last executing test programs: 9m15.43806106s ago: executing program 32 (id=3348): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x240000d2) bind$llc(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x50, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r6 = socket(0x15, 0x5, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r6, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r7, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c1}, 0x8000) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 5m12.405842429s ago: executing program 33 (id=5042): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x440007, @empty, 0xffff8000}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080040"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f00000023c0)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000002400)=0x2c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @empty, 0x1}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000ffff000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000002380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002340)={&(0x7f0000000240)={0x20, 0x1, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xfffffff9}}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x8000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="d57ad50200000004000000080000000100000080", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000000200"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002300)={r5, &(0x7f0000000300)="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", &(0x7f0000001300)=""/4096}, 0x20) socket$kcm(0x29, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @loopback}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r7, 0x363}, &(0x7f0000000080)=0x8) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m18.834403666s ago: executing program 34 (id=6595): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0xfffffbff) poll(&(0x7f0000000040)=[{r0, 0x1146}], 0x1, 0x400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r4 = socket(0x1, 0x80802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800180001"], 0x50) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)='vcan0\x00', 0x30000, &(0x7f0000000040)={@align=0x7b, {0x2, 0x7, 0xc, 0x3}}, 0x5844762c, &(0x7f0000000080), 0x0}) select(0x0, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x50, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44008000}, 0x40008d2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 2m14.937723647s ago: executing program 1 (id=6750): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000060000001801000020696c2500000000002020207b1af8ff00000000bfa100000007010000f8ffffffb702000008000000b703000003000000850000000600000085000000070000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendfile(r5, r6, 0x0, 0xffffffff000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r8, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x29, 0x5, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) write$cgroup_pressure(r9, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m13.872924301s ago: executing program 1 (id=6753): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8004, 0x4, 0x2, 0x0, 0x1, 0x8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x100, @loopback={0xff00000000000002}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000240)='GPL\x00', 0xe651, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x28, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x24, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xffe3, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x5, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES8=0x0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000080)={0x2, {{0xa, 0x4e21, 0xffffffda, @mcast1, 0x72}}, 0x1}, 0x20000) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80011}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="0000472bbf2c5cf8c839ff0000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8004) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r6, r9, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x800}}, 0x40) 2m13.451757934s ago: executing program 1 (id=6756): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r2, 0x0, 0x0, 0x400c010) recvmmsg(r1, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/4, 0x4}, {0x0}], 0x2, &(0x7f0000001180)=""/4096, 0x1000}, 0xfffff453}], 0x1, 0x10120, 0x0) (async) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) (async) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) (async) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='devices.list\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20008005}, 0x804) 2m13.315133084s ago: executing program 1 (id=6758): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002140)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0x148, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x1e0, 0x1e0, 0x1e0, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0xffffffff, 0x0, 'netpci0\x00', 'vcan0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @multicast2, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x15, "322b70022bcf016887e230a3653e141200612d47425e51bb6cd069e8d150"}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x3c, r3, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85a78e904}, 0x4) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0xa4, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:pam_console_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:user_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'xfrm0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40084}, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000022e10000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000db00300010010000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) 2m13.129039312s ago: executing program 1 (id=6760): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x1, &(0x7f0000000140)={@align=0x4, {0x5, 0x4, 0x6, 0x5}}, 0x2, &(0x7f0000000180)={@_ha_fsid}, &(0x7f0000000240)=0xfffffffd}) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000002c0)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x6, 0x2, {{0x6, 0xff, 0x4, 0x5, 0x6}, 0x4}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x2000a804) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001400010000000000000000000a0000fe", @ANYRES32=r2, @ANYBLOB="6bff0200fc0200000000000000000000000000011400060020000000ffffffff0000000000000000140006007b00000002000000179fba3803000000"], 0x54}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x4c, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x80) 2m12.846175911s ago: executing program 1 (id=6763): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac141400060003004c"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x240000d2) bind$llc(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x50, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r6 = socket(0x15, 0x5, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r6, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r7, 0x4, 0x70bd2f, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c1}, 0x8000) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 2m7.030566402s ago: executing program 3 (id=6806): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x40049409, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x3, 0x7, 0xfffffffffffffffc, 0x7fc0000000000003, 0x1, 0x1004, 0x2000000000000007, 0x5}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2m5.913156349s ago: executing program 3 (id=6813): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000500180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m5.73169959s ago: executing program 3 (id=6814): socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x1) (async, rerun: 32) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x6, 0x84) (async) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_crypto(0x10, 0x3, 0x15) (async, rerun: 64) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xe0}}, 0x0) (rerun: 64) sendmsg$nl_crypto(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (async) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000040a010100000000000000000a0000010900030073797a320000000083df0a63f183422e4215036c08a6377775327d731a22565a505990290b084f38d7af564b530c79f51a3b1c74ad86292d882cae"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$bt_hci(r8, &(0x7f0000000040), 0x6) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) (rerun: 64) listen(r5, 0x3) (async) sendmsg$inet6(r4, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085) socket$netlink(0x10, 0x3, 0x4) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) (async) sendfile(r0, r3, 0x0, 0x20000000002) (async) socket$nl_route(0x10, 0x3, 0x0) 2m5.579082694s ago: executing program 3 (id=6816): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket(0xa, 0x3, 0x0) (rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0, 0xb}, {0xfff3, 0xffff}, {0xf, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x5594b08a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40045}, 0x4804) (async) connect$llc(r2, &(0x7f0000000080)={0x1a, 0x1b, 0x0, 0x80, 0xf9, 0x4, @remote}, 0x10) 2m4.577446095s ago: executing program 3 (id=6824): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025004000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m4.40290473s ago: executing program 3 (id=6827): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0xe, 0x4, 0x390, 0xffffffff, 0x120, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @common=@hl={{0x28}, {0x1, 0x9}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r2, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/225, 0xe1}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x1, 0x20, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRESOCT, @ANYRES8=r3, @ANYRES64=r2, @ANYRES16=r1], 0x60}, 0x1, 0x0, 0x0, 0x2000}, 0x0) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a1", 0xe6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r6, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000000508000840000000011400000011000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000aefff000900020073797a310000ffdf0900010073"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvmmsg(r10, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m2.59607102s ago: executing program 6 (id=6832): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x13, 0x2}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x2000000}, 0x28) 2m2.594685644s ago: executing program 6 (id=6833): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@ptr={0x2, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e]}}, 0x0, 0x27, 0x0, 0x1, 0x9}, 0x28) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a7c000000060a010400000000000000000a0000013c000480380001800a0001006d617463680000002800028010000300709c897c82b1095a67232d630800024000000001090001006d61726b000000000900020073797a32000000000900010073797a31000000001400058008000240000000020800014089"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0xd4}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000100)={0xd, 0x0, 0x30f, 0x165, 0x3, 0x7, 0x200, 0x5, r5}, &(0x7f0000000200)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={r6, 0x0, &(0x7f0000000240)}, &(0x7f0000000380)=0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB='d \x00\x00', @ANYRES16=r8, @ANYBLOB="01002bbd7000fcdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYBLOB="0d284c2a5142973c1b19bf7d2413c4f98ff1bd806c3d38a0911b41c22470decbeb2b32700d426d54704761293be1b0a7301fd20f3d6e964fc78cbf541834bb2145d058d7d30b52c7aedb1f2efcdcfb493c611bdb17d46d2b0549d5e051f153d39819dd821ba85f4e8e6fa5b54c3a2a89514d5fff92e336b5b3ab34a6d0f6edd1ff3bb09b0a580da600398984d6110b6046cbee33cdbdb9da40511d3b725cd6a5f5d03094", @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) ioctl$TUNSETNOCSUM(r4, 0xc040ff0b, 0x200000000013) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2c, r10, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x6, 0x1, 0x2}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r14, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r14, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) 2m2.514844778s ago: executing program 6 (id=6834): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x5, [@ptr={0xd, 0x0, 0x0, 0x2, 0x3}, @fwd={0x9}, @struct={0xc3b, 0x1, 0x0, 0x4, 0x0, 0x9, [{0xa, 0x1, 0x6}]}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x5f, 0x61, 0x30]}}, &(0x7f0000000280)=""/86, 0x59, 0x56, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xf, 0x8, 0x5, 0x0, 0x1, r2, 0x4, '\x00', r3, r4, 0x3, 0x3, 0x1}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0xfffffffd, {0x2, 0x0, 0x4, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r5}, @NHA_ID={0x8, 0x6, 0x1}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b60901000000002066000000646c6c25180100002020702500000000002020207b9af8ff000000001d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x1e00, 0x0, '\x00', r5, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m2.296434824s ago: executing program 6 (id=6837): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f00000000c0)) r1 = socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000180)={r3, r3, 0x7, 0x55, &(0x7f00000000c0)="c256e4ed6f421e701bbec80d94566a3723bcf2df60305a4959f4629633cb13c3694cf45010a83427cb3dea9d4aa221e5cae18925db1e57e626bdff92d54688fe6496392e994a607c5e7381fd1b71903b5cd197d4c4", 0x7, 0x4, 0x7, 0x7, 0x3, 0x3, 0x2, 'syz0\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x20, 0x1, 0x0, 0xfffff038}, {0x6, 0x0, 0x0, 0x2}]}) ioctl$TUNGETVNETLE(r4, 0x40107447, &(0x7f0000000180)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x110e22fff6) write$cgroup_type(r6, &(0x7f0000000280), 0x9) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r3, r3, 0x7fff, 0x0, 0x0, 0x9, 0xc1, 0x16c0, 0x9, 0x97d8, 0x1, 0x9, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000640), r7) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r8, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000012000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r10, @ANYBLOB="c5cf1f428f850a6e4b727b781e4c93e742f684a39baa9524ea4362d0c954823116ede6c97fc464d04d6c79f3a5961feeabdf5e63db739758415e231c69dfc326bb8bd3a3ae746abc5e6a51dff82398f11bf7046495361ce00e8f4a5d198edd57de4e64915db484f7c8ffb2dcf2467c559eb43dd8cb5cb6025266b2ccde633df4878ccd7e05144a55427a045731fbb92d8f1e2472dd991778d6504583361fb0bebe94947eee1668aabe13f268c9639dcc64667a958d21"], 0x3c}}, 0x0) syz_emit_ethernet(0x45, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb8100500000114242db6e70f69197a58724159e396023aa86e57374454acbfe69f6c12be0efd63ad56d0858fb19ecf0b997d90c63c918032d"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELOBJ={0xcc, 0x14, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_OBJ_USERDATA={0x5b, 0x8, "70dae90535c56c0db2b2e8e8e41e3f86e39f816dffe63ce2486a6d581dd6f8b6237c2337cbff3dcf4c2a702b3c7466ab3ab20cc60a224b163eb9367bd528da90173557bf2c56a83ff397b56284213ae64e6d73c3504f30"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x47, 0x8, "91ae1ac0077c02e112e85a68e981fff8a8d89f6bf6d9acc937427962875e396f5eed3ba60e0d7311eb200890f8b352589425cb482eb87b1b3c46437e030953b8551e4d"}]}, @NFT_MSG_NEWFLOWTABLE={0xb0, 0x16, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4d82f258}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb}}}, 0x1f8}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000004) 2m1.651539072s ago: executing program 6 (id=6841): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) close(r0) socket$inet_udp(0x2, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000000)=""/31, 0x1f) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="64a465e8c8b19b44ba4dea57970686c91b493ce03f82124b84ddbf2653a98ea3217f2b957cf30e84d68a03b3c29dc13fba42c25d98a3974d4bd7d1302be820437b", 0x41) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r3, &(0x7f00000001c0)={0x6, 0x20, 0x3, 0x20, 0x7}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000340)={r6, 0x9}, 0x8) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x26c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x240, 0x4, 0x0, 0x1, [{0x23c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x22c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'cgroup\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x294}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffef81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m1.370182518s ago: executing program 6 (id=6843): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000082) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x17}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xa}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000000) r2 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x3ea}, [], {0x14, 0x3f3}}, 0x28}}, 0x4008000) 1m57.721554213s ago: executing program 35 (id=6763): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac141400060003004c"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x240000d2) bind$llc(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x50, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r6 = socket(0x15, 0x5, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r6, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r7, 0x4, 0x70bd2f, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c1}, 0x8000) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 1m49.264162156s ago: executing program 36 (id=6827): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0xe, 0x4, 0x390, 0xffffffff, 0x120, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @common=@hl={{0x28}, {0x1, 0x9}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r2, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/225, 0xe1}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x1, 0x20, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRESOCT, @ANYRES8=r3, @ANYRES64=r2, @ANYRES16=r1], 0x60}, 0x1, 0x0, 0x0, 0x2000}, 0x0) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a1", 0xe6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r6, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000000508000840000000011400000011000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000aefff000900020073797a310000ffdf0900010073"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvmmsg(r10, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m46.280536995s ago: executing program 37 (id=6843): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000082) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x17}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xa}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000000) r2 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x3ea}, [], {0x14, 0x3f3}}, 0x28}}, 0x4008000) 1m30.210358469s ago: executing program 8 (id=6945): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000006800010000000100fddbdf25020004000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES64=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) 1m28.36273178s ago: executing program 8 (id=6949): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x24, 0x2c, 0x200, 0x70bd25, 0x6, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0x6, 0xb}, {0x8, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x8010) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df25080001000000000009"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) unshare(0x20000400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ppoll(&(0x7f0000000680)=[{r8, 0x841c}, {r9, 0x80}, {r8, 0x10}, {r2, 0xc118}, {0xffffffffffffffff, 0x1402}, {r8, 0x40}], 