ 1103.133809][T15009] ÿÿÿÿÿÿ: renamed from virt_wifi0 (while UP) [ 1103.444257][ T8492] IPVS: starting estimator thread 0... [ 1103.465244][T15032] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10837'. [ 1103.466842][T15031] netlink: 'syz.1.10839': attribute type 3 has an invalid length. [ 1103.531770][T15030] IPVS: using max 29 ests per chain, 69600 per kthread [ 1104.044198][T15045] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10843'. [ 1104.045519][T15046] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10843'. [ 1104.198748][T15065] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1104.639551][T15076] netlink: 'syz.2.10853': attribute type 1 has an invalid length. [ 1104.766848][T15085] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10852'. [ 1104.805761][T15076] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10853'. [ 1104.880306][T15076] bridge0: entered promiscuous mode [ 1105.311974][T15097] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10858'. [ 1105.756157][T15115] __nla_validate_parse: 1 callbacks suppressed [ 1105.756178][T15115] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10864'. [ 1105.813684][T15116] netlink: 'syz.1.10865': attribute type 15 has an invalid length. [ 1105.813708][T15116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10865'. [ 1105.859494][T15116] netlink: 'syz.1.10865': attribute type 15 has an invalid length. [ 1105.859517][T15116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10865'. [ 1105.913264][ T1132] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1105.928161][ T8483] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1105.930848][ T8492] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 1106.867901][T15161] netlink: 256 bytes leftover after parsing attributes in process `syz.6.10874'. [ 1106.867924][T15161] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10874'. [ 1106.867937][T15161] netlink: 124 bytes leftover after parsing attributes in process `syz.6.10874'. [ 1107.129951][T15166] netlink: 104 bytes leftover after parsing attributes in process `syz.7.10876'. [ 1107.157336][T15166] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1107.228546][T15175] netlink: 104 bytes leftover after parsing attributes in process `syz.7.10876'. [ 1107.255139][T15166] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1107.514208][T15182] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10877'. [ 1107.514245][T15182] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10877'. [ 1108.187354][T15220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1108.356019][T15225] netlink: 'syz.8.10887': attribute type 10 has an invalid length. [ 1108.448163][T15225] team0: Device veth0_macvtap failed to register rx_handler [ 1108.508897][T15234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1108.609565][T15234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1109.586804][T15265] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1110.089800][T15281] netlink: 'syz.6.10903': attribute type 3 has an invalid length. [ 1110.430456][T15298] openvswitch: netlink: Unknown nsh attribute 0 [ 1110.839426][T15315] netlink: 'syz.8.10908': attribute type 29 has an invalid length. [ 1110.839453][T15315] __nla_validate_parse: 7 callbacks suppressed [ 1110.839466][T15315] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10908'. [ 1110.840455][T15315] netlink: 'syz.8.10908': attribute type 29 has an invalid length. [ 1110.840472][T15315] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10908'. [ 1111.337798][T15329] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10913'. [ 1111.337842][T15329] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10913'. [ 1111.413894][ T1996] block nbd0: Possible stuck request ffff88807e785080: control (read@0,4096B). Runtime 150 seconds [ 1111.530441][T15338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10915'. [ 1111.613965][T15341] openvswitch: netlink: Flow key attribute not present in set flow. [ 1111.769693][T15344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10917'. [ 1111.914717][T15346] netlink: 220 bytes leftover after parsing attributes in process `syz.1.10919'. [ 1111.972103][T15349] netlink: 'syz.6.10920': attribute type 11 has an invalid length. [ 