last executing test programs: 7m22.901016298s ago: executing program 4 (id=153): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv', 0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000180)=[@sack_perm, @mss={0x2, 0x9}, @sack_perm, @mss={0x2, 0x9}, @window={0x3, 0xfffe, 0x1000}, @mss={0x2, 0x3}, @sack_perm, @window={0x3, 0x8, 0x30d1}, @sack_perm], 0x33) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x46, &(0x7f0000000080)='team0\x00', 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a200100000000000500000014000500200100000000000000000100000000001c00090018000000", @ANYRES32=r2], 0x4c}}, 0x40000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)='X', 0x1}], 0x1}, 0x50) sendmmsg$unix(r3, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}], 0x20, 0x40044}}], 0x1, 0x4) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r4, 0x12) r7 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x34ee9000) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r7, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0xc000) 7m22.362931641s ago: executing program 4 (id=157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000000e14000180090001006c617374"], 0x290}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x12, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc27a}, @alu={0x4, 0x1, 0x2, 0x4, 0x3, 0xfffffffffffffff0, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0xb, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000400)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000500)=[{0x5, 0x1, 0x4, 0xa}, {0x1, 0x5, 0x0, 0xb}, {0x0, 0x1, 0x1, 0xa}, {0x4, 0x4, 0x2, 0xb}, {0x0, 0x5, 0xc, 0xb}, {0x5, 0x2, 0x10, 0x3}, {0x0, 0x5, 0x1}], 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000480)='snd_soc_dapm_connected\x00', r1, 0x0, 0xd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000006800010000000000000000000a000000000000000600070056000000100008800c00010000000000000000090800050022"], 0x38}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r4, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0x3, @loopback, 0x8}, 0x1c) recvfrom(r4, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000100)=@abs={0x27}, 0x6e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 7m21.488842929s ago: executing program 3 (id=167): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x208, 0x100}, [@IFLA_MTU={0x8, 0x4, 0xec3}]}, 0x28}}, 0x0) 7m21.413956015s ago: executing program 3 (id=168): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x208, 0x100}, [@IFLA_MTU={0x8, 0x4, 0xec3}]}, 0x28}}, 0x0) (fail_nth: 1) 7m21.010964037s ago: executing program 3 (id=169): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1200}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x4, 0x5}, 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xf0b, 0x3, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0xc, 0xffff}, {0xffe0, 0xffff}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x44045}, 0x2000c0c1) (async) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1a, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="181000000000000000000000000000001800000001c6e842000000004e0e0000950000000000c574"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x27, 0xfffffffffffffffc, 0x0, 0x19, '\x00', 0x0, 0x38}, 0x94) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000700)=[{&(0x7f0000000100)="0232e6003953b008fefa8ce2d4c1c866321c084bb58c3dd1666a19af3c73704fb3e64365", 0x24}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x810, r4, 0x0) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x84, @rand_addr=0x640100bf, 0x4e20, 0x3, 'nq\x00', 0x1, 0xa7e, 0x70}, 0x2c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x79}]}, &(0x7f0000000580)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) close(0x3) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r6, 0xc, 0x1, 0x4, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0], 0x0}, 0x40) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@fallback=r8, r7, 0x0, 0x8, r0, @void, @value=r10, @void, @void, r9}, 0x20) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) (async) r14 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4b7bc}, [@IFLA_MASTER={0x8, 0xa, r13}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r15}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004844}, 0x8000002) setsockopt$packet_int(r4, 0x107, 0x1e, &(0x7f0000000480), 0x4) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r7}, 0xc) 7m21.010689368s ago: executing program 4 (id=170): r0 = socket(0x10, 0x3, 0x0) splice(r0, &(0x7f0000000040)=0x8, r0, &(0x7f00000000c0)=0xd0f, 0x6, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x2c, 0x1, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x43}}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x400c000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x616099db}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4000050) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "000000000000000000001000000010dc"}}}]}, 0x48}}, 0x0) 7m20.921113806s ago: executing program 4 (id=172): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=@delsa={0x34, 0x11, 0x1, 0x70bd2b, 0x25dfdbfe, {@in6=@remote, 0x4d3, 0xa, 0x32}, [@mark={0xc, 0x15, {0x35075b}}]}, 0x34}}, 0x40) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 7m20.681222972s ago: executing program 3 (id=174): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x5, 0x7fffffff) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000440)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x1fff, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {@in=@private=0xa010101, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x800000000, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0x1000}, {}, 0x80000000, 0x0, 0x2, 0x1, 0x6, 0x2c}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'aegis128-aesni\x00'}, 0x0, 0xc0}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) 7m20.507017218s ago: executing program 3 (id=176): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0400000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000d45f73703930cb400056", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000018110000", @ANYRES32=r3, @ANYBLOB="000000000000000085000000160000009500000000000000"], &(0x7f0000000040)='GPL\x00'}, 0x80) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000006c0)}], 0x1}, 0x24000900) ioctl$FIOCLEX(r1, 0x5451) sendmsg$inet(r2, &(0x7f0000000b00)={&(0x7f0000000340)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000740)='!', 0x1}], 0x1}, 0x54) sendmsg$inet(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'ip6tnl0\x00', 0x0}) pwritev(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000840)="d481cd372be2ebe8608a5e0f9ce098b7343ae6ab06a002ae616e", 0x1a}, {&(0x7f0000000d00)="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", 0xfd}, {&(0x7f0000000ac0)}, {&(0x7f0000000b40)="4ed70677c4fe933ea59246797060d33bcef7f4d7111deecfda22353e5358f6a230ae23dfca83c8aade", 0x29}, {&(0x7f0000000e00)="f299d4ce5563c91ef8546cac2b99d5ee026e596650b28a47269b478e8eff734c8787b42beb6223fe7a3a85cd361f39d65869e96bfa1f899dfb19a963b3f3f7900dbe87f464622522c09132f1c4bacc6784fa754f65365346e2f10d07f4fcecdac4ce335ab6875f47dbc21d7a231900b397f416cbe2804635a85238cbdb0c7611b48b912221371a1181b893208c", 0x8d}, {&(0x7f0000000ec0)="a41c2cd5265d83ab8745a3f5fe099f3b6ecfb82890d13032a239efa869af9291f0704aaa2276b0426cfb03871211e7a1d6a05cb7e42ffc6603a5ca699c3fa426a979783a2a29b81dfbf1be4b70763087bdedbd5a3abe9227d58f781786d134f226ed27b84b529e5bdd940bec6507950f6b64f49ec8d9919cdefdc1b816d215981184b4a84f229af500e43ccc3789a971cf9a258da0375d91e8294aa9fc919671898b2839b309494a418bd8279a54861951c17513c0f36bd0484e7056b73aaec73fce10a314ddc560ea93d73ee07e818e60791aff8a91cc26fad9", 0xda}, {&(0x7f0000000b80)="323ef4438a21c22f42bc73ac", 0xc}, {&(0x7f0000000fc0)="8b438c9821dd70a8436dfac56cfd0d8b0efd1b8d64b0ba730cd5e3054566c3dc27c058baf9addaca132e84645065c0d534945fb72f3335ba51212bb6fdf6e4383944255fd8f4d9f3593fdadfbcb64ed6a947508569de90b92b80174305ee67b3616d309039df18d6d6a26378e79557f4d91fd89cb5d6fa53a478d2709c1fb86ecce72fbbf89a998a9c4a08995d8df58d1ad1f242e28597591db2dcbc6ee876853d013269ec83844a51d57396a9d9305071df7bd60c34c47465a7ae218f7c67ef3c420a06d15dc7f731a7e05a682f5bb34ad092d9724763a6c1e3", 0xda}, {&(0x7f00000010c0)="11f84fa09bc8a061139c6506ddfbbeb4563f03d8b56c83fcb9e06bb115d8f3c2426717af807ec57bf8b60d24524036ad32123cf9c519e4010a496ac8cc0bf6de1660c17e058d284beba41ed531f8a49778578897", 0x54}], 0x9, 0x8, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r4, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x31, &(0x7f0000000780)=[{}], 0x8, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x3f, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000a00)={@private1, 0x0}, &(0x7f0000000a40)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="980000001b90c89396f85c6e0e457f4a6498d34e7245272064f36228b7e5d17a257e8d1111819a720df7a0b46efea835f936803b6e13a7fe0cb8", @ANYRES16=0x0, @ANYBLOB="020027bd7000ffdbdf251600000005000200000000003dff03000100000005000300010000000500020000000000050003000100000005000300000000005400018008000100", @ANYRES8=r2, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="140002006772653000000000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="1400020069703667726574617030000000000000"], 0x98}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r12, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast]}, 0x48) r13 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r13, &(0x7f0000001200)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) setsockopt$netrom_NETROM_IDLE(r13, 0x103, 0x7, &(0x7f0000000080)=0xee3, 0x4) listen(r13, 0x80) accept4$netrom(r13, &(0x7f0000001300)={{}, [@netrom, @remote, @rose, @remote, @netrom, @default, @netrom]}, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) 7m20.482523269s ago: executing program 4 (id=177): r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r0, 0x0, 0x0, 0x60, 0x0, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read(r1, &(0x7f0000000140)=""/20, 0x14) socket$l2tp6(0xa, 0x2, 0x73) (async) recvfrom$l2tp6(r0, 0x0, 0x0, 0x60, 0x0, 0x0) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) read(r1, &(0x7f0000000140)=""/20, 0x14) (async) 7m20.083177296s ago: executing program 4 (id=182): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000440)=0x9, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x5b}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a300000000014000000020a0300000000000000000002"], 0x68}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000300), 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x11a, 0x3, &(0x7f0000000280)=0x7, 0x4) mmap(&(0x7f000083d000/0x1000)=nil, 0x1000, 0x3, 0x10010, 0xffffffffffffffff, 0x33dfa000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYRESHEX=r0], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r4, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb88a801008100210008004500001c000000000033907864010101ffffffff0000000000089078447e4e1b560c22d09c593240a57514dfef29dc9cfafd94df1dea19ea1af318b511be96f01a3aca80138deb645fef83ee35966cb632b81895a2aad349a58e863c7881c4739fa414b3b1f38b551d2049a82ff155b14939d295dc"], 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) 7m20.081474055s ago: executing program 3 (id=183): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x470d0, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f0000000000)={0x10, {{0x29, 0x0, 0x3e000000, @dev={0xfe, 0x80, '\x00', 0xd}, 0x400}}}, 0x88) sendmmsg$inet(r1, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0}}], 0x1, 0x24040890) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800010600000000000000001c140000fe00000100000000040013"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03234e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) 7m19.445512849s ago: executing program 32 (id=182): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000440)=0x9, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x5b}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a300000000014000000020a0300000000000000000002"], 0x68}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000300), 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x11a, 0x3, &(0x7f0000000280)=0x7, 0x4) mmap(&(0x7f000083d000/0x1000)=nil, 0x1000, 0x3, 0x10010, 0xffffffffffffffff, 0x33dfa000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYRESHEX=r0], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r4, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb88a801008100210008004500001c000000000033907864010101ffffffff0000000000089078447e4e1b560c22d09c593240a57514dfef29dc9cfafd94df1dea19ea1af318b511be96f01a3aca80138deb645fef83ee35966cb632b81895a2aad349a58e863c7881c4739fa414b3b1f38b551d2049a82ff155b14939d295dc"], 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) 7m19.380177176s ago: executing program 33 (id=183): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x470d0, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f0000000000)={0x10, {{0x29, 0x0, 0x3e000000, @dev={0xfe, 0x80, '\x00', 0xd}, 0x400}}}, 0x88) sendmmsg$inet(r1, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0}}], 0x1, 0x24040890) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800010600000000000000001c140000fe00000100000000040013"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03234e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) 2m43.119341025s ago: executing program 5 (id=2888): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x20) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f00000003c0)={0x1f, 0x0, @any, 0x1}, 0xe) connect$bt_l2cap(r1, &(0x7f0000001280)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000100)={0x2, 0x2}, 0x2) epoll_create1(0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003780)=@newchain={0x30, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xe, 0x1}, {0x10, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x44004) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e25, 0x0, @loopback, 0x18}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) unshare(0x6020480) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaafad1e048010208004508001c0000002000119078000000000000000000004e20000890783444abe756b6f0392c09de98baa9cd2c79aae7d3fd9ce93fffaf1d5ddfb990e16404661c966086841b4bd9cd4d7ad82b0bd76b337fb5ad234367977d6fa18259c7bba88d9f12"], 0x0) recvmmsg(r4, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x4e22, @broadcast}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) epoll_create1(0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7a}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2m41.793057274s ago: executing program 5 (id=2895): r0 = accept$packet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000300)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0xffff, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x80, 0x5, 0x0, 0x28, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0x8, 0x6ff}, @generic={0x0, 0x2}]}}}}}}, 0x46) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) syz_emit_ethernet(0x86, &(0x7f0000000040)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x78, 0x65, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x6, 0x1f, {0x17, 0x4, 0x3, 0x3a, 0x7ff, 0x68, 0x1ce2, 0xd9, 0x2f, 0xe5c, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x11, 0x3, [{0x7, 0x9, "a88022eba18f92"}, {0x1, 0x2}]}, @timestamp_addr={0x44, 0x34, 0x4c, 0x1, 0x0, [{@multicast2, 0x9}, {@loopback, 0x5}, {@loopback, 0x20005}, {@loopback}, {@remote, 0x329}, {@multicast2, 0x4}]}]}}}}}}}, 0x0) connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x17c, 0x19, 0x1, 0x70bd25, 0x1, {{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x800, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0xc4, 0x5, [{{@in6=@remote, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@mcast1, 0x2000, 0x3c}, 0x2, @in6=@dev}, {{@in=@remote, 0x4d4, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x5, 0x0, 0x1}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x1}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) sendmsg$can_bcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="0400"/16, @ANYRES64, @ANYRES64, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0300004001000000000000e002000000ff01"], 0x48}, 0x1, 0x0, 0x0, 0x2400c090}, 0x20048451) 2m40.797608509s ago: executing program 5 (id=2898): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000031011ff00000000000100200000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) 2m40.365577595s ago: executing program 5 (id=2899): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f00000000c0)=0x7, 0x1) (async) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kvm_dirty_ring_exit\x00', r2, 0x0, 0x3}, 0x18) r5 = socket$inet(0x2, 0x3, 0x6) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000240)=0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/3222], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r7 = socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000003500)={0x7a2, 0x8, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'wlc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x4}}, 0x44) (async) setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x0, 0x8001, 0x1}}, 0x44) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f"}, 0x38) 2m39.999041072s ago: executing program 5 (id=2900): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01022cbd7000ffdbdf250a000000180001801400020074756e6c30"], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x840) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000e0001006e657464be89276f4cff9f0b0f0002006e657464657673696d30000008007300000000000f0002006e657464657673696d30000008000300"/84], 0x64}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0c020084", @ANYRES16=r3, @ANYBLOB="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"], 0x20c}, 0x1, 0x0, 0x0, 0x240008a4}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6}, 0x94) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$SIOCAX25DELFWD(r6, 0x89eb, 0x0) r7 = epoll_create1(0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x7, 0x0, "03e631307194e860fcfdf4d9db72119f5fed57fc0a313cd28aa4d850d96d42b403b0cab031d6ec46238d5e1830b6c0d55e933dcf4e2dac15072ce9fdfc061550b0e6498ebeecbde889cded42a21f3324"}, 0xd8) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r8, &(0x7f00000001c0), 0x8) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r9, &(0x7f0000000000), 0x8) listen(r9, 0x0) listen(r8, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f00000001c0)={0x10000008}) socket$inet6(0xa, 0x1, 0x8010000000000084) bind$alg(0xffffffffffffffff, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,serpent)\x00'}, 0x4e) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x94) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x10000000, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x9, 0x1000000200000009, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r7, &(0x7f0000000000)={0xa0000001}) 2m39.055382316s ago: executing program 5 (id=2904): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001c000380180000800800034000000072"], 0x48}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) pread64(r0, 0x0, 0x300, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000400070001"], 0x50) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000007c0)={0xff, 0x37, '\x00', [@ra={0x5, 0x2, 0x7fff}, @jumbo, @generic={0xe, 0xd7, "aa5bd09f10c2077cb95d346bac04ae08cbaa2da08b31f400b7bc4d38953cb9f4fb82c1e8795f6beb7a10ec9c0a5baf8acbc312f30ea82ef4b3cc5740bc084de60180fedded3ba2a708a1ea3d52f35c21b1ca6eb0b6cb7249b58806df6d871f3f58c23acecae17b262d51bf3eabe0014982bd18be6fbc749b3657767217dae3b1b286c0d1f3bf461a3f7302b7227ae7256a42576d08ea1348b4275975ac6a4a53a6823fa7bbae84996d593a7a53ab0e072f30e74dfa5100ed090b44b9a68c7a79325b60cfcfb0fc38c922b42cd35c72d31a61ba7b949bcb"}, @generic={0x1, 0xcf, "482a628a6664bdb4cefd367b60de6fd2bf0ed358a3531a2128ad5ba56b08529d673de618a05883f491edc9574d8faed7b7a7d1a2abb3838db1d57f58f6dfe6d752f3061c8597192f3acd84f47621be3cd0b2beab5d7f422ed59d407b02abbd340f84c9bde2fd96d05e3c4354e1f90b4cafd42a7678bb4b7daddb1016de56034a642fa07bdaa1a3d09ec25612f4a51e48e8d1ac5ae4ebb17e8747d27969db3ca433321e789ac6761e3ae8a768b775707290be73d0cb7dd180348db9e46054e9eee9c61c50c8632eb2965cacaba7a8ac"}, @padn={0x1, 0x2, [0x0, 0x0]}]}, 0x1c0) getsockopt$inet_int(r2, 0x0, 0x31, 0x0, &(0x7f0000001a40)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='signal_generate\x00', r4, 0x0, 0x3}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) pwritev(r7, &(0x7f0000000400)=[{&(0x7f0000000a00)="e7fd13bccff73110bad092fc4642484a67ae8883973771084fec77fe8ee7f0ed9716be7fe0e3304cbbd4da7c0d381da1dcd2bd0805ab8f0be00169252f9704ebb40ad94c9f7d8048bac33e8be7ec93c869418633489a677b57fe4b16a9ed15defb3738ce99c70d50b15e836a39008dde6997163bf073b71cf7854e6f8eb90492224a9ba9e605db9f5ff13617d1f8416cf880651928bbd42b9b49816d2e1ddd436511d24dd2d9b2bce22271978545da9e3207cc52fb0be47b2de5ab15c97ba000a00c57d9e78f84f6b013d90ce53779befec54b720c7a13b6b22e8a190b2e2b731f2bd69736cd719fbf613d4614bcd4e3d0c7f69c710df05b77a1f780d4ad44ab137175ccd2186b24ee05f8bbbcff2bf17e396b06ce69307047e8ba8f500a8f24aa60971b20379ee2b80ab874211536e47e0dd55061fdee8499be5f8251598bb741e2ac024dde73dba4e1fe031ae20575e257a821e99b1f7eef7e3a9fa40ebbb9a95f357cd3c066e867f596cdcf8f7a2746d5190c20ea7d7debcbe7e86a1a05e83e9f204f400038b03e655a70f2eed88aa7a39d26bff43be8b1c589738cad3c2eaf037c24930c36cfe03023c3b3d9122bdab7264bf505475bf0b43817c01883f0effded5944b0dc5fc1629b30bdaa05bbfc63459ab262423c8a740b142b504e1abfe1ca550e1b83d2a97304432a5c8434dd53e3861e0b437071f900302927b5af63f4f4f95872e3100674970908540b23affcbe78727805d86c0931219639ed5d4d7e4267858717ee3008cae40a09455c2e289f1766906d7ee3cad9e94a05cc9aad89191b9328925d1407edca3c069c343bff0ffd1fbba530a7c55bacd5e05cec73f51378191aacd94f817b80e2ec58226831e3cdb345c8b5d5def325b5bf7d113e0555faf050373951c547f42088bce1bbfba725facf0b18b2a78b8a07f6d98c9580ef3ca3403df6abef51715f1f76a6703536c5befa888ece2c46ccb0c8b80d621386c0130255f9ba741e71174ef6ed880539ddcdfcccd3e40fd22aeac23d2806980d2ba08d02a22ec08cdc0c6cbc479a25fbf211e3461e1b2be13361089fea45b0a1b560d0c82593e291857503c5e8b62f47f0043ded10f6b2896085a855ac2f07d5a508f76eb5eb461517580ff8ec2299f14fe2993eca1dbb21d613367d648704c0d5e5d72f2ce02010eea51ee89c61a4258a28838309fe0c87c17781b2afa6b1cbe1158bdf94359f8018ac00d2db26dffbe2e24a8af4c20a11cb8a71110382004d0305522781c08e53153aeba3fb1e1355b7f7ded5d0f7b147994eab40fec368fdf5046eabaffab0aba56d0c6cbbe33ea2d8d8c2bf2c75e58ef57f1bd91f06a6b1098525e3ef8365f9165c2beffee27c1fa6ab917f41c4a25c898c1c36358da85579dd05ac0a393e80c418c24de4cba3becd1fdc76b367b733188a499b6b4a174a8eff48b2274f3eee940d73347aa16cfc96bba72cb9d9cbfa519ef9f4b5e5a3898ba0e19cae7391e2470b8a64521074a188084a33f82af65a4167a72ab8cdeceeff6a656be83e21fe4c33986a5bb86b8bdee12848a026e0513a155bce4c91569d7dfd0c948a7e96168f1683a461ab642a3d591a634c9d67c11651995e1f5a68468169fa39bafc8def1cd5d0ce3f2b2218b49372d00a4c9a789d1a06865184382fe9df8a3be9d7e57b84a0eae07cfdd3651db1a99e5275565c8085caf8dfb1f7b6bcf3849c0faef06571e2d83d4151e973654e4edab9ce768aaed5d93c2d0338760ff7e2cad1060b967c1248fef23035ce5049e91e5eb2c5c887bbf24ee265bbe0610d5cd221a3b929933801ef0ba180dc098987d68153950b9f5cc580968d282d0f9910a0e62df83c119f95e77cbb1f8156876db580be46bccc0a48b26aea1d9f41160aec61b9b7d367ae24eec4ddc8df00e2b08386131f545f54d382b00b5920ebaeaa4edb83b766c73edb43847cd846a2baea1c8a3c08f69b386b30d36881093234c8d04f92b37f19264a8680b94bb7281aa7c456761d64025353345544ebf7fd8cc39fb02b5d881dbc03a3e8f6aac2576d63943af65fa7f305529a862dc9b57aa9903dd4f2f66e088158a51fbeacd999077e785e1ac0bbf0e3f4dcc0419fec79b775d09b47228bc59a79d55b4159ef6eeeccb3c1824da4e5285246c25a2e2ad2bef599180f5d6a369327ae32210894b824cd89470632aea8ae1221f5b15389612e6c7759e64cab67ca4cc46313acced9a0195164888a82c82ed6ca742510995f5c3477eebf3e0ad48f572c7e0ea8ebbf1e8cbe5419edd05eb0499038db2857de4895d8d3c402b461d3884d241d07f0db93db6327a67d0904c0339029270564e7835799901c1e4f02259dbd40470a0a127c68c1fb46ecf5e7c05002536da74b218d858f0378746a979abeaeedc0d0cad926d563c6917c979d798a4f343e9428bf6301ee12d00ceebd77a9b346eb58070f950ddcdb3cb30dbfa2df770087042d4393403975ec09dc91c0b13408e2595380ec88801c35c0c0a5cc20cb59937043cef829b68ba7fed245cf09ce4495bf4bdb7c5d470e6e6bddf0008c075f29d7c4883dc0dc37376ca39181ec5372df25b8d8b0082646d071fb81410779c79b8abcc6bb6aea58701f0694102cc9fba9f360e2487a922ab388c6c6c7de3a913aef0af91cf0ad610d4381085fa05531b8b831e0661e162c68cfa11127541fda4c4b178aec33c29120e38fa999a8af4b48a95cec5438d758d6d8eb594ad808a85ee74b201c69ca7ab21954a30baf15e01c4da82dd2110ca322ccd4be6b1d6fba47e1bb798474b1e77ef743d678bc0fcb0d8536e3aa808c2a1ac7a72729a77d1cc7f48a3cd7665c6e8fbbcd340a285f314c3f2d48eb5797af92500b2fe4f50678f3da57df438c39ab7abdde7ca97009c10456c8b0328c64acea4ef1d7976a8ffc0e4a3af56cba313a05dc745f48a6abc50b0370cb06b51ff6f7f35c86855dad9512cc9e704e80a46e685b3695fb1662bb218bf8aa936f2c6da615042fe757ef2329d4c51fd7e193a1871ebe59ed75105b9acea72ec6a538b494bcec2f1a80960684421a5f4dde77fc7914376b5debb732871b24b7a33e984a1ba3abbd80641dd55ce108b820cc269796e1ad7ab17757165149a76aaddbbee468827705ec9ce7f108732cf0c3abe4d1a5d72ea747b8428cc138bd4e54e89c586587fc040909e537d1716db93a4410a8496ac9cdc4e6e7c526d20607a49861a25b84a28d850c7ccdd89761bacd7a5a0f23fde8a6ee92e2c748beb47db5a752ca28115b5707f8a448552c162bb2209e34b8d80b68814ab07a541559d00248966eed129c173ec0a633ca3946040c3f2a0bffd4841d37b9658fef654c8bf9cf9dd92e280103b6c670f62b645af0d449fad46c785ad438b69b84e375b0427c1ff0010d650ebee5f4d43a335e56e4efa3dd6f20374d6d1c6ef3752c3d1bca687324486e74967872d7b353bc43e2e0228e97086a2237bcea495fc7c8bdc45033b2f6da1f5ca77458eb0991065c42c35a5a3ccc27e98bd7a541cea0a93954920ed9d74da046e856fb66928ed8d9c2aa821679bd3bf43196acb9552ee02e5dc1f1129ce68135c413a6cc8f45ad72f223716f1314bcb027ad3d9aec991a80c534ccda1e7ddcf8bc54c35d4d2aa9043738f2668fd0c26be8d41416c4b2cd8c0fc1ac3e4bb8fc6000340fff66786fdf5131365fb72529ba47a6409ef1f373f881315ba3efbd5c0b0469123e32596a46459017327a17970ca5aa73c088744cf3158c7c38f5e4225d4ff13ec7b3a9cf1e6a1cfcae5af5de82c4576491bae03da42a5c9a0e9ad4637dbed3cbc9040541cbae6a4b0ce18da3a50a918ed592d4deb5ed754f4ffc3d1d6f511f13d96d889c8edc9c32c6547ef8ddb694ea6946a35fad8a0969920fd0891319a6573b4853e3c398a17186d65062d8b24541b3991aaafc9066e81a619560e6b2b1faca8eb110e8e77e8e18a933c72eaf758bfde3e08f54dca0fe2f537b9734b51449248cf50c467188dfb0abc3540aa0030c05ea0e6266538c208fbef458be70f1ddfa4d96233a454a05bce79422c52dc41bf7c48d4a76e6f6c9980212aacb48ccb3bd6bca8ad4b24facb6b312ba45b1f2fcf5067a181ec4fa376afda329f263ada31808dea0621fc7ad1a6daebd2ec6d13cef4208bf29ee6d65921c47087a9903180bc5851a83a8379cc51a9aa9e89af68c3159f36b8e56a839e8e610b6a5a8c158fecbbd3938a5c1be492368b5774389d5af5d51fe4cd058bb22c862e3079c9c89bfa37a02b6927aac46022f08d78035154bb17490ff8e011596ce44c4f850251df406565d8dddb3f47f23ccb798a39cfb5a91566ed4391a3084f3c8906fa30861948ee93cd11836fb3bfc7a64220b5b5618c5352e60d97f61b6fe4b0a3c609b6a9f94c2e72410d6a39a4cf9e989551daa33282dc481fc375ca1a368c9e7d9d391ab3d71ff3d9a5765dcadbec3d2798567a056864b4f087f29ca338f0b7699754f491faf7f4f57b761c73ac00e11c778c367cad56ab023cb05f8d3690fbd62d6d0a368b2e7105a25cc1cb845024f21daa10afe387d9bb504db8b8376a5ad51ac34be8ac43ab01e6edab4007d1c5b501c81e17217b14ec521fab42e45c60569825189592d6f6969cc071518a6e4a85f012e439fe11e2d132d88461b66adc6aa4cff1950f2403f69d90df72372e9cf8adffbafc9e50b4b022c03f1bd403b09b7b77669e32de44b716be18503eca646048d71a837ee97c7da82c90a0c868e7ec863979e6ba9f9c7024a0638076123bc82a24f03b93fbf788af9f0042face09c3b4fe738e43916abff8a4f05d56b97795c64d1758bccc6dbdd9887b85744f378e6c3aaf39562cdbcd7e830d48e889aab7aa67b3a588115d2dc77461fbc937f7f03a57211fdee10b0fa2987ed8df62e3c827ecd9530b228cd0623becf2f62104b1bd5970dd4890d30eb61ba8e9e3ebc57a04ea13b39a3e2feab56d8d8572a708008f43589c0137ad116723c6763eb748cd7a572949118565ed6cf5f235d20217eab770df3c8ba65c664aff2a2e0c44e47bc367d580cbb8196e7a2c2f307da189290e3ddc66d031db10cc176265973b87f928d66d4bae17ab4a42d8da9e7e6f443e38d4d15223aa42a4187c9cc3a155d0fb3ddae4813fba988c817e1d47ccb5974e29f97565a17cc9c2c7f7914d0e744843937aa788f530e4fc6300f43ce65da3b81bdf95f5ec89ddf12d8d48333bc66fed33cdb7029c4c3a63c399e2e2098c5fb47e4450ffc40a626a87f119219a61cd49cadd89b3fc2700de756ca2b5657dd081014290a072ff0c3246cff6b8ef2348ad18375ed9320d815af142cee1ea9b456ccf097c1eab8f239b50d1d1399653b37f8cc5cff5f2ac39e9c1c6b10d072a9d662a748da467829b084a3eb1768607043584d810c2c45561aca403b75198672a0f4f1f5081c466c9f04c256c371233668ae11c450de1f52e3d30675a46c1f792202e316c001294ae481ab42a650cb8f534511d1ecf64067b757cacde432e7dc075bb3f7ff3b533b1261d60e0546669be453dd4f613b6662cec82f7036540cf0fc3bafa08da6749f7fbaa7b6122f74acdec9f365304df68f7862dce3e10ac13a2f626adb461a238bc5f14271a68f4455489d96e8ff4fbbb931209983413ffa42582483e6bcd4556d7097375c9f96edd03a6ce189b5d6ce0bce5cac2457af816b1b4d7c760b5060dcb0fedfe9ba77b8552ffc482aef42008bceb1fb2cd9a618e53edc6bde59ee70", 