0x6, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000000)=0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000000e14000026bd7000fbdbdf2508003c0002000008003c000500000008003c000300000008003c0005000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000840) bind$nfc_llcp(r6, &(0x7f0000001040)={0x27, r10, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40480c0}, 0x10) r14 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r14, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r14, 0x40047459, &(0x7f0000000080)=0x6100204) r15 = epoll_create(0xa67) epoll_ctl$EPOLL_CTL_ADD(r15, 0x1, r14, &(0x7f00000000c0)={0x10000000}) pwritev(r14, &(0x7f0000000100)=[{&(0x7f0000000540)='\x00!', 0x2}], 0x1, 0x739, 0x1) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000404400000008000300", @ANYRES32=r4, @ANYBLOB="1400205c2123800600040000040000"], 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f00000005c0)={0xfffffffffffffffd, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)={0x60, r3, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x52}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8000000}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x101}]}, 0x60}}, 0x4443) 1m26.333817235s ago: executing program 8 (id=6956): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfb) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x464, 0x24, 0xd0f, 0x70bf2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffe}}, @TCA_TBF_RTAB={0x404, 0x2, [0x2, 0x0, 0x7, 0x3, 0x5, 0x3, 0x0, 0x9, 0x101, 0x76, 0x10000, 0x1, 0xc, 0x10001, 0xfffff000, 0xffa4, 0x2, 0xfffffffe, 0x3, 0x8, 0x9, 0x9, 0x7, 0x200, 0x2, 0x2, 0x4de9, 0x7, 0x7, 0x4, 0x9000, 0x914f, 0x59, 0x4, 0x8001, 0x4, 0x7fffffff, 0xb7b, 0x9, 0xc, 0x8763, 0x776a, 0x120, 0x200, 0xfff, 0x9, 0x4, 0x4, 0x1, 0x598, 0x4, 0x4, 0x91, 0x3, 0x5, 0xb4, 0x1, 0xffff, 0x1, 0x97, 0x7ff, 0x1, 0xcfa5, 0x5, 0x3, 0x0, 0x3, 0xe, 0xfc, 0x70, 0x73e, 0x7, 0x7f, 0x1, 0x11fd8d60, 0x400, 0x4, 0x3, 0xfffffff6, 0x1, 0xff, 0x61, 0x7, 0x6, 0x9, 0xfffffff9, 0x8, 0x8, 0x7, 0x7, 0x3, 0x8, 0x40, 0x6, 0x9, 0x0, 0x1, 0x4, 0x8, 0x200000, 0x1, 0x7, 0x2, 0x400, 0x1, 0x7, 0x3, 0x7, 0x8, 0x5, 0x7, 0x3, 0x4, 0x9, 0x2, 0x326, 0x95f240c, 0x1, 0x5, 0xffffffc0, 0x9, 0x0, 0x8, 0x4, 0x7, 0xfffffffd, 0x7fffffff, 0x3ff, 0xfff, 0x6, 0x2, 0x750, 0x1000, 0x800, 0x8, 0x4, 0x8, 0x9, 0x3d4c84d1, 0x6, 0x2, 0x80000000, 0x0, 0x1000, 0x8, 0x401, 0x5, 0x4, 0x8001, 0xd, 0x10, 0x2, 0x290, 0x8, 0x3, 0x8000, 0x3ff, 0x8, 0x101, 0x0, 0x180, 0xe, 0x7, 0x3, 0x6, 0x5, 0x0, 0x4, 0x2, 0x9, 0x8, 0x401, 0x7, 0x3, 0x4, 0x9, 0x9, 0xfffffdb2, 0x7ff, 0x1, 0xe2, 0x7, 0x0, 0x6, 0x6, 0x800, 0x97, 0x2, 0x8, 0x8, 0x2, 0xfffff001, 0xfffffffd, 0x8, 0xffffffff, 0x2, 0x166a, 0x1, 0xffff, 0x1, 0x3, 0x6, 0x45290a0c, 0x81, 0x1, 0x4, 0x10000, 0x401, 0x2, 0x5, 0x800, 0x5, 0x6, 0x1, 0x5, 0x78, 0xc6f2, 0x10, 0x0, 0x62f3, 0xd, 0x40, 0x4, 0x8, 0x1, 0x53b, 0x5, 0x4, 0x81, 0x9, 0x8, 0x4, 0xe8, 0xfffffff4, 0x7, 0x1, 0x1000, 0x4, 0x8, 0x5, 0x1, 0x6, 0x300, 0xd, 0x10000, 0x0, 0xfff, 0x7, 0x0, 0x7, 0xfffffe01, 0x80, 0x9, 0x5, 0x35, 0x585c]}]}}, @qdisc_kind_options=@q_atm={0x8}]}, 0x464}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000000020102000000000000000003000001060007400003000006000740000200000f0006008e073b1e1ecb55f06e657462696f732d6e7300000800094000000005080005400000001054bbf302012adb1fe1ce976aef211224884f4ace76dfd4e758ddcc1acf677811c7cc50a68bb654619a9e19fb1af064074b68ed5bcb0041475e3e55ee70cefec738de6d938c86ea02"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x24008850) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route(r6, 0x0, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001a00010028bd7000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="0100800014000104fe8000000000000000000000000000bb"], 0x30}, 0x1, 0x0, 0x0, 0xc1}, 0x804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@fallback, 0xffffffffffffffff, 0x17, 0x4}, 0x20) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r9) ioctl(r7, 0x8b2c, &(0x7f0000000040)) 1m25.030421897s ago: executing program 8 (id=6962): r0 = socket$unix(0x1, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000200)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005bc0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newqdisc={0x12c, 0x24, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x9}, {0xfff2, 0x3148a54f71c9fe9f}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xec, 0x2, {{0x6b9bbb36, 0x7fff, 0x1, 0x5, 0x800000, 0x1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xc4442d52a4653533}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x3, 0x3, 0x9, 0x1000, 0xc6e}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x7ff, 0x8}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x25c5ef346f7a2404}, @TCA_NETEM_CORR={0x10, 0x1, {0x80, 0x6}}, @TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x6c, 0x1, 0x3, 0x5, 0x4}}, @NETEM_LOSS_GE={0x14, 0x2, {0x6, 0x4, 0x5, 0x66}}]}, @TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x5, 0x8, 0xc9e}}, @TCA_NETEM_LOSS={0x2c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xea, 0x7fff, 0x8, 0xf}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0x7, 0x8cb, 0x2}}]}]}}}, @TCA_RATE={0x6, 0x5, {0xf7, 0x71}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffa}]}, 0x12c}, 0x1, 0x0, 0x0, 0x10}, 0x20000880) socket(0x10, 0x803, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r4, 0x29, 0xcb, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="e80000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x68}, 0x94) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010806000000000000000700000114000780080011400000008b0500150005000000050001000600000005000500020000000500040002000000090d020073797a300000000011000300686173683a69702c6d61726b00000000"], 0x60}}, 0x0) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000040)={0x1d, r8, 0x8000000000000003, {}, 0xff}, 0x18) sendto$inet6(r7, 0x0, 0x8, 0x4040004, 0x0, 0x0) bind$unix(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002a40), r11) sendmsg$NLBL_MGMT_C_REMOVEDEF(r11, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000680)=ANY=[@ANYBLOB="24f3688787593a64c335547b734f263a59e9d891a5a83648663312242695e5f69a8fe3f78a348391b9ace7af3ef9e7b6b1d9a6267ab7a7c55016bd3ca645d7d8b8dda6fca1534c3840dfd8c87119c409aedfc16cf4f2aa20cba57cf8673994a616030e033863041accb49e3c90ba15bb65a030cf934cfc55f6b48c589b47d1753a979ae322061f8a191a583c157676f2f9fcd1b03e937caa1e4950eee16e257913", @ANYRES16=r12, @ANYBLOB="01002cbd7000fedbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044080}, 0x44080) socket$inet6(0xa, 0x80002, 0x0) 1m23.726288215s ago: executing program 8 (id=6974): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x104, 0x2a, 0x200, 0x3, 0x0, {0x1, 0x7c}, [@generic="89cf04868a51631613ffbef06cfb06eb198c0f6e98483a726a1367443e29bed5d69b5408cc9924273aa61f41e0da63cebe26cfaf3c2208bd9b36bb1e2e066ca250aa463270a62b901d2931c1df98bbacff81b7f1bb3eb116853202a25a3a112fe3fe380b9f948018418c04b5096adfef3580aaa764ed13a9bd09f00580cf6a766b965df98108f263545e05ae338ebcddcc57ee1ea82e53b66b70ae11128f6faf0d8895b61e99241a1de9a547712455d81b1786e8c71c44b4e63a1e7a30f7fa42122d02d5324be152b0500676e75db3b78c8802f4599ad563a93b51b182de1ad3d42805c4eb09d167e0d2b4bb771dd1"]}, 0x104}}, 0xc000) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000040)=')(\xb1-\x00', 0x446000, &(0x7f0000000080)={@align=0x8, {0x2, 0x1, 0x81, 0xffff}}, 0xdb99, &(0x7f00000000c0), &(0x7f0000000100)=0x1ff}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x2, 0xa, 0x4}, {0x9c, 0x0, 0x7, 0x1, 0x6, 0x5}, 0x6, 0x71d, 0xa74}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004001}, 0x40800) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d", @ANYRES64=r7, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r13 = accept4(r12, 0x0, 0x0, 0x80800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f00000014c0)=0x100008, 0x4) sendmmsg$alg(r13, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendfile(r0, r6, &(0x7f0000000340)=0x1, 0x9) 1m23.046148956s ago: executing program 8 (id=6980): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, 0x0, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x20, 0x4, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf9}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c044}, 0x0) (async) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000000)={0xffff0e40}, 0x4) (async) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000162cc2600feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) 1m7.980786127s ago: executing program 38 (id=6980): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, 0x0, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x20, 0x4, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf9}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c044}, 0x0) (async) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000000)={0xffff0e40}, 0x4) (async) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000162cc2600feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) 1m6.655412183s ago: executing program 7 (id=7046): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0xfffffffc, 0x10, {{@in=@broadcast, @in=@remote, 0x4e22, 0x0, 0xf7fb, 0x2002, 0xa, 0x80, 0x140, 0x87, 0x0, 0xffffffffffffffff}, {0x0, 0x401, 0x0, 0x9, 0x8, 0x2, 0x0, 0x20000000000000}, {0x81, 0x9, 0x83}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}, [@tmpl={0x84, 0x5, [{{@in=@rand_addr=0x64010102, 0x4d4, 0x6c}, 0x0, @in6=@rand_addr=' \x01\x00', 0x3506, 0x0, 0x0, 0x2}, {{@in6=@mcast2, 0x4, 0x33}, 0x0, @in6=@remote, 0x0, 0x4, 0x0, 0x4, 0x800}]}]}, 0x13c}}, 0x4080) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000300)={0x0, 0xc, "53a8685e57a2d52719158065d44cc719b2960000000000002000000000083d5f5dcc9e19c383922b535f8156c9222075cb0f7b15dc6eec55e76f43b3f8a435a6ee84b258191f340650be3cbca5ded32c89f35b949e6fcc1454a27a0c0b7e88e652d677f5210dacb9e74a69d9f339cea8e55143befe641516666bb6701aedda82daae2a565ea91532dbcdd79d990e9819052f2c7641b9ee3609b12bbf231b556209844164b2caf5812a6fe9359f7f4d6efdc4351fbcb5d81847e89acbe85775e28bf0920811eb634d693b7b960dc477d8fd4fa5c877"}, &(0x7f0000000200)=0xaad93f26207863e2) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000600)={{0xf52, 0x5}, 0x100, './file0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYRES8=r3], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) socket$inet6(0xa, 0x80003, 0x6) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r7 = socket(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000300)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @val={@void, {0x8100, 0x6, 0x1}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x9c, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "786b8afe8ef6c8e90c1e350689fcd4d61b4576015011084c54b22430637a2838", "563c538774ee22ce2bb8f46f7373cb97218dd5ee5af3108bd6d195c614d44230e598e0731465bf4fcdfa004c93ce4b4e", "02833533ce8152a09040f08bd2892b7233376dcda3f0b6962e66f617", {"2e7c8cbccc480860f94cd609888bc51a", "38a461132eddc6aef8a88f02e0ed7e13"}}}}}}}}}, 0xda) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, 0x0, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES16=r11, @ANYBLOB="02002dbd700025fd0000720000000c0099000101000055000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r12 = socket$inet(0x2, 0x80001, 0x84) sendmmsg$inet(r12, &(0x7f0000007640)=[{{&(0x7f0000000000)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000001d00)=[{&(0x7f0000000740)="bf2715d87723", 0x6}], 0x1, &(0x7f0000001d40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000007500)}}], 0x3, 0x4055) 1m6.033567651s ago: executing program 7 (id=7049): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)=0x3, 0x4) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)={0x1c, r4, 0xf03, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x8}]}, 0x1c}}, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) close(0x3) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000d10ffc)=0x200, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x1, 0x10000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x6}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e21, 0x1, @loopback, 0xffff}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0xfffffffc, @local}], 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0xf, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x7e, 0x1, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)=0x3, 0x4) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)={0x1c, r4, 0xf03, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x8}]}, 0x1c}}, 0x0) (async) socket$inet6(0xa, 0x5, 0x0) (async) close(0x3) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt(r6, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) (async) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000d10ffc)=0x200, 0x4) (async) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x1, 0x10000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x6}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) (async) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e21, 0x1, @loopback, 0xffff}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0xfffffffc, @local}], 0x1c) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0xf, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x7e, 0x1, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) (async) 1m5.472141059s ago: executing program 7 (id=7050): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf250a000000060009000000000008000300", @ANYRES32=r5, @ANYBLOB="5a1456f33c1acffacb"], 0x24}, 0x1, 0x0, 0x0, 0x40004004}, 0x20040044) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, 0x0, 0x0) listen(0xffffffffffffffff, 0x400004) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r8 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtaction={0xe4, 0x30, 0x53b, 0x70bd2d, 0xfffffffc, {0x9}, [{0xd0, 0x1, [@m_ctinfo={0xcc, 0x1b, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x200}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x40}]}, {0x87, 0x6, "acb190aa158fcb8897cdffdc4b188043ca89469d64294351571d9515f8cb97f86288e347aae51d418a2a32a38f9aabf3d0bc726fb69213d86e69cee435a911f64568f8d5560afa702fa8c696ba16a9fda884222b33bb52c3d632d5f0e57f4860d6766fa87b610d07101e26437355cd10cc553c98a6d76d25bfcdc3f41f83a8ad1b34c8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r12 = openat$cgroup_procs(r10, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f00000000c0), 0x12) pread64(r12, &(0x7f0000002840)=""/4096, 0x1000, 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000100)=""/74, 0x328000, 0x1000}, 0x20) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) 1m3.065919082s ago: executing program 7 (id=7053): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x10, 0x40, 0x0, 0x0, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000", 0x2b}], 0x1) 56.944936456s ago: executing program 7 (id=7078): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB="010000140000000000000200000008000300", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 56.274924349s ago: executing program 7 (id=7081): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0x3, 0x4}, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x25dfdc00, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x8840) socket$unix(0x1, 0x1, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, 0x0, &(0x7f0000000400)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x20000}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe8}}, 0x0) 41.163009606s ago: executing program 39 (id=7081): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0x3, 0x4}, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x25dfdc00, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x8840) socket$unix(0x1, 0x1, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, 0x0, &(0x7f0000000400)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x20000}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe8}}, 0x0) 10.762352009s ago: executing program 2 (id=7431): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = accept(r0, 0x0, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r1}, 0x20) recvmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xb87, 0x1a}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0xa0, &(0x7f0000000740)=[@in6={0xa, 0x4e22, 0x2, @private2}, @in6={0xa, 0x4e20, 0x3ac9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e24, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x3}, @in6={0xa, 0x4e25, 0x6, @private0, 0x6}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=r4, @ANYBLOB, @ANYRES64=0x0], 0x20) socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_devices(r8, 0x0, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) sendto$unix(r7, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a377", 0xf0, 0x800, 0x0, 0x0) 9.81681254s ago: executing program 2 (id=7439): socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000780)={0x24, 0x14, 0x1, 0x70bd27, 0x25dfdbff, {0x10, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xf, 0x1, "1bb759fa84db9d57d33da4"}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4620, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @multicast2, 0xffffffff, 0xff000000, 'team_slave_1\x00', 'pim6reg\x00', {}, {}, 0x1d, 0x3}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x2, 0xfffffffe, 0x435, 'netbios-ns\x00', 'syz0\x00', {0x7fff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 'ip6tnl0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x33, 0x3, 0x8}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x309f) 9.659779487s ago: executing program 2 (id=7440): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@hoplimit_2292={{0x14}}], 0x18, 0xffffff97}}], 0x1, 0x8040) 9.465770993s ago: executing program 2 (id=7441): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB="010000140000000000000200000008000300", @ANYRES32, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 9.360477168s ago: executing program 2 (id=7443): r0 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$SIOCGETLINKNAME(r0, 0x89e0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000001540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001500)={&(0x7f0000000340)={0x11ac, r3, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x59}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x100c, 0x3, 0x0, 0x1, [{0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xed}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xa0, 0x3, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x95, 0x2, "4def412530043e594d5c2faf8dd9980a198e8d9d9fb3848b668d20b2f6068f5e84487bec3b6542278344d191f65d171cfc64f598c05f1f655ddfcd3c0ade719c407f9a661da3724ad7dfad8d69e0b50af62f82b9ae12f8a5099f3baf386de79062aa184dab9cc441cf7a432dedcdbc8faa8193b3e754ec6d080021573a36e8d5e81adfc96bf299ef678cbf4da64cc1b501"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xb4, 0x3, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x74, 0x1, "bbc2a039d1e3b6960ce2fdb1a3388a25e51744ee289fc1ade6680eac9869a5df6082c3dfc186e50b679eac3c2c2cdc27a2be9400960caab7f1ce1a340b434080491c325c3a4438e6b689a72dab36ef88b286624db68633c6b7dfd377af36700bfc33116eb3c5db82527f563e99addb97"}}, {0x2c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x28, 0x2, "81f4bd4c8d5b1559ca4f7622ce71ee4bc21a8f99a737f2768381b27c7fd3467ecb0b258d"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x101}}]}]}, 0x11ac}, 0x1, 0x0, 0x0, 0x12}, 0x24000000) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$nci(r1, &(0x7f00000001c0)=@NCI_OP_RF_DEACTIVATE_RSP={0x1, 0x1, 0x2, 0x6, 0x80}, 0x4) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0x80, @mcast1={0xff, 0x7}, 0xa4ff}}, {{0xa, 0x0, 0x0, @empty, 0xfffffff7}}}, 0x108) 6.688353274s ago: executing program 2 (id=7461): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac141400060003004c"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x240000d2) bind$llc(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x50, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r6 = socket(0x15, 0x5, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r6, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='/\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002bbd7000fedbdf250200000005000400020000000900010073797a32000000000900010073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000c1}, 0x8000) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 5.271937743s ago: executing program 5 (id=7468): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket(0x22, 0x80000, 0x0) (async) r1 = socket(0x22, 0x80000, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x14, 0x30, 0x51b, 0x0, 0x25dfdbff}, 0x14}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x1, 0xffffffff, 0x2000003, 0x1, 0x1, 0x800, 0xb0}, 0x1c) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x1, 0xffffffff, 0x2000003, 0x1, 0x1, 0x800, 0xb0}, 0x1c) socketpair(0x1, 0x3, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4004800, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x7f, 0x6, @local}, 0x14) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) (async) listen(r2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @private=0xa010102}, 0x10) r5 = accept(r2, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) (async) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r6, 0x0, 0x40000) (async) sendmsg$nl_route(r6, 0x0, 0x40000) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$tipc(r7, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES64=r3], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvfrom(r4, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x7) (async) recvfrom(r4, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x7) 4.466603225s ago: executing program 0 (id=7475): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x6, 0xef, 0xfffff038}, {0x6, 0x6, 0xfe, 0x1057c}]}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff14}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x23) accept4$tipc(r2, 0x0, &(0x7f0000000080), 0x80800) 3.497317703s ago: executing program 0 (id=7485): r0 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f00000004c0), 0x12) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000040)=0x26, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r3}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r4}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0xfffd, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@generic={0x7, 0x2}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) connect(r1, &(0x7f0000000080)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffe0e}}, 0x80) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x6, &(0x7f00000002c0)=0x840, 0x4) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) socket(0x15, 0x5, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async) write$cgroup_pid(r1, &(0x7f00000004c0), 0x12) (async) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000040)=0x26, 0x4) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r3}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r4}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0xfffd, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@generic={0x7, 0x2}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) (async) connect(r1, &(0x7f0000000080)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffe0e}}, 0x80) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_int(r5, 0x0, 0x6, &(0x7f00000002c0)=0x840, 0x4) (async) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) (async) 3.250534239s ago: executing program 0 (id=7487): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x100a1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xffff7fff}]}}}]}, 0x3c}}, 0x8000000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)='>n', 0x2) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000540)={0x430, 0x3f4, 0x388bce251ad7b007, 0x70bd27, 0x25dfdbfe, {0x0, 0x2, 0x0, [0x2, 0xb7, 0x3, 0x4, 0x4, 0x3800000, 0x9, 0x4, 0x0, 0x80000000, 0x8, 0x5, 0x8, 0xdeb1, 0x0, 0x2, 0x2, 0x8ad, 0x2, 0xfffff03a, 0x0, 0x4, 0x40, 0x7, 0x4, 0x4df4000, 0xe5, 0x0, 0x9, 0x5, 0x9ef, 0x9, 0x2, 0x7, 0x40, 0x3, 0x5, 0x7, 0x9, 0x5, 0x1, 0x0, 0x7cc, 0x7, 0x1b50, 0xfffffffa, 0x3, 0x7fff, 0xb, 0x0, 0x9, 0x5, 0xffffcb0e, 0x5, 0xd795, 0x2, 0x0, 0x4, 0x8, 0x7, 0x5, 0x5, 0x1, 0xf0], [0xa26a, 0xfffffffe, 0xfff, 0x4, 0xfec, 0x7, 0x0, 0x6, 0x9, 0x7, 0x6, 0x5, 0x1ff, 0xd, 0x8, 0x0, 0xb, 0x3, 0x5, 0x5, 0x9, 0x776a, 0x5, 0x6, 0x7, 0x9, 0x6b50, 0x2, 0xa, 0x7f, 0x1, 0x6, 0xa, 0x7, 0x6, 0x6, 0x7, 0x1, 0x14000000, 0xe, 0x800, 0x800, 0x11e20, 0x3, 0x1c800000, 0x10000, 0x8, 0x4, 0x2, 0x6, 0x80, 0xb, 0x3, 0xdf6, 0x400, 0x5, 0x2, 0x31, 0x3, 0x9, 0x0, 0xb, 0x7, 0xfffffffd], [0x1, 0x193, 0x5, 0xce4e, 0x65d, 0x5, 0x4, 0xd000, 0x8, 0x6e02, 0x7, 0x7, 0x8000, 0x7fffffff, 0x1, 0x3, 0x3, 0x3, 0x7, 0x507447ea, 0x8, 0x2, 0x5, 0x3, 0xde53, 0x3, 0x1, 0x7, 0x4, 0x9, 0x3, 0xca1, 0x8, 0x5, 0x8009, 0x6, 0x7, 0x3, 0x2, 0x4, 0x1, 0x100, 0x6, 0x3, 0x3, 0x3b2a2d05, 0x101, 0x5, 0x6, 0x5, 0xb, 0xfffffff8, 0x7, 0x5, 0x8, 0x3, 0x4, 0x3, 0x2, 0x0, 0x8, 0xb, 0x40, 0x3], [0x2be8, 0x8, 0x23, 0x5, 0x4, 0x0, 0x1, 0x6, 0x0, 0xf8c, 0xffffff81, 0x200, 0x6, 0x9, 0xff, 0x56a, 0x8, 0x87, 0x8, 0xffffffff, 0xfff, 0xff, 0x9, 0x3, 0xe7, 0x8, 0x3, 0x9, 0x54, 0x420, 0x9, 0x1, 0x5, 0x758, 0x4, 0x4, 0x0, 0x8, 0x436, 0x6, 0x10000, 0x7ff, 0xc00, 0x3, 0x0, 0x80, 0x9, 0x4, 0x2, 0xc2, 0x8, 0x2d, 0x3, 0x0, 0x6e, 0x0, 0xf081, 0x5d2, 0x6, 0x96a, 0x3, 0x5, 0x71, 0x56317c0], 0x10, ['-^O]&\x00', '{-$}!+:\xee{\x00']}, ["", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x50}, 0xc885) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000c00)={0xffffffffffffffff, &(0x7f0000000ac0)="fc018d7be7cb83b501c15f1b2e19d5f234f88358ba88590f07e96c9aeb836f6c8a237541e1856ca0e37cf600df47fcabc020d35a790bd5a2065e9456f6487740137319a80af11d590c4543915068d7a49d9f50486f81af6b4aba41a19f99d4efdd8ca8fbf996b84366835d9f654075cd6f620d9734b9ec491aaa78c352d72b0a5f746135688bb248eba7abe14c7678c4080529e440fa382aab15dae7b1f39de10ae72acb5669a265d6bf680a1936f15cab627b9887bf3f53c4788b06c6bf69e97063af7656b0d2c5fe99c0350480a52823c81ca2f944f2854915dcb1e4852f9665b0fedceff6fedb5c4598095d48eace6a24fd", &(0x7f0000000bc0)=""/50}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000015c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0x2}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_TCP_SRC={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x59}, 0x80) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1, &(0x7f0000000480)=[@ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3, 0x2}]}}}], 0x18}, 0x20008814) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f00000000c0)="259a53f271a76d2788a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x16, 0x11, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_icmp(0x2, 0x2, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r10, 0xb66fb8ed326e3267, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x4000080) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0200", @ANYRES32=r11, @ANYBLOB="0c009900ffffff7f50000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x24008000) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r6, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x0, 0xc}}}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x20000000, {0x3, 0x9, 0x2, 0x6}}}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008800}, 0x8008010) 2.664839308s ago: executing program 0 (id=7492): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x10, 0x40, 0x0, 0x0, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f931", 0x38}], 0x1) 2.377929768s ago: executing program 5 (id=7496): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6d2c8ec8af026578, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) (async) r3 = socket$inet6(0xa, 0x802, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x80, 0x0, &(0x7f0000001080)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) (async) r8 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r9 = socket$inet6(0xa, 0x80002, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"/288], 0x60}}, 0x0) (async) setsockopt$sock_linger(r9, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async) connect$inet6(r9, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) (async) sendmmsg$inet6(r9, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0x20, 0x4) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x72cecc82c8224bb3}, 0xc, &(0x7f0000000640)={&(0x7f0000000940)=ANY=[@ANYBLOB="24010000", @ANYRES16=r11, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x2000c094}, 0x0) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) (async) r12 = socket(0x10, 0x2, 0x0) write(r12, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (async) recvmmsg(r12, &(0x7f0000000140), 0x30, 0x2, &(0x7f0000000100)) 2.218119438s ago: executing program 9 (id=7498): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r2, &(0x7f00000002c0)=ANY=[], 0x33) sendfile(r2, r1, 0x0, 0x10000) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r5, r6}) sendmmsg$inet(r7, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="03362a247861", 0x6}], 0x1}}], 0x1, 0x40) sendto$inet(r5, 0x0, 0x0, 0x40000, &(0x7f0000000340)={0x2, 0x4e22, @empty}, 0x10) close(r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x24, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x14}, @alu={0x4, 0x1, 0x6, 0x6, 0x1a, 0xc, 0x8}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fe7}}, @generic={0x3, 0x8, 0x9, 0x9, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0x2, 0xbb, &(0x7f00000005c0)=""/187, 0x40f00, 0x59, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000800)=[r0, 0x1, r0, r4, r0], &(0x7f0000000840)=[{0x3, 0x4, 0xc, 0x9}, {0x5, 0x3, 0xb, 0xb}, {0x4, 0x5, 0xa, 0x9}, {0x4, 0x2, 0x0, 0x1}, {0x0, 0x1, 0xd, 0x8}], 0x10, 0x213f}, 0x94) r8 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r8, 0x6, 0x8, &(0x7f0000000100)=0xff, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfe}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0000009a090000000000000708000086000021", @ANYRES32=r0, @ANYBLOB="ff7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000000000000020000000900"/28], 0x50) socket$inet_tcp(0x2, 0x1, 0x0) 2.033548529s ago: executing program 5 (id=7500): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004090) syz_emit_ethernet(0x5ea, &(0x7f0000001780)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x5b4, 0x3a, 0x0, @remote, @local, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x0, "90c8a1a190c999b1f046a5f8502e73670cb7f4ab8035ca5ba53c4253cc4da3a75b04f4b82f3a1689ee3df70953d7085fdec7f497f5cc2d62a193023253aac15e73dbd3281353568d55068daae5fac37a26b04243257dcf4dc0fbd797d756a071225dfd6cd3dc31ad8c7c0c92bbfc03794c373498d3d89d05bb6386f13aa31d109ac4810e4502e74aae68aafa112cd1e90befbd59485a3396a44ff5387f60c329e0a740e62fb7bb9d695e12d9948a6e240b80ccc2ec5f2a69358b65cfa87a4bbd80e9b803b9816992fbc6c812c65fc10082b7468954573bedffa93ffd656148cf54a7ac3ef550a2be49f3b590db70c5286751c254d6fd14c3f699d1ff2c86b9f631078a31134ea0ad64f61a87a7a6506c79db494d7ef8eecf24e9ea143c259b6ec138e37d965d5577c23d225636d30385bbd04e5b57ebcbdf1984bd45eaf6a5659c22cc323c48dbf5fb3b77ccc125b38b8eb0cd11aaac4e77334f103895d82b4c3aecbd22186cf61b1d88da424bc3ddec9c49c0606e5aa1f6121052873fb08cbf344f6352d24150a865ea12da53ef04eb518f224c035c49a48ba2926b366e4530d60d27cdb4a850f9adba7f1e26b4fa6c941ced501439ef20e06c405dd0b384bec002dd591f8df1504d5634c96d4c67597fdd66a3576a97348d9610af83519fbf13bfb40ad39235068617582b387bce8d281d508b4a0b100cf629d157e8b777847a02a242a90906e6a084588b9d7461e6fb93532615ce6ea71e9d0d3fb13bb56982788d5786272d156e96996f23330eed4f84d7c120bf74441f35a137e313dd9e1a2a2a23504918e06d9a4f320522fe0d6df149364c032d3f14250b0db7e8ba445430515edb445e3fbdd8486067083f38042e973d58e3c79b575fdba68fee6b38f09001ef9b84e38f330a1aa65e48106a8629e7591fffa4f23c681c6584144d77c624b8369f5ae99faa194c7766fae96be118514d4b83f511f484515774c6261dc99189c12d46e67b9cecfefc5ad32cd0f5f59ab032bc93adb4d4476f6c8a5c011e00ebaca53eb4469c389122db553aabaed119fd640729d9557c50d78cfca4af346803804306a9796b090265e256dc820546c58fa2d3723c7205540006e831e1cfb3960ca77f606a6de6afd49e733c3720c801e1afc2142dbfad94ffd06c036395fcc2cd12c37ebd37d4c57ca8a83c45f0dd7f0020650c0e793e997bb9be183014f7225d84edb092362fadb3b30755331f9e7dd056c9148329a8ed848603770170e7ab2e9aae5b8ad97ab61179927427093feb59da6664fd14f14f059d04adac8d525c23a1fbf59f2eb334de8a38a0dc28943662e2eed21cefbb52e24f914723579e3b6ab9419f1399cec79d1a51b2c2668af2f71bcf3cf98cef743eace692612059486cf28365f897c6ae9a5e7176ad91404def08efe340e92ea3c790218511b9d69fcda5b500d694d59a768c866839cb22b918b9322689e6ac66d21866159c84e2a0e41d9324c092a6cfc14c6e42b1bf3657ed763fb3ee007e9633253e3250f7d5d2d574e4c89b4517d9cc7a9ff92b80e5870dd822d075e6082cae341f2db748921f2909264bad93d1ca36f01aa414c3681e382bf294cf2f436e5fee6871d8acadf504f784de821ac21811b894f0c78548a9cced0ef27bc07ab29a2556318e5133623ca3f346d197632455279b111a9ed789a927cf3b09c53ac1ebc7457cf50c79f211a7402d8ff5371bbaeb8fca4b52efdc944e81ddf7737475568c8589a353687a8d7cff5e7003a696d286bc51198b07b2676c9675a161b42c33aface83cd24976ec4af28e8e5a35a60ac1798d672a0b23ea519bc6f55be62c0e3db3a432cb54e3e75ea0adc375e4a8c1a645370a921e93d2a1b040d894d9153c4ba86f60b2aae3fd2c2b86502691a0728860e9e12210d237dc9dbe1d1795ef65c81f4e2e948466ca14829b3c7ee86e0e0510a232fd0d22c1fc7c62bdb2e7d2d11f22fc74c85974c6b88c5c02b6df180cd22ba092a1ae8ea4c60cb29e2faec1e97ebbf886c34815bb906ccb2a4f86f75a"}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/14, 0xe}, 0xdabc}], 0x1, 0x10022, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000380)={'syztnl2\x00', r1, 0x29, 0x3, 0x8, 0xf9, 0x16, @private2, @private2, 0x40, 0x8, 0x6, 0x9e}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001140)={&(0x7f0000000980)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x41) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x80, 0xba, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000004040), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000000240)={0x38, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x7ff, 0x800]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4845}, 0x20000080) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) socket$kcm(0xa, 0x2, 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e21, 0x3, 'sh\x00', 0x1d, 0x9d43, 0x75}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x0, @private=0xa010100, 0x4e21, 0x4, 'lc\x00', 0x5, 0x8, 0x74}, {@multicast2, 0x4e20, 0x10000, 0xcd}}, 0x44) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x8, &(0x7f0000019580)=""/102400, &(0x7f0000000400)=0x19000) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r5, 0x3007, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x1, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}}, 0x20048014) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040084}, 0x24040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 1.788872978s ago: executing program 9 (id=7502): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="0200000004255b5a64a55475802233b1000000000001000000000083000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002bc0)={0x16, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000f702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fcfdffffbfa400000000000007040000f0ffffff740200000800000018090000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007ea000000000000056080000000000008500000081000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d4}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e22, @local}, 0x83, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='syzkaller0\x00', 0x9, 0x9, 0x4}) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x4003, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x18, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000202064250000830000202007000000491f000000bfa100000000008007010000f8ff6a01b702000008000000b7030000cf0000008500000006000000"], &(0x7f0000000080)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8e}, 0x94) recvmsg$unix(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x20) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000001b00)=0xb3b2, 0x4) recvmsg$unix(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20) recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000700)=""/4080, 0xff0}], 0x1}, 0x20) r8 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000000500)) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmsg$OSF_MSG_ADD(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x175c}, 0x1, 0x0, 0x0, 0x4044084}, 0x1dc8b08251aa3334) 1.572705271s ago: executing program 4 (id=7504): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x50) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000240)=0x1c, 0x180800) sendto$inet6(r2, &(0x7f0000000340)="1c828e79490dc91d14a9bc4c78045fffb17bc0590cbb636dc91d1526e731669e64c08b938c63679b01a5694263e5a2548b1a191e8a13916d8be3e62b76a911085319181ef362a5b79e747310cab3da4c14586e9793feadb7b2d95b7041e69cabc9e450c6afcb6f4b452b333abd4879b17cbb20d22f451d59497cce5301f6b86b6edb02419a600844df7341d6f7686eae3d861f36a458200c0092ce0de8a5dc4cd7ce41ea48ce90eb1e105b42e8ff81e1927b38bb35da25f3bbba0e4c8951e5cc410dcabb239c569fdb6a238e", 0xcc, 0x40040, &(0x7f0000000440)={0xa, 0x4e21, 0xf, @empty, 0x2}, 0x1c) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000180)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x100, 0x10, 0x40, 0x8000, 0x9, "e4982a15511b3263cea42b8dcc5127bbe92c4c8d1fe323b3a2d148b3054e7ce06bd1e0609c663c523ff27d9d5c0226f51de2ebfe239257a62671d22fa5f6d32034348e74f9bc62d214c26264c0e12d759430a6e7478ce5bbb47766763348f7c40798e0a00e7c08fbd8dc81723bc7f120d7f351bf6af80217ef132bbcd725d8b7"}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f00000105c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090b00000000007baaf0ff00000000bf8700000000000007080000fffdffffbca4000000000000a7040000f0ffffff740200001d00000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000cf4900000000000056070000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 1.257215399s ago: executing program 5 (id=7505): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) socket$inet6(0xa, 0x80002, 0x0) epoll_create1(0x80000) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0xe2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000180)="b0", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x8001}, &(0x7f0000000240)=0x8) socket$inet_sctp(0x2, 0x5, 0x84) socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r3], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="0503222ed3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@getchain={0x44, 0x66, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xe, 0x5}, {0x3, 0x19}, {0x1, 0xffff}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x4}]}, 0x44}}, 0x20044000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) 1.153348363s ago: executing program 4 (id=7506): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) r1 = socket(0x1000000010, 0x80002, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r2, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newchain={0x24, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) recvmmsg(r4, 0x0, 0x0, 0x10002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$can_bcm(r4, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000214010027bdfdfbdbdf25ca43c50600", @ANYRES32, @ANYBLOB="05005400010000000800010001000000"], 0x28}, 0x1, 0x0, 0x0, 0x44018}, 0x4000044) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000)=0x10001, 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31, 0x100}, 0x50) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (async) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) (async) getpeername(r6, 