1111.972127][T15349] netlink: 'syz.6.10920': attribute type 4 has an invalid length. [ 1111.972140][T15349] netlink: 224 bytes leftover after parsing attributes in process `syz.6.10920'. [ 1112.056481][T15357] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10923'. [ 1112.056510][T15357] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10923'. [ 1112.060473][T15357] tc_dump_action: action bad kind [ 1112.323600][T15361] ip_tables: iptables: counters copy to user failed while replacing table [ 1112.683840][T15376] Bluetooth: hci0: unsupported parameter 5135 [ 1112.683861][T15376] Bluetooth: hci0: unsupported parameter 8192 [ 1112.683874][T15376] Bluetooth: hci0: unsupported parameter 5135 [ 1112.683885][T15376] Bluetooth: hci0: unsupported parameter 8192 [ 1112.685732][T15377] xt_l2tp: v2 doesn't support IP mode [ 1112.702961][T15377] block nbd1: Unsupported socket: should be TCP or UNIX. [ 1112.855821][ T5629] Bluetooth: hci2: command 0x0406 tx timeout [ 1113.694354][T15434] ip_tables: iptables: counters copy to user failed while replacing table [ 1114.314588][T15460] netlink: 'syz.7.10945': attribute type 13 has an invalid length. [ 1114.376257][T15452] syzkaller0: entered promiscuous mode [ 1114.376284][T15452] syzkaller0: entered allmulticast mode [ 1120.959296][T15480] __nla_validate_parse: 4 callbacks suppressed [ 1120.959317][T15480] netlink: 84 bytes leftover after parsing attributes in process `syz.2.10952'. [ 1121.020555][T15489] netlink: 'syz.8.10953': attribute type 33 has an invalid length. [ 1121.237130][T15496] batman_adv: batadv0: Adding interface: veth0 [ 1121.237152][T15496] batman_adv: batadv0: Interface activated: veth0 [ 1121.362734][T15496] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10958'. [ 1121.984505][T15521] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10964'. [ 1122.171467][T15526] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10965'. [ 1122.365706][T15539] netlink: 'syz.2.10966': attribute type 1 has an invalid length. [ 1122.536472][T15548] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10967'. [ 1122.933245][T15566] netlink: 'syz.6.10974': attribute type 10 has an invalid length. [ 1122.979735][T15566] team0: Device wg2 is of different type [ 1123.031607][T15573] netlink: 96 bytes leftover after parsing attributes in process `syz.8.10973'. [ 1123.032697][T15573] x_tables: duplicate underflow at hook 3 [ 1123.072552][T15570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10975'. [ 1123.265028][T15572] smc: net device lo erased user defined pnetid SYZ0 [ 1123.265237][T15572] smc: smcd device lo erased user defined pnetid SYZ0 [ 1123.839334][T15594] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.905404][T15594] bridge_slave_0 (unregistering): left allmulticast mode [ 1123.905439][T15594] bridge_slave_0 (unregistering): left promiscuous mode [ 1123.905574][T15594] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.307657][T15602] : renamed from bond0 (while UP) [ 1124.318506][T15604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10983'. [ 1124.318535][T15604] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1124.406798][T15603] batman_adv: batadv0: Adding interface: veth0 [ 1124.407996][T15603] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1124.408028][T15603] batman_adv: batadv0: Interface activated: veth0 [ 1124.437763][T15603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1124.437943][T15603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1124.477939][T15603] batman_adv: batadv0: Interface deactivated: veth0 [ 1124.478122][T15603] batman_adv: batadv0: Removing interface: veth0 [ 1124.574984][T15613] netlink: 'syz.7.10986': attribute type 21 has an invalid length. [ 1124.589994][T15617] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10988'. [ 1124.590020][T15617] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10988'. [ 1124.777083][T15609] batadv0: entered promiscuous mode [ 1124.777861][T15609] macsec1: entered promiscuous mode [ 1124.805203][T15609] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1124.808306][T15609] batadv0: left promiscuous mode [ 1124.955088][T15617] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1124.987080][T15617] bond5 (unregistering): Released