0x1000}, {}, {&(0x7f0000000040)="06ffaf2c55303d798d6f4530d442721b7a79ac8c18f05b56953976417c85ced9b3d5dd12ee962d2eabff4518f5dd9baeede1a43f5de49b846459f068550f6dd890e0ac50c77478a7d9588721b3e0cea0c7714a3bcb52059aa75c07cc674a6caea9812f983dd80c03bbbcea22b524c915df5ff82bc731a4bc6459176e8f3e56caaa0d8b8289a1835a6e212843ac48519df923b88f6c1608886bf120d1002ba81df667d0ee0d10b3ee42c3ab54dcd216ee71e9b837e835ec42161b57e5b099ad5428847e7b8fcefc7610e2a534a0a77a2a05712952f86541e87d74ad1da73030581316803e5728ec9fd0130719e99d0e09523cb49c13425826", 0xf8}, {&(0x7f0000000140)="344ec38e4680c3ed81ecb5061d1c5e7dc214924f5f4fe407bf407f3a44a87e326a9cd3ad000eaf", 0x27}, {&(0x7f0000000180)="8edeee766d4f2556a873ed83682baa", 0xf}, {&(0x7f00000001c0)="17e79e39fa2513f0341428199d0bb9e3faaf28f78c84c1203e4a39b70ff8104fbe1f02080bc49ff8370137b5a3894d5e31e0fd76d20ca2c085341b22238a32e1294a285befe50ce73b3915c8a73d8b8182dbb63cea7505", 0x57}, {&(0x7f0000000500)="232f8e66a0618584b905aaeeefeea2698976fda03d03ffc9d2a9789bce0fdb05d26e2ca10410ee427dd50d2aebd85d540dce0b15379628a979ea201521d002611980b92b305ca2eaaf615fdc57b9a99fb14ff2455e968ede0ced10f98a123a1a4e45e2a9326f07c35bd9f95b5b439e4da7855232fc41a7e2e91947ced105cd40c21b1104d371da7389ce15fa7031e64d201f74a1c9341112b44c8e16c12b5d8279ca51fa859a2f4f531e4d053f62eaa5d89827f22d769918726debf652ed964df967f608e913d26a8ae6beb08eb9263df9650d3f3589dd2d6533dc4e37bb72b0aec4ce94e4a3f36b56", 0xe9}], 0x7, 0xffffffff, 0x0) 2m23.940521427s ago: executing program 34 (id=2904): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001c000380180000800800034000000072"], 0x48}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) pread64(r0, 0x0, 0x300, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000400070001"], 0x50) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000007c0)={0xff, 0x37, '\x00', [@ra={0x5, 0x2, 0x7fff}, @jumbo, @generic={0xe, 0xd7, "aa5bd09f10c2077cb95d346bac04ae08cbaa2da08b31f400b7bc4d38953cb9f4fb82c1e8795f6beb7a10ec9c0a5baf8acbc312f30ea82ef4b3cc5740bc084de60180fedded3ba2a708a1ea3d52f35c21b1ca6eb0b6cb7249b58806df6d871f3f58c23acecae17b262d51bf3eabe0014982bd18be6fbc749b3657767217dae3b1b286c0d1f3bf461a3f7302b7227ae7256a42576d08ea1348b4275975ac6a4a53a6823fa7bbae84996d593a7a53ab0e072f30e74dfa5100ed090b44b9a68c7a79325b60cfcfb0fc38c922b42cd35c72d31a61ba7b949bcb"}, @generic={0x1, 0xcf, "482a628a6664bdb4cefd367b60de6fd2bf0ed358a3531a2128ad5ba56b08529d673de618a05883f491edc9574d8faed7b7a7d1a2abb3838db1d57f58f6dfe6d752f3061c8597192f3acd84f47621be3cd0b2beab5d7f422ed59d407b02abbd340f84c9bde2fd96d05e3c4354e1f90b4cafd42a7678bb4b7daddb1016de56034a642fa07bdaa1a3d09ec25612f4a51e48e8d1ac5ae4ebb17e8747d27969db3ca433321e789ac6761e3ae8a768b775707290be73d0cb7dd180348db9e46054e9eee9c61c50c8632eb2965cacaba7a8ac"}, @padn={0x1, 0x2, [0x0, 0x0]}]}, 0x1c0) getsockopt$inet_int(r2, 0x0, 0x31, 0x0, &(0x7f0000001a40)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='signal_generate\x00', r4, 0x0, 0x3}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) pwritev(r7, &(0x7f0000000400)=[{&(0x7f0000000a00)="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", 0x1000}, {}, {&(0x7f0000000040)="06ffaf2c55303d798d6f4530d442721b7a79ac8c18f05b56953976417c85ced9b3d5dd12ee962d2eabff4518f5dd9baeede1a43f5de49b846459f068550f6dd890e0ac50c77478a7d9588721b3e0cea0c7714a3bcb52059aa75c07cc674a6caea9812f983dd80c03bbbcea22b524c915df5ff82bc731a4bc6459176e8f3e56caaa0d8b8289a1835a6e212843ac48519df923b88f6c1608886bf120d1002ba81df667d0ee0d10b3ee42c3ab54dcd216ee71e9b837e835ec42161b57e5b099ad5428847e7b8fcefc7610e2a534a0a77a2a05712952f86541e87d74ad1da73030581316803e5728ec9fd0130719e99d0e09523cb49c13425826", 0xf8}, {&(0x7f0000000140)="344ec38e4680c3ed81ecb5061d1c5e7dc214924f5f4fe407bf407f3a44a87e326a9cd3ad000eaf", 0x27}, {&(0x7f0000000180)="8edeee766d4f2556a873ed83682baa", 0xf}, {&(0x7f00000001c0)="17e79e39fa2513f0341428199d0bb9e3faaf28f78c84c1203e4a39b70ff8104fbe1f02080bc49ff8370137b5a3894d5e31e0fd76d20ca2c085341b22238a32e1294a285befe50ce73b3915c8a73d8b8182dbb63cea7505", 0x57}, {&(0x7f0000000500)="232f8e66a0618584b905aaeeefeea2698976fda03d03ffc9d2a9789bce0fdb05d26e2ca10410ee427dd50d2aebd85d540dce0b15379628a979ea201521d002611980b92b305ca2eaaf615fdc57b9a99fb14ff2455e968ede0ced10f98a123a1a4e45e2a9326f07c35bd9f95b5b439e4da7855232fc41a7e2e91947ced105cd40c21b1104d371da7389ce15fa7031e64d201f74a1c9341112b44c8e16c12b5d8279ca51fa859a2f4f531e4d053f62eaa5d89827f22d769918726debf652ed964df967f608e913d26a8ae6beb08eb9263df9650d3f3589dd2d6533dc4e37bb72b0aec4ce94e4a3f36b56", 0xe9}], 0x7, 0xffffffff, 0x0) 3.083117038s ago: executing program 0 (id=4399): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002d000100260600"/20], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000804) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x1f00, 0x3ff}, 0x48) (async, rerun: 32) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1843}, 0x18) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (rerun: 64) pwritev(r4, 0x0, 0x0, 0x8001, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x5, 0x3, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 3.082576479s ago: executing program 6 (id=4400): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x6, 0x7, 0x0, 0x1}, 0x48) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0xa}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x1, 0x2, 0x5}, &(0x7f0000000280)=0x10) (rerun: 32) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in={{0x2, 0x4e24, @multicast1}}}, &(0x7f0000000380)=0x84) 2.98667973s ago: executing program 0 (id=4402): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000002c0)={0x4345, 0x7fff, 0xc5, 0x8000, 0x5}) getsockopt$inet_int(r0, 0x0, 0x25, &(0x7f0000000140), &(0x7f0000000280)=0x4) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x0, 0x8001, 0x1}}, 0x44) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x18, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="8510000004010000000000000000000018000000000000000000000000000000950000000000000085100000fcfffdff9500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x18, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="8510000004010000000000000000000018000000000000000000000000000000950000000000000085100000fcfffdff9500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000200)="200020c1", 0x4, 0x14000b01, &(0x7f0000000080)={0x11, 0x8100, r6, 0x1, 0x80, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x9b}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x9b}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2.887501973s ago: executing program 6 (id=4405): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x5, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYBLOB="79b3434dadcf7226d9791ab00a3805acf2249e53460965124cadb98473309c489fc15276dd2bf44ac9f9e40de64822f914c00093efa913d62db3ac5bd6db0180a0804cd436bd250e98048708cbe57b22bbeeaaa27b638c1dafa8d74bf15dd34065d63faee21ea740a3548738cec0c887ab004632a2ca612866d3401e1a307b5f61a35844431a6dcb3e2e65e27e88e64cc81d0652ec9c42eb2e26ea6a3f5835bb6cd1f5", @ANYRES16=r0], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x13) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.70442578s ago: executing program 6 (id=4409): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x4070bd25, 0xfffffffe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffe0}, {0x0, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}]}}]}, 0x3c}}, 0x40044) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00'}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) (async) socket$inet(0x2, 0x5, 0x0) (async) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) (async) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x4070bd25, 0xfffffffe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffe0}, {0x0, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}]}}]}, 0x3c}}, 0x40044) (async) 2.619248503s ago: executing program 2 (id=4410): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) (async) r3 = socket(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket(0x10, 0x803, 0x2) (rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000000c001a8008000580040004"], 0x2c}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newtfilter={0x68, 0x2c, 0x10, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x3, 0xcfa92743ccfb5b65}, {0x9, 0x7}, {0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x10000}, @TCA_RATE={0x6, 0x5, {0x3, 0x3}}, @TCA_RATE={0x6, 0x5, {0x6, 0xd4}}, @filter_kind_options=@f_fw={{0x7}, {0x24, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x3}, @TCA_FW_CLASSID={0x8, 0x1, {0xb}}, @TCA_FW_MASK={0x8, 0x5, 0xffffff21}, @TCA_FW_MASK={0x8, 0x5, 0x5}]}}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0xc0, r0, 0x28543634fae43ad, 0xfffffff8, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8886}, 0x4000004) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f00000002c0)={'syztnl2\x00', r9, 0x8000, 0x40, 0xea09, 0xe3, {{0x24, 0x4, 0x1, 0x1, 0x90, 0x65, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x5c, 0x0}, @multicast2, {[@timestamp={0x44, 0xc, 0xea, 0x0, 0xe, [0x2, 0x8]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x5e, 0x1, [{0x5, 0xe, "1f6a73151a1aa4f5af2541b1"}, {0x0, 0x9, "21a4572b59c211"}, {0x7, 0xa, "5fddae7e501c2b85"}, {0x1, 0xd, "087b54142d77c9f3bda3b5"}, {0x5205ea0a3121b1a0, 0x6, "761a075e"}, {0x6, 0x7, "a73f2dc7b5"}, {0x2, 0x10, "439ec9517f712d7818f50c0b626e"}, {0x0, 0xd, "3ce0570a4bceeeae045892"}]}, @generic={0x7, 0x6, 'aF~F'}, @generic={0x7, 0x6, "3f9f5f32"}]}}}}}) 2.583526552s ago: executing program 6 (id=4411): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x11, 0x80a, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000005600010000000000000000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}}, 0x0) 2.555859927s ago: executing program 0 (id=4412): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r2, 0x401, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000630122000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="610302070302e50512c71dccf4b3c4f576ebda506287a4ebf7e50102"], 0x1c) 2.470093733s ago: executing program 7 (id=4413): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c0000000a0000000000000007000084090000000200000001000000010000000600000001000000030000000f00000004000000260000001000000004000000020000000000000000010000080000000e0000000101000057ca7d7519870a614bb572c6ff0800000e00000002000000ff0f00001000000000000007000000000061612e2e612e5f6100"], &(0x7f00000002c0)=""/4, 0x8e, 0x4, 0x1, 0xfffffff8}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffff"], 0x0, 0x56, 0x0, 0x0, 0x4}, 0x28) (async) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000080)={{r1}, 0x0, 0x0, 0x3, 0x4, 0x1}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x1004) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) (async) bind$alg(r1, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000000140)={0x1d, r6}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@jmp={0x5, 0x1, 0xc, 0x4, 0x4, 0x80, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r7, 0x0) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000012b80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000640)=""/20, 0x14}, {0x0}], 0x2}}], 0x1, 0x60, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000c84}, 0x40005) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, r7, 0x0, 0xb, &(0x7f0000000000)='&[!\xc2!($^\\*\x00'}, 0x30) 2.460518957s ago: executing program 1 (id=4414): bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xec) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 2.430588654s ago: executing program 6 (id=4415): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x30, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4094}, 0x800) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) listen(r1, 0x50) 2.298850349s ago: executing program 7 (id=4416): r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x7585, @private2={0xfc, 0x2, '\x00', 0x1}, 0x13ff, 0x2}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xe, &(0x7f0000000080)=@raw=[@exit, @ringbuf_query, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfff}, @ldst={0x1, 0x3, 0x1, 0x4, 0xa, 0x50}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}], &(0x7f0000000140)='GPL\x00', 0x6, 0xe2, &(0x7f0000000340)=""/226, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x5, 0x8, 0x81, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) shutdown(r2, 0x0) connect$unix(r2, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = accept(r3, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000540)="24e469", 0x3, 0x4000805, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) r5 = gettid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r5) 2.294044231s ago: executing program 2 (id=4417): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x82, 0x82, 0x8, [@enum={0x3, 0x2, 0x0, 0x6, 0x4, [{0xe, 0x67f7}, {0x9, 0x7}]}, @datasec={0x2, 0x5, 0x0, 0xf, 0x2, [{0x3, 0x9, 0x6680000}, {0x3, 0x9, 0x6}, {0x1, 0x2, 0x7fffffff}, {0x2, 0x7, 0x1}, {0x5, 0x80000001, 0xffffff00}], "d290"}, @enum={0xa, 0x2, 0x0, 0x6, 0x4, [{0x4, 0x7}, {0xf, 0x10001}]}]}, {0x0, [0x0, 0x5f, 0x30, 0x0, 0x0, 0x5f]}}, &(0x7f00000000c0)=""/187, 0xa4, 0xbb, 0x1, 0x8, 0x10000}, 0x28) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f00000001c0)={{0x3, 0x3}, 0x100, './file0\x00'}) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000340)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e24, @private=0xa010101}, 0x99, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)='veth0_to_bridge\x00', 0x7f8, 0x6, 0x97}) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00', 0x0, 0x1c}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000480)=@generic={&(0x7f00000003c0)='./file0\x00', r1}, 0x18) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000004c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000500)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000540)={r2, 0xf7}, 0x8) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000005c0)=0x14) sendmsg$inet(r3, &(0x7f0000000840)={&(0x7f0000000600)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000640)="7a52400afa44c78329915c3a51bfb4219ea6d74c0cfe306d9868424012b918fd402bd60cdbe0d2727a0aef087d0f431a17e9e7cfba91d5749de47fd15eccc4e74da5c9d5111ac79ed963d437f8c2999ae3fdf1ff8922d21c539478726b198cd476b7b0d92a4ea51b3f2c7e541b065c9cf9d91117e30ffa31fddea65eecc55e392b38abbdd91466a8719fac0f8ae445dd748b30647a0607f30bc5aee4e729c7be44cbaba46aaac6683900f465c9d3bfcb3adf2ad717b5ee86bb02ee8a363cc7fb0ef51738e0792ad942b084", 0xcb}], 0x1, &(0x7f0000000780)=[@ip_retopts={{0x40, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0x5f, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x121e719f}, {@empty, 0x100}, {@rand_addr=0x64010100, 0xbc}, {@private=0xa010102, 0xfc3a}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80}]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x32}}], 0x88}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r5, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x48, r6, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x6b}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x92}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xd}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008800}, 0x91) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000a40)='ns/uts\x00') sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, 0x1402, 0x400, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r8}]}, 0x30}}, 0x20000000) r9 = socket$inet6(0xa, 0x800, 0xf) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000c40)={r1, &(0x7f0000000b40)="d2ee33d9a1d38441a9aea331350ad4911eed89a3de0ffc9cf3d3928dbed463c353826a4db104779a890a6c80ce56443ee89799b8f7c4efc61eb094868d441bc87b08be0aabc2355d3da93aca6daa1d77a1fb125d2d2aad667df8b42aaee208aa9c3e0fcfeffabe53e811316832b3f3b64532c954a78d62ff8180c994e01c4003c491fe3547e6e37c1ba2fae29f286af68acb686e9978851b1151ff60d2dff4cb49badd526e6c05fce746a9758a160c48c0a36fc928aff949da1f76", &(0x7f0000000c00)=@udp6=r9}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0x4, &(0x7f0000000c80)=@raw=[@generic={0x3, 0x8, 0x0, 0x85c7, 0xd}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @generic={0x2, 0x4, 0x3, 0xd108}], &(0x7f0000000cc0)='GPL\x00', 0xb3d, 0xba, &(0x7f0000000d00)=""/186, 0x41000, 0x10, '\x00', r4, 0x0, r0, 0x8, &(0x7f0000000dc0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000e00)={0x1, 0x6, 0x3, 0x10}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000e40)=[{0x4, 0x3, 0x0, 0x2}, {0x0, 0x3, 0xb, 0x4}, {0x4, 0x4, 0x6, 0xd}, {0x0, 0x5, 0x2, 0xc}, {0x5, 0x2, 0xc, 0x9}, {0x4, 0x1, 0xc, 0x3}, {0x4, 0x5, 0x5, 0x8}, {0x5, 0x5, 0xe, 0xa}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001080)={@cgroup=0xffffffffffffffff, 0x13, 0x0, 0x2, &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001000)=[0x0, 0x0], &(0x7f0000001040)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001100)={0xadf, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000010c0)={@ifindex=r4, r10, 0x5, 0x20, r5, @void, @void, @void, @value=r13, r12}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r11, 0xc020f509, &(0x7f0000001180)={r5, 0xa764, 0x2, 0x4}) syz_genetlink_get_family_id$ethtool(&(0x7f0000001140), r14) r15 = accept4$nfc_llcp(r14, 0x0, &(0x7f00000011c0), 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000001200)={'veth1_to_team\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendto(r7, &(0x7f0000001240)="54b7264f96d15581084155e431f830860a2a7acc99c7e577e65ba6846b3deedf55daa24e92ea3057fff0c3e203a2c4e03f55696faf2638e32907e2ab0cf3f00a6e511e23c4c0543e8d5541a4735b375a40a9d60182bb8ffec74e3d0d31afc1e491241e9967c49590a48357e06b9d75b8ce269ac03ed68377c8011bd3d50972def4dc083aae", 0x85, 0x20040000, 0x0, 0x0) accept4$ax25(r14, &(0x7f0000001300)={{0x3, @rose}, [@remote, @remote, @bcast, @netrom, @default, @netrom, @netrom, @default]}, &(0x7f0000001380)=0x48, 0x0) r16 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000013c0), 0x1, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r16, 0xc0046686, &(0x7f0000001400)={0x2, 0x29, "cf7267f13ac4382ffdeb5d222e9b9951e03d68ec3d2872156eaa212dbe68658101a8a814e65f05f726"}) 2.256802263s ago: executing program 7 (id=4418): r0 = socket$inet6(0xa, 0xa, 0x3) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x4e20, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x88) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x3, 0x2, 0x104, 0x0, 0x0, {0xa, 0x0, 0x1}, ["", "", "", "", ""]}, 0x14}}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x81000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x10040011) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f00000027c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002780)={&(0x7f0000000380)={0x23f4, r3, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x76}, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x23d8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x70, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x64, 0x84, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xce}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x996}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x5, 0x1, @random="c8"}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0xa}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_LC={0x8, 0x5, 0xfffffffc}]}]}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x4858}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x2360, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xf7}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x9}, {0x8, 0x0, 0x400}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x22a4, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x45, 0x3, "5487d596fd7955749afc2a3f696041820e5f9d45c668ffd9b3c9cf92cf33eb96087e5bb3299a1c7f1c32d86221e0bf033c373fbe249dabac48e3d8d5f6eb3590c8"}, @NL80211_BAND_6GHZ={0x1004, 0x3, "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"}, @NL80211_BAND_6GHZ={0xda, 0x3, "4f752c2f87984a5c4517d7fa924b9a2d18b612cdd301aa6ffb532927d111c6f7db4193cb36992ec9d9b90192a06e588706d20f7757e525eb90f0d2e05a5e27c5b14b85bb112bdb666e8dcb848ab5d2ebbbb4942c7c91e25f2cc5991011ed7213774cdb9633b88e01ff8e5404e8d9462354a761f41e1a0eb9ae28d733c9120ba08f26485fc92c14a50c5be0cfb38fce136effa071dc5773a894358fc6156e7f398cb08e3530a104d34805e5d76596884344ad8fc939c29d2aa43a0297a63f1403acfbf8e277008da7104b140f6ed7d8b96634dba77bfa"}, @NL80211_BAND_5GHZ={0x1004, 