0x0, &(0x7f0000000180)) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a3100000000140005800800014000008917080002"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000010) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f00000006c0)={r8, &(0x7f0000000300)='*/-]^\x00', 0x424080, &(0x7f0000000340)={@align=0x1, {0x0, 0x6, 0x6, 0x8}}, 0xc, &(0x7f0000000380), &(0x7f0000000580)=0x7}) 1.040323755s ago: executing program 4 (id=7507): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x8, 0x3, 0x8, 0x0, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r1, 0xda76}, 0x8) sendto$inet6(r0, &(0x7f00000002c0)="03", 0x1, 0x20008840, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x9}, 0x1c) 1.002431417s ago: executing program 5 (id=7508): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3e, 0x0, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000000580)={0x4, 0x6, {0x7, @usage=0x80000001, 0x0, 0xfffffffeffffffff, 0x7fffffffffffffff, 0x8, 0x5, 0x6, 0x24, @usage=0x8bb, 0x200, 0x7, [0x3, 0x6502, 0x5, 0x4, 0x2, 0x8]}, {0x6, @struct={0x4, 0x2}, 0x0, 0xffff, 0x4d83, 0x2, 0x9, 0xe, 0x20, @usage=0xfffffffffffffffc, 0x3aa, 0xfff, [0xbe, 0x6, 0x472632ab, 0x3, 0x7, 0x5]}, {0x3, @usage=0x2, 0x0, 0x2, 0x10, 0x4, 0x4, 0xddcf, 0x8, @usage=0x8, 0x7ff, 0xca7, [0x5, 0x8000000000000001, 0x5, 0xffffffff, 0x7, 0x9]}, {0x892, 0x7f73, 0x7}}) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000000b40)={r7, 0x2a31457e, 0x7}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="240012800b00010062726964676500"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x884) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_START_POLL(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r13, 0x211, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8}]}, 0x24}}, 0x0) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newsa={0x184, 0x1a, 0x1, 0x70bd25, 0x100, {{@in=@broadcast, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xfffe, 0x3, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'poly1305-arm\x00'}, 0x0, 0x100}}]}, 0x184}}, 0x844) sendmsg$NFC_CMD_GET_TARGET(r11, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r13, 0x4, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000055}, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001", @ANYRESHEX=r1], 0xc4}}, 0x20050890) 922.885513ms ago: executing program 4 (id=7509): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB="010000140000000000000200000008000300", @ANYRES32, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000000) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 813.529286ms ago: executing program 9 (id=7510): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x580d9462, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xc000000}}, [@jmp={0x5, 0x1, 0x2, 0xa, 0x6, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffffffffffffff}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0xff6, &(0x7f0000001cc0)=""/4086, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 729.64874ms ago: executing program 9 (id=7511): syz_emit_ethernet(0x3e, &(0x7f0000000300)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x3, 0x0, 0x30, 0x0, 0x0, 0x8f, 0x4, 0x0, @local, @multicast1, {[@generic={0x4af3dca665480ba0, 0x2}, @generic={0x0, 0x2}]}}, {0x4e23, 0x4e23, 0x18, 0x0, @wg=@data={0x4, 0xffffffff}}}}}}, 0x0) 708.755431ms ago: executing program 0 (id=7512): unshare(0x22020600) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x7}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x9}]}}}]}, 0x48}}, 0x0) 553.142848ms ago: executing program 9 (id=7513): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000003a80)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {0x0}, &(0x7f0000003a00)=[{&(0x7f00000016c0)=""/96, 0x60}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x2, 0x39, 0x2}}], 0x48, 0x4000000}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) sendto$inet(r1, &(0x7f0000000080)="b077287cc005db3a41a795eb81e5255148b172b119d3c489a369134edb73ed5bbb1b96c52b4fa8c5c2a37a6ed6f6d436506df425da", 0x35, 0x44, &(0x7f0000000140)={0x2, 0x4e24, @loopback}, 0x10) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000380), 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x50, 0x2c, 0xd3f, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6, 0x1b}, {0x5, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @remote}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x200448d4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0x2e2e, 0x100, 0x7, 0x3, 0x0, 0x0, 0xffff}}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd7000fcdbdf2502"], 0x1c}}, 0x840) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0x400}, @generic={0x0, 0xffffffffffffff53, "d588380003c1"}]}}}}}}, 0xfd6c) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000240)={0x1, 0x3, 0x3, 0x8, 0xf8, 0x6, 0x4, 0x7, 0x1, 0x7, 0x3, 0x69, 0x80, 0x5}, 0xe) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0x10, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xe4}}, 0x0) 548.419784ms ago: executing program 4 (id=7514): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x55, 0xa691a4c7c8bfed69, 0x2, 0xfffffffd}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x24000840) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18080000000000000000000000000000181200", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 428.940239ms ago: executing program 4 (id=7515): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000300)) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="e8458a27d86650130000e3fe80d40c00055c54112fb4a05b81c023fe2c1df400178800003200", @ANYRES32=r4, @ANYBLOB="0c0002008000000000000000"], 0x3c}}, 0x20000000) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f00000010c0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x48, r5, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x20040800) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000840), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', r8, 0x4, 0xfe, 0x53, 0x3, 0x58, @mcast2, @mcast2={0xff, 0x5}, 0x8, 0x40, 0xe3e1, 0xcff}}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002300)={0x6, 0x13, &(0x7f00000020c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5e4075b4, 0x0, 0x0, 0x0, 0x80000001}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @exit, @exit, @cb_func={0x18, 0x7, 0x4, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x77d0, 0x0, 0x0, 0x0, 0x3}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}]}, &(0x7f0000002180)='syzkaller\x00', 0x8, 0x20, &(0x7f00000021c0)=""/32, 0x41100, 0x18, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002200)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000002240)={0x3, 0xa, 0x1, 0xb}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000002280), &(0x7f00000022c0)=[{0x1, 0x5, 0x2, 0xa}, {0x3, 0x1, 0x9, 0x9}, {0x3, 0x3, 0x6, 0x9}, {0x3, 0x5, 0x3, 0x5}], 0x10, 0x9}, 0x94) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000002440)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000024c0)={r11, 0x5, 0x4, "c4769dbc"}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002400)={{}, &(0x7f0000002080), &(0x7f00000023c0)=r10}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a010400000000000000000a0000010900010073797a31000000003400048018000180080001006c6f67002c00028008000540ffffff081800018007000100727400000c00028008000240000000010900020073797a3200000000140000001100010000000000000000000100000a"], 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001d40)={{r1, &(0x7f0000000040)='\'\x12\'&%,^+&+\\\x00', 0x181400, &(0x7f0000000100)={@align=0x2, {0x5, 0x2, 0x8001, 0x3}}, 0x1, &(0x7f0000000140), &(0x7f00000001c0)=0x8}, 0xa, &(0x7f0000001c00)=[{0x1, 0x9, &(0x7f0000000200)='bond\x00', &(0x7f00000002c0)="d162e855f2c2a05f8c715d45f13af8db16497a37bdca683b83abf6fc11583d05c5b3be2011cda7aefb8c7c6ab1c6e80a83da4695a29c8ec72f538a7f8084f8ac86d3a353c90c5f66ddf22b59d1add2ff6144a3e34b333937b577fef91db5f65e53f1fa3e5cd545723cf4ba4c4ad73bffa5ccc1964fe8d39ec2ed3be46b7d14e0931fcd6e4785c8", 0x87, 0x20}, {0x3, 0x80000, &(0x7f0000000380)='syz1\x00', &(0x7f0000000480), 0x0, 0x38}, {0x3, 0x320, &(0x7f0000000500)='[[#\\,,%\xe8{%+:*($\xff-&/\x00', &(0x7f0000000540)="a919e05ae6c46b83e058eec3818bf50b730d59388aa1e37f35e2403b8ea91b3d7d3dea1e466802d4bc69ee5a952a1b97daf8e50cb8fa3787f52fde3bde9797d7f321df898cd161da5190d5ca82c39a63980284204f9e1fc017214b61dca5c2a5e31d86b5346d941a7ef83238d5a068452d433b038c14e3cba4043424634ff48fe66aa933a3ff71", 0x87, 0x3a}, {0x2, 0x0, &(0x7f0000000600)='syz2\x00', &(0x7f0000000640)="27cc5a5e8e33b35868e37cb9452749e0c5b0555de9b405b997246f68c63f11a18692aeaa42f776220971d8fe8a2b64ad6e8854967034cda9f698cdf4fde1fda0128651473d3ad5ef26a972a42e374104e5eb5f197b705fefc747bdace892fbcc7606bfe4f439243a6839f1278d7366105cc39f8a699678e6b9a2fcd4196912d2bf61c1bf8755a2", 0x87, 0x30}, {0x1, 0xe3, &(0x7f0000000700)=')\x00', &(0x7f0000000740)="fff429fbf1d4f5ebc8ed603c5ed2439dce0cdd20a1bec33f2f5a99d309233de1ad5305b7dff18655c4b18bce3bfc83c4c47da2196ca43d5a67b45819f40e02f6cf9336ab64da982e9b686f08be81f560604b53a662805bccc3971ea92a52a48de28f28a71f62cd0c8a16c8e85795e2ccfb30240984b1f924e9f7f124580ecd47e96216cc39e6ca219f94a2e1b8ac1a4bbdb98c72ef631241416057d1f34776f871172d3a82df2e993d1d72db2ba8df6b52352472b693787386c0ff2e6bad1dabaeafda4620689c769ac249c3dcb8b77b2260af4958349124a56d895c2738fd4e50e154f3421017c7a4b6282f", 0xec, 0xe}, {0x2, 0x68, &(0x7f0000001980)='syz1\x00', &(0x7f0000000880)="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", 0x800, 0x10}, {0x2, 0x9, &(0x7f0000001880)='-)\'#{/\x00', &(0x7f00000018c0)="164cb942861d3c8d8b85beaf88724491e1429e2304785f67b28663b98d537d4c649ad6788650c05ab71952d9f7e742e54e2c7fc25ad44631e563ced8f3f9320685f7865221df338d513d28f6ba4da66c1ff7639720cdfe5c261bf20c9c4c96a18afc23b469c6d75ab80e366394ec2bfc5822a369f92ea71d03e8b68dcd6028f8949d3ab0794f973f6d6c0b1231d6f9f0d7d4a9f213c40c86468318ad80d7ac631d0c6551d6c15545073e2e0e9555318388ddb19fdee7ce2f", 0xb8, 0x20}, {0x1, 0x7f, &(0x7f0000000480)='\x80\xfa\xc9o\x80\x00S\xa1\xb3y\xb9!c|\xb86Y\v\xb2\x9c\xa3\tf\x91Q\xb2\xc6\x98\xa4\xc4Q~\xf6\x90\'\xe8\x88\xc8pA\x80F{@#x\xb3\xfb\xb0\xb3)D\x8e\'\xbfJ/\xc3\x92\xe5\xed\x03\x80\x12\xf3\xb0z\xd4\xc3\x02W\xbc\x9e\xd6\x0f\x88\xfd\vZ:\xb2\xfb\xe0N\x12\xa1\x9b\x87\xb4I', &(0x7f00000019c0)="9ed282859c916be549a4f726cb91e7e012adb99170f76dffab08d5be317d5f5249c902386fdb6ceef46d3143a8b24e234ef46daeda8c95cf", 0x38, 0x40}, {0x1, 0x0, &(0x7f0000001a00)=',\x00', &(0x7f0000001a40)="33f62428cf9794152bb828490ac5d2737a132a3fd0cfecc102401707060ca18d32a25845e8e9e4a491fc66df938e9f2abc2c1b4b0fcd9b91d8e1fa736f6df13e92ae5b50c2ecfae5b388e1236416d2b345f70b48a225a3bdc9cf408e65b351065edefc233d549d010c9effb2a147735640c57e6d8ff4c4cd393fbfa64f189df6dcc8d53e2ddc3fb1ffb65021a821cc64267afa4d0fb7818ad77283170002615f6bab1b6f6bce365009f9bfe64e4e3f133a758b5aaa7e", 0xb6}, {0x3, 0x0, &(0x7f0000001b00)='rt\x00', &(0x7f0000001b40)="973162e786b68d59b1f02dc3f36ae538c1e4303befa4f16762de7d47713dec40ac72bfb24221d50879537490fb8291eac9c6ac493a19e21ef0ad2eb44160e7ab144cb1654cfb3a7cbd9f34b488213e514d01b617fb00ef9db7cfa31de30c8fb435b2fe49733a259493a0faf4f47f959c90409cbbddb6a865b0cb2cb641ebcbd382122d731a7f1e78e7cd59f0181115de156946494d5e5aaab4d72d6a5f4ae53f8967880cf54e02e83afa82ebc2acd5173687a386042451d481", 0xb9}]}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@cgroup, 0xffffffffffffffff, 0x25, 0x2006}, 0x20) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$RDMA_NLDEV_CMD_SET(r12, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001e80)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x40000) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x2081}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0xfffffff7}]}}}]}, 0x3c}}, 0x28000000) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 301.878815ms ago: executing program 5 (id=7516): r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @remote, @random="eba7b00a4ba0", @remote}}}}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000280)={r0, &(0x7f0000000040)='^*%\x00', 0x8400, &(0x7f00000000c0)={@align=0x2, {0xffbd, 0x1, 0x5, 0x8}}, 0x7, &(0x7f0000000180)={@_ha_fsid}, &(0x7f0000000240)=0xfff}) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000280)={r0, &(0x7f0000000040)='^*%\x00', 0x8400, &(0x7f00000000c0)={@align=0x2, {0xffbd, 0x1, 0x5, 0x8}}, 0x7, &(0x7f0000000180)={@_ha_fsid}, &(0x7f0000000240)=0xfff}) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f00000006c0)=0x3) (async) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f00000006c0)=0x3) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x8) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f0000000580)={0x3, {{0x2, 0x4e23, @rand_addr=0x64010102}}, {{0x2, 0x4e22, @remote}}}, 0x108) (async) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f0000000580)={0x3, {{0x2, 0x4e23, @rand_addr=0x64010102}}, {{0x2, 0x4e22, @remote}}}, 0x108) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x20, r5, 0x209, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x54) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 301.413068ms ago: executing program 0 (id=7517): r0 = socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x800004, 0x100010, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e21, 0x101, @mcast2, 0xb6}}, 0x5, 0x2fc0}, 0x90) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000008000000000000d000000911176000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400003}, 0x94) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000000c0)=0x2, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000000700)={{r1, &(0x7f0000000240)='GPL\x00', 0x100, &(0x7f0000000280)={@_ha_fsid={[0x7ff, 0x9]}, {0x8, 0x66, 0xe783, 0x7fffffff}}, 0x1, &(0x7f00000004c0), &(0x7f0000000540)=0x3638}, {[0x7f, 0x9, 0x4cdb, 0x7]}, 0x4, 0x5c, &(0x7f0000000680)=""/92}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000780)={0x10000001}) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r4, r6, 0x25, 0x4, @void}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r8, r9, 0x4, r9}, 0x5) bind$llc(r2, &(0x7f0000000080)={0x1a, 0x101, 0x0, 0x20, 0x2, 0x9, @multicast}, 0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000007c0)={0x0, 0xfc00, 0x20, 0x800, 0xe}, &(0x7f0000000800)=0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000840)={0x7, 0x0, 0x3, 0x6, 0x4, 0x1, 0x4, 0x3, r10}, 0x20) recvfrom$llc(r2, &(0x7f0000000340)=""/203, 0xcb, 0x2, 0x0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x80000000) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r12, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) write$cgroup_int(r11, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r11, 0x0, 0xffffffff000) recvmmsg(r11, &(0x7f0000002280)=[{{0x0, 0x0, 0x0}, 0x6be1}, {{0x0, 0x0, &(0x7f0000001a00)=[{0x0}, {&(0x7f0000001940)=""/190, 0xbe}], 0x2}, 0x4b}], 0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000a0000000000000000000000c3a0f8ff5000000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x96, &(0x7f00000015c0)=""/150, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 0s ago: executing program 9 (id=7518): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x90, [0x0, 0x200000000180, 0x2000000002c6, 0x2000000004dc], 0x0, 0x0, 0x0}, 0x108) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, &(0x7f0000000440)=0x8000, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x33}}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="74000000000101040000000000000000020000002400018014000180080001000000000008000200e00000020c0002800500010000000000240002800c00028005000100000000001400018008000100ac1e000108000200e000000208000740000000001000"], 0x74}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreqsrc(r5, 0x0, 0x25, &(0x7f0000000000)={@multicast2, @dev, @empty}, &(0x7f0000000080)=0xc) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x62, 0x0, &(0x7f0000000140)) socket$packet(0x11, 0x3, 0x300) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000020009500000000000000b7020000000000007b9af8ff00000000bd09020000000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa420000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000020000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000100003040007057007c78d9292cb", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008", @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) kernel console output (not intermixed with test programs): unexpected cc 0x1003 length: 249 > 9 [ 905.664116][ T5639] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 905.671558][T31621] FAULT_INJECTION: forcing a failure. [ 905.671558][T31621] name failslab, interval 1, probability 0, space 0, times 0 [ 905.696185][ T5639] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 905.715465][T31621] CPU: 1 UID: 0 PID: 31621 Comm: syz.6.6555 Not tainted syzkaller #0 PREEMPT(full) [ 905.715494][T31621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 905.715507][T31621] Call Trace: [ 905.715516][T31621] [ 905.715525][T31621] dump_stack_lvl+0xe8/0x150 [ 905.715557][T31621] should_fail_ex+0x412/0x560 [ 905.715587][T31621] should_failslab+0xa8/0x100 [ 905.715612][T31621] __kvmalloc_node_noprof+0x178/0x8a0 [ 905.715646][T31621] ? nf_hook_entries_grow+0x288/0x720 [ 905.715677][T31621] ? __pfx___mutex_lock+0x10/0x10 [ 905.715706][T31621] nf_hook_entries_grow+0x288/0x720 [ 905.715751][T31621] __nf_register_net_hook+0x2c9/0x930 [ 905.715793][T31621] nf_register_net_hook+0xb2/0x190 [ 905.715824][T31621] nf_register_net_hooks+0x44/0x1b0 [ 905.715856][T31621] nf_defrag_ipv4_enable+0x87/0x120 [ 905.715937][T31621] nf_ct_netns_do_get+0x18c/0x5c0 [ 905.715971][T31621] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 905.716018][T31621] nf_ct_netns_get+0xa7/0x320 [ 905.716051][T31621] nft_connlimit_do_init+0x1de/0x2e0 [ 905.716083][T31621] nft_set_elem_expr_alloc+0x213/0x5f0 [ 905.716113][T31621] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 905.716154][T31621] ? nft_rhash_init+0x2de/0x3b0 [ 905.716190][T31621] ? __pfx_nft_rhash_init+0x10/0x10 [ 905.716213][T31621] ? kasan_quarantine_put+0xbb/0x1f0 [ 905.716241][T31621] ? __pfx_nft_rhash_key+0x10/0x10 [ 905.716266][T31621] ? __pfx_nft_rhash_obj+0x10/0x10 [ 905.716291][T31621] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 905.716323][T31621] nft_set_expr_alloc+0x397/0x760 [ 905.716357][T31621] nf_tables_newset+0x1c6b/0x2580 [ 905.716409][T31621] ? __pfx_nf_tables_newset+0x10/0x10 [ 905.716467][T31621] ? __nla_parse+0x40/0x60 [ 905.716499][T31621] nfnetlink_rcv+0x123e/0x27b0 [ 905.716564][T31621] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 905.716643][T31621] ? netlink_deliver_tap+0x2e/0x1b0 [ 905.716682][T31621] ? netlink_deliver_tap+0x2e/0x1b0 [ 905.716706][T31621] ? netlink_deliver_tap+0x2e/0x1b0 [ 905.716738][T31621] netlink_unicast+0x75c/0x8e0 [ 905.716775][T31621] netlink_sendmsg+0x813/0xb40 [ 905.716812][T31621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 905.716842][T31621] ? aa_sock_msg_perm+0xf1/0x1b0 [ 905.716877][T31621] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 905.716911][T31621] ____sys_sendmsg+0x972/0x9f0 [ 905.716935][T31621] ? __might_fault+0xaf/0x130 [ 905.716972][T31621] ? __pfx_____sys_sendmsg+0x10/0x10 [ 905.717008][T31621] ? import_iovec+0x73/0xa0 [ 905.717039][T31621] ___sys_sendmsg+0x2a5/0x360 [ 905.717063][T31621] ? __lock_acquire+0x6b5/0x2cf0 [ 905.717092][T31621] ? __pfx____sys_sendmsg+0x10/0x10 [ 905.717161][T31621] ? __fget_files+0x2a/0x420 [ 905.717192][T31621] ? __fget_files+0x3a0/0x420 [ 905.717232][T31621] __x64_sys_sendmsg+0x1bd/0x2a0 [ 905.717260][T31621] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 905.717295][T31621] ? __pfx_ksys_write+0x10/0x10 [ 905.717335][T31621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.717358][T31621] do_syscall_64+0x174/0x580 [ 905.717377][T31621] ? trace_irq_disable+0x3b/0x140 [ 905.717405][T31621] ? clear_bhb_loop+0x40/0x90 [ 905.717430][T31621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.717449][T31621] RIP: 0033:0x7fcacd59ce59 [ 905.717468][T31621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.717484][T31621] RSP: 002b:00007fcace462028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 905.717504][T31621] RAX: ffffffffffffffda RBX: 00007fcacd815fa0 RCX: 00007fcacd59ce59 [ 905.717517][T31621] RDX: 000000002400c850 RSI: 00002000000000c0 RDI: 0000000000000003 [ 905.717530][T31621] RBP: 00007fcace462090 R08: 0000000000000000 R09: 0000000000000000 [ 905.717542][T31621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 905.717553][T31621] R13: 00007fcacd816038 R14: 00007fcacd815fa0 R15: 00007ffc3ae59338 [ 905.717587][T31621] [ 905.718371][ T5639] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 905.739513][T19671] Bluetooth: hci1: command tx timeout [ 906.386667][T31634] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6557'. [ 906.883730][T31650] syzkaller1: entered promiscuous mode [ 906.900440][T31650] syzkaller1: entered allmulticast mode [ 906.938631][T31653] nbd: illegal input index -1 [ 906.974123][T31660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6565'. [ 907.074348][T31665] FAULT_INJECTION: forcing a failure. [ 907.074348][T31665] name failslab, interval 1, probability 0, space 0, times 0 [ 907.088149][T31665] CPU: 1 UID: 0 PID: 31665 Comm: syz.4.6567 Not tainted syzkaller #0 PREEMPT(full) [ 907.088178][T31665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 907.088192][T31665] Call Trace: [ 907.088200][T31665] [ 907.088210][T31665] dump_stack_lvl+0xe8/0x150 [ 907.088242][T31665] should_fail_ex+0x412/0x560 [ 907.088272][T31665] should_failslab+0xa8/0x100 [ 907.088297][T31665] __kvmalloc_node_noprof+0x178/0x8a0 [ 907.088330][T31665] ? nf_hook_entries_grow+0x288/0x720 [ 907.088369][T31665] nf_hook_entries_grow+0x288/0x720 [ 907.088401][T31665] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 907.088440][T31665] __nf_register_net_hook+0x2c9/0x930 [ 907.088474][T31665] ? nf_register_net_hook+0xc8/0x190 [ 907.088506][T31665] nf_register_net_hook+0xb2/0x190 [ 907.088538][T31665] nf_register_net_hooks+0x44/0x1b0 [ 907.088570][T31665] nf_ct_netns_do_get+0x3bf/0x5c0 [ 907.088603][T31665] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 907.088659][T31665] nf_ct_netns_get+0xa7/0x320 [ 907.088691][T31665] nft_connlimit_do_init+0x1de/0x2e0 [ 907.088724][T31665] nft_set_elem_expr_alloc+0x213/0x5f0 [ 907.088755][T31665] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 907.088793][T31665] ? nft_rhash_init+0x2de/0x3b0 [ 907.088820][T31665] ? __pfx_nft_rhash_init+0x10/0x10 [ 907.088841][T31665] ? kasan_quarantine_put+0xbb/0x1f0 [ 907.088867][T31665] ? __pfx_nft_rhash_key+0x10/0x10 [ 907.088889][T31665] ? __pfx_nft_rhash_obj+0x10/0x10 [ 907.088911][T31665] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 907.088940][T31665] nft_set_expr_alloc+0x397/0x760 [ 907.088970][T31665] nf_tables_newset+0x1c6b/0x2580 [ 907.089012][T31665] ? __pfx_nf_tables_newset+0x10/0x10 [ 907.089066][T31665] ? __nla_parse+0x40/0x60 [ 907.089094][T31665] nfnetlink_rcv+0x123e/0x27b0 [ 907.089151][T31665] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 907.089188][T31665] ? ref_tracker_free+0x693/0x840 [ 907.089243][T31665] ? __netlink_deliver_tap+0x807/0x850 [ 907.089276][T31665] ? netlink_deliver_tap+0x2e/0x1b0 [ 907.089301][T31665] ? netlink_deliver_tap+0x2e/0x1b0 [ 907.089330][T31665] netlink_unicast+0x75c/0x8e0 [ 907.089365][T31665] netlink_sendmsg+0x813/0xb40 [ 907.089400][T31665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 907.089430][T31665] ? aa_sock_msg_perm+0xf1/0x1b0 [ 907.089464][T31665] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 907.089498][T31665] ____sys_sendmsg+0x972/0x9f0 [ 907.089522][T31665] ? __might_fault+0xaf/0x130 [ 907.089558][T31665] ? __pfx_____sys_sendmsg+0x10/0x10 [ 907.089592][T31665] ? import_iovec+0x73/0xa0 [ 907.089623][T31665] ___sys_sendmsg+0x2a5/0x360 [ 907.089660][T31665] ? __lock_acquire+0x6b5/0x2cf0 [ 907.089689][T31665] ? __pfx____sys_sendmsg+0x10/0x10 [ 907.089755][T31665] ? __fget_files+0x2a/0x420 [ 907.089781][T31665] ? __fget_files+0x3a0/0x420 [ 907.089820][T31665] __x64_sys_sendmsg+0x1bd/0x2a0 [ 907.089849][T31665] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 907.089885][T31665] ? __pfx_ksys_write+0x10/0x10 [ 907.089927][T31665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.089952][T31665] do_syscall_64+0x174/0x580 [ 907.089974][T31665] ? trace_irq_disable+0x3b/0x140 [ 907.090005][T31665] ? clear_bhb_loop+0x40/0x90 [ 907.090031][T31665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.090053][T31665] RIP: 0033:0x7fbe58d9ce59 [ 907.090074][T31665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 907.090093][T31665] RSP: 002b:00007fbe59c9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 907.090115][T31665] RAX: ffffffffffffffda RBX: 00007fbe59015fa0 RCX: 00007fbe58d9ce59 [ 907.090130][T31665] RDX: 000000002400c850 RSI: 00002000000000c0 RDI: 0000000000000003 [ 907.090144][T31665] RBP: 00007fbe59c9b090 R08: 0000000000000000 R09: 0000000000000000 [ 907.090157][T31665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 907.090170][T31665] R13: 00007fbe59016038 R14: 00007fbe59015fa0 R15: 00007fff7fd06298 [ 907.090207][T31665] [ 907.827383][T31650] syzkaller1: left promiscuous mode [ 907.840667][T31650] syzkaller1: left allmulticast mode [ 907.983065][T31622] lo speed is unknown, defaulting to 1000 [ 908.003982][T31675] IPVS: set_ctl: invalid protocol: 136 10.1.1.0:20002 [ 908.215820][ T4950] Bluetooth: hci2: command tx timeout [ 908.254282][T31679] lo speed is unknown, defaulting to 1000 [ 908.851805][T31698] netlink: 'syz.3.6577': attribute type 16 has an invalid length. [ 908.872304][T31698] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6577'. [ 909.378618][T31622] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.387284][T31622] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.394745][T31622] bridge_slave_0: entered allmulticast mode [ 909.402994][T31622] bridge_slave_0: entered promiscuous mode [ 909.412529][T31622] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.420597][T31622] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.428609][T31622] bridge_slave_1: entered allmulticast mode [ 909.436941][T31622] bridge_slave_1: entered promiscuous mode [ 909.524173][T31717] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6581'. [ 909.533860][T31622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.552387][T31622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 909.564471][T31717] netlink: 'syz.6.6581': attribute type 21 has an invalid length. [ 909.591685][T31717] netlink: 128 bytes leftover after parsing attributes in process `syz.6.6581'. [ 909.652460][T31622] team0: Port device team_slave_0 added [ 909.678673][T31622] team0: Port device team_slave_1 added [ 909.708524][T31717] netlink: 'syz.6.6581': attribute type 4 has an invalid length. [ 909.735804][T31717] netlink: 'syz.6.6581': attribute type 3 has an invalid length. [ 909.758040][T31717] netlink: 3 bytes leftover after parsing attributes in process `syz.6.6581'. [ 909.831563][T31622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 909.840395][T31622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.883579][T31622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 909.897571][T31727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6586'. [ 909.917554][T31622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.937176][T31622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.983060][T31729] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6587'. [ 909.995565][T31622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.015465][T31729] netlink: 'syz.1.6587': attribute type 32 has an invalid length. [ 910.109243][T31729] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 910.206912][T31734] tipc: Enabled bearer , priority 0 [ 910.250255][T31740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6589'. [ 910.295948][ T4950] Bluetooth: hci2: command tx timeout [ 910.333368][T31622] hsr_slave_0: entered promiscuous mode [ 910.351070][T31622] hsr_slave_1: entered promiscuous mode [ 910.360858][T31622] debugfs: 'hsr0' already exists in 'hsr' [ 910.372533][T31622] Cannot create hsr debugfs directory [ 910.388069][T31732] tipc: Disabling bearer [ 910.404401][T31740] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6589'. [ 910.439108][T31749] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 911.142211][T31622] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 911.159721][T31622] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.187588][T31622] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 41317 - 0 [ 911.393956][T31622] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 911.406233][T31622] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.421650][T31622] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 41317 - 0 [ 911.568845][T31622] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 911.579593][T31622] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.591796][T31622] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 41317 - 0 [ 911.782434][T31622] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 911.806847][T31622] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.836946][T31622] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 41317 - 0 [ 911.936887][T31812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6609'. [ 912.375386][ T4950] Bluetooth: hci2: command tx timeout [ 914.455171][ T4950] Bluetooth: hci2: command tx timeout [ 914.929583][T31812] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 915.029712][T31622] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 915.115973][T31622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 915.133567][T31622] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 915.172390][T31622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 915.192931][T31622] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 915.211054][T31622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 915.225709][T31622] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 915.258657][T31622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 915.322543][T31847] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6617'. [ 915.510532][T31622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 915.586521][T31622] 8021q: adding VLAN 0 to HW filter on device team0 [ 915.662844][T14810] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.670119][T14810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 915.722500][T31869] netlink: 27 bytes leftover after parsing attributes in process `syz.1.6621'. [ 915.740696][T31234] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.748018][T31234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 915.780959][T31871] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6621'. [ 916.205946][T31882] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 917.251329][T31622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 917.276733][T31928] netlink: 'syz.3.6633': attribute type 11 has an invalid length. [ 917.308631][T31928] netlink: 'syz.3.6633': attribute type 11 has an invalid length. [ 917.326184][T31928] netlink: 'syz.3.6633': attribute type 11 has an invalid length. [ 917.357695][T31928] netlink: 'syz.3.6633': attribute type 11 has an invalid length. [ 917.385478][T31928] netlink: 'syz.3.6633': attribute type 11 has an invalid length. [ 917.403943][T31928] netlink: 'syz.3.6633': attribute type 11 has an invalid length. [ 917.432422][T31928] netlink: 'syz.3.6633': attribute type 11 has an invalid length. [ 917.459609][T31934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6634'. [ 917.499642][T31928] netlink: 'syz.3.6633': attribute type 11 has an invalid length. [ 917.530443][T31928] netlink: 'syz.3.6633': attribute type 11 has an invalid length. [ 917.556671][T31928] netlink: 'syz.3.6633': attribute type 11 has an invalid length. [ 917.736332][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 918.212707][T31622] veth0_vlan: entered promiscuous mode [ 918.353770][T31622] veth1_vlan: entered promiscuous mode [ 918.454695][T31985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 918.493206][T31622] veth0_macvtap: entered promiscuous mode [ 918.506200][T31622] veth1_macvtap: entered promiscuous mode [ 918.524224][T31985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 918.546709][T31622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 918.593015][T31622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 918.604158][T31986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 918.630068][T31234] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.652331][T31234] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.662629][T31234] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.698985][T31234] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.923900][T31233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.938535][T31233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.051761][T31234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.077649][T31234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.326901][T32005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 919.379023][T32005] bridge_slave_0 (unregistering): left allmulticast mode [ 919.405024][T32005] bridge_slave_0 (unregistering): left promiscuous mode [ 919.433713][T32005] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.867875][T32035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6651'. [ 920.084101][T32045] netlink: 17 bytes leftover after parsing attributes in process `syz.5.6654'. [ 920.490122][T32070] FAULT_INJECTION: forcing a failure. [ 920.490122][T32070] name failslab, interval 1, probability 0, space 0, times 0 [ 920.503279][T32070] CPU: 1 UID: 0 PID: 32070 Comm: syz.5.6664 Not tainted syzkaller #0 PREEMPT(full) [ 920.503307][T32070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 920.503321][T32070] Call Trace: [ 920.503331][T32070] [ 920.503340][T32070] dump_stack_lvl+0xe8/0x150 [ 920.503372][T32070] should_fail_ex+0x412/0x560 [ 920.503402][T32070] should_failslab+0xa8/0x100 [ 920.503427][T32070] __kvmalloc_node_noprof+0x178/0x8a0 [ 920.503460][T32070] ? nf_hook_entries_grow+0x288/0x720 [ 920.503499][T32070] nf_hook_entries_grow+0x288/0x720 [ 920.503542][T32070] __nf_register_net_hook+0x2c9/0x930 [ 920.503582][T32070] nf_register_net_hook+0xb2/0x190 [ 920.503613][T32070] nf_register_net_hooks+0x44/0x1b0 [ 920.503644][T32070] nf_ct_netns_do_get+0x212/0x5c0 [ 920.503676][T32070] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 920.503722][T32070] nf_ct_netns_get+0xc7/0x320 [ 920.503762][T32070] nft_connlimit_do_init+0x1de/0x2e0 [ 920.503795][T32070] nft_set_elem_expr_alloc+0x213/0x5f0 [ 920.503824][T32070] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 920.503863][T32070] ? nft_rhash_init+0x2de/0x3b0 [ 920.503893][T32070] ? __pfx_nft_rhash_init+0x10/0x10 [ 920.503915][T32070] ? kasan_quarantine_put+0xbb/0x1f0 [ 920.503945][T32070] ? __pfx_nft_rhash_key+0x10/0x10 [ 920.503969][T32070] ? __pfx_nft_rhash_obj+0x10/0x10 [ 920.503992][T32070] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 920.504022][T32070] nft_set_expr_alloc+0x397/0x760 [ 920.504056][T32070] nf_tables_newset+0x1c6b/0x2580 [ 920.504103][T32070] ? __pfx_nf_tables_newset+0x10/0x10 [ 920.504161][T32070] ? __nla_parse+0x40/0x60 [ 920.504193][T32070] nfnetlink_rcv+0x123e/0x27b0 [ 920.504260][T32070] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 920.504302][T32070] ? ref_tracker_free+0x693/0x840 [ 920.504362][T32070] ? __netlink_deliver_tap+0x807/0x850 [ 920.504399][T32070] ? netlink_deliver_tap+0x2e/0x1b0 [ 920.504424][T32070] ? netlink_deliver_tap+0x2e/0x1b0 [ 920.504456][T32070] netlink_unicast+0x75c/0x8e0 [ 920.504492][T32070] netlink_sendmsg+0x813/0xb40 [ 920.504529][T32070] ? __pfx_netlink_sendmsg+0x10/0x10 [ 920.504558][T32070] ? aa_sock_msg_perm+0xf1/0x1b0 [ 920.504593][T32070] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 920.504627][T32070] ____sys_sendmsg+0x972/0x9f0 [ 920.504652][T32070] ? __might_fault+0xaf/0x130 [ 920.504699][T32070] ? __pfx_____sys_sendmsg+0x10/0x10 [ 920.504735][T32070] ? import_iovec+0x73/0xa0 [ 920.504774][T32070] ___sys_sendmsg+0x2a5/0x360 [ 920.504797][T32070] ? __lock_acquire+0x6b5/0x2cf0 [ 920.504826][T32070] ? __pfx____sys_sendmsg+0x10/0x10 [ 920.504890][T32070] ? __fget_files+0x2a/0x420 [ 920.504916][T32070] ? __fget_files+0x3a0/0x420 [ 920.504955][T32070] __x64_sys_sendmsg+0x1bd/0x2a0 [ 920.504983][T32070] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 920.505019][T32070] ? __pfx_ksys_write+0x10/0x10 [ 920.505060][T32070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.505085][T32070] do_syscall_64+0x174/0x580 [ 920.505108][T32070] ? trace_irq_disable+0x3b/0x140 [ 920.505141][T32070] ? clear_bhb_loop+0x40/0x90 [ 920.505168][T32070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.505190][T32070] RIP: 0033:0x7fa6b519ce59 [ 920.505210][T32070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 920.505228][T32070] RSP: 002b:00007fa6b5f90028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 920.505252][T32070] RAX: ffffffffffffffda RBX: 00007fa6b5415fa0 RCX: 00007fa6b519ce59 [ 920.505267][T32070] RDX: 000000002400c850 RSI: 00002000000000c0 RDI: 0000000000000003 [ 920.505281][T32070] RBP: 00007fa6b5f90090 R08: 0000000000000000 R09: 0000000000000000 [ 920.505295][T32070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 920.505307][T32070] R13: 00007fa6b5416038 R14: 00007fa6b5415fa0 R15: 00007ffe9b42de08 [ 920.505344][T32070] [ 921.033002][T32074] lo speed is unknown, defaulting to 1000 [ 921.120907][T32079] netlink: 88 bytes leftover after parsing attributes in process `syz.5.6668'. [ 921.287018][T32077] netlink: 'syz.6.6666': attribute type 4 has an invalid length. [ 921.328139][T32087] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6671'. [ 921.723882][T32102] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6673'. [ 921.733094][T32102] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6673'. [ 922.430644][T32117] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 922.788591][T32127] xt_hashlimit: size too large, truncated to 1048576 [ 922.880316][T32130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6684'. [ 922.953000][T32136] netlink: 'syz.6.6685': attribute type 1 has an invalid length. [ 922.976632][T32136] netlink: 88 bytes leftover after parsing attributes in process `syz.6.6685'. [ 922.997598][T32136] netlink: 'syz.6.6685': attribute type 1 has an invalid length. [ 923.026961][T32136] netlink: 634 bytes leftover after parsing attributes in process `syz.6.6685'. [ 923.287176][T32148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6690'. [ 923.349429][T32148] netlink: 'syz.1.6690': attribute type 3 has an invalid length. [ 923.370204][T32148] netlink: 666 bytes leftover after parsing attributes in process `syz.1.6690'. [ 923.423834][T32152] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (32769) ! [ 923.521502][T32148] vlan3: entered promiscuous mode [ 923.527436][T32148] geneve1: entered promiscuous mode [ 923.533038][T32148] vlan3: entered allmulticast mode [ 923.539512][T32148] geneve1: entered allmulticast mode [ 923.729229][T32164] syzkaller1: entered promiscuous mode [ 923.746262][T32164] syzkaller1: entered allmulticast mode [ 923.871095][T32173] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6700'. [ 924.168816][ T6326] IPVS: starting estimator thread 0... [ 924.176375][T32193] IPVS: set_ctl: invalid