all slaves [ 1125.233409][T15630] ipvlan0: left promiscuous mode [ 1125.233435][T15630] ipvlan0: left allmulticast mode [ 1125.233449][T15630] veth0_vlan: left allmulticast mode [ 1125.519589][T15637] ip_tables: iptables: counters copy to user failed while replacing table [ 1125.522177][T15633] bridge0: entered allmulticast mode [ 1125.533158][T15639] bridge_slave_1: left promiscuous mode [ 1125.534016][T15639] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.557115][T15639] bridge_slave_0: left allmulticast mode [ 1125.558062][T15639] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.757611][T15639] bridge0 (unregistering): left allmulticast mode [ 1125.991993][T15637] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1126.394855][T15670] __nla_validate_parse: 1 callbacks suppressed [ 1126.394878][T15670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10999'. [ 1126.660577][T15670] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1127.130866][T15687] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 1127.190860][T15687] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11004'. [ 1127.190888][T15687] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11004'. [ 1127.190902][T15687] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11004'. [ 1127.323840][T15691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1127.648591][T15707] netlink: 80 bytes leftover after parsing attributes in process `syz.7.11008'. [ 1127.692684][T15707] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11008'. [ 1128.217994][T15723] bond2: option fail_over_mac: invalid value (16) [ 1128.259795][T15723] bond2 (unregistering): Released all slaves [ 1129.396079][T15675] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1129.749495][T15731] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11016'. [ 1129.838084][T15738] FAULT_INJECTION: forcing a failure. [ 1129.838084][T15738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1129.838119][T15738] CPU: 1 UID: 0 PID: 15738 Comm: syz.1.11019 Not tainted syzkaller #0 PREEMPT(full) [ 1129.838141][T15738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1129.838154][T15738] Call Trace: [ 1129.838162][T15738] [ 1129.838171][T15738] dump_stack_lvl+0xe8/0x150 [ 1129.838206][T15738] should_fail_ex+0x410/0x560 [ 1129.838245][T15738] _copy_from_user+0x2d/0xb0 [ 1129.838276][T15738] generic_map_update_batch+0x6b1/0xae0 [ 1129.838319][T15738] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1129.838349][T15738] ? __fget_files+0x2a/0x420 [ 1129.838375][T15738] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1129.838404][T15738] bpf_map_do_batch+0x391/0x630 [ 1129.838435][T15738] __sys_bpf+0xbe5/0xd90 [ 1129.838466][T15738] ? __pfx___sys_bpf+0x10/0x10 [ 1129.838501][T15738] ? __fget_files+0x2a/0x420 [ 1129.838536][T15738] ? ksys_write+0x242/0x270 [ 1129.838560][T15738] ? __pfx_ksys_write+0x10/0x10 [ 1129.838585][T15738] __x64_sys_bpf+0xba/0xd0 [ 1129.838610][T15738] do_syscall_64+0x166/0x520 [ 1129.838632][T15738] ? trace_irq_disable+0x3b/0x140 [ 1129.838653][T15738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.838672][T15738] ? clear_bhb_loop+0x70/0xc0 [ 1129.838696][T15738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.838715][T15738] RIP: 0033:0x7f7b1a19e559 [ 1129.838733][T15738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1129.838752][T15738] RSP: 002b:00007f7b1b011028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1129.838773][T15738] RAX: ffffffffffffffda RBX: 00007f7b1a425fa0 RCX: 00007f7b1a19e559 [ 1129.838788][T15738] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 1129.838800][T15738] RBP: 00007f7b1b011090 R08: 0000000000000000 R09: 0000000000000000 [ 1129.838810][T15738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1129.838821][T15738] R13: 00007f7b1a426038 R14: 00007f7b1a425fa0 R15: 00007ffc02e0b358 [ 1129.838847][T15738] [ 1130.441804][T15753] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11018'. [ 1130.919566][T15769] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1131.219119][T15787] FAULT_INJECTION: forcing a failure. [ 1131.219119][T15787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1131.219152][T15787] CPU: 1 UID: 0 PID: 15787 Comm: syz.6.11031 Not tainted syzkaller #0 