0x1, "c5b5a3aa8a865aa6ae09a5e19d138db077d5cc529b943e369469ed713ad552643aa6228fbedf20ee625c5e49a2dffc15fef6efffb9ab59f3710a1dc60596ddc22f01cfebd72e631edfc22db25a98ae45caae3a62c90b6c48227509ba0b90f3de00e8e2dd2a17e60d017c21a388d5e0723f883da848ebf38d911b6ed98c471ef67b49743cb9f2b40f353a4436c92204e8d64fd1e660ecfe684ca82943bd867ed93ec23278d31d87a409c0fb2a1b30f9ab9aaa02509739c78cd6dcf8abfffff256921b5bdbaad2a931e54ddda9e96a1bd856238f37aa38a0046b9fa5f7fc5bb1987e04787291d5f94ba7e3ca2497effc141a5d6373ea56ae8307a7e5d197e31fd2e13cf9a983a10750d5b9d9fae7d53f909645a4fbed003059de2b3bd1739ce8cb986f7aebf3f6cc3d8aca5ae832240cab1c6ff8f37bea5db458d0a044e154ee27d916dcfb118703c875e77b9db8652941eef8b61512b45af18cf0511986b358f02d07568d9dd62b0bb07d0ae8e6b9b5c518928929f65956e03937720cef5c2154b5865e8c1e751a7a25db77b4f16441b04216778df3ccbf8711e0a93f89f24ad5fa9d46ad27f3b734027b7203fcbf191e48974a394be294de892fac8c1bee105409c170b49c1cf4d8b8b1436639cb837d0b6407168f3efe25c3c8ac0a6e837b2dc5c936068486cfd4bcfaa0a586505f9971c428cc1af2c91866b59d784c6e22c62726fef29932b578b01b4df12d77b2d262af4f67a82413e3a848626d30779c55ff157e30ab7c3561fbe3fe84d659744d6120b2bf9983c006ff28f4ff2235bbb3eb3172a5ef73ccd4b4e678b08ff6635dfeb1d0432fec2e7ec3a913967284b9eff692a2409b6d5a08fa31d2ee2d1463cfc5f95af221db0dbf759eee44bd381eef6c3b2247091648b83d988115ecec711f4aa585183778688c8443a17d4ace2671b212014ebb57ea9f4a3e9203d83837148434ff0fb9943bdaaa0c357d94f09e19062a74745032ef965babd23461fb604fdd466ab8a08faa85f4278bd0ad57c1ffc680a1c108434e346007fe752c736c517c97b097f282ee1b7ce63d5e2c042a9e5ca43dfbeaa196d3d862e0b9a84619bd712a77952b60bf8c54a9c74cf11fcd45eebd8afa395155f83186f24bd84b4ff2788e4d29684c80a100a0dafae088f2f252d993449493ce67e9c94c8bef1f49d6114ea45dfb9ef7d37c9ab80f93afc9459af75a54e5363d04379ca3fb6cb2154f349b8e9040ccc638333602458b15dffc3e40e54ee9ee189889cf862168cae43a5f642f9d3267cba189dddc6269db134a3627a0969f3a40de7300e15ae373101569682713021648768f9b5819b73029651bdbc19ce6e4a0ec58b4f41c3749b5b6ac90546acea61229cdcdb8c190825016d53cd2892dbb09d0616cdb7c34ef0804153d0d948dc8cb5f1409468868764867eec244d88aaab7f197efe93a1e45237236a6de88dd7e80200285eefba7b99a227fe1df13b12039783d97100117749cd9aaf5d31939377718c1dd9061cf537915bcaf94d1af37203d9ba146604a402263b67aa6ad375dab351d864298fa12e671fd10413d90b116a8efc98ce58746822bf4ea5f0378f81ae54c990ad47208071465b3cc390c762dc11c32bbd99fff62401df1ff7ed1a9f418c07ecfa956247ed06bd20a1f10fe3c8087018d6c58cd3912fc076acf83ceb90388869753df9c6207a70ba9c2815c1f43a7618a862d1affef5e76cde378f4a3158b47f8b154553922f2ced75e81165f4fc14fe3a5ae02a29bbb5a540a0196478e1302ea254b5b60ba16178bc9ec7767159ea70d1fc09f8bcd9ceed2fd6dc68561fdcd6d7d2abc5e2a9dab1a2ebbcd14dbccd5b94ff708087769e99a7fa35ca52d9fc968be58d97462594bb6dc5d876bd720bf53bdd43ca5f5ac6c4687549e539d23d9ff726575de7e08f475904fcd308497fe3febdf13cf579b74a56c9e503d6a51b7157d04558c70e97ee49855cef04b6b3fe5e21fc1fb7fa2b3dd34868d182e62f62c9b6291f1b51ab0369312a010dde20d09bec9a0fa8f1e0f3006bd08d2b81a3f10201b2112d30a565c4f06c0d2f1a02c820306f4ec97a2359cea8e47955379aaa7159b0c173e2f44c4b6d2918c2ce51269617c39909986216c09c54db8e82c9db14c80c14cd9c25cf1f3454174ba8ff45dcd995c70ca223d2b8ddf34eef7b1f6c0c44fe905a7a95d8bb9e10db2de16f1e9a5c6e0730bbaf116e8d5cdf6e2a984974ad2471eddb33c72c73aad2c069a7a469cad60dd8aa067e043a429e780e16647bb341da394b8f145d0320b8fea8c0c131db789e71525e67c530fcfee330985f9e7a479364e397a88578dd7c87b0261b92df2a02e3666bc981dd0cde6b229fca0b53699d6b82e37848c6ca7cab3d0a85777db84f5a82fc15e6df1bdd52e6424a603d0b011f79f5f4dc1b7d3b0c281a72598679d4d07bd695ad44721a51f8baa00f40c0d09524b6e6fa860bc08b18534844615fe4d34302ec39560c6a94daab4bbbf85fa09fb6b91407c0801cd3feaba0a0a1ab9d448e12d2c74c1fe45fd4126483c6afc6317d6cb00aceafe7796583c7ceddf4fd8641d774103ad85223e250ea33efaff0265d9925098ff351db8318c2a454c75e3da380746745d813b400984a092f70e1bf3a12b30ccbb0c3f8527ef85085bc0eb3f828beeb297b86d8cb7fa8a3eda16b384c13f15372124abba08c3d4f0efacf19f38d3fa2bb3320568446a1f1107660388821c99f6a53ca406717dba75f1db8f832574bfd82bc044ed8dcf1bbcecba03fe9ca552ae3b21426c2ca40f85179f08ad6c45cceb11f43e017a972429edf30d3686a201afa2386c115e708c20b6088cac0528a3f53678eb6ba8b1d0e6d807b368e566c2d53670a48b5ab4728560808a280b9c97fd85dabae87ffadb252c2d8dde9f3d7c323494f0e629c32a4e315793064d72b58ff38051f140ff5218faf68d08a8e12d139539b207508e6f1f778b988987459c16e5b71e4956e3d9aa06994ea53729fb8bb6d23cca34675239ee68d83d31ccb90f01a903f07ce7b4d5f16067949d0e44d0bf4a96837ea09f501e4d216e76d728eb051806553f9f0da7380e8aa5dcab9b34d8e0399fe28b07cd72e5f1a3ef62603e1f8cbc866db938ee92956f48746a45f2e4baaad1faa0edd245d3cf28e419f9617d2a544bf1258bb3fe4eee4128f49d59c3da70406333c517ca1b2a73f31ec0d27c89ea960eff26c2b98dc0bbe38ab4109d002cbb13ff29ab6bcdafe32944d4b3930b9f08b001b8423571782a88595d4ed1359d3b8fa49242c379344a48f911c454dab37b9029b8365c3aaade75bc1b164cfc31d726c5466716482bbe366b778dda3f875dbb0c4ef5198187041ac8c2a418b3f7080360edf364dbe22fd2639dbd8afbcf7df17da4bc355280af093178a40e78405c2df8d59324cac4850bde12f255e288bb9221de9a5020b3fb01c670272022d038e169e45a1c1be9c2ac221ff9b613204324831dffdc8dd992cf1f2f1c4b5e11e375f3c194ae7ed5f2d3631cddaa514762cb84dfc8e9f9589168fa511a8529e45d0fc6167a60f0ee2615221f518cc942b4ab8344cc7ecda3ac908c14650e21905c13c874189e4811e530a362dfd0e1eeb98b2ebc15656fcb4c897bf210d5d577cbacbf86d0e13d1fe47055456e430f3717d3b4ce7f36d1afbaed4aa9b4fdc1eb12ec1d496f3fe8e6b00618b2518f3767da88f6ab1e6ecab01025f941adfe7ecae1112e91ae75a4a992a0b2c6477fd29b7703de861921f2ba816c4f96d2517ae2f8411bccd514c958cd21bfc06c245f6a805c7f11cf8ab2d26d6639f2a72c08ead84a01405625e9aa3b409edd55df3f6c271bbb14ebf36bc120eca8aed5ccf2de55aa76bc0c67b5cb0a5f882e30c64e4f8dcb2ac9b3f5161272001833dc2740d5c5036ad5fd160b68ce6990e557338c7e24fc1d6d4f89ea95cad1b056f731c6692540b251b7b26f71920ff1cb34f1caa7fe154cb707ad0e91854f7595469a7bb3e85a790101e93597b06582dd703a2a2169f13873851ecf7f47d80dae0849b3509b4a98cc989b6045a3d9ad1c253ee857f91212e003fdffa4ca3abb284f51bbf37bd9b2a217ec1eaed954f9acd4b89d877be2ca70c720edce32ebfe01977d1c0e2b1c96214a93553c027b7e14eaac05f67222fa522810bea7cd8a3dd50c6856369146a3e72817b57009d8dec7cce6b365a6e499f75ad7aceec4030343f509d748708809af79c6d59a94838a6538d19b70d0d24e32f15ee864d43cd72d3ca906ab7c86a1bded7eba9b1e51120a89beaffc67e6e105251ec9066994d9b8067904c4608ee0778a6b72ad42ecf0aa0d0b51098da85db22d448b0241b13e0d169203ae1df2d7e16585820064e86c533f98e2dd7f6d3941eafb42c7ffabb79d62991f87302f08b2d4750df69569f85e3bd28b68fb1f8f654a663e0cd630ee122a46cf446bc2862b7e4b0ee5d46d9d9bf9313f757faa95c80886b86a3755460a82aa3069343b699a520540d13e87316d44a7b534e1e0ea16571b42102a4d253311ab9818e2906b699111f76eaee63d8e6544d030bf88f1c156f2c8c59502198bc64bb19576d476476cfe813f8f76c94bc2c7a44e4b4f0e22d06b815707e3195cb7b3b394b2ec9f2446bbb6b58694fd44519c138707fc9770479f5127025744ba3691a987476927382a0fc8054707722f9745e62be01ba2cc6bf52c929aea9bc67600eaa7b40364691ae3109661cae06ed365e1907a47bb8ad67c98f5017d1c487a7f6ea7e0ea423757f663103090900ed0ef1843844e9d573bbf0ad7c746c0f090013bb0a8ae704717b9d8d11cc7fb2203f5eecd5ab7798ed98cdc94354a03e43574e528cff8ac97b23e1d69cfb932b744adcb9a5a6caeeeb9228587aa4b363ab6f8f7517e7aac83b1b861e6e9d7694a72fa02922af5706e6791b5c1a96a0f8ce021384c0a722a09ae74a1a21a8fafee4463d22c7841443d685accb32b8d7761c9dfd6d06ae27058b626a884d386f70409bcaa26b7ac3ec73405628440c36a0aaca7d3a5cdaae3bf88fc105affe01f10a0eaf74f6ce0608110d7fd8d084b4a67386e8d56b3e9ca1c934190c116244fd4971270bb79033556c70247e5d338f71d18da105e171b05a9099017b6471487a607297bd58ec2ef685521fccda509489787d4b378d164c627c3ae6c4cc4b8f0cefce20bc85806609e8ba3bb19835ad512b507a40cc03198df145c8d417da29d427c1752649509399793f4051d14865795516334fcc9621f8364c6181af1a3aa710c4161f2700edff6eaf0c53716d8e99491413e6d54b121eeba75778a2f460508be2096b7f6a03a328f66ded8f76199329875cd0667e1dc9642a82b0b3b5cfabc087f14b8b155f8c874f936d2d1f8ba09afa2d48db62216d0d82c74116a7d51cf4f7dd8932dbf6c39b251c2a65d196ce55b527f6d24e228cd7f91168c03d2960d2fddbcd9a5c20c9b87149898a4308106884ba723a718287c117eb8cd79d07d48ba2c61185baf8c4d485ab71a0e8bcebe38b0b1c33fb5fb1a771d2643d51738dfdc6d0094947431311df04007365f7f66cee689c0cbbd6f7b819c391de363c9a97796981e547bbc6f5bac518ebe99ea18c2eabf334fd740918df70435ada595278469a7b84a67ba5b426e9ee060b1933a7347f109a1e055f7b0c3c2e1fe12faed8a800f9925cd3ffa7b970aadd4332a3b7da44866afa238ec70add0ae922a18dedf640f277316cf95b9c730d657"}, @NL80211_BAND_5GHZ={0xd4, 0x1, "93325dd9aa81d5df20a93b432d03b234ff8227917d628eee1d7b790a31f087c9e20557c81aae54f3dc350d08b1492e7ef7af691f91274c45411a7b3460ed05ad27bb161ac2c130986c1f9c348bc332725ecfe5e05d827402f890e3db29f08dd12ec23f6f154959b4b7fb2d9b6fa82f001da3a0370bf175aa2f8e207e714d6ac4b37d5f91c472adb1572c863317793fa102c30113377dc9810c56da81e28388f5af3a5924c5ff736398a34640f1413ec04df63e4095b289c4a93ff53c1cfc38e2791d108f7d09afbb6398517f8f1c7f0f"}, @NL80211_BAND_6GHZ={0x9e, 0x3, "6cdd453cd424aff42e8ccfcbbeac545608d9874f7275a752cf09de70e939cbe076cbe435e9c069421460d9899299345cd1e2217a02e3a2f216f240a11254c49b460cf5f893d0d56f422088b0a4164cf3da181d648082c952873ebf823f8a57818c2cea3dcf40a0271635e6d88b0062395358809d14383cdf01be5f7db4df8ebbf8026a64daa6e32d98bf2981e6b6b989f6866d75e2b32aa7c821"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xfa6}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x3c, 0x84, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x800}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x81}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x10, 0x1, @random="6d1fb78d7223710579a2f301"}]}]}, @NL80211_ATTR_IE={0x4f, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @cf={0x4, 0x6, {0xa, 0xfa, 0x5, 0x5}}, @peer_mgmt={0x75, 0x16, {0x0, 0x5, @void, @val=0x17, @val="e4ab7989ca1145d3e9ccaa4143eddba2"}}, @chsw_timing={0x68, 0x4, {0x8, 0x9}}, @rann={0x7e, 0x15, {{0x0, 0x3}, 0xf, 0xc, @device_b, 0x8b7, 0xb855, 0x6bd5}}, @sec_chan_ofs={0x3e, 0x1}, @gcr_ga={0xbd, 0x6, @device_b}]}]}]}]}, 0x23f4}, 0x1, 0x0, 0x0, 0x840}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002840), r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000029c0)={'gretap0\x00', &(0x7f0000002880)={'sit0\x00', 0x0, 0x700, 0x10, 0xa03, 0x6, {{0x39, 0x4, 0x1, 0x2a, 0xe4, 0x66, 0x0, 0x6d, 0x29, 0x0, @multicast2, @private=0xa010100, {[@timestamp_prespec={0x44, 0x4c, 0xcc, 0x3, 0x6, [{@private=0xa010101, 0x4}, {@empty, 0xbc2}, {@broadcast, 0x9}, {@empty, 0x40}, {@dev={0xac, 0x14, 0x14, 0x19}, 0xe}, {@loopback, 0x2e900}, {@multicast1, 0x5}, {@broadcast, 0x8}, {@multicast1, 0x9}]}, @rr={0x7, 0xb, 0xa6, [@multicast2, @multicast2]}, @lsrr={0x83, 0x17, 0x9a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @multicast2, @broadcast, @multicast2]}, @timestamp_addr={0x44, 0x24, 0x9d, 0x1, 0x4, [{@local, 0xfffffffe}, {@local, 0x4}, {@loopback, 0x3}, {@remote, 0x4}]}, @lsrr={0x83, 0x17, 0xcd, [@loopback, @local, @dev={0xac, 0x14, 0x14, 0x16}, @loopback, @broadcast]}, @ssrr={0x89, 0x27, 0x41, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3f}, @broadcast, @empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @loopback, @multicast1]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000002b40)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a00)={0xf0, r5, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008840}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002bc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000002c80)={&(0x7f0000002b80), 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x24, r3, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000002d00), r1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000002e00)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d40)={0x54, r9, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xf649}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c080}, 0x4004000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002e80)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f00000030c0)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003080)={&(0x7f0000002ec0)={0x1b4, r5, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xf4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xda, 0x4, "673b7178c109b4d0ca22ce1f8e6c0b0b91d43dcb4e198e81db4943b0b2daabe0e7eb429081411917e40a77ec6ce3b756d34f88d2f3cf6afd6494d2e3758b24c99ffb5f3d2ff7e82e526348199000066b535b2b8330479eb98c913a2f7adf9f304dc216c55681619aab066e0afba9870992b7916a2e1499c248ce7db4f5d983652cfcee0d06e967ac58b34a7ba11614733ec9673771cce4fbc7d6b3f9e5f2015caeb5296aadc48ce2dd20867a64d69d0bf0dac7d1693789b4e715c1333a2f8c63295e649a5d369d72ec6180d377a719925c5bce1228bd"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x2008080}, 0x8004) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000003140), r1) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000003200)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003180)={0x2c, r11, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'dummy0\x00'}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003480)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000003500)={&(0x7f0000003240)="e99ab6f45b6e14d0fac81a25c6d3636acd918c33208df869e5357ed641b603bc5c71ca30154c01f31a050caa3dbf1c307265c5579bfa49ab78ea0ad9fa16f04f1a618f20423f85baddd03da1c45002f161b49a4a759fab891869548a63d233e1c0cd8d34fe75aceca2fa7a4138c6e4c2669842d6bdee2148c86fc5bf28d5dea8d2390b70eb344507724f71b9a977d6bbc5296e", &(0x7f0000003300)=""/187, &(0x7f00000033c0)="93a44fb766459be58feb920423d23892f49b3e82f65828a6233fd91033b22b965d10201cba0db14995dc38fbf3d071e64fc2adedf0084a15c9d99c79a01e5d404de342b689ff9eed74993b5b296a54375ad109d164ee344ca26ea8ca0d8ed28db8a32c12187be0dde4ff4f5cc48b44c48a9b4be3670abd7b17ed193c", &(0x7f0000003440)="d6651c76504a03aa09861e1e6e4f08d709168341ec", 0x4, r12}, 0x38) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000003580), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r13, &(0x7f0000003640)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003600)={&(0x7f00000035c0)={0x1c, r14, 0x900, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48801}, 0x8000) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r8, 0xf507, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000003740)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003700)={&(0x7f00000036c0)={0x28, r3, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x19}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4005}, 0x200000c0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000003780)={0x0, @aes256, 0x0, @desc4}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f00000037c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003840)={&(0x7f0000003800)={0x24, r5, 0xf04, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x240000e0}, 0x44000) 2.253799555s ago: executing program 1 (id=4419): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xac, 0x0, 0x40000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) shutdown(r3, 0x1) 2.114635441s ago: executing program 1 (id=4420): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0xffffffffffffffd9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) 2.027286282s ago: executing program 1 (id=4421): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r5, 0xb}, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24004004}, 0xc811) 1.532641872s ago: executing program 2 (id=4422): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x2000000, @private2, 0x1000000}}}, 0x88) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)=r7}, 0x20) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) socket$kcm(0x29, 0x5, 0x0) socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="1a00000000", @ANYRES32, @ANYRES32], 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r8 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(r8, 0x0, 0x40085) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x840, 0x0) 1.52025052s ago: executing program 6 (id=4423): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0}, 0x884) (async) socket$kcm(0x10, 0x3489d8b27ca8f569, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x10) unshare(0x48060000) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="17090000000000000000010000f804000700000000000800090000000000060002000000000008000a000000000008000b000300917408001900fbffffff14001f00fe8000000097000000000000000000bb983ca43a11da002908a190e75d612f5fbee458bf44c273399f6f29ba5bd5a8b5a1f133d5"], 0x58}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c000000df6de9f2a81f117a5b1fd1745f8d324c4c4dd284dfd36511554cb558ef675fdecdc3c35288a73b29db5700cead739c4d92ce1c236128ac259dcdd4a2cb840d5711", @ANYRES16=r3, @ANYBLOB="04002dbd7000fedbdf250600000006001c00090000000500120081000000050014000a000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40005) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x1, 0x1000}, 0x4) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) socket$kcm(0x2, 0x2, 0x2) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r4) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, 0x0, 0x0) (async) socket(0x23, 0x1, 0x1) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8}, 0x94) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, 0x0, 0x0) 1.459243929s ago: executing program 7 (id=4424): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000400)={@val={0x0, 0x6006}, @val={0x1, 0x5, 0x0, 0x2, 0x80, 0x3}, @ipv6=@gre_packet={0xe, 0x6, "5e4da1", 0x60, 0x2f, 0x1, @mcast1, @mcast1, {[], {{}, {}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x2, {{0x4, 0x1, 0x88, 0x2, 0x1, 0x2, 0x4, 0x5f}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xcd, 0x2, 0x0, 0x3, 0x4, 0x6}, 0x2, {0x5, 0xa, 0x0, 0xb, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "43d38af0fc83cef0f5fba0c9c0d8bbe268e17662081b5e860aa84005"}}}}}, 0x96) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000079db26f2ac42cc22c2d04e69682aa500", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x5, 0x0, 0x0, 0xffffff90}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000340)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x7, &(0x7f0000000180)=[{0x20, 0xff, 0x0, 0xfffff038}, {0x28, 0x8, 0xe, 0xffeff024}, {0x6, 0x10, 0x83, 0xfffffffd}, {0x3, 0x9, 0x9, 0xffffffff}, {0x8, 0xb3, 0x1, 0x6}, {0x1, 0x8, 0x5, 0xf}, {0x1, 0xb5, 0xfa, 0x4}]}, 0x41) (async) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r6, 0x10e, 0x8, &(0x7f0000000680)=""/203, &(0x7f0000000240)=0xcb) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) (async) socket(0x26, 0x4, 0x1) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) (async) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0xfdff) (async) socket$caif_stream(0x25, 0x1, 0x3) 1.458900451s ago: executing program 0 (id=4425): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x11, 0x80a, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000005600010000000000000000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}}, 0x0) 1.231749948s ago: executing program 0 (id=4426): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000e14010d2bbdf000fedbdf250800010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x9040}, 0xc010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe88000101ac1414bb00000000000000000000000000000000000000000a00000064000000000000000000008f8fa27a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac14143500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00170000"], 0x1a0}}, 0x0) syz_emit_ethernet(0x137a, &(0x7f00000038c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "feb957", 0x1344, 0x11, 0x1, @private1, @loopback, {[@hopopts={0x2f, 0x19, '\x00', [@generic={0x6, 0xc5, "2c61abc44da8e51f8443a83626d1f5661cfeece73f17ae2edecf2766100b33ea1f7c823c32160de3a0a0d21639bf75da579960d7757bb40a8d5ecfcfe4ada9dca6a5878df5a940042f7c909298aefb7d045adf7a6d8ce11907cb0f13df69fb6fb85c7cca1fa184b2677f9dcf846c5f8ef2957667722bf39f967f183483af91f42fd8ee7de4c1c5d8f7e7571c845a221f37038fb691d3a2a648b2e3b316d17aeda1c278cc2f0f44cb5152d4abde880fcd074799ccf91ec222935174025ab8c541f2586cdf64"}, @pad1]}, @routing={0x1be, 0x4, 0x2, 0x2, 0x0, [@dev={0xfe, 0x80, '\x00', 0x39}, @private0={0xfc, 0x0, '\x00', 0x1}]}, @fragment={0x33, 0x0, 0x9, 0x1, 0x0, 0x5, 0x66}, @hopopts={0x6, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x2}]}, @fragment={0x84, 0x0, 0x5, 0x0, 0x0, 0x7, 0x67}, @hopopts={0x2b, 0xa, '\x00', [@calipso={0x7, 0x50, {0x1, 0x12, 0x9, 0xffd5, [0x7, 0x2, 0x0, 0x1, 0xc7dc, 0x5, 0xc, 0x0, 0x40d]}}]}, @fragment={0x27, 0x0, 0x9, 0x0, 0x0, 0x0, 0x61}, @routing={0x2c, 0xc, 0x1, 0x29, 0x0, [@ipv4={'\x00', '\xff\xff', @local}, @private1, @mcast1, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x39}]}, @hopopts={0x3a, 0x21b, '\x00', [@generic={0x9, 0x1000, "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"}, @pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim, @generic={0x7, 0xbb, "7455ff80ff23d5f984bda6b1e0897a5853875990c2ddebfd5d6d1eb394de6f233aa96b8afde20f42a6fde44366ad57759c1a8a19b6c036d0fdfde04578a16727d87feb4f9c8bb7aecdab0b101807e485a93f9dd91961aff5b3638467ca1538991d337c18e3f9f71decbc1039b2fcea5e656fbbc6ec9581980ddde3e69631fe85925d9c7e40a479188a2fd0aeeee58be8bd1c0ff0c91ed8b96d4633b73406de3cb32823f0c296a6ae3ff9082b786ca41463055a69143410b9766eee"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}, @fragment={0x2d, 0x0, 0x9, 0x1, 0x0, 0x11, 0x67}], {0x4e23, 0x4e24, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x0, "14afafac4f756255c6ea2d16adbb53a1e452d42fdeac26cd6653c298c18b6837", "902fd8eba38ec38721f98e15d50cd635", {"b02b12438858f95b66428a330d83b246", "161c3dc060f3a7bac162f1df2cd629ed"}}}}}}}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0xfffffffffffffe00, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0107000000000200000004ff0f0000000800ac1e0001"], 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000800000000000000bd00000005000700130000000500184006000a0001000000050017000000002b06000a00ffff000005001900040000006600000069d1e936db061f4f"], 0x44}, 0x1, 0x0, 0x0, 0x18000}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)={0xffffffffffffff52, r9, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x40084) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x28b09, 0x1024}}, 0x20}}, 0x4000) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r12) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f00000010c0)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r16, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="cdfdffff", @ANYRES16=r6, @ANYBLOB="01002cbddf252b000001007770616e3400000000000200990afe68bdac4184bc6e23965bbf81013d00f1318ee6ae337ae8434471b200fdfa3ae7330916ef7695d69c391800"/87, @ANYRES32=r13, @ANYBLOB="0c0005000202aaaaaaaaaaaa08000200", @ANYRES32=r13, @ANYBLOB="0c00050000010000000000000a0001007770616e3300000008000200", @ANYRES32=r13, @ANYBLOB="0a0001007770616e330000000a0001007770616e340000000a0001007770616e31000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x10000000) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f0000000080)=ANY=[@ANYBLOB="2c0100000000000000010004010812b0"], 0x10) socketpair(0x1d, 0x2, 0x0, &(0x7f0000000780)) 1.17702917s ago: executing program 1 (id=4427): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000000140)) socket$inet6(0xa, 0xa, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x1e3500, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x1) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3000018000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010101, 0x11, 0x3, 'fo\x00', 0x8, 0x4, 0x71}, 0x2c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0x100000000000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd697a262d00383afefe8001000000000000000000000000aaff02000000000000000000000000000102009078000005f6620813f30009ff00ff010000000000000000000000000001ff02000000000000000000000000000184000c3865000000"], 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='bond0\x00', 0x10) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f00000001c0)=0xc796, 0x4) mmap(&(0x7f0000197000/0xf000)=nil, 0xf000, 0x3000004, 0x12, 0xffffffffffffffff, 0xed298000) socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) 1.066977455s ago: executing program 2 (id=4428): r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x20010, r0, 0x684ac000) (async) ioctl$FICLONE(r0, 0x40049409, r0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000080)={0x2e, 0x8001, 0x80, @broadcast, 'nr0\x00'}) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x1878, 0x10}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000100)={r0, 0x0, 0x9, 0x65d}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1a, 0x8, 0x5, 0xfa0, 0x10041, r2, 0x6, '\x00', 0x0, r3, 0x0, 0x2, 0x3}, 0x50) (async) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f00000001c0)) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r4, 0x8982, &(0x7f0000000200)) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000240)={0x0, 0x2d, "4a212b0665179dc885f4ca2744ea947a1870ea42a6faa4f77241b0817cb7d619e50f81aec4be085cef16cf326d"}, &(0x7f0000000280)=0x35) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000002c0)={r5, @in={{0x2, 0x4e22, @remote}}, 0x8, 0x8, 0x7ff, 0x8, 0x6}, &(0x7f0000000380)=0x98) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00'}) (async) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000400), &(0x7f0000000440)=0x4) (async) syz_80211_join_ibss(&(0x7f0000000480)='wlan1\x00', &(0x7f00000004c0)=@default_ap_ssid, 0x6, 0x1) (async) write$nci(r3, &(0x7f0000000500)=@NCI_OP_NFCEE_DISCOVER_RSP={0x2, 0x1, 0x2, 0x0, 0x6, {0x0, 0xb}}, 0x5) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffb}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000090) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000006c0)={r6, 0x3}, &(0x7f0000000700)=0x8) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), r3) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r8, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x1c}}, 0x10) (async) epoll_pwait(r3, &(0x7f0000000880)=[{}, {}, {}, {}, {}], 0x5, 0x1, &(0x7f00000008c0)={[0x4]}, 0x8) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000900)={r5, 0x3}, &(0x7f0000000940)=0x8) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r9, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000004}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r10, 0x300, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x880) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r9, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, r10, 0x400, 0x1000, 0x25dfdbff, {}, ["", "", ""]}, 0x14}}, 0x1) (async) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000bc0)=@routing={0xff, 0x8, 0x0, 0xe3, 0x0, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @local]}, 0x48) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x2f8, 0x1e0, 0xe8, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, &(0x7f0000000c40), {[{{@ipv6={@local, @dev={0xfe, 0x80, '\x00', 0x11}, [0xff000000, 0x1fe000000, 0x0, 0xff], [0xff, 0xffffffff, 0xff000000, 0xff000000], 'gretap0\x00', 'geneve1\x00', {}, {}, 0x0, 0x1, 0x6, 0x60}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x7, 0x8, {0x800}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0xe, "8949", 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0x8e, 0x3ff, 0x0, 0x0, "89be0ddd9c068fc1b06a54627966d1ef091059fc46f510fa3e87c34cf19a0a37bbc61a821e468dea59042ba39e7cdccbbb4e4f664e73fcae1089c55a8f1a15df"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 1.065313112s ago: executing program 7 (id=4429): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xd, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b9", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000007640)={0x0, 0x0, 0x0}, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r3, &(0x7f00000002c0)="17", 0x1, 0x804, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x7}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000240)={r4, 0xfff9, 0x8, [0x1ff, 0x8000, 0x1ff, 0x4, 0x6, 0xffff, 0x7f, 0xb]}, &(0x7f0000000280)=0x18) sendmmsg$inet6(r2, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="df", 0x1}], 0x1}}], 0x1, 0x24088804) shutdown(r2, 0x1) getsockopt$bt_hci(r2, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000002010100000000000000000a00000004000380300002802c00018014000300fc00000000000000000000000000002014000400ff02"], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be0044112f"], 0xfdef) 980.203331ms ago: executing program 2 (id=4430): socket(0x11, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x1d, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = socket(0xa, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRESHEX=r0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2d5f290a9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d676f4ffaa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ddb7d681000000140000800d000000c606f93f6b8199f926000000000000"], 0xe0}], 0x1, 0x0, 0x0, 0x20000010}, 0x40040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) unshare(0x2020400) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x20000000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r7, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r6], 0x68}}, 0x0) 336.340744ms ago: executing program 1 (id=4431): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28) unshare(0x2c020400) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r4, 0x1000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x101, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket(0xa, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x8, 0x1, 0x85}]}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000400)={0x1, {{0x2, 0x4e21, @local}}}, 0x88) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0, 0x1}, 0x8) sendto$inet6(r5, &(0x7f0000000040)='\x00', 0x1, 0x8044004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto]}}, &(0x7f00000005c0)=""/240, 0x32, 0xf0, 0x1}, 0x28) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000540)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x1}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000006c0)={r7, 0x3, 0x10000, 0x6, 0x2, 0x7, 0x0, 0x8, {r8, @in6={{0xa, 0x4e20, 0x5, @remote, 0xfffffffe}}, 0x800000, 0x5, 0xd652, 0x3, 0x100}}, &(0x7f0000000780)=0xb0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r9, 0x28, 0x6, &(0x7f0000000140)={0x0, 0xea60}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000001010300000000000000000002000006cc719a87e242477bbbcd11a8879066a54a4b8a433dcd87acfba400a2691b388316ef348ef8d9c79f4b4dd292457e9733a2050000001d3d7671d08644f3367b5ced2a25e4f0f22a18d833f110ca2fe1265d8681045ac9883b8f6ed9f687"], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) 159.291042ms ago: executing program 2 (id=4432): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x42, 0x0, &(0x7f0000000180)) (async) bind$alg(r0, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) (async) accept4(r0, 0x0, 0x0, 0x800) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x8, 0x8, 0x0, 0x1, 0x4cfb}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x29) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x70bd29, 0x25dfdbfb, {0xa, 0x0, 0x80, 0x0, 0x0, 0x9}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040001}, 0x4010) (async) write(r2, &(0x7f0000000400)="6fc9c09a2fb444ca4442d2dff8bf37be99911688e6e50812620eddbb94f0a3f1fa9120711ae3ed3c8da018803a59bd082383233e8ee0574f495b2447340336652ef972dd6e6d00", 0x47) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000005000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0x9}, 0x50) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r7], 0x24}}, 0x0) 158.245046ms ago: executing program 0 (id=4433): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) unshare(0x62040200) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0xf0, 0x8, 0x2}, 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000480), &(0x7f0000000280)=@udp=r5, 0x1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r4, &(0x7f0000000380), 0x0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016004163d25a80648c2594f91d24fc60", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@alu={0x7, 0x0, 0x8, 0x0, 0x0, 0x10}]}, &(0x7f0000000540)='GPL\x00', 0x7}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000005c0), 0x0) accept4(r0, 0x0, 0x0, 0x0) (async) r8 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0xe3803000) socket$inet6(0xa, 0x2, 0x3a) (async) r10 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @loopback, 0x9}, 0x1c) sendto$inet6(r10, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) (async) sendto$inet6(r10, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401}) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000240)='\x00'/10, 0xa}], 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x3, 0xfffffff9, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x40, 0x0, 0x8001}}) sendmsg$nl_route(r2, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@getnexthop={0x24, 0x6a, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20000080) sendmmsg$inet6(r8, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="dacd5189a3831e198991e875a5b0e2a0631aadffd82be4a44a532a5c78916a94945addab2ba680d45927b0ed8f9b9c9addff71fbc1052f219d7d30a17c4ec05172dad26489", 0x45}], 0x1}}], 0x1, 0x4000040) (async) sendmmsg$inet6(r8, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="dacd5189a3831e198991e875a5b0e2a0631aadffd82be4a44a532a5c78916a94945addab2ba680d45927b0ed8f9b9c9addff71fbc1052f219d7d30a17c4ec05172dad26489", 0x45}], 0x1}}], 0x1, 0x4000040) 0s ago: executing program 7 (id=4434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000280)="f4000900062b2c25fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000ad6e911b51818462", 0x2c}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x220, 0x700001b, 0x148, 0x220, 0x148, 0x2f8, 0x206, 0x240, 0x2f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x200, 0x220, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'ip6tnl0\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@set={{0x40}, {{0x0, [0x5, 0x4, 0x7, 0x2, 0x1], 0x1, 0x6}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xbc, 0x24, 0xf0b, 0x70bd29, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7f}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000001}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x400}]}]}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0xcf, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r0, 0x20, &(0x7f00000001c0)={&(0x7f0000000240)=""/77, 0x4d, 0x0, &(0x7f0000000800)=""/213, 0xd5}}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000002, 0x110, r9, 0x61473000) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r8, &(0x7f00000005c0)=ANY=[], 0xfdef) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r10, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x40000c4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$NFT_MSG_GETRULE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x4004014) kernel console output (not intermixed with test programs): batadv0: Interface activated: batadv_slave_0 [ 400.545826][T17993] __nla_validate_parse: 5 callbacks suppressed [ 400.545844][T17993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3080'. [ 400.577374][T17993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3080'. [ 400.596452][T17993] netlink: 'syz.0.3080': attribute type 4 has an invalid length. [ 400.597074][T17998] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3080'. [ 400.710302][T17723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.745039][ T3480] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.757340][ T3480] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.774892][ T3480] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.792676][ T3480] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.984443][T18014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3085'. [ 401.101622][T18009] lo speed is unknown, defaulting to 1000 [ 401.188340][ T3480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.199673][ T3480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.314169][ T3480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.323236][ T3480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.466058][T18021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3087'. [ 401.478846][T18021] netlink: 'syz.1.3087': attribute type 4 has an invalid length. [ 401.940746][T18029] lo speed is unknown, defaulting to 1000 [ 402.041460][ T5830] Bluetooth: hci2: command tx timeout [ 402.285286][T18043] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3093'. [ 402.301039][T18043] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3093'. [ 402.322083][T18043] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3093'. [ 402.334211][T18043] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3093'. [ 402.343795][T18043] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3093'. [ 403.067452][T18070] netlink: 'syz.2.3103': attribute type 21 has an invalid length. [ 403.138266][T18070] netlink: 'syz.2.3103': attribute type 21 has an invalid length. [ 403.794512][ T5836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 403.820376][ T5836] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 403.829177][ T5836] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 403.837303][ T5836] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 403.845033][ T5836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 403.980172][T18087] netlink: 'syz.2.3105': attribute type 1 has an invalid length. [ 404.008098][T18084] lo speed is unknown, defaulting to 1000 [ 404.357374][T18093] syzkaller1: entered promiscuous mode [ 404.385503][T18093] syzkaller1: entered allmulticast mode [ 404.537914][T18098] lo speed is unknown, defaulting to 1000 [ 404.672803][T18105] netlink: 'syz.2.3113': attribute type 11 has an invalid length. [ 404.952108][T18114] tipc: Started in network mode [ 404.958422][T18114] tipc: Node identity aea6f0f13891, cluster identity 4711 [ 404.967779][T18114] tipc: Enabled bearer , priority 0 [ 404.983552][T18114] syzkaller0: entered promiscuous mode [ 404.989744][T18114] syzkaller0: entered allmulticast mode [ 405.088991][T18114] tipc: Resetting bearer [ 405.119866][T18113] tipc: Resetting bearer [ 405.144974][T18113] tipc: Disabling bearer [ 405.522347][T18084] chnl_net:caif_netlink_parms(): no params data found [ 405.806821][T18140] __nla_validate_parse: 9 callbacks suppressed [ 405.806837][T18140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3120'. [ 405.882799][ T5830] Bluetooth: hci6: command tx timeout [ 405.895891][T18084] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.903090][T18084] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.911428][T18084] bridge_slave_0: entered allmulticast mode [ 405.920225][T18084] bridge_slave_0: entered promiscuous mode [ 405.926157][T18145] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3123'. [ 405.962734][T18084] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.970057][T18084] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.977935][T18084] bridge_slave_1: entered allmulticast mode [ 405.985775][T18084] bridge_slave_1: entered promiscuous mode [ 406.013024][T18145] pim6reg: entered allmulticast mode [ 406.027752][T18135] delete_channel: no stack [ 406.051525][T18148] pim6reg: left allmulticast mode [ 406.198505][T18153] netlink: 'syz.1.3124': attribute type 21 has an invalid length. [ 406.222671][T18084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.253981][T18153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3124'. [ 406.271835][T18084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.351440][T18153] FAULT_INJECTION: forcing a failure. [ 406.351440][T18153] name failslab, interval 1, probability 0, space 0, times 0 [ 406.377771][T18153] CPU: 1 UID: 0 PID: 18153 Comm: syz.1.3124 Not tainted syzkaller #0 PREEMPT(full) [ 406.377802][T18153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 406.377819][T18153] Call Trace: [ 406.377827][T18153] [ 406.377835][T18153] dump_stack_lvl+0x189/0x250 [ 406.377864][T18153] ? __pfx____ratelimit+0x10/0x10 [ 406.377891][T18153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.377910][T18153] ? __pfx__printk+0x10/0x10 [ 406.377934][T18153] ? __pfx___might_resched+0x10/0x10 [ 406.377963][T18153] should_fail_ex+0x414/0x560 [ 406.377995][T18153] should_failslab+0xa8/0x100 [ 406.378020][T18153] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 406.378040][T18153] ? __d_alloc+0x36/0x7a0 [ 406.378069][T18153] __d_alloc+0x36/0x7a0 [ 406.378098][T18153] d_alloc_parallel+0xe1/0x1610 [ 406.378123][T18153] ? __lock_acquire+0xab9/0xd20 [ 406.378159][T18153] ? __lock_acquire+0xab9/0xd20 [ 406.378186][T18153] ? __pfx_d_alloc_parallel+0x10/0x10 [ 406.378214][T18153] ? __raw_spin_lock_init+0x45/0x100 [ 406.378234][T18153] ? __init_waitqueue_head+0xa9/0x150 [ 406.378256][T18153] __lookup_slow+0x116/0x3d0 [ 406.378284][T18153] ? __pfx___lookup_slow+0x10/0x10 [ 406.378318][T18153] ? d_lookup+0x8a/0xa0 [ 406.378340][T18153] ? lookup_noperm+0x112/0x220 [ 406.378367][T18153] simple_start_creating+0xfd/0x1e0 [ 406.378389][T18153] ? __pfx_simple_start_creating+0x10/0x10 [ 406.378419][T18153] debugfs_start_creating+0x10f/0x180 [ 406.378441][T18153] __debugfs_create_file+0x79/0x4f0 [ 406.378466][T18153] debugfs_create_file_full+0x3f/0x60 [ 406.378487][T18153] ref_tracker_dir_debugfs+0x14e/0x270 [ 406.378505][T18153] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 406.378556][T18153] ? trace_kmalloc+0x1f/0xd0 [ 406.378571][T18153] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 406.378594][T18153] ? __raw_spin_lock_init+0x45/0x100 [ 406.378614][T18153] alloc_netdev_mqs+0x272/0x11b0 [ 406.378633][T18153] ? __pfx_vxlan_setup+0x10/0x10 [ 406.378660][T18153] rtnl_create_link+0x31f/0xd10 [ 406.378686][T18153] rtnl_newlink_create+0x25c/0xb00 [ 406.378715][T18153] ? __mutex_lock+0x5bb/0x1350 [ 406.378740][T18153] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 406.378767][T18153] ? __pfx___mutex_lock+0x10/0x10 [ 406.378793][T18153] ? full_name_hash+0x92/0xe0 [ 406.378831][T18153] rtnl_newlink+0x16e4/0x1c80 [ 406.378856][T18153] ? ____sys_sendmsg+0x52d/0x830 [ 406.378885][T18153] ? __pfx_rtnl_newlink+0x10/0x10 [ 406.378932][T18153] ? kasan_quarantine_put+0xdd/0x220 [ 406.378951][T18153] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.378975][T18153] ? nlmon_xmit+0xb0/0x100 [ 406.378994][T18153] ? kmem_cache_free+0x19b/0x690 [ 406.379023][T18153] ? __local_bh_enable_ip+0x12d/0x1c0 [ 406.379047][T18153] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.379066][T18153] ? __local_bh_enable_ip+0x12d/0x1c0 [ 406.379088][T18153] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 406.379115][T18153] ? __dev_queue_xmit+0x284/0x3740 [ 406.379136][T18153] ? __dev_queue_xmit+0x284/0x3740 [ 406.379154][T18153] ? __dev_queue_xmit+0x1bfb/0x3740 [ 406.379181][T18153] ? __lock_acquire+0xab9/0xd20 [ 406.379230][T18153] ? __pfx_rtnl_newlink+0x10/0x10 [ 406.379252][T18153] rtnetlink_rcv_msg+0x7cf/0xb70 [ 406.379278][T18153] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 406.379299][T18153] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 406.379319][T18153] ? ref_tracker_free+0x63a/0x7d0 [ 406.379337][T18153] ? __asan_memcpy+0x40/0x70 [ 406.379354][T18153] ? __pfx_ref_tracker_free+0x10/0x10 [ 406.379383][T18153] netlink_rcv_skb+0x208/0x470 [ 406.379409][T18153] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 406.379434][T18153] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 406.379470][T18153] ? netlink_deliver_tap+0x2e/0x1b0 [ 406.379503][T18153] netlink_unicast+0x82f/0x9e0 [ 406.379534][T18153] ? __pfx_netlink_unicast+0x10/0x10 [ 406.379557][T18153] ? netlink_sendmsg+0x642/0xb30 [ 406.379579][T18153] ? skb_put+0x11b/0x210 [ 406.379606][T18153] netlink_sendmsg+0x805/0xb30 [ 406.379640][T18153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.379668][T18153] ? aa_sock_msg_perm+0xf1/0x1d0 [ 406.379689][T18153] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 406.379711][T18153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.379736][T18153] __sock_sendmsg+0x21c/0x270 [ 406.379759][T18153] ____sys_sendmsg+0x52d/0x830 [ 406.379782][T18153] ? __pfx_____sys_sendmsg+0x10/0x10 [ 406.379824][T18153] ? import_iovec+0x74/0xa0 [ 406.379851][T18153] ___sys_sendmsg+0x21f/0x2a0 [ 406.379871][T18153] ? __pfx____sys_sendmsg+0x10/0x10 [ 406.379936][T18153] ? __might_fault+0xb0/0x130 [ 406.379960][T18153] __sys_sendmmsg+0x227/0x430 [ 406.379984][T18153] ? __pfx___sys_sendmmsg+0x10/0x10 [ 406.380011][T18153] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 406.380050][T18153] ? ksys_write+0x22a/0x250 [ 406.380072][T18153] ? __pfx_ksys_write+0x10/0x10 [ 406.380097][T18153] __x64_sys_sendmmsg+0xa0/0xc0 [ 406.380116][T18153] do_syscall_64+0xfa/0xfa0 [ 406.380132][T18153] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.380149][T18153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.380166][T18153] ? clear_bhb_loop+0x60/0xb0 [ 406.380187][T18153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.380203][T18153] RIP: 0033:0x7fb63c78efc9 [ 406.380220][T18153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.380235][T18153] RSP: 002b:00007fb63d6f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 406.380255][T18153] RAX: ffffffffffffffda RBX: 00007fb63c9e5fa0 RCX: 00007fb63c78efc9 [ 406.380269][T18153] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 406.380281][T18153] RBP: 00007fb63d6f4090 R08: 0000000000000000 R09: 0000000000000000 [ 406.380291][T18153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 406.380301][T18153] R13: 00007fb63c9e6038 R14: 00007fb63c9e5fa0 R15: 00007ffcadf473f8 [ 406.380335][T18153] [ 406.380947][T18153] netlink: 'syz.1.3124': attribute type 21 has an invalid length. [ 406.959140][T18153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3124'. [ 406.974906][T18084] team0: Port device team_slave_0 added [ 407.013815][T18084] team0: Port device team_slave_1 added [ 407.197133][T18084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.214397][T18084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.271553][T18084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.298083][T18084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.325787][T18084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.385737][T18084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.418574][T18167] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3128'. [ 407.573516][T18084] hsr_slave_0: entered promiscuous mode [ 407.588445][T18084] hsr_slave_1: entered promiscuous mode [ 407.608678][T18084] debugfs: 'hsr0' already exists in 'hsr' [ 407.614440][T18084] Cannot create hsr debugfs directory [ 407.776580][ T6815] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 407.813907][ T6815] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 407.872504][ T6815] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 407.898582][ T6815] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 407.956526][ T5830] Bluetooth: hci6: command tx timeout [ 408.179325][T18201] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3136'. [ 408.201536][T18084] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 408.256904][T18084] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 408.262156][T18207] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 408.438683][T18214] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3139'. [ 408.458835][T18214] netlink: 'syz.1.3139': attribute type 1 has an invalid length. [ 408.483769][T18214] netlink: 'syz.1.3139': attribute type 1 has an invalid length. [ 408.502571][T18084] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 408.527489][T18210] syzkaller0: entered promiscuous mode [ 408.532971][T18210] syzkaller0: entered allmulticast mode [ 408.612034][T18084] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 408.726546][T18230] netlink: 'syz.1.3145': attribute type 21 has an invalid length. [ 408.760269][T18230] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3145'. [ 408.774472][T18235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3147'. [ 408.822240][T18236] netlink: 'syz.6.3146': attribute type 12 has an invalid length. [ 408.965986][T18242] nbd: device at index 2 is going down [ 408.986877][T18245] netlink: 324 bytes leftover after parsing attributes in process `syz.1.3149'. [ 408.999604][T18084] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 409.011750][T18084] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 409.114488][T18084] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 409.146562][T18084] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 409.318328][ T5910] IPVS: starting estimator thread 0... [ 409.416423][T18273] IPVS: using max 28 ests per chain, 67200 per kthread [ 409.465970][T18084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.550538][T18084] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.603570][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.610774][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.643712][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.650956][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.724008][T18084] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 409.735938][T18084] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 410.036093][ T5830] Bluetooth: hci6: command tx timeout [ 410.323069][T18084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.419722][T18084] veth0_vlan: entered promiscuous mode [ 410.454794][T18084] veth1_vlan: entered promiscuous mode [ 410.547230][T18084] veth0_macvtap: entered promiscuous mode [ 410.571318][T18084] veth1_macvtap: entered promiscuous mode [ 410.579433][T18337] netlink: 'syz.7.3169': attribute type 58 has an invalid length. [ 410.589890][T18333] tipc: Enabled bearer , priority 0 [ 410.595960][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 410.610621][T18084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.621181][T18333] syzkaller0: entered promiscuous mode [ 410.627435][T18333] syzkaller0: entered allmulticast mode [ 410.647670][T18084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.666448][ T6815] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.677079][ T6815] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.724736][ T6815] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.733914][ T6815] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.768923][T18343] tipc: Resetting bearer [ 410.812546][T18332] tipc: Resetting bearer [ 410.837479][T18332] tipc: Disabling bearer [ 410.892316][ T6810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.910572][ T6810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.018628][ T6815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.044937][ T6815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.116217][T18360] __nla_validate_parse: 5 callbacks suppressed [ 411.116235][T18360] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3173'. [ 411.265935][T18365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3177'. [ 411.411935][T18374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3180'. [ 411.413233][T18372] tipc: Started in network mode [ 411.441589][T18372] tipc: Node identity eae091e4e766, cluster identity 4711 [ 411.450493][T18372] tipc: Enabled bearer , priority 0 [ 411.504290][T18375] syzkaller0: entered promiscuous mode [ 411.510938][T18375] syzkaller0: entered allmulticast mode [ 411.530620][T18380] xfrm1: entered allmulticast mode [ 411.551884][T18372] tipc: Resetting bearer [ 411.582421][T18371] tipc: Resetting bearer [ 411.613705][T18371] tipc: Disabling bearer [ 412.115759][ T5836] Bluetooth: hci6: command tx timeout [ 412.183070][T18407] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3189'. [ 412.298633][T18404] netlink: 'syz.6.3186': attribute type 12 has an invalid length. [ 412.878128][T18439] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3196'. [ 412.987240][T18431] bond0: (slave bond_slave_0): Releasing backup interface [ 413.003326][T18431] bond0: (slave bond_slave_1): Releasing backup interface [ 413.014119][ T5863] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 413.038123][T18431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.068486][T18431] bond2: (slave batadv1): Releasing backup interface [ 413.082685][T18431] bond5: (slave macvlan2): Releasing backup interface [ 413.162910][T18431] bond6: (slave gre1): Releasing backup interface [ 413.557618][T18467] lo speed is unknown, defaulting to 1000 [ 413.660802][T18477] netlink: 14679 bytes leftover after parsing attributes in process `syz.2.3204'. [ 413.797890][ T5910] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 414.016626][T18487] netlink: 'syz.2.3207': attribute type 10 has an invalid length. [ 414.136802][T18487] team0: Port device dummy0 added [ 414.197064][ T5836] Bluetooth: hci6: command 0x0405 tx timeout [ 414.641480][T18513] syzkaller0: entered promiscuous mode [ 414.676865][T18513] syzkaller0: entered allmulticast mode [ 414.698363][T18521] Bluetooth: hci0: unsupported parameter 512 [ 414.733710][T18521] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 414.777933][T18524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3218'. [ 414.789006][T18524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3218'. [ 414.818316][T18524] nbd: socks must be embedded in a SOCK_ITEM attr [ 416.285958][ T5836] Bluetooth: hci6: command 0x0405 tx timeout [ 416.701732][T18531] netlink: 'syz.0.3220': attribute type 1 has an invalid length. [ 416.715939][T18531] netlink: 'syz.0.3220': attribute type 1 has an invalid length. [ 416.743479][T18533] team_slave_0: entered promiscuous mode [ 416.749554][T18533] team_slave_1: entered promiscuous mode [ 416.755358][T18533] dummy0: entered promiscuous mode [ 416.762985][T18535] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3222'. [ 416.763477][T18533] macsec1: entered promiscuous mode [ 416.779260][T18533] team0: entered promiscuous mode [ 416.790762][T18533] team0: Device macsec1 is already an upper device of the team interface [ 416.815872][T18533] team0: left promiscuous mode [ 416.821665][T18533] team_slave_0: left promiscuous mode [ 416.827153][T18533] team_slave_1: left promiscuous mode [ 416.832732][T18533] dummy0: left promiscuous mode [ 417.383880][T18563] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3233'. [ 417.403643][T18570] netlink: 'syz.1.3235': attribute type 1 has an invalid length. [ 