PREEMPT(full) [ 1131.219174][T15787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1131.219186][T15787] Call Trace: [ 1131.219194][T15787] [ 1131.219203][T15787] dump_stack_lvl+0xe8/0x150 [ 1131.219236][T15787] should_fail_ex+0x410/0x560 [ 1131.219271][T15787] _copy_from_user+0x2d/0xb0 [ 1131.219302][T15787] generic_map_update_batch+0x662/0xae0 [ 1131.219345][T15787] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1131.219375][T15787] ? __fget_files+0x2a/0x420 [ 1131.219401][T15787] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1131.219430][T15787] bpf_map_do_batch+0x391/0x630 [ 1131.219460][T15787] __sys_bpf+0xbe5/0xd90 [ 1131.219492][T15787] ? __pfx___sys_bpf+0x10/0x10 [ 1131.219526][T15787] ? __fget_files+0x2a/0x420 [ 1131.219563][T15787] ? ksys_write+0x242/0x270 [ 1131.219586][T15787] ? __pfx_ksys_write+0x10/0x10 [ 1131.219611][T15787] __x64_sys_bpf+0xba/0xd0 [ 1131.219636][T15787] do_syscall_64+0x166/0x520 [ 1131.219658][T15787] ? trace_irq_disable+0x3b/0x140 [ 1131.219679][T15787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.219698][T15787] ? clear_bhb_loop+0x70/0xc0 [ 1131.219722][T15787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.219741][T15787] RIP: 0033:0x7f0958f9e559 [ 1131.219759][T15787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1131.219775][T15787] RSP: 002b:00007f0959f43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1131.219796][T15787] RAX: ffffffffffffffda RBX: 00007f0959225fa0 RCX: 00007f0958f9e559 [ 1131.219810][T15787] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 1131.219822][T15787] RBP: 00007f0959f43090 R08: 0000000000000000 R09: 0000000000000000 [ 1131.219834][T15787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1131.219845][T15787] R13: 00007f0959226038 R14: 00007f0959225fa0 R15: 00007fffe1b13438 [ 1131.219876][T15787] [ 1131.590861][T15791] netlink: 'syz.6.11033': attribute type 10 has an invalid length. [ 1131.605298][T15791] bridge0: port 3(veth0) entered blocking state [ 1131.605488][T15791] bridge0: port 3(veth0) entered listening state [ 1131.605773][T15791] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.605899][T15791] bridge0: port 1(bridge_slave_0) entered listening state [ 1131.645142][T15791] : (slave bridge0): Enslaving as an active interface with an up link [ 1131.655078][T15791] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11033'. [ 1131.655163][T15791] veth0: left allmulticast mode [ 1131.655485][T15791] veth0: left promiscuous mode [ 1131.656319][T15791] bridge0: port 3(veth0) entered disabled state [ 1131.700162][T15791] bridge_slave_1: left allmulticast mode [ 1131.700567][T15791] bridge_slave_1: left promiscuous mode [ 1131.709652][T15791] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.739564][T15791] bridge_slave_0: left allmulticast mode [ 1131.739895][T15791] bridge_slave_0: left promiscuous mode [ 1131.745948][T15791] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.834082][T15791] : (slave bridge0): Releasing backup interface [ 1133.331724][T13983] Bluetooth: hci6: command 0x0405 tx timeout [ 1133.426281][T15831] netlink: 4384 bytes leftover after parsing attributes in process `syz.8.11042'. [ 1133.488295][T15839] FAULT_INJECTION: forcing a failure. [ 1133.488295][T15839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1133.488328][T15839] CPU: 1 UID: 0 PID: 15839 Comm: syz.1.11045 Not tainted syzkaller #0 PREEMPT(full) [ 1133.488350][T15839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1133.488362][T15839] Call Trace: [ 1133.488370][T15839] [ 1133.488379][T15839] dump_stack_lvl+0xe8/0x150 [ 1133.488412][T15839] should_fail_ex+0x410/0x560 [ 1133.488444][T15839] _copy_from_user+0x2d/0xb0 [ 1133.488477][T15839] generic_map_update_batch+0x6b1/0xae0 [ 1133.488520][T15839] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1133.488555][T15839] ? __fget_files+0x2a/0x420 [ 1133.488580][T15839] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1133.488609][T15839] bpf_map_do_batch+0x391/0x630 [ 1133.488640][T15839] __sys_bpf+0xbe5/0xd90 [ 1133.488671][T15839] ? __pfx___sys_bpf+0x10/0x10 [ 1133.488706][T15839] ? __fget_files+0x2a/0x420 [ 1133.488741][T15839] ? ksys_write+0x242/0x270 [ 1133.488764][T15839] ? __pfx_ksys_write+0x10/0x10 [ 1133.488790][T15839] __x64_sys_bpf+0xba/0xd0 [ 1133.488814][T15839] do_syscall_64+0x166/0x520 [ 1133.488837][T15839] ? trace_irq_disable+0x3b/0x140 [ 1133.488857][T15839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.488877][T15839] ? clear_bhb_loop+0x70/0xc0 [ 1133.488900][T15839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.488920][T15839] RIP: 0033:0x7f7b1a19e559 [ 1133.488939][T15839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1133.488961][T15839] RSP: 002b:00007f7b1b011028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1133.488982][T15839] RAX: ffffffffffffffda RBX: 00007f7b1a425fa0 RCX: 00007f7b1a19e559 [ 1133.488996][T15839] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 1133.489009][T15839] RBP: 00007f7b1b011090 R08: 0000000000000000 R09: 0000000000000000 [ 1133.489022][T15839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1133.489034][T15839] R13: 00007f7b1a426038 R14: 00007f7b1a425fa0 R15: 00007ffc02e0b358 [ 1133.489065][T15839] [ 1134.032967][T15856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11047'. [ 1134.034713][T15857] netlink: 32 bytes leftover after parsing attributes in process `syz.8.11048'. [ 1134.067099][T15847] veth1_macvtap: left promiscuous mode [ 1134.067140][T15847] macsec0: entered allmulticast mode [ 1134.136117][T15860] veth1_macvtap: entered promiscuous mode [ 1134.136141][T15860] veth1_macvtap: entered allmulticast mode [ 1134.136230][T15860] macsec0: left allmulticast mode [ 1134.136243][T15860] veth1_macvtap: left allmulticast mode [ 1134.174928][T15847] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11046'. [ 1134.243409][T15858] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11047'. [ 1134.243642][T15858] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11047'. [ 1134.509513][T15869] netlink: 36 bytes leftover after parsing attributes in process `syz.6.11053'. [ 1134.755532][T15872] openvswitch: netlink: IPv4 frag type 132 is out of range max 2 [ 1135.098260][T15895] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11060'. [ 1135.188888][T15901] netlink: 'syz.7.11061': attribute type 12 has an invalid length. [ 1135.387567][T15911] ªªªªª»: renamed from dummy0 (while UP) [ 1135.868538][T15930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11071'. [ 1136.337672][T15948] nbd: illegal input index 65508 [ 1136.649634][T15950] netlink: 'syz.8.11075': attribute type 1 has an invalid length. [ 1136.733885][T15950] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1137.180720][T15970] netlink: 'syz.7.11082': attribute type 1 has an invalid length. [ 1137.350389][T15970] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1137.416687][T15975] bond2: (slave macvlan0): Enslaving as a backup interface with an up link [ 1137.456053][T15979] netlink: 'syz.2.11087': attribute type 15 has an invalid length. [ 1137.549036][T15983] tipc: Enabling of bearer rejected, failed to enable media [ 1137.549298][T15980] __nla_validate_parse: 4 callbacks suppressed [ 1137.549312][T15980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11086'. [ 1137.601539][T15981] netlink: 'syz.6.11085': attribute type 10 has an invalid length. [ 1137.623436][T15987] netlink: 88 bytes leftover after parsing attributes in process `syz.2.11089'. [ 1137.661734][ T31] INFO: task syz.3.9834:11190 blocked for more than 143 seconds. [ 1137.661760][ T31] Not tainted syzkaller #0 [ 1137.661770][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. ** replaying previous printk message ** [ 1137.661770][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1137.661778][ T31] task:syz.3.9834 state:D stack:26776 pid:11190 tgid:11187 ppid:7908 task_flags:0x400140 flags:0x00080002 [ 1137.661829][ T31] Call Trace: [ 1137.661836][ T31] [ 1137.661850][ T31] __schedule+0x17db/0x58f0 [ 1137.661907][ T31] ? __pfx___schedule+0x10/0x10 [ 1137.661938][ T31] ? schedule+0x90/0x2b0 [ 1137.661960][ T31] schedule+0x164/0x2b0 [ 1137.661984][ T31] schedule_preempt_disabled+0x13/0x30 [ 1137.662004][ T31] __mutex_lock+0x7c1/0x1550 [ 1137.662033][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1137.662059][ T31] ? nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1137.662090][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1137.662111][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 1137.662144][ T31] ? __nla_validate_parse+0x2429/0x2d50 [ 1137.662163][ T31] ? do_syscall_64+0x166/0x520 [ 1137.662184][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.662214][ T31] nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1137.662249][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 1137.662286][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1137.662315][ T31] ? trace_kmalloc+0x2a/0xf0 [ 1137.662341][ T31] ? __kmalloc_noprof+0x38c/0x720 [ 1137.662366][ T31] ? __nla_parse+0x40/0x60 [ 1137.662389][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1137.662420][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1137.662464][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 1137.662699][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1137.662741][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1137.662761][ T31] ? security_capable+0x7e/0x2c0 [ 1137.662796][ T31] genl_rcv_msg+0x614/0x7a0 [ 1137.662830][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1137.662858][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1137.662902][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1137.662927][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1137.662957][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1137.662997][ T31] ? down_read+0x2be/0x330 [ 1137.663027][ T31] genl_rcv+0x28/0x40 [ 1137.663053][ T31] netlink_unicast+0x8ef/0xa80 [ 1137.663094][ T31] netlink_sendmsg+0x813/0xb40 [ 1137.663128][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1137.663162][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 1137.663190][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1137.663214][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1137.663244][ T31] ____sys_sendmsg+0x54e/0x850 [ 1137.663272][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1137.663304][ T31] ? import_iovec+0x73/0xa0 [ 1137.663337][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1137.663357][ T31] ? __lock_acquire+0x747/0x2de0 [ 1137.663385][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1137.663410][ T31] ? futex_wait+0x2a2/0x390 [ 1137.663468][ T31] ? __fget_files+0x2a/0x420 [ 1137.663486][ T31] ? __fget_files+0x3a2/0x420 [ 1137.663516][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 1137.663542][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1137.663586][ T31] do_syscall_64+0x166/0x520 [ 1137.663608][ T31] ? trace_irq_disable+0x3b/0x140 [ 1137.663629][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.663649][ T31] ? clear_bhb_loop+0x70/0xc0 [ 1137.663674][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.663694][ T31] RIP: 0033:0x7f6c02b9e559 [ 1137.663712][ T31] RSP: 002b:00007f6c00df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1137.663732][ T31] RAX: ffffffffffffffda RBX: 00007f6c02e25fa0 RCX: 00007f6c02b9e559 [ 1137.663747][ T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000007 [ 1137.663760][ T31] RBP: 00007f6c02c35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 1137.663772][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1137.663784][ T31] R13: 00007f6c02e26038 R14: 00007f6c02e25fa0 R15: 00007fffc6ab7008 [ 1137.663816][ T31] [ 1137.663882][ T31] [ 1137.663882][ T31] Showing all locks held in the system: [ 1137.663893][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 1137.663908][ T31] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1137.663956][ T31] locks held by kworker/u8:2/42: 2, last CPU#0: [ 1137.663970][ T31] #0: ffff88808683a940 ((wq_completion)bond2#13){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1137.664025][ T31] #1: ffffc90000b27c40 ((work_completion)(&(&bond->ad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1137.664077][ T31] locks held by kworker/1:2/49: 2, last CPU#1: [ 1137.664090][ T31] #0: ffff88801c06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1137.664140][ T31] #1: ffffc90000b97c40 ((work_completion)(&nft_net->destroy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1137.664211][ T31] locks held by getty/5375: 2, on CPU#1: [ 1137.664225][ T31] #0: ffff888037b380a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1137.664272][ T31] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1137.664341][ T31] locks held by