417.416347][T18570] netlink: 'syz.1.3235': attribute type 1 has an invalid length. [ 417.424092][T18570] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3235'. [ 417.511036][T18577] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3237'. [ 417.937525][T18602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3247'. [ 418.063967][T18603] netlink: 'syz.7.3245': attribute type 1 has an invalid length. [ 418.067769][T18607] sctp: [Deprecated]: syz.1.3248 (pid 18607) Use of int in max_burst socket option deprecated. [ 418.067769][T18607] Use struct sctp_assoc_value instead [ 418.072602][T18603] netlink: 140 bytes leftover after parsing attributes in process `syz.7.3245'. [ 418.097560][T18603] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3245'. [ 418.153970][T18611] Bluetooth: MGMT ver 1.23 [ 418.168773][T18611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3249'. [ 418.432805][T18627] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3253'. [ 418.821831][T18645] vlan3: entered promiscuous mode [ 418.827080][T18645] hsr_slave_1: entered promiscuous mode [ 418.832873][T18645] vlan3: entered allmulticast mode [ 418.846431][T18645] hsr_slave_1: entered allmulticast mode [ 419.169509][T18667] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3265'. [ 419.352529][T18676] netlink: 'syz.7.3268': attribute type 13 has an invalid length. [ 419.365705][T18676] netlink: 'syz.7.3268': attribute type 17 has an invalid length. [ 419.428372][T18676] gretap0: refused to change device tx_queue_len [ 419.435919][T18676] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 419.629434][T18694] Cannot find del_set index 1 as target [ 419.968597][T18714] syzkaller0: entered promiscuous mode [ 419.974102][T18714] syzkaller0: entered allmulticast mode [ 420.123154][ T3480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.146429][ T3480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.822291][T18732] dummy0: entered promiscuous mode [ 421.828259][T18732] dummy0: left promiscuous mode [ 421.950162][T18739] tap0: tun_chr_ioctl cmd 2147767520 [ 422.012825][T18744] FAULT_INJECTION: forcing a failure. [ 422.012825][T18744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.015658][T18746] __nla_validate_parse: 7 callbacks suppressed [ 422.015763][T18746] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3290'. [ 422.027148][T18744] CPU: 0 UID: 0 PID: 18744 Comm: syz.1.3288 Not tainted syzkaller #0 PREEMPT(full) [ 422.027171][T18744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 422.027182][T18744] Call Trace: [ 422.027189][T18744] [ 422.027197][T18744] dump_stack_lvl+0x189/0x250 [ 422.027221][T18744] ? __pfx____ratelimit+0x10/0x10 [ 422.027247][T18744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.027264][T18744] ? __pfx__printk+0x10/0x10 [ 422.027282][T18744] ? __might_fault+0xb0/0x130 [ 422.027311][T18744] should_fail_ex+0x414/0x560 [ 422.027340][T18744] _copy_from_user+0x2d/0xb0 [ 422.027363][T18744] ___sys_sendmsg+0x158/0x2a0 [ 422.027383][T18744] ? __pfx____sys_sendmsg+0x10/0x10 [ 422.027443][T18744] ? __fget_files+0x2a/0x420 [ 422.027462][T18744] ? __fget_files+0x3a0/0x420 [ 422.027493][T18744] __x64_sys_sendmsg+0x19b/0x260 [ 422.027512][T18744] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 422.027538][T18744] ? __pfx_ksys_write+0x10/0x10 [ 422.027560][T18744] ? do_syscall_64+0xbe/0xfa0 [ 422.027581][T18744] do_syscall_64+0xfa/0xfa0 [ 422.027596][T18744] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.027613][T18744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.027630][T18744] ? clear_bhb_loop+0x60/0xb0 [ 422.027650][T18744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.027666][T18744] RIP: 0033:0x7fb63c78efc9 [ 422.027682][T18744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.027697][T18744] RSP: 002b:00007fb63d6f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.027716][T18744] RAX: ffffffffffffffda RBX: 00007fb63c9e5fa0 RCX: 00007fb63c78efc9 [ 422.027729][T18744] RDX: 0000000024008040 RSI: 0000200000002880 RDI: 0000000000000005 [ 422.027740][T18744] RBP: 00007fb63d6f4090 R08: 0000000000000000 R09: 0000000000000000 [ 422.027750][T18744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.027760][T18744] R13: 00007fb63c9e6038 R14: 00007fb63c9e5fa0 R15: 00007ffcadf473f8 [ 422.027790][T18744] [ 422.100165][T18749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3290'. [ 422.211695][T18752] xt_l2tp: invalid flags combination: 8 [ 422.357031][T18758] tipc: Enabled bearer , priority 0 [ 422.357510][T18757] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3292'. [ 422.426491][T18764] syzkaller0: entered promiscuous mode [ 422.431995][T18764] syzkaller0: entered allmulticast mode [ 422.476562][T18756] tipc: Resetting bearer [ 422.524313][T18756] tipc: Disabling bearer [ 422.552616][T18767] netlink: 'syz.1.3295': attribute type 8 has an invalid length. [ 422.576945][T18767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 422.695102][T18769] lo speed is unknown, defaulting to 1000 [ 423.699545][T18801] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3307'. [ 423.720654][T18795] tipc: Enabled bearer , priority 0 [ 423.748903][T18795] syzkaller0: entered promiscuous mode [ 423.754397][T18795] syzkaller0: entered allmulticast mode [ 423.899610][T18806] tipc: Resetting bearer [ 423.932493][T18795] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3305'. [ 424.006089][T18793] tipc: Resetting bearer [ 424.018408][T18811] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3308'. [ 424.047009][T18793] tipc: Disabling bearer [ 424.228468][T18813] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 424.480984][T18821] tipc: Enabled bearer , priority 0 [ 424.502939][T18821] syzkaller0: entered promiscuous mode [ 424.522828][T18821] syzkaller0: entered allmulticast mode [ 424.696500][T18821] tipc: Resetting bearer [ 424.763373][T18819] tipc: Resetting bearer [ 424.846482][T18819] tipc: Disabling bearer [ 425.073952][T18843] vxcan0: entered allmulticast mode [ 425.099435][T18845] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3319'. [ 425.200251][T18843] siw: device registration error -23 [ 425.337496][T18861] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3320'. [ 425.480536][T18869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3323'. [ 425.760534][T18879] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 425.776556][T18876] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3327'. [ 426.069891][T18886] lo speed is unknown, defaulting to 1000 [ 426.892369][T18927] IPVS: Error connecting to the multicast addr [ 427.549797][T18953] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 427.601899][T18954] lo speed is unknown, defaulting to 1000 [ 427.838561][T18964] __nla_validate_parse: 4 callbacks suppressed [ 427.838578][T18964] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3350'. [ 427.898887][T18960] xt_NFQUEUE: number of total queues is 0 [ 428.011165][T18967] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3350'. [ 428.136598][T18973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3353'. [ 428.157410][T18973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3353'. [ 428.172705][T18973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3353'. [ 428.222837][T18978] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3355'. [ 428.557723][T18999] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3358'. [ 428.610885][T18998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3357'. [ 428.640551][T18998] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3357'. [ 428.663779][T19003] netlink: 'syz.2.3360': attribute type 1 has an invalid length. [ 428.674256][T19003] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3360'. [ 428.712126][ T6810] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.743381][ T6810] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.805773][ T6810] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.851584][T19003] syzkaller1: entered promiscuous mode [ 428.859228][T19003] syzkaller1: entered allmulticast mode [ 428.876727][ T6810] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.271841][T19032] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input7 [ 429.335307][T19028] erspan0: left allmulticast mode [ 429.341812][T19028] erspan0: left promiscuous mode [ 429.347456][T19028] bridge0: port 3(erspan0) entered disabled state [ 429.363704][T19028] bridge_slave_1: left allmulticast mode [ 429.386746][T19028] bridge_slave_1: left promiscuous mode [ 429.392632][T19028] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.407030][T19028] bridge_slave_0: left allmulticast mode [ 429.412685][T19028] bridge_slave_0: left promiscuous mode [ 429.419214][T19028] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.651590][T19033] 8021q: adding VLAN 0 to HW filter on device bond1 [ 429.674235][T19036] bond1: (slave vlan0): Error -34 calling dev_set_mtu [ 429.698352][T19039] syzkaller0: entered promiscuous mode [ 429.704007][T19039] syzkaller0: entered allmulticast mode [ 430.137640][T19061] netlink: 'syz.7.3373': attribute type 1 has an invalid length. [ 430.166449][T19061] netlink: 'syz.7.3373': attribute type 1 has an invalid length. [ 430.289825][T19061] bond1: entered promiscuous mode [ 430.296165][T19061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 430.370004][T19069] x_tables: duplicate entry at hook 2 [ 430.378191][T19066] 8021q: adding VLAN 0 to HW filter on device bond1 [ 430.399595][T19066] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 430.414714][T19066] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 430.427729][T19066] bond1: (slave gre1): Opening slave failed [ 430.518315][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 430.530368][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 430.539713][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 430.552746][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 430.561941][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 430.631946][ T2899] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 430.686962][T19075] lo speed is unknown, defaulting to 1000 [ 430.729303][ T2899] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 430.864675][ T2899] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 430.907969][T19090] netlink: 'syz.7.3380': attribute type 21 has an invalid length. [ 430.949267][ T3480] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.951042][T19090] netlink: 'syz.7.3380': attribute type 21 has an invalid length. [ 431.046786][ T2899] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 431.072980][ T3480] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.085785][ T3480] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.403221][T19112] netlink: 'syz.7.3384': attribute type 13 has an invalid length. [ 431.412005][T19112] netlink: 'syz.7.3384': attribute type 17 has an invalid length. [ 432.608194][ T5830] Bluetooth: hci3: command tx timeout [ 432.796858][ T3480] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.911475][T19117] __nla_validate_parse: 13 callbacks suppressed [ 432.911492][T19117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3385'. [ 432.984537][T19112] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 433.063894][T19114] lo speed is unknown, defaulting to 1000 [ 434.409640][ T2899] bond0 (unregistering): Released all slaves [ 434.512068][ T2899] bond1 (unregistering): Released all slaves [ 434.612131][ T2899] bond2 (unregistering): Released all slaves [ 434.624670][ T2899] bond3 (unregistering): Released all slaves [ 434.637262][ T2899] bond4 (unregistering): Released all slaves [ 434.678725][ T5830] Bluetooth: hci3: command tx timeout [ 434.751333][ T2899] bond5 (unregistering): Released all slaves [ 434.858781][ T2899] bond6 (unregistering): Released all slaves [ 434.962704][ T2899] bond7 (unregistering): Released all slaves [ 434.993034][T19120] lo speed is unknown, defaulting to 1000 [ 435.203111][ T2899] : left promiscuous mode [ 435.273742][T19167] xt_TPROXY: Can be used only with -p tcp or -p udp [ 435.290529][T19166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3393'. [ 435.320367][T19075] chnl_net:caif_netlink_parms(): no params data found [ 435.341396][ T2899] : left promiscuous mode [ 435.372632][T19170] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3393'. [ 435.508423][ T2899] tipc: Left network mode [ 435.512855][T19172] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3394'. [ 435.530888][T19172] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3394'. [ 435.585280][T19119] lo speed is unknown, defaulting to 1000 [ 435.646395][T19175] netlink: 'syz.2.3395': attribute type 4 has an invalid length. [ 435.823877][T19075] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.833273][T19075] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.843359][T19075] bridge_slave_0: entered allmulticast mode [ 435.851645][T19075] bridge_slave_0: entered promiscuous mode [ 436.112129][T19075] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.127515][T19075] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.135247][T19075] bridge_slave_1: entered allmulticast mode [ 436.156817][T19075] bridge_slave_1: entered promiscuous mode [ 436.427311][T19188] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3398'. [ 436.479689][T19075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.495916][T19075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.752718][T19075] team0: Port device team_slave_0 added [ 436.761737][ T5830] Bluetooth: hci3: command tx timeout [ 436.783120][T19075] team0: Port device team_slave_1 added [ 436.865060][T19201] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3403'. [ 436.965363][T19203] netlink: 'syz.7.3403': attribute type 9 has an invalid length. [ 436.973124][T19203] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3403'. [ 437.687670][T19200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.088326][T19203] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.096102][T19203] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.249828][T19203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.282224][T19203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.440426][T19075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.447852][T19075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.479676][T19075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.497534][T19075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.504599][T19075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.532465][T19075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.557177][T19204] pim6reg: entered allmulticast mode [ 438.622420][T19222] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3405'. [ 438.650186][ T12] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.670520][ T12] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.680510][ T12] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.691012][ T12] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.731944][ T12] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.757968][ T12] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.768778][ T12] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.780090][ T12] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.816211][T19225] IPv6: sit1: Disabled Multicast RS [ 438.836058][ T5830] Bluetooth: hci3: command tx timeout [ 438.858897][T19224] lo speed is unknown, defaulting to 1000 [ 438.903360][T19075] hsr_slave_0: entered promiscuous mode [ 438.935133][T19075] hsr_slave_1: entered promiscuous mode [ 438.956315][T19075] debugfs: 'hsr0' already exists in 'hsr' [ 438.962084][T19075] Cannot create hsr debugfs directory [ 439.128500][ T2899] IPVS: stop unused estimator thread 0... [ 439.477755][T19248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3413'. [ 439.541519][T19236] lo speed is unknown, defaulting to 1000 [ 439.656747][T19250] FAULT_INJECTION: forcing a failure. [ 439.656747][T19250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.671673][T19250] CPU: 0 UID: 0 PID: 19250 Comm: syz.2.3414 Not tainted syzkaller #0 PREEMPT(full) [ 439.671698][T19250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 439.671709][T19250] Call Trace: [ 439.671716][T19250] [ 439.671725][T19250] dump_stack_lvl+0x189/0x250 [ 439.671749][T19250] ? __pfx____ratelimit+0x10/0x10 [ 439.671775][T19250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.671794][T19250] ? __pfx__printk+0x10/0x10 [ 439.671825][T19250] should_fail_ex+0x414/0x560 [ 439.671857][T19250] _copy_to_user+0x31/0xb0 [ 439.671882][T19250] simple_read_from_buffer+0xe1/0x170 [ 439.671907][T19250] proc_fail_nth_read+0x1b3/0x220 [ 439.671937][T19250] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 439.671965][T19250] ? rw_verify_area+0x2a6/0x4d0 [ 439.671982][T19250] ? __lock_acquire+0xab9/0xd20 [ 439.672002][T19250] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 439.672028][T19250] vfs_read+0x200/0xa30 [ 439.672046][T19250] ? fdget_pos+0x247/0x320 [ 439.672070][T19250] ? __pfx___mutex_lock+0x10/0x10 [ 439.672090][T19250] ? __pfx_vfs_read+0x10/0x10 [ 439.672110][T19250] ? __fget_files+0x2a/0x420 [ 439.672135][T19250] ? __fget_files+0x3a0/0x420 [ 439.672154][T19250] ? __fget_files+0x2a/0x420 [ 439.672184][T19250] ksys_read+0x145/0x250 [ 439.672213][T19250] ? __pfx_ksys_read+0x10/0x10 [ 439.672236][T19250] ? do_syscall_64+0xbe/0xfa0 [ 439.672258][T19250] do_syscall_64+0xfa/0xfa0 [ 439.672274][T19250] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.672292][T19250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.672309][T19250] ? clear_bhb_loop+0x60/0xb0 [ 439.672331][T19250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.672348][T19250] RIP: 0033:0x7f389eb8d9dc [ 439.672364][T19250] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 439.672379][T19250] RSP: 002b:00007f389cdf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 439.672398][T19250] RAX: ffffffffffffffda RBX: 00007f389ede5fa0 RCX: 00007f389eb8d9dc [ 439.672412][T19250] RDX: 000000000000000f RSI: 00007f389cdf60a0 RDI: 000000000000000a [ 439.672423][T19250] RBP: 00007f389cdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 439.672434][T19250] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 439.672444][T19250] R13: 00007f389ede6038 R14: 00007f389ede5fa0 R15: 00007ffc88eca158 [ 439.672477][T19250] [ 440.242101][T19259] netlink: 'syz.0.3416': attribute type 12 has an invalid length. [ 440.782173][T19272] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3419'. [ 440.802844][T19075] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 440.836919][T19075] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 440.926136][T19075] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 440.956747][T19075] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 441.213530][T19075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.232177][T19294] syz_tun: entered allmulticast mode [ 441.248352][T19294] syz_tun: left allmulticast mode [ 441.278513][T19294] dvmrp1: entered allmulticast mode [ 441.328498][T19075] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.372234][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.379451][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.401435][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.408605][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.419655][T19294] lo speed is unknown, defaulting to 1000 [ 441.425597][T19301] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3427'. [ 441.725992][T19311] netlink: 'syz.7.3431': attribute type 21 has an invalid length. [ 441.733844][T19311] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3431'. [ 441.798236][T19311] netlink: 'syz.7.3431': attribute type 4 has an invalid length. [ 441.818718][T19311] netlink: 3 bytes leftover after parsing attributes in process `syz.7.3431'. [ 441.995117][T19075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.009030][T19324] netlink: 'syz.1.3433': attribute type 6 has an invalid length. [ 442.041730][T19329] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3435'. [ 442.088300][T19329] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3435'. [ 442.105406][T19329] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3435'. [ 442.136026][T19329] netlink: 'syz.2.3435': attribute type 6 has an invalid length. [ 442.165587][T19329] netlink: 'syz.2.3435': attribute type 4 has an invalid length. [ 442.438340][T19350] netlink: 'syz.1.3439': attribute type 1 has an invalid length. [ 442.507138][T19355] netlink: 'syz.7.3440': attribute type 1 has an invalid length. [ 442.634002][T19355] 8021q: adding VLAN 0 to HW filter on device bond2 [ 442.724439][T19362] rdma_op ffff88803e3589f0 conn xmit_rdma 0000000000000000 [ 442.776496][T19075] veth0_vlan: entered promiscuous mode [ 442.814489][T19075] veth1_vlan: entered promiscuous mode [ 442.947602][T19075] veth0_macvtap: entered promiscuous mode [ 442.979251][T19075] veth1_macvtap: entered promiscuous mode [ 443.060227][T19075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.099935][T19075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.139783][T19382] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 443.163556][T19382] batman_adv: batadv0: Adding interface: gretap1 [ 443.173113][T19382] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.206972][T19382] batman_adv: batadv0: Interface activated: gretap1 [ 443.246852][ T3480] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.267212][ T3480] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.293422][ T3480] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.308561][ T3480] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.327411][T19382] pim6reg1: entered promiscuous mode [ 443.332731][T19382] pim6reg1: entered allmulticast mode [ 443.360150][ T5915] IPVS: starting estimator thread 0... [ 443.399455][T19399] xt_l2tp: invalid flags combination: 0 [ 443.424894][T19399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3449'. [ 443.435401][T19389] tipc: Started in network mode [ 443.440283][T19389] tipc: Node identity cade385d1c4f, cluster identity 4711 [ 443.449884][T19389] tipc: Enabled bearer , priority 0 [ 443.457208][T19397] IPVS: using max 25 ests per chain, 60000 per kthread [ 443.484572][T19400] syzkaller0: entered promiscuous mode [ 443.497155][T19400] syzkaller0: entered allmulticast mode [ 443.518792][T19389] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 443.728006][T19387] tipc: Resetting bearer [ 443.778450][T19387] tipc: Disabling bearer [ 443.816463][ T3480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.824307][ T3480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.853017][T19418] netlink: 'syz.0.3454': attribute type 13 has an invalid length. [ 443.922597][T19414] lo speed is unknown, defaulting to 1000 [ 444.149033][T19418] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.156769][T19418] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.444770][T19418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.477206][T19418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.898580][T19418] batman_adv: batadv0: Interface deactivated: gretap1 [ 444.924707][T19411] lo speed is unknown, defaulting to 1000 [ 444.955869][ T3511] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.985847][ T3511] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.999471][ T3511] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.018710][ T3511] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.065935][ T3511] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.095990][ T3511] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.122979][ T3511] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.152460][ T3511] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.178997][T19441] netlink: 'syz.2.3458': attribute type 8 has an invalid length. [ 445.196072][T19441] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 445.213279][ T2899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.221317][ T2899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.421361][T19445] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3370'. [ 445.882650][T19449] team0: Port device dummy0 removed [ 445.913769][T19449] bridge_slave_0: left allmulticast mode [ 445.933140][T19449] bridge_slave_0: left promiscuous mode [ 445.948870][T19449] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.983635][T19449] bridge_slave_1: left allmulticast mode [ 445.995439][T19449] bridge_slave_1: left promiscuous mode [ 446.021617][T19449] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.064248][T19466] netlink: 'syz.7.3463': attribute type 1 has an invalid length. [ 446.088188][T19449] bond0: (slave bond_slave_0): Releasing backup interface [ 446.149266][T19449] bond0: (slave bond_slave_1): Releasing backup interface [ 446.241141][T19449] team0: Port device team_slave_0 removed [ 446.301439][T19449] team0: Port device team_slave_1 removed [ 446.317200][T19449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.327646][T19449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.341154][T19449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.350006][T19449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.380793][T19449] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 446.672254][T19469] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3464'. [ 446.695136][T19469] netlink: 35 bytes leftover after parsing attributes in process `syz.2.3464'. [ 447.329704][T19416] Set syz1 is full, maxelem 65536 reached [ 447.388655][T19489] netlink: 'syz.0.3471': attribute type 1 has an invalid length. [ 447.397765][T19489] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3471'. [ 447.458299][T19495] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3472'. [ 447.478406][T19492] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3469'. [ 447.511141][T19493] lo speed is unknown, defaulting to 1000 [ 447.732359][T19509] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3475'. [ 447.938685][T19517] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3479'. [ 447.988822][T19517] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 448.019764][T19517] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 448.034604][T19517] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 448.087416][T19523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.108921][T19523] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.135839][T19523] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 448.268894][T19523] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3480'. [ 448.282400][T19541] xt_CT: You must specify a L4 protocol and not use inversions on it [ 448.386109][T19550] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3486'. [ 448.563522][T19565] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20001 [ 450.082147][T19561] netlink: 'syz.2.3490': attribute type 12 has an invalid length. [ 450.231987][T19575] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 450.504924][T19589] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 450.511567][T19589] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 450.696936][T19592] __nla_validate_parse: 1 callbacks suppressed [ 450.696954][T19592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3496'. [ 450.731219][T19594] netlink: 'syz.2.3497': attribute type 1 has an invalid length. [ 450.747638][T19598] netlink: 'syz.2.3497': attribute type 1 has an invalid length. [ 450.763298][T19597] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3498'. [ 450.882633][T19602] bond1: (slave geneve2): making interface the new active one [ 450.897752][T19602] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 450.961913][ T3480] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 451.014815][ T3480] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 451.155866][ T3480] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 451.175405][ T3480] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 451.268026][T19612] tipc: Enabled bearer , priority 0 [ 451.298244][T19612] syzkaller0: entered promiscuous mode [ 451.308770][T19612] syzkaller0: entered allmulticast mode [ 451.332144][T19613] lo speed is unknown, defaulting to 1000 [ 451.351651][T19623] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3506'. [ 451.364418][T19623] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3506'. [ 451.366087][T19620] "syz.1.3504" (19620) uses obsolete ecb(arc4) skcipher [ 451.488106][T19626] tipc: Resetting bearer [ 451.538159][T19611] tipc: Resetting bearer [ 451.609686][T19611] tipc: Disabling bearer [ 451.624060][T19635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3507'. [ 451.693944][T19636] bond1: entered promiscuous mode [ 451.705423][T19636] bond1: entered allmulticast mode [ 451.711208][T19636] 8021q: adding VLAN 0 to HW filter on device bond1 [ 451.900919][T19648] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3512'. [ 452.013702][T19652] lo speed is unknown, defaulting to 1000 [ 452.437072][T19664] tap0: tun_chr_ioctl cmd 1074025673 [ 452.482687][T19668] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3517'. [ 452.730417][T19671] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3518'. [ 452.772440][T19671] netlink: 'syz.7.3518': attribute type 13 has an invalid length. [ 452.859212][T19675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3519'. [ 452.911861][T19677] hsr0: entered allmulticast mode [ 452.935571][T19677] hsr_slave_0: entered allmulticast mode [ 452.956733][T19677] hsr_slave_1: entered allmulticast mode [ 453.038446][T19677] netlink: 'syz.2.3520': attribute type 10 has an invalid length. [ 453.062052][T19677] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.093420][T19677] bond0: (slave team0): Enslaving as an active interface with an up link [ 453.132373][T19688] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3524'. [ 453.206805][T19693] netlink: 'syz.2.3526': attribute type 2 has an invalid length. [ 453.581082][T19709] vlan2: entered allmulticast mode [ 453.733253][T19714] lo speed is unknown, defaulting to 1000 [ 454.289288][T19741] lo speed is unknown, defaulting to 1000 [ 454.962528][T19759] lo speed is unknown, defaulting to 1000 [ 456.310117][T19805] __nla_validate_parse: 4 callbacks suppressed [ 456.310134][T19805] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3553'. [ 456.413048][T19803] bond3: entered promiscuous mode [ 456.428936][T19803] bond3: entered allmulticast mode [ 456.450519][T19803] 8021q: adding VLAN 0 to HW filter on device bond3 [ 456.583706][T19805] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3553'. [ 456.639005][T19826] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 457.091740][T19843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.129128][T19843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3563'. [ 457.342191][T19864] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3569'. [ 457.382458][T19862] lo speed is unknown, defaulting to 1000 [ 458.022836][T19879] netlink: 'syz.2.3571': attribute type 8 has an invalid length. [ 458.033837][T19879] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 458.213254][T19883] netlink: 148 bytes leftover after parsing attributes in process `syz.7.3572'. [ 458.471003][T19892] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3574'. [ 458.529467][T19888] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.543719][T19888] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.544209][T19894] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3576'. [ 458.554562][T19888] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 458.651561][T19892] lo speed is unknown, defaulting to 1000 [ 458.676063][T19894] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3576'. [ 458.743122][T19888] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.800066][T19888] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.838499][T19888] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 459.015769][T19888] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.035890][T19888] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.047264][T19888] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 459.060119][T19909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3579'. [ 459.088298][T19909] bridge_slave_1: left allmulticast mode [ 459.094156][T19909] bridge_slave_1: left promiscuous mode [ 459.101562][T19909] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.169936][T19909] bridge_slave_0: left allmulticast mode [ 459.175899][T19909] bridge_slave_0: left promiscuous mode [ 459.181864][T19909] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.193627][T19913] netlink: 'syz.7.3580': attribute type 21 has an invalid length. [ 459.202513][T19913] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3580'. [ 459.295939][T19912] netlink: 'syz.7.3580': attribute type 12 has an invalid length. [ 459.323729][T19912] netlink: 'syz.7.3580': attribute type 29 has an invalid length. [ 459.498530][T19920] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 459.498741][T19888] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.575476][T19888] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.597080][T19888] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 459.681409][T19928] netlink: 'syz.0.3583': attribute type 8 has an invalid length. [ 459.705610][T19928] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 460.242661][ T3480] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.252484][ T3480] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 460.269563][ T3480] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 460.387499][ T3480] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.396165][ T3480] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 460.404500][ T3480] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 460.553582][ T44] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.582188][ T44] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 460.610251][ T44] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 460.620476][T19959] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20003 [ 460.662704][ T44] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.695863][ T44] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 460.704156][ T44] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 461.227146][T19986] netlink: 'syz.1.3598': attribute type 3 has an invalid length. [ 461.367322][T19991] __nla_validate_parse: 7 callbacks suppressed [ 461.367340][T19991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3599'. [ 461.451880][T19994] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3600'. [ 461.560785][T19996] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3602'. [ 461.573926][T19998] netlink: 'syz.1.3601': attribute type 1 has an invalid length. [ 461.743578][T20005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3603'. [ 461.891192][T20011] netlink: 516 bytes leftover after parsing attributes in process `syz.0.3606'. [ 462.002829][T20014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3607'. [ 462.016571][T20017] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3609'. [ 462.026366][T20017] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 462.069220][T20014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3607'. [ 462.124995][T20022] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3611'. [ 462.146659][T20014] netlink: 'syz.0.3607': attribute type 20 has an invalid length. [ 462.208294][T20025] syz.1.3612 uses old SIOCAX25GETINFO [ 462.237279][T20025] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3612'. [ 462.338842][T20035] lo speed is unknown, defaulting to 1000 [ 462.890869][T20038] netlink: 'syz.6.3615': attribute type 1 has an invalid length. [ 462.988820][T20038] netlink: 'syz.6.3615': attribute type 17 has an invalid length. [ 463.027323][T20075] netlink: 'syz.1.3629': attribute type 1 has an invalid length. [ 463.048237][T20038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 463.068578][T20075] sctp: [Deprecated]: syz.1.3629 (pid 20075) Use of struct sctp_assoc_value in delayed_ack socket option. [ 463.068578][T20075] Use struct sctp_sack_info instead [ 463.618367][T20096] tipc: Enabled bearer , priority 0 [ 463.665625][T20096] syzkaller0: entered promiscuous mode [ 463.671132][T20096] syzkaller0: entered allmulticast mode [ 463.760357][T20096] tipc: Resetting bearer [ 463.769013][T20096] netlink: 'syz.7.3635': attribute type 12 has an invalid length. [ 463.784448][T20094] tipc: Resetting bearer [ 463.804359][T20094] tipc: Disabling bearer [ 463.817631][T20107] tipc: Started in network mode [ 463.822627][T20107] tipc: Node identity fee88a347d7c, cluster identity 4711 [ 463.830248][T20107] tipc: Enabled bearer , priority 0 [ 463.898073][T20107] tipc: Disabling bearer [ 463.948945][T20118] netlink: 'syz.7.3643': attribute type 10 has an invalid length. [ 463.992590][T20119] syzkaller0: entered promiscuous mode [ 464.016305][T20119] syzkaller0: entered allmulticast mode [ 464.163858][T20128] lo speed is unknown, defaulting to 1000 [ 464.229861][ T3480] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.249734][ T3480] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.271113][ T3480] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.294360][ T3480] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.751790][T20164] netlink: 'syz.0.3657': attribute type 1 has an invalid length. [ 465.059221][T20184] lo speed is unknown, defaulting to 1000 [ 466.000428][T20218] netlink: 'syz.7.3669': attribute type 1 has an invalid length. [ 466.226415][T20228] tipc: Enabled bearer , priority 0 [ 466.253295][T20230] tipc: Resetting bearer [ 466.311465][T20226] tipc: Disabling bearer [ 466.377508][T20236] __nla_validate_parse: 20 callbacks suppressed [ 466.377529][T20236] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3672'. [ 466.491958][T20239] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3674'. [ 466.611733][T20246] netlink: 'syz.2.3676': attribute type 4 has an invalid length. [ 466.804943][T20256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3680'. [ 466.878926][T20257] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3678'. [ 466.894648][T20257] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 466.914051][T20261] netlink: 'syz.6.3681': attribute type 39 has an invalid length. [ 467.182220][T20268] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3682'. [ 467.217362][T20268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3682'. [ 467.286829][T20272] netlink: 'syz.0.3684': attribute type 13 has an invalid length. [ 467.294687][T20272] netlink: 'syz.0.3684': attribute type 17 has an invalid length. [ 467.331905][T20272] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 467.516725][T20281] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3688'. [ 467.524389][T20280] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3687'. [ 467.651829][T20281] 8021q: VLANs not supported on ip6_vti0 [ 467.660161][T20285] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3689'. [ 468.107217][T20310] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3698'. [ 468.159598][T20310] sctp: [Deprecated]: syz.6.3698 (pid 20310) Use of int in maxseg socket option. [ 468.159598][T20310] Use struct sctp_assoc_value instead [ 468.389481][T20320] bond0: entered promiscuous mode [ 468.423425][T20320] bond_slave_0: entered promiscuous mode [ 468.439626][T20320] bond_slave_1: entered promiscuous mode [ 468.450695][T20320] batadv0: entered promiscuous mode [ 468.468348][T20320] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 468.727188][T20335] xt_ecn: cannot match TCP bits for non-tcp packets [ 468.797376][T20340] openvswitch: netlink: Message has 512 unknown bytes. [ 468.927853][T20345] netlink: 'syz.6.3707': attribute type 8 has an invalid length. [ 468.946082][T20345] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 469.465751][T20350] lo speed is unknown, defaulting to 1000 [ 469.757430][T20355] lo speed is unknown, defaulting to 1000 [ 470.052039][T20382] netlink: 'syz.0.3715': attribute type 1 has an invalid length. [ 470.060293][T20382] netlink: 'syz.0.3715': attribute type 2 has an invalid length. [ 470.197821][T20386] bridge0: entered promiscuous mode [ 470.203283][T20386] macsec1: entered promiscuous mode [ 470.227435][T20386] bridge0: port 3(macsec1) entered blocking state [ 470.235811][T20386] bridge0: port 3(macsec1) entered disabled state [ 470.249724][T20386] macsec1: entered allmulticast mode [ 470.256079][T20386] bridge0: entered allmulticast mode [ 470.271014][T20386] macsec1: left allmulticast mode [ 470.295293][T20386] bridge0: left allmulticast mode [ 470.303012][T20386] bridge0: left promiscuous mode [ 470.379016][T20389] tipc: Enabled bearer , priority 0 [ 470.396793][T20381] syzkaller0: entered promiscuous mode [ 470.402288][T20381] syzkaller0: entered allmulticast mode [ 470.560800][T20381] tipc: Resetting bearer [ 470.607968][T20380] tipc: Resetting bearer [ 470.642780][T20403] netlink: 'syz.2.3723': attribute type 13 has an invalid length. [ 470.652248][T20380] tipc: Disabling bearer [ 470.655450][T20403] netlink: 'syz.2.3723': attribute type 17 has an invalid length. [ 470.674785][T20402] tipc: Cannot configure node identity twice [ 470.955555][T20403] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 471.221672][T20408] lo speed is unknown, defaulting to 1000 [ 471.482115][T20433] netlink: 'syz.6.3727': attribute type 29 has an invalid length. [ 471.509475][T20433] netlink: 'syz.6.3727': attribute type 29 has an invalid length. [ 471.645055][T20430] lo speed is unknown, defaulting to 1000 [ 471.916437][T20442] tap0: tun_chr_ioctl cmd 1074025678 [ 471.934665][T20442] tap0: group set to 0 [ 472.133327][T20425] lo speed is unknown, defaulting to 1000 [ 472.887949][T20461] bridge0: port 3(erspan0) entered blocking state [ 472.905715][T20461] bridge0: port 3(erspan0) entered disabled state [ 472.923034][T20461] erspan0: entered allmulticast mode [ 473.012566][T20461] erspan0: entered promiscuous mode [ 473.249620][T20466] dvmrp0: entered allmulticast mode [ 474.205654][T20480] lo speed is unknown, defaulting to 1000 [ 474.294711][T20494] tipc: Enabled bearer , priority 0 [ 474.312578][T20494] syzkaller0: entered promiscuous mode [ 474.321994][T20494] syzkaller0: entered allmulticast mode [ 474.425063][T20494] tipc: Resetting bearer [ 474.466141][T20504] tipc: New replicast peer: 0.0.0.0 [ 474.472387][T20504] tipc: Enabled bearer , priority 10 [ 474.486625][T20504] sctp: [Deprecated]: syz.1.3744 (pid 20504) Use of int in max_burst socket option deprecated. [ 474.486625][T20504] Use struct sctp_assoc_value instead [ 474.512642][T20493] tipc: Resetting bearer [ 474.593273][T20493] tipc: Disabling bearer [ 474.707117][T20508] __nla_validate_parse: 6 callbacks suppressed [ 474.707136][T20508] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3746'. [ 474.756234][T20508] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3746'. [ 474.784003][T20509] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3746'. [ 474.840057][T20481] lo speed is unknown, defaulting to 1000 [ 475.409811][T20541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3752'. [ 475.429480][T20545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3754'. [ 475.480356][T20545] lo speed is unknown, defaulting to 1000 [ 475.585344][ T5915] tipc: Node number set to 2520248561 [ 475.705405][ T30] audit: type=1107 audit(1760778060.777:5): pid=20556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 475.832638][T20553] netlink: 'syz.1.3756': attribute type 12 has an invalid length. [ 475.866031][T20553] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.3756'. [ 476.083451][T20566] lo speed is unknown, defaulting to 1000 [ 476.369509][T20568] lo speed is unknown, defaulting to 1000 [ 476.964410][T20592] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3766'. [ 476.999581][T20595] netlink: 'syz.0.3767': attribute type 1 has an invalid length. [ 477.098329][T20595] 8021q: adding VLAN 0 to HW filter on device bond2 [ 477.227091][T20595] veth3: entered promiscuous mode [ 477.256445][T20595] bond2: (slave veth3): Enslaving as an active interface with a down link [ 477.287214][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.302629][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.578930][T20623] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3773'. [ 477.618128][T20619] lo speed is unknown, defaulting to 1000 [ 477.793792][T20616] lec:lec_atm_close: lec0: Shut down! [ 478.312767][T20653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3779'. [ 478.321954][T20653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3779'. [ 478.405535][T20657] tipc: Enabled bearer , priority 0 [ 478.415361][T20657] syzkaller0: entered promiscuous mode [ 478.420847][T20657] syzkaller0: entered allmulticast mode [ 478.683255][T20669] tipc: Resetting bearer [ 478.710435][T20656] tipc: Resetting bearer [ 478.792989][T20656] tipc: Disabling bearer [ 478.821278][T20673] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 478.947782][T20677] 8021q: adding VLAN 0 to HW filter on device bond3 [ 480.007423][T20731] __nla_validate_parse: 4 callbacks suppressed [ 480.007440][T20731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3799'. [ 480.099714][T20739] netlink: 'syz.6.3804': attribute type 10 has an invalid length. [ 480.156006][T20739] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.182009][T20739] team0: entered promiscuous mode [ 480.191971][T20739] team_slave_0: entered promiscuous mode [ 480.205621][T20739] team_slave_1: entered promiscuous mode [ 480.226805][T20739] bond0: (slave team0): Enslaving as an active interface with an up link [ 480.350814][T20749] netlink: 'syz.7.3807': attribute type 2 has an invalid length. [ 480.358727][T20749] netlink: 137592 bytes leftover after parsing attributes in process `syz.7.3807'. [ 480.444685][T20755] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3808'. [ 480.721157][T20755] team_slave_0 (unregistering): left promiscuous mode [ 480.735552][T20755] team0: Port device team_slave_0 removed [ 480.776608][T20769] lo speed is unknown, defaulting to 1000 [ 480.959805][T20780] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3815'. [ 481.129702][T20789] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3818'. [ 481.269730][T20787] smc: adding net device geneve0 with user defined pnetid SYZ0 [ 481.336217][ T2899] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 481.354351][ T2899] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 481.384185][T20793] lo speed is unknown, defaulting to 1000 [ 481.421326][T20803] Bluetooth: hci0: unsupported parameter 512 [ 481.429060][T20803] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 481.441503][T20806] Cannot find set identified by id 3 to match [ 481.448898][T20803] Bluetooth: hci0: unsupported parameter 512 [ 481.456411][T20803] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 481.465742][T20803] Bluetooth: hci0: unsupported parameter 512 [ 481.471977][T20803] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 481.480197][T20803] Bluetooth: hci0: unsupported parameter 512 [ 481.489340][T20803] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 481.510389][ T2899] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 481.525738][T20803] Bluetooth: hci0: unsupported parameter 512 [ 481.537978][ T2899] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 20001 - 0 [ 481.565964][T20803] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 481.578626][T20809] netlink: 'syz.6.3825': attribute type 13 has an invalid length. [ 481.587219][T20809] netlink: 'syz.6.3825': attribute type 17 has an invalid length. [ 481.595825][T20803] Bluetooth: hci0: unsupported parameter 512 [ 481.621679][T20803] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 481.629156][ T2899] netdevsim netdevsim4 eth5: set [1, 0] type 2 family 0 port 20001 - 0 [ 481.638725][ T2899] netdevsim netdevsim4 eth6: set [1, 0] type 2 family 0 port 20001 - 0 [ 481.648380][T20803] Bluetooth: hci0: unsupported parameter 512 [ 481.657012][T20803] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 481.676133][T20803] Bluetooth: hci0: unsupported parameter 512 [ 481.687093][T20803] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 481.694391][T20803] Bluetooth: hci0: unsupported parameter 512 [ 481.718622][T20803] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 481.792519][T20803] Bluetooth: hci0: unsupported parameter 512 [ 481.817782][T20803] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 481.835948][T20809] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 481.858244][T20803] Bluetooth: hci0: unsupported parameter 512 [ 481.864448][T20803] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 481.872119][T20803] Bluetooth: hci0: unsupported parameter 512 [ 481.873751][T20818] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3828'. [ 481.879229][T20803] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 481.902226][ T2899] netdevsim netdevsim4 eth7: set [1, 0] type 2 family 0 port 20001 - 0 [ 481.911264][T20803] Bluetooth: hci0: unsupported parameter 512 [ 481.917694][ T2899] netdevsim netdevsim4 eth8: set [1, 0] type 2 family 0 port 20001 - 0 [ 481.926413][T20803] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 481.929442][T20818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3828'. [ 481.953130][T20803] Bluetooth: hci0: unsupported parameter 512 [ 481.969040][T20803] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 481.996122][T20803] Bluetooth: hci0: unsupported parameter 512 [ 482.008089][T20803] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 482.009626][T20821] bond4: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 482.023928][T20803] Bluetooth: hci0: unsupported parameter 512 [ 482.045419][T20821] bond4 (unregistering): Released all slaves [ 482.056155][T20803] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 482.064165][T20803] Bluetooth: hci0: unsupported parameter 512 [ 482.070415][T20803] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 482.079093][T20803] Bluetooth: hci0: unsupported parameter 512 [ 482.085609][T20803] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 482.097091][T20803] Bluetooth: hci0: unsupported parameter 512 [ 482.103170][T20803] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 482.110414][T20803] Bluetooth: hci0: unsupported parameter 512 [ 482.117249][T20803] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 482.124358][T20803] Bluetooth: hci0: unsupported parameter 512 [ 482.130629][T20803] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 482.137857][T20803] Bluetooth: hci0: unsupported parameter 512 [ 482.143999][T20803] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 482.217548][T20803] Bluetooth: hci0: unsupported parameter 512 [ 482.227159][T20803] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 482.244452][T20803] Bluetooth: hci0: unsupported parameter 512 [ 482.279678][T20803] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 482.553163][T20833] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3834'. [ 483.050160][T20856] lo speed is unknown, defaulting to 1000 [ 483.866848][T20885] netlink: 1284 bytes leftover after parsing attributes in process `syz.6.3848'. [ 483.931750][T20885] lo speed is unknown, defaulting to 1000 [ 484.136976][T20894] gtp0: entered promiscuous mode [ 484.476257][T20911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3854'. [ 