udevd/10158: 1, on CPU#1: [ 1137.664355][ T31] #0: ffff888027f9c350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 1137.664404][ T31] locks held by syz.0.9771/10928: 2, on CPU#0: [ 1137.664418][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1137.664474][ T31] #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1137.664527][ T31] locks held by syz.3.9834/11190: 2, on CPU#1: [ 1137.664540][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1137.664590][ T31] #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1137.664644][ T31] locks held by syz.4.10363/13116: 2, on CPU#1: [ 1137.664657][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1137.664707][ T31] #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x104/0x610 [ 1137.664760][ T31] locks held by syz.5.10423/13371: 2, on CPU#1: [ 1137.664773][ T31] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1137.664822][ T31] #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1137.664873][ T31] locks held by syz-executor/13785: 3, last CPU#1: [ 1137.664886][ T31] #0: ffffffff8fe36570 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480 [ 1137.664935][ T31] #1: ffff888031274080 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 1137.664978][ T31] #2: ffff88802e850340 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 1137.665030][ T31] locks held by syz.6.11085/15981: 1, on CPU#0: [ 1137.665043][ T31] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1137.665087][ T31] locks held by syz.1.11086/15977: 2, last CPU#0: [ 1137.665101][ T31] #0: ffff88802e856540 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1137.665142][ T31] #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1137.665193][ T31] locks held by syz.2.11089/15982: 3, on CPU#1: [ 1137.665206][ T31] #0: ffff888076645880 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 1137.665491][ T31] #1: ffffffff912c48a8 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 1137.665537][ T31] #2: ffff8880554ecce0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x14b/0xe60 [ 1137.665582][ T31] locks held by syz.8.11088/15988: 2, on CPU#1: [ 1137.665595][ T31] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1137.665643][ T31] #1: ffffffff8fd62ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1137.665696][ T31] [ 1137.665702][ T31] ============================================= [ 1137.665702][ T31] [ 1137.665721][ T31] NMI backtrace for cpu 0 [ 1137.665733][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1137.665751][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1137.665761][ T31] Call Trace: [ 1137.665769][ T31] [ 1137.665776][ T31] dump_stack_lvl+0xe8/0x150 [ 1137.665801][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1137.665827][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1137.665855][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1137.665882][ T31] sys_info+0x135/0x170 [ 1137.665905][ T31] watchdog+0xfd7/0x1030 [ 1137.665932][ T31] ? watchdog+0x1c7/0x1030 [ 1137.665957][ T31] kthread+0x38b/0x480 [ 1137.665975][ T31] ? __pfx_watchdog+0x10/0x10 [ 1137.665990][ T31] ? __pfx_kthread+0x10/0x10 [ 1137.666007][ T31] ret_from_fork+0x514/0xb70 [ 1137.666028][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1137.666052][ T31] ? __switch_to+0xc89/0x1420 [ 1137.666080][ T31] ? __pfx_kthread+0x10/0x10 [ 1137.666101][ T31] ret_from_fork_asm+0x1a/0x30 [ 1137.666130][ T31] [ 1137.666298][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1137.666384][ C1] NMI backtrace for cpu 1 [ 1137.666399][ C1] CPU: 1 UID: 0 PID: 15984 Comm: syz.2.11089 Not tainted syzkaller #0 PREEMPT(full) [ 1137.666422][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1137.666434][ C1] RIP: 0010:perf_lock_task_context+0x7a5/0x850 [ 1137.666463][ C1] Code: 00 02 00 00 31 ff e8 7a b0 c3 ff 48 81 e3 00 02 00 00 75 07 e8 ac aa c3 ff eb 06 e8 a5 aa c3 ff fb 48 c7 44 24 40 0e 36 e0 45 <48> 8b 44 24 18 4a c7 04 20 00 00 00 00 65 48 8b 05 2e aa 91 12 48 [ 1137.666481][ C1] RSP: 0018:ffffc9000e587780 EFLAGS: 00000293 [ 1137.666498][ C1] RAX: ffffffff820465db RBX: 0000000000000200 RCX: ffff88802f0b3e80 [ 1137.666513][ C1] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 1137.666526][ C1] RBP: ffffc9000e587850 R08: ffffffff917a747f R09: 1ffffffff22f4e8f [ 1137.666541][ C1] R10: dffffc0000000000 R11: fffffbfff22f4e90 R12: dffffc0000000000 [ 1137.666556][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffff92001cb0f13 [ 1137.666570][ C1] FS: 00007f1a08df96c0(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 [ 1137.666587][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1137.666602][ C1] CR2: 00007f764c15da08 CR3: 000000002dd30000 CR4: 00000000003526f0 [ 1137.666619][ C1] Call Trace: [ 1137.666627][ C1] [ 1137.666637][ C1] ? perf_lock_task_context+0xfe/0x850 [ 1137.666664][ C1] ? __pfx_perf_lock_task_context+0x10/0x10 [ 1137.666688][ C1] ? rcu_is_watching+0x16/0xb0 [ 1137.666714][ C1] ? trace_contention_end+0x3d/0x140 [ 1137.666745][ C1] perf_event_exit_task_context+0xa9/0x7d0 [ 1137.666778][ C1] ? perf_event_exit_task+0x220/0x3a0 [ 1137.666808][ C1] ? __pfx_perf_event_exit_task_context+0x10/0x10 [ 1137.666840][ C1] ? __mutex_unlock_slowpath+0x731/0x900 [ 1137.666869][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1137.666897][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1137.666920][ C1] perf_event_exit_task+0x232/0x3a0 [ 1137.666955][ C1] ? acct_update_integrals+0x342/0x410 [ 1137.666980][ C1] ? __pfx_perf_event_exit_task+0x10/0x10 [ 1137.667010][ C1] ? __pfx_taskstats_exit+0x10/0x10 [ 1137.667030][ C1] ? __pfx_exit_signals+0x10/0x10 [ 1137.667057][ C1] ? rcu_is_watching+0x16/0xb0 [ 1137.667085][ C1] do_exit+0x6c0/0x2360 [ 1137.667111][ C1] ? __pfx_do_exit+0x10/0x10 [ 1137.667132][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1137.667167][ C1] do_group_exit+0x22d/0x2f0 [ 1137.667187][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1137.667209][ C1] get_signal+0x121b/0x12c0 [ 1137.667241][ C1] ? __asan_memcpy+0x40/0x70 [ 1137.667267][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 1137.667299][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1137.667333][ C1] ? __fget_files+0x2a/0x420 [ 1137.667356][ C1] exit_to_user_mode_loop+0x10e/0x770 [ 1137.667380][ C1] ? rcu_is_watching+0x16/0xb0 [ 1137.667407][ C1] do_syscall_64+0x328/0x520 [ 1137.667430][ C1] ? trace_irq_disable+0x3b/0x140 [ 1137.667451][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.667472][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1137.667495][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.667515][ C1] RIP: 0033:0x7f1a07f9e559 [ 1137.667554][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1137.667571][ C1] RSP: 002b:00007f1a08df90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1137.667591][ C1] RAX: fffffffffffffe00 RBX: 00007f1a08226098 RCX: 00007f1a07f9e559 [ 1137.667606][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1a08226098 [ 1137.667620][ C1] RBP: 00007f1a08226090 R08: 0000000000000000 R09: 0000000000000000 [ 1137.667633][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1137.667645][ C1] R13: 00007f1a08226128 R14: 00007ffd5c033ee0 R15: 00007ffd5c033fc8 [ 1137.667670][ C1] [ 1137.693553][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1138.923320][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1138.932421][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1138.942484][ T31] Call Trace: [ 1138.945759][ T31] [ 1138.948689][ T31] vpanic+0x56d/0xa60 [ 1138.952758][ T31] ? __pfx___schedule+0x10/0x10 [ 1138.957619][ T31] ? __pfx_vpanic+0x10/0x10 [ 1138.962149][ T31] panic+0xc5/0xd0 [ 1138.965894][ T31] ? __pfx_panic+0x10/0x10 [ 1138.970329][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 1138.975804][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 1138.981175][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1138.987329][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1138.993570][ T31] watchdog+0x1030/0x1030 [ 1138.997905][ T31] ? watchdog+0x1c7/0x1030 [ 1139.002320][ T31] kthread+0x38b/0x480 [ 1139.006412][ T31] ? __pfx_watchdog+0x10/0x10 [ 1139.011081][ T31] ? __pfx_kthread+0x10/0x10 [ 1139.015674][ T31] ret_from_fork+0x514/0xb70 [ 1139.020262][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1139.025375][ T31] ? __switch_to+0xc89/0x1420 [ 1139.030056][ T31] ? __pfx_kthread+0x10/0x10 [ 1139.034656][ T31] ret_from_fork_asm+0x1a/0x30 [ 1139.039447][ T31] [ 1139.042734][ T31] Kernel Offset: disabled [ 1139.047072][ T31] Rebooting in 86400 seconds..