484.499267][T20911] syz.2.3854: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 484.534378][T20911] CPU: 0 UID: 0 PID: 20911 Comm: syz.2.3854 Not tainted syzkaller #0 PREEMPT(full) [ 484.534404][T20911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 484.534416][T20911] Call Trace: [ 484.534424][T20911] [ 484.534433][T20911] dump_stack_lvl+0x189/0x250 [ 484.534462][T20911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.534483][T20911] ? __pfx__printk+0x10/0x10 [ 484.534502][T20911] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 484.534523][T20911] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 484.534545][T20911] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 484.534568][T20911] warn_alloc+0x214/0x310 [ 484.534589][T20911] ? stack_depot_save_flags+0x40/0x860 [ 484.534608][T20911] ? __cgroup_account_cputime+0xe5/0x120 [ 484.534638][T20911] ? __pfx_warn_alloc+0x10/0x10 [ 484.534660][T20911] ? kasan_save_track+0x3e/0x80 [ 484.534679][T20911] ? __kasan_kmalloc+0x93/0xb0 [ 484.534701][T20911] ? xsk_setsockopt+0x4dc/0x8d0 [ 484.534724][T20911] ? do_sock_setsockopt+0x17c/0x1b0 [ 484.534749][T20911] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 484.534772][T20911] ? do_syscall_64+0xfa/0xfa0 [ 484.534789][T20911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.534818][T20911] __vmalloc_node_range_noprof+0x125/0x12d0 [ 484.534868][T20911] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 484.534893][T20911] ? __kasan_kmalloc+0x93/0xb0 [ 484.534920][T20911] vmalloc_user_noprof+0xad/0xf0 [ 484.534944][T20911] ? xskq_create+0xbf/0x170 [ 484.534962][T20911] xskq_create+0xbf/0x170 [ 484.534982][T20911] xsk_init_queue+0xb0/0x110 [ 484.535010][T20911] xsk_setsockopt+0x4dc/0x8d0 [ 484.535037][T20911] ? __pfx_xsk_setsockopt+0x10/0x10 [ 484.535064][T20911] ? __pfx_aa_sk_perm+0x10/0x10 [ 484.535085][T20911] ? aa_sock_opt_perm+0xff/0x1b0 [ 484.535118][T20911] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 484.535139][T20911] ? __pfx_xsk_setsockopt+0x10/0x10 [ 484.535164][T20911] do_sock_setsockopt+0x17c/0x1b0 [ 484.535193][T20911] __x64_sys_setsockopt+0x13f/0x1b0 [ 484.535225][T20911] do_syscall_64+0xfa/0xfa0 [ 484.535241][T20911] ? lockdep_hardirqs_on+0x9c/0x150 [ 484.535259][T20911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.535277][T20911] ? clear_bhb_loop+0x60/0xb0 [ 484.535300][T20911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.535317][T20911] RIP: 0033:0x7f389eb8efc9 [ 484.535334][T20911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.535351][T20911] RSP: 002b:00007f389cdb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 484.535371][T20911] RAX: ffffffffffffffda RBX: 00007f389ede6180 RCX: 00007f389eb8efc9 [ 484.535385][T20911] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000f [ 484.535396][T20911] RBP: 00007f389ec11f91 R08: 0000000000000004 R09: 0000000000000000 [ 484.535409][T20911] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.535421][T20911] R13: 00007f389ede6218 R14: 00007f389ede6180 R15: 00007ffc88eca158 [ 484.535456][T20911] [ 484.836290][T20911] Mem-Info: [ 484.839588][T20911] active_anon:7391 inactive_anon:0 isolated_anon:0 [ 484.839588][T20911] active_file:3433 inactive_file:40059 isolated_file:0 [ 484.839588][T20911] unevictable:768 dirty:197 writeback:0 [ 484.839588][T20911] slab_reclaimable:12913 slab_unreclaimable:239417 [ 484.839588][T20911] mapped:29389 shmem:1485 pagetables:1109 [ 484.839588][T20911] sec_pagetables:0 bounce:0 [ 484.839588][T20911] kernel_misc_reclaimable:0 [ 484.839588][T20911] free:1169136 free_pcp:13550 free_cma:0 [ 484.918306][T20911] Node 0 active_anon:29472kB inactive_anon:0kB active_file:13732kB inactive_file:160036kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117532kB dirty:796kB writeback:0kB shmem:4404kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13816kB pagetables:4284kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 484.961625][T20911] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 485.014944][T20911] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 485.052575][T20911] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 485.058643][T20911] Node 0 DMA32 free:765388kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29372kB inactive_anon:0kB active_file:13732kB inactive_file:160036kB unevictable:1536kB writepending:696kB zspages:0kB present:3129332kB managed:2561620kB mlocked:0kB bounce:0kB free_pcp:38076kB local_pcp:16164kB free_cma:0kB [ 485.096420][T20911] lowmem_reserve[]: 0 0 1 1 1 [ 485.102192][T20911] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 485.144117][T20911] lowmem_reserve[]: 0 0 0 0 0 [ 485.175118][T20911] Node 1 [ 485.175360][T20923] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 485.175914][T20911] Normal free:3895796kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15892kB local_pcp:6272kB free_cma:0kB [ 485.221779][T20911] lowmem_reserve[]: 0 0 0 0 0 [ 485.229497][T20911] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 485.252473][T20911] Node 0 DMA32: 1103*4kB (UME) 506*8kB (UME) 152*16kB (UM) 630*32kB (UM) 228*64kB (UME) 223*128kB (UME) 144*256kB (UME) 46*512kB (UM) 32*1024kB (UME) 6*2048kB (UME) 143*4096kB (M) = 765388kB [ 485.273017][T20911] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 485.299035][T20911] Node 1 Normal: 169*4kB (UE) 52*8kB (UME) 41*16kB (UME) 103*32kB (UME) 33*64kB (UME) 8*128kB (UME) 6*256kB (UME) 6*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3895796kB [ 485.317789][T20911] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 485.328632][T20911] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 485.339768][T20911] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 485.349917][T20911] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 485.359481][T20911] 44974 total pagecache pages [ 485.364286][T20911] 0 pages in swap cache [ 485.368521][T20911] Free swap = 124996kB [ 485.372686][T20911] Total swap = 124996kB [ 485.376974][T20911] 2097051 pages RAM [ 485.380785][T20911] 0 pages HighMem/MovableOnly [ 485.385767][T20911] 424556 pages reserved [ 485.390025][T20911] 0 pages cma reserved [ 485.435076][T20920] team0 (unregistering): Port device team_slave_0 removed [ 485.443768][T20920] team0 (unregistering): Port device team_slave_1 removed [ 485.706265][T20935] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3861'. [ 485.731481][T20933] lo speed is unknown, defaulting to 1000 [ 485.788420][T20938] xt_TCPMSS: Only works on TCP SYN packets [ 485.962665][T20946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3863'. [ 486.013499][T20946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3863'. [ 486.045646][T20946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3863'. [ 486.153614][T20957] netlink: 'syz.0.3863': attribute type 1 has an invalid length. [ 486.161606][T20957] netlink: 15 bytes leftover after parsing attributes in process `syz.0.3863'. [ 486.396315][T20967] netlink: 256 bytes leftover after parsing attributes in process `syz.7.3867'. [ 487.113093][T20986] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3872'. [ 487.139082][T20986] syzkaller0: entered promiscuous mode [ 487.144624][T20986] syzkaller0: entered allmulticast mode [ 487.615354][T20998] Bluetooth: hci0: invalid length 56, exp 2 for type 11 [ 487.637017][T21001] netlink: 'syz.7.3877': attribute type 13 has an invalid length. [ 487.655092][T21001] netlink: 'syz.7.3877': attribute type 17 has an invalid length. [ 487.741769][T21010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3880'. [ 487.771488][T21001] bridge0: port 3(erspan0) entered blocking state [ 487.778121][T21001] bridge0: port 3(erspan0) entered forwarding state [ 487.791505][T21001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.831245][T21001] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 487.865098][T21005] bridge1: entered promiscuous mode [ 487.871486][T21017] FAULT_INJECTION: forcing a failure. [ 487.871486][T21017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.912547][T21001] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3877'. [ 487.935713][T21017] CPU: 1 UID: 0 PID: 21017 Comm: syz.0.3881 Not tainted syzkaller #0 PREEMPT(full) [ 487.935739][T21017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 487.935750][T21017] Call Trace: [ 487.935757][T21017] [ 487.935765][T21017] dump_stack_lvl+0x189/0x250 [ 487.935789][T21017] ? __pfx____ratelimit+0x10/0x10 [ 487.935814][T21017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.935832][T21017] ? __pfx__printk+0x10/0x10 [ 487.935849][T21017] ? __might_fault+0xb0/0x130 [ 487.935879][T21017] should_fail_ex+0x414/0x560 [ 487.935909][T21017] _copy_from_user+0x2d/0xb0 [ 487.935932][T21017] ___sys_sendmsg+0x158/0x2a0 [ 487.935953][T21017] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.936008][T21017] ? __fget_files+0x2a/0x420 [ 487.936027][T21017] ? __fget_files+0x3a0/0x420 [ 487.936059][T21017] __sys_sendmmsg+0x227/0x430 [ 487.936081][T21017] ? __pfx___sys_sendmmsg+0x10/0x10 [ 487.936108][T21017] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 487.936145][T21017] ? ksys_write+0x22a/0x250 [ 487.936166][T21017] ? __pfx_ksys_write+0x10/0x10 [ 487.936190][T21017] __x64_sys_sendmmsg+0xa0/0xc0 [ 487.936209][T21017] do_syscall_64+0xfa/0xfa0 [ 487.936225][T21017] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.936243][T21017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.936260][T21017] ? clear_bhb_loop+0x60/0xb0 [ 487.936281][T21017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.936298][T21017] RIP: 0033:0x7ff18e78efc9 [ 487.936314][T21017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.936328][T21017] RSP: 002b:00007ff18f630038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 487.936347][T21017] RAX: ffffffffffffffda RBX: 00007ff18e9e5fa0 RCX: 00007ff18e78efc9 [ 487.936359][T21017] RDX: 0000000000000001 RSI: 0000200000001500 RDI: 0000000000000003 [ 487.936369][T21017] RBP: 00007ff18f630090 R08: 0000000000000000 R09: 0000000000000000 [ 487.936379][T21017] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 487.936389][T21017] R13: 00007ff18e9e6038 R14: 00007ff18e9e5fa0 R15: 00007ffec993aca8 [ 487.936419][T21017] [ 487.956686][T21006] lo speed is unknown, defaulting to 1000 [ 488.102052][T21015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.227685][T21026] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3884'. [ 488.236975][T21026] netlink: 'syz.6.3884': attribute type 1 has an invalid length. [ 488.648841][T21035] geneve2: entered promiscuous mode [ 488.963965][T21056] lo speed is unknown, defaulting to 1000 [ 489.436278][T21073] erspan0: left allmulticast mode [ 489.448498][T21073] erspan0: left promiscuous mode [ 489.454545][T21073] bridge0: port 3(erspan0) entered disabled state [ 489.469407][T21073] bridge_slave_1: left allmulticast mode [ 489.475463][T21073] bridge_slave_1: left promiscuous mode [ 489.481331][T21073] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.491607][T21073] bridge_slave_0: left allmulticast mode [ 489.497350][T21073] bridge_slave_0: left promiscuous mode [ 489.503139][T21073] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.107391][T21093] tipc: Enabled bearer , priority 0 [ 490.129603][T21093] syzkaller0: entered promiscuous mode [ 490.142401][T21093] syzkaller0: entered allmulticast mode [ 490.266498][T21103] FAULT_INJECTION: forcing a failure. [ 490.266498][T21103] name failslab, interval 1, probability 0, space 0, times 0 [ 490.281181][T21103] CPU: 0 UID: 0 PID: 21103 Comm: syz.0.3903 Not tainted syzkaller #0 PREEMPT(full) [ 490.281204][T21103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 490.281214][T21103] Call Trace: [ 490.281220][T21103] [ 490.281227][T21103] dump_stack_lvl+0x189/0x250 [ 490.281251][T21103] ? __pfx____ratelimit+0x10/0x10 [ 490.281276][T21103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.281292][T21103] ? __pfx__printk+0x10/0x10 [ 490.281314][T21103] ? __pfx___might_resched+0x10/0x10 [ 490.281334][T21103] ? fs_reclaim_acquire+0x7d/0x100 [ 490.281359][T21103] should_fail_ex+0x414/0x560 [ 490.281388][T21103] should_failslab+0xa8/0x100 [ 490.281410][T21103] __kmalloc_noprof+0xcb/0x7f0 [ 490.281427][T21103] ? sk_prot_alloc+0xe7/0x220 [ 490.281457][T21103] sk_prot_alloc+0xe7/0x220 [ 490.281478][T21103] ? sk_alloc+0x24/0x370 [ 490.281504][T21103] sk_alloc+0x3a/0x370 [ 490.281525][T21103] ? bpf_ctx_init+0x167/0x1d0 [ 490.281549][T21103] bpf_prog_test_run_skb+0x313/0x1550 [ 490.281580][T21103] ? __fget_files+0x2a/0x420 [ 490.281604][T21103] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 490.281627][T21103] bpf_prog_test_run+0x2c7/0x340 [ 490.281653][T21103] __sys_bpf+0x562/0x860 [ 490.281686][T21103] ? __pfx___sys_bpf+0x10/0x10 [ 490.281723][T21103] ? ksys_write+0x22a/0x250 [ 490.281745][T21103] ? __pfx_ksys_write+0x10/0x10 [ 490.281770][T21103] __x64_sys_bpf+0x7c/0x90 [ 490.281790][T21103] do_syscall_64+0xfa/0xfa0 [ 490.281807][T21103] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.281825][T21103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.281843][T21103] ? clear_bhb_loop+0x60/0xb0 [ 490.281863][T21103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.281881][T21103] RIP: 0033:0x7ff18e78efc9 [ 490.281897][T21103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.281911][T21103] RSP: 002b:00007ff18f630038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 490.281929][T21103] RAX: ffffffffffffffda RBX: 00007ff18e9e5fa0 RCX: 00007ff18e78efc9 [ 490.281942][T21103] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a [ 490.281953][T21103] RBP: 00007ff18f630090 R08: 0000000000000000 R09: 0000000000000000 [ 490.281964][T21103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.281974][T21103] R13: 00007ff18e9e6038 R14: 00007ff18e9e5fa0 R15: 00007ffec993aca8 [ 490.282004][T21103] [ 490.576673][T21092] tipc: Resetting bearer [ 490.610434][T21092] tipc: Disabling bearer [ 490.873854][T21113] __nla_validate_parse: 2 callbacks suppressed [ 490.873872][T21113] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3907'. [ 490.913775][T21113] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3907'. [ 490.993880][T21113] bond2: entered promiscuous mode [ 490.999541][T21113] 8021q: adding VLAN 0 to HW filter on device bond2 [ 491.021291][T21117] batman_adv: batadv0: Adding interface: vlan2 [ 491.027817][T21117] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.058280][T21117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.089447][T21117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.114014][T21117] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 491.130087][T21128] netlink: 'syz.6.3913': attribute type 13 has an invalid length. [ 491.142754][T21128] netlink: 'syz.6.3913': attribute type 17 has an invalid length. [ 491.188291][T21128] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 491.206686][T21125] lo speed is unknown, defaulting to 1000 [ 491.288695][T21135] FAULT_INJECTION: forcing a failure. [ 491.288695][T21135] name failslab, interval 1, probability 0, space 0, times 0 [ 491.315287][T21135] CPU: 1 UID: 0 PID: 21135 Comm: syz.2.3914 Not tainted syzkaller #0 PREEMPT(full) [ 491.315314][T21135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 491.315325][T21135] Call Trace: [ 491.315332][T21135] [ 491.315341][T21135] dump_stack_lvl+0x189/0x250 [ 491.315366][T21135] ? __pfx____ratelimit+0x10/0x10 [ 491.315392][T21135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.315410][T21135] ? __pfx__printk+0x10/0x10 [ 491.315435][T21135] ? __pfx___might_resched+0x10/0x10 [ 491.315457][T21135] ? fs_reclaim_acquire+0x7d/0x100 [ 491.315482][T21135] should_fail_ex+0x414/0x560 [ 491.315513][T21135] should_failslab+0xa8/0x100 [ 491.315537][T21135] __kmalloc_noprof+0xcb/0x7f0 [ 491.315555][T21135] ? security_sk_alloc+0x52/0x390 [ 491.315584][T21135] security_sk_alloc+0x52/0x390 [ 491.315608][T21135] sk_prot_alloc+0x101/0x220 [ 491.315637][T21135] ? sk_alloc+0x24/0x370 [ 491.315662][T21135] sk_alloc+0x3a/0x370 [ 491.315683][T21135] ? bpf_ctx_init+0x167/0x1d0 [ 491.315709][T21135] bpf_prog_test_run_skb+0x313/0x1550 [ 491.315741][T21135] ? __fget_files+0x2a/0x420 [ 491.315767][T21135] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 491.315790][T21135] bpf_prog_test_run+0x2c7/0x340 [ 491.315815][T21135] __sys_bpf+0x562/0x860 [ 491.315838][T21135] ? __pfx___sys_bpf+0x10/0x10 [ 491.315875][T21135] ? ksys_write+0x22a/0x250 [ 491.315896][T21135] ? __pfx_ksys_write+0x10/0x10 [ 491.315922][T21135] __x64_sys_bpf+0x7c/0x90 [ 491.315942][T21135] do_syscall_64+0xfa/0xfa0 [ 491.315959][T21135] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.315976][T21135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.315994][T21135] ? clear_bhb_loop+0x60/0xb0 [ 491.316015][T21135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.316032][T21135] RIP: 0033:0x7f389eb8efc9 [ 491.316048][T21135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.316064][T21135] RSP: 002b:00007f389cdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 491.316083][T21135] RAX: ffffffffffffffda RBX: 00007f389ede5fa0 RCX: 00007f389eb8efc9 [ 491.316096][T21135] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a [ 491.316108][T21135] RBP: 00007f389cdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 491.316119][T21135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.316129][T21135] R13: 00007f389ede6038 R14: 00007f389ede5fa0 R15: 00007ffc88eca158 [ 491.316162][T21135] [ 491.995998][T21162] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3917'. [ 492.224295][T21170] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3923'. [ 492.243561][T21173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3924'. [ 492.253211][T21170] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3923'. [ 492.323319][T21177] netlink: 'syz.0.3923': attribute type 1 has an invalid length. [ 492.331658][T21177] netlink: 'syz.0.3923': attribute type 1 has an invalid length. [ 492.359578][T21176] syzkaller1: entered promiscuous mode [ 492.366480][T21176] syzkaller1: entered allmulticast mode [ 492.377592][T21176] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3925'. [ 492.840158][T21191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3931'. [ 492.866143][T21191] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3931'. [ 492.879356][T21191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3931'. [ 493.032553][T21200] netlink: 'syz.6.3934': attribute type 5 has an invalid length. [ 493.557487][T21229] syzkaller1: entered promiscuous mode [ 493.563218][T21229] syzkaller1: entered allmulticast mode [ 493.780685][T21234] lo speed is unknown, defaulting to 1000 [ 494.324291][T21263] netlink: 'syz.6.3953': attribute type 1 has an invalid length. [ 494.333515][T21264] netlink: 'syz.2.3955': attribute type 1 has an invalid length. [ 494.347758][T21263] netlink: 'syz.6.3953': attribute type 2 has an invalid length. [ 494.613305][T21279] ip6gre1: entered allmulticast mode [ 494.674964][T21274] bond3: entered promiscuous mode [ 494.684294][T21274] 8021q: adding VLAN 0 to HW filter on device bond3 [ 494.812257][T21274] 8021q: adding VLAN 0 to HW filter on device bond3 [ 494.830604][T21274] bond3: (slave vcan0): The slave device specified does not support setting the MAC address [ 494.890767][T21274] bond3: (slave vcan0): Error -95 calling set_mac_address [ 495.022011][T21277] lo speed is unknown, defaulting to 1000 [ 495.905648][T21343] __nla_validate_parse: 8 callbacks suppressed [ 495.905666][T21343] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3972'. [ 496.079960][T21355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3972'. [ 496.126910][T21343] xt_CT: No such helper "syz1" [ 496.228465][T21356] lo speed is unknown, defaulting to 1000 [ 496.315026][T21363] netlink: 'syz.0.3976': attribute type 8 has an invalid length. [ 496.341451][T21363] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 496.370836][T21365] netlink: 9275 bytes leftover after parsing attributes in process `syz.7.3977'. [ 496.608575][T21369] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3978'. [ 496.803910][T21371] netlink: 'syz.2.3979': attribute type 4 has an invalid length. [ 496.866114][T21371] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3979'. [ 496.928286][T21371] : renamed from bond0 (while UP) [ 496.948512][T21354] lo speed is unknown, defaulting to 1000 [ 497.096204][T21383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3981'. [ 497.123884][T21381] tipc: Failed to remove unknown binding: 66,1,1/0:1339512282/1339512284 [ 497.135276][T21381] tipc: Failed to remove unknown binding: 66,1,1/0:1339512282/1339512284 [ 497.142211][T21383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.151134][T21381] tipc: Failed to remove unknown binding: 66,1,1/0:1339512282/1339512284 [ 497.167392][T21382] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3981'. [ 498.050436][T21419] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3993'. [ 498.076053][T21419] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3993'. [ 498.178701][T21425] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 498.256903][T21429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3997'. [ 498.436007][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 498.703744][T21450] netlink: 'syz.7.4003': attribute type 2 has an invalid length. [ 499.222688][T21475] : option downdelay: invalid value (18446744073709551615) [ 499.230641][T21475] : option downdelay: allowed values 0 - 2147483647 [ 499.241890][T21475]  (unregistering): Released all slaves [ 499.280878][T21482] tipc: Enabled bearer , priority 0 [ 499.290255][T21480] syzkaller1: entered promiscuous mode [ 499.299509][T21480] syzkaller1: entered allmulticast mode [ 499.321387][T21477] syzkaller0: entered promiscuous mode [ 499.331828][T21477] syzkaller0: entered allmulticast mode [ 499.392331][T21477] tipc: Resetting bearer [ 499.412660][T21476] tipc: Resetting bearer [ 499.449878][T21476] tipc: Disabling bearer [ 499.707182][T21498] delete_channel: no stack [ 499.807074][T21512] tipc: Failed to remove unknown binding: 66,1,1/0:3322966124/3322966126 [ 499.824317][T21512] tipc: Failed to remove unknown binding: 66,1,1/0:3322966124/3322966126 [ 499.833581][T21512] tipc: Failed to remove unknown binding: 66,1,1/0:3322966124/3322966126 [ 499.899033][T21512] batadv1: entered allmulticast mode [ 499.908444][T21512] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 500.142293][T21525] IPVS: set_ctl: invalid protocol: 1 100.1.1.1:20002 [ 500.365962][T21529] sctp: [Deprecated]: syz.7.4025 (pid 21529) Use of struct sctp_assoc_value in delayed_ack socket option. [ 500.365962][T21529] Use struct sctp_sack_info instead [ 500.383195][T21532] sctp: [Deprecated]: syz.7.4025 (pid 21532) Use of struct sctp_assoc_value in delayed_ack socket option. [ 500.383195][T21532] Use struct sctp_sack_info instead [ 500.572677][T21536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.132207][T21554] lo speed is unknown, defaulting to 1000 [ 501.308174][T21563] tipc: Enabling of bearer rejected, failed to enable media [ 501.877424][T21586] __nla_validate_parse: 5 callbacks suppressed [ 501.877442][T21586] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4040'. [ 501.895767][T21580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4038'. [ 501.995747][T21591] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4041'. [ 502.112304][T21593] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 502.150312][T21602] netlink: 'syz.1.4042': attribute type 1 has an invalid length. [ 502.164390][T21591] nbd: socks must be embedded in a SOCK_ITEM attr [ 502.176151][T21599] netlink: 'syz.1.4042': attribute type 1 has an invalid length. [ 502.187108][T21599] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4042'. [ 502.198528][T21602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.269897][T21599] bond0: (slave gretap2): making interface the new active one [ 502.287777][T21599] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 502.514261][T21614] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 502.604317][T21614] vlan2: entered promiscuous mode [ 502.609578][T21614] bond0: entered promiscuous mode [ 502.798400][T21621] xt_ecn: cannot match TCP bits for non-tcp packets [ 503.136785][T21624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4049'. [ 503.387566][T21628] vlan2: entered promiscuous mode [ 503.405233][T21628] bond0: entered promiscuous mode [ 503.410299][T21628] bond_slave_0: entered promiscuous mode [ 503.439009][T21628] bond_slave_1: entered promiscuous mode [ 503.565322][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 503.825976][T21655] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4060'. [ 503.892904][T21655] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4060'. [ 503.926302][T21655] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.119251][T21667] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4063'. [ 504.208196][T21668] tipc: Started in network mode [ 504.227780][T21668] tipc: Node identity f6e3434227e7, cluster identity 4711 [ 504.244962][T21668] tipc: Enabled bearer , priority 0 [ 504.274047][T21672] syzkaller0: entered promiscuous mode [ 504.282351][T21672] syzkaller0: entered allmulticast mode [ 504.324031][T21668] tipc: Resetting bearer [ 504.341554][T21666] tipc: Resetting bearer [ 504.393787][T21666] tipc: Disabling bearer [ 504.582213][T21679] netlink: 'syz.0.4065': attribute type 12 has an invalid length. [ 505.376038][T21711] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4075'. [ 505.501313][T21717] tipc: Cannot configure node identity twice [ 505.615108][T21716] Bluetooth: MGMT ver 1.23 [ 505.866378][T21738] lo speed is unknown, defaulting to 1000 [ 506.001331][T21745] tipc: Enabling of bearer rejected, failed to enable media [ 506.138049][T21747] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4082'. [ 506.729851][T21766] lo speed is unknown, defaulting to 1000 [ 507.048564][T21793] x_tables: duplicate underflow at hook 1 [ 507.133039][T21798] __nla_validate_parse: 3 callbacks suppressed [ 507.133057][T21798] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4097'. [ 507.150693][T21798] netlink: 'syz.1.4097': attribute type 10 has an invalid length. [ 507.204350][T21799] netlink: 'syz.1.4097': attribute type 10 has an invalid length. [ 507.210118][T21798] team0: Port device dummy0 added [ 507.272568][T21799] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 507.338163][T21803] netlink: 'syz.6.4099': attribute type 13 has an invalid length. [ 507.342553][T21799] team0: Failed to send options change via netlink (err -105) [ 507.363436][T21803] netlink: 'syz.6.4099': attribute type 17 has an invalid length. [ 507.374773][T21799] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 507.398877][T21799] team0: Port device dummy0 removed [ 507.421769][T21803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 507.636027][ T5830] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 507.645698][ T5830] Bluetooth: hci2: command 0x0401 tx timeout [ 508.238596][T21818] lo speed is unknown, defaulting to 1000 [ 508.246664][T21821] veth0: entered promiscuous mode [ 508.312848][T21825] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4105'. [ 508.416236][T21826] bridge0: port 1(batadv2) entered blocking state [ 508.435047][T21826] bridge0: port 1(batadv2) entered disabled state [ 508.465430][T21826] batadv2: entered allmulticast mode [ 508.502168][T21826] batadv2: entered promiscuous mode [ 508.540949][T21832] pimreg: entered allmulticast mode [ 508.549739][T21835] pimreg: left allmulticast mode [ 508.859989][ T3511] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 508.869608][ T3511] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 508.889461][T21844] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4111'. [ 508.928298][T21842] vlan3: entered allmulticast mode [ 508.933464][T21842] bridge_slave_0: entered allmulticast mode [ 509.128967][T21844] vlan0: entered allmulticast mode [ 509.134122][T21844] hsr0: entered allmulticast mode [ 509.152784][T21844] hsr_slave_0: entered allmulticast mode [ 509.174811][T21844] hsr_slave_1: entered allmulticast mode [ 509.184155][T21821] veth0: left promiscuous mode [ 509.661892][T21868] lo speed is unknown, defaulting to 1000 [ 510.433798][T21890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4122'. [ 510.871465][T21896] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 510.970624][ T6922] IPVS: starting estimator thread 0... [ 511.075910][T21901] IPVS: using max 24 ests per chain, 57600 per kthread [ 511.081922][T21905] lo speed is unknown, defaulting to 1000 [ 511.094654][T21900] netlink: 'syz.0.4125': attribute type 29 has an invalid length. [ 511.108327][T21900] netlink: 'syz.0.4125': attribute type 29 has an invalid length. [ 511.325630][T21913] bond3 (unregistering): Released all slaves [ 511.365794][T21916] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4129'. [ 511.648269][T21926] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4132'. [ 511.699722][T21928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4132'. [ 512.103968][T21945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4139'. [ 512.128090][T21948] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 512.189005][T21943] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 512.423590][T21952] bond3: option miimon: invalid value (18446744073709551607) [ 512.462168][T21952] bond3: option miimon: allowed values 0 - 2147483647 [ 512.488060][T21952] bond3 (unregistering): Released all slaves [ 512.663684][T21969] netlink: 'syz.1.4144': attribute type 1 has an invalid length. [ 512.686278][T21969] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4144'. [ 512.700524][T21969] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4144'. [ 512.879488][T21980] netlink: 'syz.0.4148': attribute type 1 has an invalid length. [ 513.098649][T21991] x_tables: duplicate underflow at hook 1 [ 513.404528][T22002] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4156'. [ 513.414518][T22002] IPVS: Unknown mcast interface: ipvlan1 [ 513.423026][T22002] netlink: 'syz.6.4156': attribute type 2 has an invalid length. [ 513.431187][T22002] netlink: 137592 bytes leftover after parsing attributes in process `syz.6.4156'. [ 513.540058][T22005] bond4: entered promiscuous mode [ 513.567483][T22005] bond4: entered allmulticast mode [ 513.604230][T22005] 8021q: adding VLAN 0 to HW filter on device bond4 [ 513.627627][T22003] nbd2: detected capacity change from 0 to 63 [ 513.655053][ T5830] block nbd2: Receive control failed (result -32) [ 513.770027][T22017] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4159'. [ 513.788290][T22025] netlink: 'syz.7.4160': attribute type 4 has an invalid length. [ 513.808611][T22017] netlink: 'syz.2.4159': attribute type 7 has an invalid length. [ 513.916528][T22032] vxcan0: tx address claim with dlc 0 [ 513.960627][T22034] vxcan0: tx address claim with dlc 0 [ 513.972980][T22037] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4164'. [ 514.048970][T22033] netlink: 'syz.7.4162': attribute type 1 has an invalid length. [ 514.106883][T22040] netlink: 88 bytes leftover after parsing attributes in process `syz.7.4162'. [ 514.201669][T22049] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4162'. [ 514.221493][T22033] bond4: entered promiscuous mode [ 514.227581][T22033] 8021q: adding VLAN 0 to HW filter on device bond4 [ 514.265720][T22033] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4162'. [ 514.770888][T22073] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4173'. [ 516.104170][T22103] lo speed is unknown, defaulting to 1000 [ 516.381981][T22102] lo speed is unknown, defaulting to 1000 [ 516.883936][T22141] xt_TCPMSS: Only works on TCP SYN packets [ 516.910698][T22141] netlink: 'syz.6.4194': attribute type 10 has an invalid length. [ 516.923354][T22142] hsr0: entered promiscuous mode [ 516.986716][T22141] dummy0: entered promiscuous mode [ 517.016559][T22141] team0: Port device dummy0 added [ 517.095019][T22141] netlink: 'syz.6.4194': attribute type 10 has an invalid length. [ 517.104638][T22142] hsr_slave_0: left promiscuous mode [ 517.116974][T22142] hsr_slave_1: left promiscuous mode [ 517.143280][T22142] hsr0 (unregistering): left promiscuous mode [ 517.180587][T22141] dummy0: left promiscuous mode [ 517.194302][T22141] team0: Port device dummy0 removed [ 517.207660][T22141] dummy0: entered promiscuous mode [ 517.213698][T22141] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 517.890024][T22173] tipc: Enabled bearer , priority 0 [ 517.898436][T22173] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 517.911842][T22173] tipc: Resetting bearer [ 517.958289][T22173] tipc: Disabling bearer [ 518.007405][T22177] lo speed is unknown, defaulting to 1000 [ 518.070327][T22183] __nla_validate_parse: 4 callbacks suppressed [ 518.070346][T22183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4210'. [ 518.429247][T22205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4215'. [ 518.926699][ T5840] Bluetooth: hci2: command 0x0401 tx timeout [ 518.977876][T22232] macsec1: entered promiscuous mode [ 518.983197][T22232] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode [ 518.990685][T22232] macsec1: entered allmulticast mode [ 518.996345][T22232] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode [ 519.040463][T22233] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 519.048311][T22235] netlink: 14212 bytes leftover after parsing attributes in process `syz.6.4226'. [ 519.143651][T22239] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4227'. [ 519.155124][T22239] tipc: Enabling of bearer rejected, failed to enable media [ 519.177609][T22244] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4227'. [ 519.186921][T22244] tipc: Enabling of bearer rejected, failed to enable media [ 519.463881][T22260] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4233'. [ 519.538213][T22265] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4234'. [ 519.567357][T22268] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4235'. [ 519.892093][T22284] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 520.239986][T22297] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4243'. [ 520.408865][T22303] netlink: 'syz.2.4246': attribute type 3 has an invalid length. [ 520.574615][T22315] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4250'. [ 520.585728][T22312] Bluetooth: MGMT ver 1.23 [ 520.833612][T22320] team0 (unregistering): Port device team_slave_0 removed [ 520.849149][T22320] team0 (unregistering): Port device team_slave_1 removed [ 520.902759][T22325] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 520.924553][T22325] bond5 (unregistering): Released all slaves [ 520.958871][T22322] lo speed is unknown, defaulting to 1000 [ 520.996314][T22344] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 522.607450][T22389] netlink: 'syz.6.4268': attribute type 6 has an invalid length. [ 522.615820][T22389] netlink: 'syz.6.4268': attribute type 5 has an invalid length. [ 523.088664][T22419] __nla_validate_parse: 4 callbacks suppressed [ 523.088681][T22419] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4277'. [ 523.261991][T22428] lo speed is unknown, defaulting to 1000 [ 523.330624][T22424] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4278'. [ 523.816382][T22445] erspan0: entered promiscuous mode [ 523.870892][T22443] lo speed is unknown, defaulting to 1000 [ 524.111103][T22455] tipc: Failed to remove unknown binding: 66,1,1/0:2432264009/2432264011 [ 524.170067][T22455] tipc: Failed to remove unknown binding: 66,1,1/0:2432264009/2432264011 [ 524.246457][T22455] tipc: Failed to remove unknown binding: 66,1,1/0:2432264009/2432264011 [ 524.283061][T22462] netlink: 'syz.6.4286': attribute type 1 has an invalid length. [ 524.292051][T22462] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4286'. [ 524.537584][T22447] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4283'. [ 524.668602][T22474] netlink: 676 bytes leftover after parsing attributes in process `syz.6.4291'. [ 524.692600][T22474] netlink: 676 bytes leftover after parsing attributes in process `syz.6.4291'. [ 525.150075][T22492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4298'. [ 525.215913][T22493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4298'. [ 525.498249][T22502] netlink: 'syz.0.4300': attribute type 11 has an invalid length. [ 525.657169][T22506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4302'. [ 525.842704][T22519] lo speed is unknown, defaulting to 1000 [ 526.120265][T22523] SET target dimension over the limit! [ 526.629906][T22547] lo speed is unknown, defaulting to 1000 [ 526.996595][T22556] lo speed is unknown, defaulting to 1000 [ 527.294409][T22574] netlink: 'syz.2.4320': attribute type 7 has an invalid length. [ 527.303406][T22574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4320'. [ 527.417900][T22574] bridge0: entered promiscuous mode [ 527.424290][T22574] bridge0: port 2(macvlan2) entered blocking state [ 527.482571][T22574] bridge0: port 2(macvlan2) entered disabled state [ 527.496115][T22574] macvlan2: entered allmulticast mode [ 527.501537][T22574] bridge0: entered allmulticast mode [ 527.540112][T22574] macvlan2: left allmulticast mode [ 527.558228][T22574] bridge0: left allmulticast mode [ 527.565175][T22574] bridge0: left promiscuous mode [ 528.678003][T22632] lo speed is unknown, defaulting to 1000 [ 528.978734][T22652] netlink: 'syz.0.4342': attribute type 29 has an invalid length. [ 529.022292][T22652] netlink: 'syz.0.4342': attribute type 29 has an invalid length. [ 529.090299][T22655] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 529.308520][T22670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4348'. [ 529.601602][T22685] netlink: 'syz.0.4352': attribute type 1 has an invalid length. [ 529.663421][T22685] netlink: 'syz.0.4352': attribute type 11 has an invalid length. [ 529.714649][T22685] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4352'. [ 529.758830][ T5932] hid-generic 0005:0007:0008.0001: unknown main item tag 0x0 [ 529.768675][ T5932] hid-generic 0005:0007:0008.0001: item fetching failed at offset 1/2 [ 529.794175][ T5932] hid-generic 0005:0007:0008.0001: probe with driver hid-generic failed with error -22 [ 529.872082][ T6815] bond0: (slave bond_slave_0): interface is now down [ 529.897733][ T6815] bond0: (slave bond_slave_1): interface is now down [ 529.939404][ T6815] bond0: now running without any active interface! [ 530.047411][T22702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4358'. [ 530.105932][T22702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4358'. [ 530.249267][T22721] netdevsim netdevsim7: Direct firmware load for þ failed with error -2 [ 530.303176][T22721] netdevsim netdevsim7: Falling back to sysfs fallback for: þ [ 530.326886][T22715] lo speed is unknown, defaulting to 1000 [ 530.620019][T22741] delete_channel: no stack [ 530.624719][T22741] delete_channel: no stack [ 530.958207][T22720] lo speed is unknown, defaulting to 1000 [ 531.312907][T22765] tipc: Enabled bearer , priority 0 [ 531.397855][T22771] syzkaller0: entered promiscuous mode [ 531.404253][T22771] syzkaller0: entered allmulticast mode [ 531.419306][T22736] lo speed is unknown, defaulting to 1000 [ 531.440993][T22765] tipc: Resetting bearer [ 531.452505][T22763] tipc: Resetting bearer [ 531.477196][T22763] tipc: Disabling bearer [ 531.763557][T22756] lo speed is unknown, defaulting to 1000 [ 531.838944][T22784] netlink: 'syz.2.4380': attribute type 12 has an invalid length. [ 532.121171][T22793] netlink: 'syz.2.4383': attribute type 2 has an invalid length. [ 532.129913][T22793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4383'. [ 532.289633][T22793] : entered promiscuous mode [ 532.379717][T22795] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 533.198474][T22814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4390'. [ 533.241903][T22814] macvtap1: entered promiscuous mode [ 533.247580][T22818] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4392'. [ 533.256865][T22814] mac80211_hwsim hwsim39 wlan1: entered promiscuous mode [ 533.293805][T22819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.320526][T22814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4390'. [ 533.384070][T22818] syzkaller1: entered promiscuous mode [ 533.398025][T22818] syzkaller1: entered allmulticast mode [ 533.816526][T22852] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 533.830931][T22852] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 533.857334][T22859] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4404'. [ 533.870874][T22857] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 533.881089][T22867] tap0: tun_chr_ioctl cmd 1074025694 [ 533.881994][T22852] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 534.380858][ T6815] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 535.282395][T22943] lo speed is unknown, defaulting to 1000 [ 535.349409][T22954] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4422'. [ 535.592977][T22959] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4426'. [ 535.862398][T22973] netlink: 'syz.1.4427': attribute type 1 has an invalid length. [ 535.876667][T22973] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4427'. [ 536.038263][T23000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4430'. [ 536.055008][T22979] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4429'. [ 536.070482][T22978] can: request_module (can-proto-0) failed. [ 536.199146][T22989] can: request_module (can-proto-0) failed. [ 536.210208][T22973] IPVS: Scheduler module ip_vs_sip not found [ 536.321048][T22997] rdma_rxe: rxe_newlink: failed to add lo [ 536.678738][ T31] INFO: task syz.5.2904:17287 blocked for more than 143 seconds. [ 536.695798][ T31] Not tainted syzkaller #0 [ 536.700786][ T31] Blocked by coredump. [ 536.735752][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 536.744637][ T31] task:syz.5.2904 state:D stack:27376 pid:17287 tgid:17287 ppid:6761 task_flags:0x40004c flags:0x00080000 [ 536.763405][ T31] Call Trace: [ 536.767557][ T31] [ 536.770552][ T31] __schedule+0x1798/0x4cc0 [ 536.775094][ T31] ? __lock_acquire+0xab9/0xd20 [ 536.782438][ T31] ? __lock_acquire+0xab9/0xd20 [ 536.787748][T23020] lo speed is unknown, defaulting to 1000 [ 536.805795][ T31] ? __pfx___schedule+0x10/0x10 [ 536.812569][ T31] ? schedule+0x91/0x360 [ 536.817145][ T31] schedule+0x165/0x360 [ 536.821826][ T31] schedule_preempt_disabled+0x13/0x30 [ 536.826004][T23026] xt_NFQUEUE: number of total queues is 0 [ 536.827946][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 536.839633][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 536.847655][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 536.855045][ T31] ? __lock_acquire+0xab9/0xd20 [ 536.861323][ T31] ? exit_mmap+0x286/0xb40 [ 536.875425][ T31] down_write+0x1ab/0x1f0 [ 536.880028][ T31] ? __pfx_down_write+0x10/0x10 [ 536.885049][ T31] exit_mmap+0x286/0xb40 [ 536.890400][ T31] ? uprobe_clear_state+0x20f/0x290 [ 536.895866][ T31] ? __pfx_exit_mmap+0x10/0x10 [ 536.907590][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 536.913487][ T31] ? __pfx_exit_aio+0x10/0x10 [ 536.920117][ T31] ? uprobe_clear_state+0x27c/0x290 [ 536.925696][ T31] __mmput+0x118/0x430 [ 536.929895][ T31] exit_mm+0x1da/0x2c0 [ 536.934164][ T31] ? __pfx_exit_mm+0x10/0x10 [ 536.939001][ T31] ? rcu_is_watching+0x15/0xb0 [ 536.943895][ T31] do_exit+0x648/0x2300 [ 536.948648][ T31] ? preempt_schedule+0xae/0xc0 [ 536.953700][ T31] ? preempt_schedule_common+0x83/0xd0 [ 536.959458][ T31] ? preempt_schedule+0xae/0xc0 [ 536.964760][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 536.970665][ T31] ? __pfx_do_exit+0x10/0x10 [ 536.976292][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 536.982407][ T31] do_group_exit+0x21c/0x2d0 [ 536.987656][ T31] __x64_sys_exit_group+0x3f/0x40 [ 536.992908][ T31] x64_sys_call+0x21f7/0x2200 [ 536.997906][ T31] do_syscall_64+0xfa/0xfa0 [ 537.002542][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.009336][ T31] ? asm_sysvec_call_function_single+0x1a/0x20 [ 537.015767][ T31] ? clear_bhb_loop+0x60/0xb0 [ 537.020757][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.026993][ T31] RIP: 0033:0x7f4a6058efc9 [ 537.031699][ T31] RSP: 002b:00007ffdd846fb58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 537.040648][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4a6058efc9 [ 537.049083][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 537.057230][ T31] RBP: 00007ffdd846fbbc R08: 00000018d846fc4f R09: 00000000000927c0 [ 537.065898][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000229 [ 537.074089][ T31] R13: 00000000000927c0 R14: 000000000005c2b3 R15: 00007ffdd846fc10 [ 537.082700][ T31] [ 537.086031][ T31] [ 537.086031][ T31] Showing all locks held in the system: [ 537.094068][ T31] 2 locks held by rcu_tasks_trace/29: [ 537.106910][ T31] #0: ffffffff8e13e010 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xaf9/0xdf0 [ 537.118303][ T31] #1: ffffffff8e142d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 537.129484][ T31] 1 lock held by khungtaskd/31: [ 537.134421][ T31] #0: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 537.144338][ T31] 2 locks held by getty/5588: [ 537.149094][ T31] #0: ffff88814da660a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 537.159631][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 537.169818][ T31] 1 lock held by syz.5.2904/17287: [ 537.174920][ T31] #0: ffff888030a71760 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x286/0xb40 [ 537.184015][ T31] 2 locks held by syz.6.4423/22943: [ 537.189469][ T31] #0: ffffffff8f4d2e30 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 537.199003][ T31] #1: ffffffff8f4dfd48 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x19/0xe0 [ 537.208724][ T31] 5 locks held by syz.0.4433/23020: [ 537.213919][ T31] #0: ffffffff8f4d2e30 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 537.223502][ T31] #1: ffffffff8f24c690 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 537.233353][ T31] #2: ffffffff8f24c850 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 537.243280][ T31] #3: ffff888020f78f98 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xee/0x5c0 [ 537.254267][ T31] #4: ffffffff8f4dfd48 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x151/0x7b0 [ 537.263674][ T31] 1 lock held by syz.7.4434/23026: [ 537.268852][ T31] #0: ffffffff8f4dfd48 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 537.278509][ T31] 1 lock held by syz.7.4434/23027: [ 537.283613][ T31] #0: ffffffff8f4dfd48 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1df0 [ 537.292977][ T31] [ 537.300993][ T31] ============================================= [ 537.300993][ T31] [ 537.309811][ T31] NMI backtrace for cpu 1 [ 537.309831][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 537.309865][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 537.309881][ T31] Call Trace: [ 537.309893][ T31] [ 537.309906][ T31] dump_stack_lvl+0x189/0x250 [ 537.309947][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.309965][ T31] ? __pfx__printk+0x10/0x10 [ 537.309991][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 537.310016][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 537.310041][ T31] ? __pfx__printk+0x10/0x10 [ 537.310063][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 537.310087][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 537.310113][ T31] watchdog+0xf60/0xfa0 [ 537.310140][ T31] ? watchdog+0x1e2/0xfa0 [ 537.310167][ T31] kthread+0x711/0x8a0 [ 537.310188][ T31] ? __pfx_watchdog+0x10/0x10 [ 537.310209][ T31] ? __pfx_kthread+0x10/0x10 [ 537.310228][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 537.310252][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.310275][ T31] ? __pfx_kthread+0x10/0x10 [ 537.310294][ T31] ret_from_fork+0x4bc/0x870 [ 537.310320][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 537.310349][ T31] ? __switch_to_asm+0x39/0x70 [ 537.310368][ T31] ? __switch_to_asm+0x33/0x70 [ 537.310385][ T31] ? __pfx_kthread+0x10/0x10 [ 537.310404][ T31] ret_from_fork_asm+0x1a/0x30 [ 537.310440][ T31] [ 537.310447][ T31] Sending NMI from CPU 1 to CPUs 0: [ 537.458490][ C0] NMI backtrace for cpu 0 [ 537.458508][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 537.458526][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 537.458535][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 537.458568][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 11 1c 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 537.458581][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c6 [ 537.458596][ C0] RAX: 273323a0cee0ab00 RBX: ffffffff8196bc07 RCX: 273323a0cee0ab00 [ 537.458608][ C0] RDX: 0000000000000001 RSI: ffffffff8d7e8616 RDI: ffffffff8bc077e0 [ 537.458619][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632fdb R09: 1ffff110170c65fb [ 537.458631][ C0] R10: dffffc0000000000 R11: ffffed10170c65fc R12: ffffffff8f9e1370 [ 537.458642][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a40 [ 537.458653][ C0] FS: 0000000000000000(0000) GS:ffff888125d0c000(0000) knlGS:0000000000000000 [ 537.458666][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 537.458677][ C0] CR2: 0000001b2f610ff8 CR3: 0000000072094000 CR4: 00000000003526f0 [ 537.458691][ C0] Call Trace: [ 537.458699][ C0] [ 537.458706][ C0] default_idle+0x13/0x20 [ 537.458723][ C0] default_idle_call+0x73/0xb0 [ 537.458741][ C0] do_idle+0x1e7/0x510 [ 537.458765][ C0] ? __pfx_do_idle+0x10/0x10 [ 537.458793][ C0] cpu_startup_entry+0x44/0x60 [ 537.458812][ C0] rest_init+0x2de/0x300 [ 537.458831][ C0] start_kernel+0x3ae/0x410 [ 537.458852][ C0] x86_64_start_reservations+0x24/0x30 [ 537.458875][ C0] x86_64_start_kernel+0x143/0x1c0 [ 537.458896][ C0] common_startup_64+0x13e/0x147 [ 537.458921][ C0] [ 537.459725][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 537.640166][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 537.649263][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 537.659309][ T31] Call Trace: [ 537.662578][ T31] [ 537.665501][ T31] dump_stack_lvl+0x99/0x250 [ 537.670096][ T31] ? __asan_memcpy+0x40/0x70 [ 537.674673][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.679862][ T31] ? __pfx__printk+0x10/0x10 [ 537.684450][ T31] vpanic+0x237/0x6d0 [ 537.688437][ T31] ? __pfx_vpanic+0x10/0x10 [ 537.692953][ T31] ? preempt_schedule_common+0x83/0xd0 [ 537.698410][ T31] panic+0xb9/0xc0 [ 537.702131][ T31] ? __pfx_panic+0x10/0x10 [ 537.706541][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 537.711907][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 537.718052][ T31] watchdog+0xf9f/0xfa0 [ 537.722209][ T31] ? watchdog+0x1e2/0xfa0 [ 537.726540][ T31] kthread+0x711/0x8a0 [ 537.730619][ T31] ? __pfx_watchdog+0x10/0x10 [ 537.735293][ T31] ? __pfx_kthread+0x10/0x10 [ 537.739895][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 537.745094][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.750284][ T31] ? __pfx_kthread+0x10/0x10 [ 537.754906][ T31] ret_from_fork+0x4bc/0x870 [ 537.759501][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 537.764616][ T31] ? __switch_to_asm+0x39/0x70 [ 537.769371][ T31] ? __switch_to_asm+0x33/0x70 [ 537.774153][ T31] ? __pfx_kthread+0x10/0x10 [ 537.778735][ T31] ret_from_fork_asm+0x1a/0x30 [ 537.783502][ T31] [ 537.786792][ T31] Kernel Offset: disabled [ 537.791101][ T31] Rebooting in 86400 seconds..