protocol: 19497 224.0.0.1:20001 [ 924.275019][T32194] IPVS: using max 28 ests per chain, 67200 per kthread [ 925.190247][T32226] lo speed is unknown, defaulting to 1000 [ 925.766967][T32242] sctp: [Deprecated]: syz.5.6724 (pid 32242) Use of int in maxseg socket option. [ 925.766967][T32242] Use struct sctp_assoc_value instead [ 925.936672][T32226] netlink: 'syz.6.6719': attribute type 4 has an invalid length. [ 926.332187][ T5639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 926.344299][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 926.357185][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 926.400739][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 926.410266][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 926.499831][T32255] __nla_validate_parse: 5 callbacks suppressed [ 926.499852][T32255] netlink: 212328 bytes leftover after parsing attributes in process `syz.6.6730'. [ 926.525352][T32255] netlink: Unknown conntrack attr (type=1024, max=9) [ 926.560936][T32258] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6730'. [ 927.375818][T32253] lo speed is unknown, defaulting to 1000 [ 927.516324][T32299] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.630711][T32302] lo speed is unknown, defaulting to 1000 [ 927.726731][T32304] netlink: 'syz.6.6739': attribute type 4 has an invalid length. [ 928.465467][ T5639] Bluetooth: hci0: command tx timeout [ 928.543996][T32322] syzkaller1: entered promiscuous mode [ 928.620166][T32322] syzkaller1: entered allmulticast mode [ 929.003237][T32253] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.012796][T32253] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.021555][T32253] bridge_slave_0: entered allmulticast mode [ 929.030847][T32253] bridge_slave_0: entered promiscuous mode [ 929.087296][T32336] vlan4: entered promiscuous mode [ 929.092653][T32336] bridge0: entered promiscuous mode [ 929.115194][T32340] netlink: 'syz.1.6744': attribute type 4 has an invalid length. [ 929.124678][T32253] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.137964][T32253] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.155038][T32253] bridge_slave_1: entered allmulticast mode [ 929.169873][T32253] bridge_slave_1: entered promiscuous mode [ 929.302881][T32253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 929.332660][T32253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 929.402422][T32347] x_tables: unsorted underflow at hook 2 [ 929.420490][T32253] team0: Port device team_slave_0 added [ 929.431801][T32253] team0: Port device team_slave_1 added [ 929.489137][T32350] netlink: 'syz.1.6747': attribute type 4 has an invalid length. [ 929.498273][T32350] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6747'. [ 929.531210][T32253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 929.540766][T32253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 929.571165][T32253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 929.604355][T32352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6747'. [ 929.617473][T32352] openvswitch: netlink: Flow actions attr not present in new flow. [ 929.629250][T32253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 929.641235][T32253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 929.669566][T32350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6747'. [ 929.679531][T32253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 929.798678][T32351] lo speed is unknown, defaulting to 1000 [ 929.925894][T32253] hsr_slave_0: entered promiscuous mode [ 929.939495][T32253] hsr_slave_1: entered promiscuous mode [ 929.952704][T32253] debugfs: 'hsr0' already exists in 'hsr' [ 929.959126][T32253] Cannot create hsr debugfs directory [ 930.537440][ T5639] Bluetooth: hci0: command 0x041b tx timeout [ 930.861722][T32369] netlink: 'syz.6.6752': attribute type 4 has an invalid length. [ 930.913574][T32368] lo speed is unknown, defaulting to 1000 [ 931.080773][T32378] IPv6: NLM_F_CREATE should be specified when creating new route [ 931.103352][T32376] netlink: 'syz.3.6754': attribute type 10 has an invalid length. [ 931.126344][T32378] netlink: 'syz.1.6753': attribute type 1 has an invalid length. [ 931.157003][T32376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 931.169198][T32376] team0: Port device bond0 added [ 931.264001][T32376] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6754'. [ 931.427045][T32388] netlink: 'syz.1.6758': attribute type 1 has an invalid length. [ 931.490208][T32253] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 931.520177][T32253] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 931.529088][T32253] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 931.555732][T32253] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 931.590062][T32253] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 931.634555][T32253] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 931.657970][T32253] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 931.658161][T32394] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6760'. [ 931.703646][T32253] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 932.074197][T32253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 932.153476][T32253] 8021q: adding VLAN 0 to HW filter on device team0 [ 932.217163][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.224440][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 932.273654][T20096] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.281177][T20096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 932.327841][T32424] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 932.616630][ T4950] Bluetooth: hci0: command 0x041b tx timeout [ 933.077218][T32253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 933.327628][T32445] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6769'. [ 933.395628][T32445] ip6tnl1: entered allmulticast mode [ 933.404679][T32447] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6769'. [ 933.578175][T32461] syzkaller0: entered promiscuous mode [ 933.596904][T32461] syzkaller0: entered allmulticast mode [ 933.667881][T32461] syzkaller0: tun_net_xmit 14 [ 933.889163][T32253] veth0_vlan: entered promiscuous mode [ 933.925601][T32253] veth1_vlan: entered promiscuous mode [ 934.008254][T32471] lo speed is unknown, defaulting to 1000 [ 934.015587][T32474] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6776'. [ 934.032736][T32253] veth0_macvtap: entered promiscuous mode [ 934.054242][T32253] veth1_macvtap: entered promiscuous mode [ 934.313244][T32253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 934.343303][T32483] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6780'. [ 934.356027][T32253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 934.424318][T14810] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.450244][T14810] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.511107][T14810] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.554409][T14810] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.690495][T32489] bridge_slave_0: left allmulticast mode [ 934.697739][T32489] bridge_slave_0: left promiscuous mode [ 934.703533][T32489] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.706935][ T4950] Bluetooth: hci0: command 0x041b tx timeout [ 934.726476][T32489] bridge_slave_1: left allmulticast mode [ 934.732185][T32489] bridge_slave_1: left promiscuous mode [ 934.738621][T32489] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.754750][T32489] bond0: (slave bond_slave_0): Releasing backup interface [ 934.779557][T32489] bond0: (slave bond_slave_1): Releasing backup interface [ 934.824490][T32489] team0: Port device team_slave_0 removed [ 934.842800][T32489] team0: Port device team_slave_1 removed [ 934.850491][T32489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 934.859367][T32489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 934.870651][T32489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 934.880451][T32489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 934.891737][T32489] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 935.274466][T20097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.279117][T32499] syzkaller0: entered promiscuous mode [ 935.292593][T32499] syzkaller0: entered allmulticast mode [ 935.307604][T20097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.567264][T20097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.579802][T20097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.697804][T32506] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 935.726498][T32506] bond1 (unregistering): Released all slaves [ 935.777940][T20097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.813157][T20097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.486395][T32541] netlink: 388 bytes leftover after parsing attributes in process `syz.5.6798'. [ 936.777961][ T4950] Bluetooth: hci0: command 0x041b tx timeout [ 936.913147][T32554] bridge0: port 3(vlan3) entered blocking state [ 936.963037][T32554] bridge0: port 3(vlan3) entered disabled state [ 936.973471][T32554] vlan3: entered allmulticast mode [ 936.980342][T32554] geneve0: entered allmulticast mode [ 936.989322][T32554] vlan3: entered promiscuous mode [ 937.003803][T32554] geneve0: entered promiscuous mode [ 937.278036][T32565] netlink: 820 bytes leftover after parsing attributes in process `syz.7.6803'. [ 937.313557][T32565] netlink: 820 bytes leftover after parsing attributes in process `syz.7.6803'. [ 937.945488][T32577] bond1: entered allmulticast mode [ 937.951413][T32577] 8021q: adding VLAN 0 to HW filter on device bond1 [ 938.277484][T32586] netlink: 'syz.7.6809': attribute type 13 has an invalid length. [ 938.333142][ T6320] IPVS: starting estimator thread 0... [ 938.445018][T32588] IPVS: using max 24 ests per chain, 57600 per kthread [ 938.512617][T32591] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6810'. [ 938.524364][T32591] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.6810'. [ 938.660436][T32593] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6811'. [ 938.689937][T32593] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6811'. [ 938.730150][T32593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 938.823435][T32596] netlink: 'syz.5.6811': attribute type 1 has an invalid length. [ 938.843847][T32596] netlink: 'syz.5.6811': attribute type 1 has an invalid length. [ 938.886404][T32596] netlink: 'syz.5.6811': attribute type 2 has an invalid length. [ 938.918782][T32596] netlink: 'syz.5.6811': attribute type 1 has an invalid length. [ 938.951543][T32596] netlink: 'syz.5.6811': attribute type 2 has an invalid length. [ 938.992968][T32596] netlink: 'syz.5.6811': attribute type 2 has an invalid length. [ 939.008817][T32596] netlink: 'syz.5.6811': attribute type 1 has an invalid length. [ 939.242765][T32612] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6816'. [ 939.521966][T32629] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6820'. [ 939.534329][T32629] 8021q: VLANs not supported on ip_vti0 [ 939.549001][T32630] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6820'. [ 939.561979][T32630] 8021q: VLANs not supported on ip_vti0 [ 939.888617][T32640] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6822'. [ 940.301734][T32650] netlink: 'syz.5.6825': attribute type 2 has an invalid length. [ 942.413403][T32690] __nla_validate_parse: 2 callbacks suppressed [ 942.413427][T32690] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6835'. [ 942.436206][T32692] netlink: 'syz.5.6836': attribute type 30 has an invalid length. [ 942.616606][ T5761] hid-generic 0005:0007:0007.0001: collection stack underflow [ 942.646738][ T5761] hid-generic 0005:0007:0007.0001: item 0 2 0 12 parsing failed [ 942.656418][ T5761] hid-generic 0005:0007:0007.0001: probe with driver hid-generic failed with error -22 [ 942.809622][T32704] bond5: (slave bridge1): Enslaving as a backup interface with an up link [ 942.848107][T32706] batman_adv: batadv0: Adding interface: vlan3 [ 942.855916][T32706] batman_adv: batadv0: The MTU of interface vlan3 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 942.879081][T32706] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 943.485826][T32727] bond6: Unable to set up delay as MII monitoring is disabled [ 943.504047][T32727] bond6 (unregistering): Released all slaves [ 943.587588][T32733] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6844'. [ 944.027864][T32742] validate_nla: 1 callbacks suppressed [ 944.027897][T32742] netlink: 'syz.7.6846': attribute type 1 has an invalid length. [ 944.028952][T32741] netlink: 'syz.7.6846': attribute type 1 has an invalid length. [ 944.046717][T32742] netlink: 'syz.7.6846': attribute type 3 has an invalid length. [ 944.074955][T32741] netlink: 'syz.7.6846': attribute type 3 has an invalid length. [ 944.086389][T32742] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6846'. [ 944.095646][T32741] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6846'. [ 944.635234][T32753] netlink: 'syz.7.6849': attribute type 3 has an invalid length. [ 944.653629][T32753] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6849'. [ 944.789081][T32755] sctp: [Deprecated]: syz.7.6850 (pid 32755) Use of int in max_burst socket option. [ 944.789081][T32755] Use struct sctp_assoc_value instead [ 944.836738][T32755] netlink: 'syz.7.6850': attribute type 1 has an invalid length. [ 944.855100][T32755] netlink: 224 bytes leftover after parsing attributes in process `syz.7.6850'. [ 944.999351][T32756] lo speed is unknown, defaulting to 1000 [ 945.693509][T32760] lo speed is unknown, defaulting to 1000 [ 946.700908][T32765] tipc: Started in network mode [ 946.719483][T32765] tipc: Node identity e0000001, cluster identity 4711 [ 946.738430][T32765] tipc: Enabling of bearer rejected, failed to enable media [ 946.775538][ T300] netlink: 'syz.5.6852': attribute type 10 has an invalid length. [ 946.808594][ T300] netlink: 228 bytes leftover after parsing attributes in process `syz.5.6852'. [ 947.015783][ T303] veth1_to_hsr: entered promiscuous mode [ 947.055023][ T303] veth1_to_hsr: entered allmulticast mode [ 947.102952][ T307] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6856'. [ 947.106971][ T303] netlink: 'syz.5.6852': attribute type 2 has an invalid length. [ 947.166916][ T303] netlink: 119 bytes leftover after parsing attributes in process `syz.5.6852'. [ 947.236976][ T5639] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 947.252416][ T306] lo speed is unknown, defaulting to 1000 [ 947.262548][ T5639] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 947.278318][ T5639] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 947.286804][ T5639] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 947.301608][ T5639] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 947.828371][ T317] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6857'. [ 948.052651][ T320] batadv_slave_0: entered promiscuous mode [ 948.131637][ T320] batadv_slave_0: left promiscuous mode [ 948.301458][ T308] lo speed is unknown, defaulting to 1000 [ 949.341740][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.365957][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.384620][ T308] bridge_slave_0: entered allmulticast mode [ 949.401380][ T356] x_tables: duplicate underflow at hook 2 [ 949.410017][ T308] bridge_slave_0: entered promiscuous mode [ 949.415442][ T5639] Bluetooth: hci4: command tx timeout [ 949.449011][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.466565][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.494239][ T308] bridge_slave_1: entered allmulticast mode [ 949.528419][ T308] bridge_slave_1: entered promiscuous mode [ 949.720336][ T308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.753012][ T308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 949.889701][ T308] team0: Port device team_slave_0 added [ 949.908603][ T308] team0: Port device team_slave_1 added [ 950.001637][ T308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 950.019349][ T308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 950.076003][ T308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 950.107798][ T308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 950.122664][ T308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 950.179800][ T308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 950.350436][ T308] hsr_slave_0: entered promiscuous mode [ 950.367036][ T308] hsr_slave_1: entered promiscuous mode [ 950.397111][ T308] debugfs: 'hsr0' already exists in 'hsr' [ 950.414222][ T308] Cannot create hsr debugfs directory [ 951.279606][ T308] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 951.307287][ T308] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 951.327680][ T308] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 951.357466][ T308] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 951.376324][ T308] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 951.400873][ T308] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 951.440822][ T308] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 951.463872][ T308] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 951.495166][ T5639] Bluetooth: hci4: command tx timeout [ 951.777409][ T308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 951.837584][ T308] 8021q: adding VLAN 0 to HW filter on device team0 [ 951.873688][T31234] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.880935][T31234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 951.939458][T14810] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.946728][T14810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.231636][ T308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 953.240226][ T406] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 953.272364][ T402] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 953.577482][ T5639] Bluetooth: hci4: command tx timeout [ 953.738119][ T308] veth0_vlan: entered promiscuous mode [ 953.769962][ T308] veth1_vlan: entered promiscuous mode [ 953.847544][ T308] veth0_macvtap: entered promiscuous mode [ 953.877011][ T308] veth1_macvtap: entered promiscuous mode [ 953.934439][ T308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 953.957725][ T308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 953.993065][T20096] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.033729][T20096] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.057917][T20096] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.097646][T20096] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.414729][T14810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.446273][T14810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.555688][T31234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.571956][ T426] FAULT_INJECTION: forcing a failure. [ 954.571956][ T426] name failslab, interval 1, probability 0, space 0, times 0 [ 954.592328][T31234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.603600][ T426] CPU: 0 UID: 0 PID: 426 Comm: syz.5.6883 Not tainted syzkaller #0 PREEMPT(full) [ 954.603630][ T426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 954.603644][ T426] Call Trace: [ 954.603653][ T426] [ 954.603662][ T426] dump_stack_lvl+0xe8/0x150 [ 954.603707][ T426] should_fail_ex+0x412/0x560 [ 954.603737][ T426] should_failslab+0xa8/0x100 [ 954.603762][ T426] __kmalloc_noprof+0xe8/0x760 [ 954.603792][ T426] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 954.603899][ T426] tomoyo_realpath_from_path+0xe3/0x5d0 [ 954.603923][ T426] ? tomoyo_domain+0xd7/0x130 [ 954.603951][ T426] ? tomoyo_path_number_perm+0x219/0x630 [ 954.604007][ T426] tomoyo_path_number_perm+0x246/0x630 [ 954.604039][ T426] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 954.604066][ T426] ? __lock_acquire+0x6b5/0x2cf0 [ 954.604107][ T426] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 954.604154][ T426] ? __fget_files+0x2a/0x420 [ 954.604184][ T426] ? __fget_files+0x2a/0x420 [ 954.604209][ T426] ? __fget_files+0x3a0/0x420 [ 954.604234][ T426] ? __fget_files+0x2a/0x420 [ 954.604263][ T426] security_file_ioctl+0xc3/0x2a0 [ 954.604322][ T426] __se_sys_ioctl+0x47/0x170 [ 954.604355][ T426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.604378][ T426] do_syscall_64+0x174/0x580 [ 954.604399][ T426] ? trace_irq_disable+0x3b/0x140 [ 954.604430][ T426] ? clear_bhb_loop+0x40/0x90 [ 954.604456][ T426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.604477][ T426] RIP: 0033:0x7fa6b519ce59 [ 954.604498][ T426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.604517][ T426] RSP: 002b:00007fa6b5f90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 954.604540][ T426] RAX: ffffffffffffffda RBX: 00007fa6b5415fa0 RCX: 00007fa6b519ce59 [ 954.604556][ T426] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000003 [ 954.604569][ T426] RBP: 00007fa6b5f90090 R08: 0000000000000000 R09: 0000000000000000 [ 954.604583][ T426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 954.604594][ T426] R13: 00007fa6b5416038 R14: 00007fa6b5415fa0 R15: 00007ffe9b42de08 [ 954.604629][ T426] [ 954.604661][ T426] ERROR: Out of memory at tomoyo_realpath_from_path. [ 955.654975][ T5639] Bluetooth: hci4: command tx timeout [ 955.915911][ T4950] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 955.937021][ T4950] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 955.947566][ T4950] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 955.967204][ T4950] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 955.983415][ T4950] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 956.067020][ T452] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6892'. [ 957.023271][ T449] lo speed is unknown, defaulting to 1000 [ 958.027524][ T449] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.035454][ T449] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.054356][ T449] bridge_slave_0: entered allmulticast mode [ 958.061421][ T5639] Bluetooth: hci8: command tx timeout [ 958.077001][ T449] bridge_slave_0: entered promiscuous mode [ 958.089964][ T449] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.097770][ T449] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.105721][ T449] bridge_slave_1: entered allmulticast mode [ 958.116511][ T449] bridge_slave_1: entered promiscuous mode [ 958.182490][ T449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.218889][ T449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.423778][ T449] team0: Port device team_slave_0 added [ 958.469951][ T449] team0: Port device team_slave_1 added [ 958.652437][ T449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.678518][ T449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.770982][ T449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.804133][ T449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.811859][ T449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.852155][ T494] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6902'. [ 958.866123][ T449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.951077][T19671] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 958.973133][T19671] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 958.983011][T19671] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 958.997292][T19671] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 959.010147][T19671] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 959.165044][ T449] hsr_slave_0: entered promiscuous mode [ 959.172127][ T449] hsr_slave_1: entered promiscuous mode [ 959.180681][ T449] debugfs: 'hsr0' already exists in 'hsr' [ 959.186870][ T449] Cannot create hsr debugfs directory [ 959.226209][ T500] netlink: 'syz.5.6903': attribute type 10 has an invalid length. [ 959.257219][ T500] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6903'. [ 959.384760][ T500] team0: Port device geneve1 added [ 959.510164][ T5639] Bluetooth: hci7: command 0x0406 tx timeout [ 959.955396][ T495] lo speed is unknown, defaulting to 1000 [ 960.135281][ T4950] Bluetooth: hci8: command tx timeout [ 960.664040][ T524] xt_bpf: check failed: parse error [ 960.690495][ T449] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 960.818358][ T528] netlink: 'syz.8.6912': attribute type 10 has an invalid length. [ 960.876585][ T529] netlink: 41 bytes leftover after parsing attributes in process `syz.8.6912'. [ 960.887188][ T529] netlink: 140 bytes leftover after parsing attributes in process `syz.8.6912'. [ 960.982442][ T449] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 961.028169][ T528] syz_tun: entered promiscuous mode [ 961.060425][ T528] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 961.088756][ T529] netlink: 41 bytes leftover after parsing attributes in process `syz.8.6912'. [ 961.099039][ T4950] Bluetooth: hci9: command tx timeout [ 961.157527][ T449] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 961.206856][ T449] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 961.229416][ T449] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 961.280039][ T449] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 961.309196][ T449] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 961.315979][ T532] netlink: 'syz.5.6913': attribute type 4 has an invalid length. [ 961.344211][ T449] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 961.375280][ T533] netlink: 'syz.5.6913': attribute type 4 has an invalid length. [ 961.518093][ T532] netlink: 'syz.5.6913': attribute type 4 has an invalid length. [ 961.758963][ T546] netlink: 116 bytes leftover after parsing attributes in process `syz.7.6915'. [ 961.987536][ T551] netlink: 128 bytes leftover after parsing attributes in process `syz.5.6916'. [ 962.007102][ T449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 962.220011][ T4950] Bluetooth: hci8: command tx timeout [ 962.320312][ T449] 8021q: adding VLAN 0 to HW filter on device team0 [ 962.390815][ T495] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.415520][ T495] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.431016][ T495] bridge_slave_0: entered allmulticast mode [ 962.469294][ T495] bridge_slave_0: entered promiscuous mode [ 962.493898][T20096] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.501179][T20096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 962.529169][ T495] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.538749][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 962.553285][ T495] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.563151][ T495] bridge_slave_1: entered allmulticast mode [ 962.583083][ T495] bridge_slave_1: entered promiscuous mode [ 962.620460][T14810] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.627723][T14810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 962.834612][ T495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 962.859436][ T495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.946511][ T495] team0: Port device team_slave_0 added [ 962.999960][ T495] team0: Port device team_slave_1 added [ 963.059469][ T495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 963.067210][ T495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.117509][ T495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 963.157351][ T495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.174553][ T495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.216775][ T4950] Bluetooth: hci9: command tx timeout [ 963.235976][ T495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 963.359387][ T592] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6927'. [ 963.390422][ T495] hsr_slave_0: entered promiscuous mode [ 963.407494][ T495] hsr_slave_1: entered promiscuous mode [ 963.422906][ T495] debugfs: 'hsr0' already exists in 'hsr' [ 963.436332][ T495] Cannot create hsr debugfs directory [ 963.829057][ T601] FAULT_INJECTION: forcing a failure. [ 963.829057][ T601] name failslab, interval 1, probability 0, space 0, times 0 [ 963.847496][ T601] CPU: 1 UID: 0 PID: 601 Comm: syz.5.6928 Not tainted syzkaller #0 PREEMPT(full) [ 963.847526][ T601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 963.847539][ T601] Call Trace: [ 963.847547][ T601] [ 963.847557][ T601] dump_stack_lvl+0xe8/0x150 [ 963.847590][ T601] should_fail_ex+0x412/0x560 [ 963.847620][ T601] should_failslab+0xa8/0x100 [ 963.847645][ T601] __kvmalloc_node_noprof+0x178/0x8a0 [ 963.847678][ T601] ? rhashtable_init_noprof+0x52e/0xad0 [ 963.847703][ T601] ? rhashtable_init_noprof+0x12d/0xad0 [ 963.847731][ T601] rhashtable_init_noprof+0x52e/0xad0 [ 963.847763][ T601] rhltable_init_noprof+0x1e/0x60 [ 963.847788][ T601] nf_tables_newtable+0x68f/0x1910 [ 963.847844][ T601] nfnetlink_rcv+0x123e/0x27b0 [ 963.847905][ T601] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 963.847946][ T601] ? ref_tracker_free+0x693/0x840 [ 963.848004][ T601] ? __netlink_deliver_tap+0x807/0x850 [ 963.848040][ T601] ? netlink_deliver_tap+0x2e/0x1b0 [ 963.848063][ T601] ? netlink_deliver_tap+0x2e/0x1b0 [ 963.848094][ T601] netlink_unicast+0x75c/0x8e0 [ 963.848128][ T601] netlink_sendmsg+0x813/0xb40 [ 963.848164][ T601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 963.848193][ T601] ? aa_sock_msg_perm+0xf1/0x1b0 [ 963.848227][ T601] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 963.848266][ T601] ____sys_sendmsg+0x972/0x9f0 [ 963.848291][ T601] ? __might_fault+0xaf/0x130 [ 963.848334][ T601] ? __pfx_____sys_sendmsg+0x10/0x10 [ 963.848370][ T601] ? import_iovec+0x73/0xa0 [ 963.848399][ T601] ___sys_sendmsg+0x2a5/0x360 [ 963.848422][ T601] ? __lock_acquire+0x6b5/0x2cf0 [ 963.848450][ T601] ? __pfx____sys_sendmsg+0x10/0x10 [ 963.848519][ T601] ? __fget_files+0x2a/0x420 [ 963.848544][ T601] ? __fget_files+0x3a0/0x420 [ 963.848582][ T601] __x64_sys_sendmsg+0x1bd/0x2a0 [ 963.848610][ T601] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 963.848646][ T601] ? __pfx_ksys_write+0x10/0x10 [ 963.848687][ T601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.848711][ T601] do_syscall_64+0x174/0x580 [ 963.848734][ T601] ? trace_irq_disable+0x3b/0x140 [ 963.848765][ T601] ? clear_bhb_loop+0x40/0x90 [ 963.848791][ T601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.848813][ T601] RIP: 0033:0x7fa6b519ce59 [ 963.848834][ T601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 963.848852][ T601] RSP: 002b:00007fa6b5f90028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 963.848875][ T601] RAX: ffffffffffffffda RBX: 00007fa6b5415fa0 RCX: 00007fa6b519ce59 [ 963.848891][ T601] RDX: 000000002400c850 RSI: 00002000000000c0 RDI: 0000000000000003 [ 963.848905][ T601] RBP: 00007fa6b5f90090 R08: 0000000000000000 R09: 0000000000000000 [ 963.848918][ T601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 963.848930][ T601] R13: 00007fa6b5416038 R14: 00007fa6b5415fa0 R15: 00007ffe9b42de08 [ 963.848967][ T601] [ 964.295057][ T4950] Bluetooth: hci8: command tx timeout [ 964.543058][ T495] netdevsim netdevsim0 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 964.870997][ T495] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 965.194540][ T495] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 965.233438][ T449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 965.256106][ T4950] Bluetooth: hci9: command tx timeout [ 965.330565][ T495] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 965.844248][ T495] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 965.879436][ T495] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 965.899455][ T495] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 965.914732][ T495] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 965.933231][ T495] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 965.965849][ T495] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 965.979759][ T495] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 966.002657][ T495] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 966.166348][ T449] veth0_vlan: entered promiscuous mode [ 966.206898][ T449] veth1_vlan: entered promiscuous mode [ 966.319411][ T449] veth0_macvtap: entered promiscuous mode [ 966.338561][ T449] veth1_macvtap: entered promiscuous mode [ 966.406882][ T495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 966.433358][ T449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 966.469083][ T449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 966.491501][ T495] 8021q: adding VLAN 0 to HW filter on device team0 [ 966.523177][T31233] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.530422][T31233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 966.541008][T20096] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.552151][T20096] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.597902][T14810] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.605142][T14810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 966.619884][T20096] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.647827][T20096] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.957504][T20096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.982031][T20096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.109273][T31233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.140116][T31233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.347105][ T4950] Bluetooth: hci9: command tx timeout [ 968.245692][ T495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 968.442313][ T495] veth0_vlan: entered promiscuous mode [ 968.507423][ T495] veth1_vlan: entered promiscuous mode [ 968.618252][ T495] veth0_macvtap: entered promiscuous mode [ 968.657820][ T495] veth1_macvtap: entered promiscuous mode [ 968.709029][ T495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 968.758237][ T495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 968.813708][T20083] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.833108][T20083] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.871020][T20083] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.896235][T20083] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.125334][T20097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.133715][T20097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.228296][T31233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.237903][T31233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.737583][ T4950] Bluetooth: hci3: command 0x0406 tx timeout [ 969.760312][ T715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6933'. [ 969.791429][ T715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6933'. [ 969.820592][T20097] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 969.868774][T20097] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 969.920292][T20097] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 969.956387][T20097] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 970.032285][ T719] Bluetooth: MGMT ver 1.23 [ 972.821337][ T762] syzkaller1: entered promiscuous mode [ 972.869503][ T762] syzkaller1: entered allmulticast mode [ 973.177168][ T778] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6939'. [ 973.777473][ T795] netlink: 'syz.8.6941': attribute type 5 has an invalid length. [ 975.453012][ T833] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 975.597382][ T762] veth1_to_hsr: left promiscuous mode [ 975.611676][ T762] veth1_to_hsr: left allmulticast mode [ 976.104045][ T762] syzkaller1: left promiscuous mode [ 976.115051][ T5639] block nbd0: Receive control failed (result -32) [ 976.122505][ T762] syzkaller1: left allmulticast mode [ 976.130031][ T771] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 976.260530][T20096] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.302563][T20096] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.419146][T20096] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.453260][ T827] lo speed is unknown, defaulting to 1000 [ 976.463188][T20096] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.600012][T20083] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.814261][ T854] netlink: 'syz.5.6951': attribute type 6 has an invalid length. [ 977.268157][ T869] netlink: 'syz.7.6953': attribute type 1 has an invalid length. [ 977.291418][ T869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 978.055487][ T860] vlan0: entered promiscuous mode [ 978.599551][T20083] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.658579][ T906] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6957'. [ 979.041895][ T913] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6959'. [ 979.114071][ T914] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6959'. [ 979.311480][T20083] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.501113][ T913] vxcan1: entered promiscuous mode [ 979.879440][T20083] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.903010][ T945] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6962'. [ 980.550251][ T978] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6970'. [ 980.588546][T20096] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 980.790436][ T983] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma? [ 980.858642][ T986] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6970'. [ 980.979291][ T988] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6973'. [ 980.999592][T20096] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 981.027547][ T982] netlink: 200 bytes leftover after parsing attributes in process `syz.9.6970'. [ 981.221084][ T999] nbd: nbd9 already in use [ 981.293544][ T995] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 981.338730][T31234] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 981.422395][ T1005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6977'. [ 981.474219][T14810] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 981.509556][T20083] vlan3: left allmulticast mode [ 981.530148][T20083] geneve0: left allmulticast mode [ 981.544617][T20083] vlan3: left promiscuous mode [ 981.563614][T20083] geneve0: left promiscuous mode [ 981.581822][T20083] bridge0: port 3(vlan3) entered disabled state [ 981.589390][ T1013] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6979'. [ 981.683645][T20083] bridge_slave_1: left allmulticast mode [ 981.720914][T20083] bridge_slave_1: left promiscuous mode [ 981.752352][T20083] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.822221][T20083] bridge_slave_0: left allmulticast mode [ 981.867157][T20083] bridge_slave_0: left promiscuous mode [ 981.886656][T20083] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.251341][ T977] infiniband syz1: set active [ 982.256784][ T977] infiniband syz1: added bond0 [ 982.266985][T20083] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 982.295287][T20083] ip6gretap1 (unregistering): left allmulticast mode [ 982.319766][ T977] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 982.335692][ T977] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 982.354408][ T977] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 982.421613][ T977] RDS/IB: syz1: added [ 982.431062][ T977] smc: adding ib device syz1 with port count 1 [ 982.438904][ T977] smc: ib device syz1 port 1 has no pnetid [ 982.598733][T20083] team0: Port device bond0 removed [ 982.620240][T20083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 982.639386][T20083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 982.651011][T20083] bond0 (unregistering): Released all slaves [ 982.668560][T20083] bond1 (unregistering): Released all slaves [ 982.723017][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1 [ 982.801269][ T1026] lo speed is unknown, defaulting to 1000 [ 983.017887][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 983.264461][ T1060] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.275873][ T1060] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.331965][ T1056] lo speed is unknown, defaulting to 1000 [ 983.383119][ T1060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 983.459322][ T1063] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.466642][ T1063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 983.474226][ T1063] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.481552][ T1063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 983.540675][ T1063] bridge0: entered promiscuous mode [ 983.560271][ T1063] bridge0: entered allmulticast mode [ 983.669734][ T1076] __nla_validate_parse: 3 callbacks suppressed [ 983.669759][ T1076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6987'. [ 984.543505][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2 [ 984.705731][ T1109] netlink: 'syz.0.6993': attribute type 83 has an invalid length. [ 984.748262][ T1109] x_tables: duplicate underflow at hook 1 [ 985.239870][ T1116] wg1: entered allmulticast mode [ 985.346094][ T1123] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6995'. [ 985.590582][ T1133] netlink: 'syz.0.6997': attribute type 10 has an invalid length. [ 985.692442][ T1133] bridge0: port 3(netdevsim1) entered blocking state [ 985.734347][ T1133] bridge0: port 3(netdevsim1) entered disabled state [ 985.761846][ T1133] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 985.795505][ T1133] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 985.887917][ T5296] 8021q: adding VLAN 0 to HW filter on device eth3 [ 987.086858][ T5296] 8021q: adding VLAN 0 to HW filter on device eth4 [ 987.265159][ T1171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7004'. [ 987.589988][ T1180] netlink: 'syz.9.7005': attribute type 1 has an invalid length. [ 987.615086][ T1180] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7005'. [ 988.003116][ T1198] bond1: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 988.027481][ T1198] bond1 (unregistering): Released all slaves [ 988.477928][ T1204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7010'. [ 988.499888][ T1204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7010'. [ 988.525181][ T1204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7010'. [ 989.988879][ T1223] bond1: option tlb_dynamic_lb: invalid value (64) [ 990.021103][ T1223] bond1 (unregistering): Released all slaves [ 990.702950][ T1242] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7020'. [ 992.119144][ T1276] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7026'. [ 992.513538][ T1285] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 992.530293][ T1285] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.769449][ T1285] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 992.787978][ T1285] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.940627][ T1285] netdevsim netdevsim0 netdevsim1 (unregistering): left allmulticast mode [ 992.949854][ T1285] netdevsim netdevsim0 netdevsim1 (unregistering): left promiscuous mode [ 992.962964][ T1285] bridge0: port 3(netdevsim1) entered disabled state [ 992.983107][ T1285] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 992.993631][ T1285] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.212889][ T1285] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 993.225015][ T1285] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.566726][ T57] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 993.582987][ T57] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.611803][T31234] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 993.622378][T31234] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.676167][ T57] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 993.694999][ T57] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.732853][T20097] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 993.743413][T20097] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.801714][ T1253] lo speed is unknown, defaulting to 1000 [ 994.597380][ T1314] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7029'. [ 994.614499][ T1324] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7032'. [ 995.200357][ T1314] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.207835][ T1314] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.336882][T20083] hsr_slave_0: left promiscuous mode [ 995.370261][T20083] hsr_slave_1: left promiscuous mode [ 995.406733][T20083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 995.414210][T20083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 995.431879][T20083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 995.445382][T20083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 995.516740][T20083] veth1_macvtap: left promiscuous mode [ 995.522338][T20083] veth0_macvtap: left promiscuous mode [ 995.535474][T20083] veth1_vlan: left promiscuous mode [ 995.540817][T20083] veth0_vlan: left promiscuous mode [ 995.572846][ T1353] netlink: 276 bytes leftover after parsing attributes in process `syz.7.7035'. [ 995.732236][ T1359] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7037'. [ 996.018580][T20083] team0 (unregistering): Port device team_slave_1 removed [ 996.040939][T20083] team0 (unregistering): Port device team_slave_0 removed [ 997.345117][ T4950] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 997.366367][ T4950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 997.380856][ T4950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 997.395523][ T4950] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 997.406961][ T4950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 997.581037][ T1380] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7044'. [ 997.769931][ T1383] bond2: Removing last ns target with arp_interval on [ 997.899521][ T308] bond0: (slave syz_tun): Releasing backup interface [ 997.921802][ T1391] netlink: 'syz.7.7045': attribute type 29 has an invalid length. [ 997.932319][ T1379] lo speed is unknown, defaulting to 1000 [ 998.375063][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 998.890101][ T1382] lo speed is unknown, defaulting to 1000 [ 999.497293][ T4950] Bluetooth: hci3: command tx timeout [ 999.820621][ T1428] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.828572][ T1428] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.340107][ T1442] netlink: 'syz.5.7051': attribute type 16 has an invalid length. [ 1000.370607][ T1442] netlink: 'syz.5.7051': attribute type 17 has an invalid length. [ 1000.774942][ T1428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1000.866240][ T1428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1001.575249][ T4950] Bluetooth: hci3: command tx timeout [ 1001.588137][ T1428] bond1: left allmulticast mode [ 1001.718274][ T1442] batman_adv: batadv0: Interface activated: vlan3 [ 1001.733067][ T1442] batadv0: mtu less than device minimum [ 1001.746998][ T1442] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (68) [ 1001.801324][ T1442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1001.810068][ T1442] 8021q: adding VLAN 0 to HW filter on device team0 [ 1001.823436][ T1442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.881771][ T1442] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1001.892783][ T1442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1001.913703][ T1442] veth1_vlan: left promiscuous mode [ 1001.927965][ T1442] vlan0: left promiscuous mode [ 1001.935373][ T1442] veth1_vlan: entered promiscuous mode [ 1001.953259][ T1442] veth1_macvtap: left promiscuous mode [ 1001.961171][ T1442] veth0_macvtap: left promiscuous mode [ 1001.970169][ T1442] veth0_macvtap: entered promiscuous mode [ 1001.978072][ T1442] veth1_macvtap: entered promiscuous mode [ 1001.997829][ T1442] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1002.007502][ T1442] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1002.021610][ T1442] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1002.031014][ T1442] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1002.056682][ T1442] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1002.072865][ T1442] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1002.089431][T14808] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.112280][T14808] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.166363][T31234] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (68); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1002.288297][T14808] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.325348][T14808] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.480923][T14808] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.506888][T14808] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.530642][ T1469] netlink: 'syz.9.7056': attribute type 2 has an invalid length. [ 1002.584274][ T1469] netlink: 228 bytes leftover after parsing attributes in process `syz.9.7056'. [ 1002.620224][ T1455] lo speed is unknown, defaulting to 1000 [ 1002.626646][T14808] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.653659][T14808] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.718019][ T1343] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (68); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1002.732573][ T1343] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (68); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1002.909683][T20083] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.218476][T20083] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.309612][T20096] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (68); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1003.324186][T20096] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (68); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1003.570906][T20083] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.658654][ T4950] Bluetooth: hci3: command tx timeout [ 1003.920799][T20083] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.940745][ T1343] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (68); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1003.955948][ T1343] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (68); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1004.114692][ T1518] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7063'. [ 1004.346807][ T1524] netlink: 'syz.9.7064': attribute type 23 has an invalid length. [ 1004.555826][T20098] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (68); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1004.644184][ T1530] batman_adv: batadv0: Interface deactivated: vlan3 [ 1005.681687][T31233] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.723184][T31233] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.736164][ T4950] Bluetooth: hci3: command tx timeout [ 1006.267804][T31233] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.390726][ T1539] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7067'. [ 1006.503936][ T1545] bridge0: port 1(batadv1) entered blocking state [ 1006.528579][ T1545] bridge0: port 1(batadv1) entered disabled state [ 1006.556153][ T1545] batadv1: entered allmulticast mode [ 1006.591113][ T1545] batadv1: entered promiscuous mode [ 1006.619713][ T1564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7071'. [ 1006.730775][T31233] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.780611][T31233] netdevsim netdevsim8 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 1006.916613][T20098] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1006.926172][T20098] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1007.198512][T31233] netdevsim netdevsim8 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 1007.217905][ T1382] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.246360][ T1382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.264508][ T1382] bridge_slave_0: entered allmulticast mode [ 1007.281919][ T1382] bridge_slave_0: entered promiscuous mode [ 1007.394153][T31233] netdevsim netdevsim8 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 1007.427656][ T1382] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.437022][ T1584] netlink: 236 bytes leftover after parsing attributes in process `syz.0.7076'. [ 1007.451812][ T1382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.467940][ T1382] bridge_slave_1: entered allmulticast mode [ 1007.483218][ T1382] bridge_slave_1: entered promiscuous mode [ 1007.590345][T31233] netdevsim netdevsim8 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 1007.612831][ T1585] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7077'. [ 1007.623347][T20083] bridge_slave_1: left allmulticast mode [ 1007.637184][T20083] bridge_slave_1: left promiscuous mode [ 1007.650377][T20083] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.678917][T20083] bridge_slave_0: left allmulticast mode [ 1007.686031][ T1587] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7077'. [ 1007.691526][T20083] bridge_slave_0: left promiscuous mode [ 1007.711865][T20083] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.106073][T20083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1008.140309][T20083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1008.163664][T20083] bond0 (unregistering): Released all slaves [ 1008.209875][ T1382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1008.353028][ T1590] €Â: renamed from sit0 (while UP) [ 1008.379498][ T1382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1008.571314][ T1382] team0: Port device team_slave_0 added [ 1008.587519][ T1605] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7080'. [ 1008.667981][ T1382] team0: Port device team_slave_1 added [ 1009.028140][ T1382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.050861][ T1382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1009.145506][ T1382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.209780][ T1382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.235378][ T1382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1009.325206][ T1382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1009.518316][ T1624] lo speed is unknown, defaulting to 1000 [ 1009.699210][ T1382] hsr_slave_0: entered promiscuous mode [ 1009.720133][ T1382] hsr_slave_1: entered promiscuous mode [ 1009.741197][ T1382] debugfs: 'hsr0' already exists in 'hsr' [ 1009.750237][ T1382] Cannot create hsr debugfs directory [ 1010.188987][ T1648] FAULT_INJECTION: forcing a failure. [ 1010.188987][ T1648] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.222582][ T1648] CPU: 0 UID: 0 PID: 1648 Comm: syz.9.7092 Not tainted syzkaller #0 PREEMPT(full) [ 1010.222611][ T1648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1010.222626][ T1648] Call Trace: [ 1010.222634][ T1648] [ 1010.222644][ T1648] dump_stack_lvl+0xe8/0x150 [ 1010.222677][ T1648] should_fail_ex+0x412/0x560 [ 1010.222709][ T1648] should_failslab+0xa8/0x100 [ 1010.222734][ T1648] __kvmalloc_node_noprof+0x178/0x8a0 [ 1010.222776][ T1648] ? nf_hook_entries_grow+0x288/0x720 [ 1010.222816][ T1648] nf_hook_entries_grow+0x288/0x720 [ 1010.222848][ T1648] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1010.222886][ T1648] __nf_register_net_hook+0x2c9/0x930 [ 1010.222921][ T1648] ? nf_register_net_hook+0xc8/0x190 [ 1010.222952][ T1648] nf_register_net_hook+0xb2/0x190 [ 1010.222983][ T1648] nf_register_net_hooks+0x44/0x1b0 [ 1010.223016][ T1648] nf_ct_netns_do_get+0x212/0x5c0 [ 1010.223050][ T1648] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 1010.223097][ T1648] nf_ct_netns_get+0xc7/0x320 [ 1010.223130][ T1648] nft_connlimit_do_init+0x1de/0x2e0 [ 1010.223162][ T1648] nft_set_elem_expr_alloc+0x213/0x5f0 [ 1010.223192][ T1648] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 1010.223232][ T1648] ? nft_rhash_init+0x2de/0x3b0 [ 1010.223262][ T1648] ? __pfx_nft_rhash_init+0x10/0x10 [ 1010.223283][ T1648] ? kasan_quarantine_put+0xbb/0x1f0 [ 1010.223312][ T1648] ? __pfx_nft_rhash_key+0x10/0x10 [ 1010.223335][ T1648] ? __pfx_nft_rhash_obj+0x10/0x10 [ 1010.223358][ T1648] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 1010.223390][ T1648] nft_set_expr_alloc+0x397/0x760 [ 1010.223422][ T1648] nf_tables_newset+0x1c6b/0x2580 [ 1010.223466][ T1648] ? __pfx_nf_tables_newset+0x10/0x10 [ 1010.223521][ T1648] ? __nla_parse+0x40/0x60 [ 1010.223552][ T1648] nfnetlink_rcv+0x123e/0x27b0 [ 1010.223612][ T1648] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1010.223652][ T1648] ? ref_tracker_free+0x693/0x840 [ 1010.223709][ T1648] ? __netlink_deliver_tap+0x807/0x850 [ 1010.223753][ T1648] ? netlink_deliver_tap+0x2e/0x1b0 [ 1010.223777][ T1648] ? netlink_deliver_tap+0x2e/0x1b0 [ 1010.223809][ T1648] netlink_unicast+0x75c/0x8e0 [ 1010.223844][ T1648] netlink_sendmsg+0x813/0xb40 [ 1010.223881][ T1648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1010.223910][ T1648] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1010.223945][ T1648] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1010.223983][ T1648] ____sys_sendmsg+0x972/0x9f0 [ 1010.224010][ T1648] ? __might_fault+0xaf/0x130 [ 1010.224046][ T1648] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1010.224081][ T1648] ? import_iovec+0x73/0xa0 [ 1010.224113][ T1648] ___sys_sendmsg+0x2a5/0x360 [ 1010.224137][ T1648] ? __lock_acquire+0x6b5/0x2cf0 [ 1010.224165][ T1648] ? __pfx____sys_sendmsg+0x10/0x10 [ 1010.224233][ T1648] ? __fget_files+0x2a/0x420 [ 1010.224260][ T1648] ? __fget_files+0x3a0/0x420 [ 1010.224298][ T1648] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1010.224327][ T1648] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1010.224369][ T1648] ? __pfx_ksys_write+0x10/0x10 [ 1010.224411][ T1648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.224435][ T1648] do_syscall_64+0x174/0x580 [ 1010.224458][ T1648] ? trace_irq_disable+0x3b/0x140 [ 1010.224489][ T1648] ? clear_bhb_loop+0x40/0x90 [ 1010.224515][ T1648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.224537][ T1648] RIP: 0033:0x7ff16b19ce59 [ 1010.224558][ T1648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1010.224577][ T1648] RSP: 002b:00007ff16c049028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1010.224600][ T1648] RAX: ffffffffffffffda RBX: 00007ff16b415fa0 RCX: 00007ff16b19ce59 [ 1010.224615][ T1648] RDX: 000000002400c850 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1010.224629][ T1648] RBP: 00007ff16c049090 R08: 0000000000000000 R09: 0000000000000000 [ 1010.224643][ T1648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1010.224656][ T1648] R13: 00007ff16b416038 R14: 00007ff16b415fa0 R15: 00007ffef00815e8 [ 1010.224693][ T1648] [ 1010.980423][ T1660] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7095'. [ 1011.035496][ T1662] netlink: 'syz.0.7096': attribute type 58 has an invalid length. [ 1011.053897][ T1662] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7096'. [ 1011.106199][ T5296] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1011.418185][T20083] hsr_slave_0: left promiscuous mode [ 1011.424516][T20083] hsr_slave_1: left promiscuous mode [ 1011.436247][T20083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1011.443747][T20083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1011.452930][T20083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1011.461380][T20083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1011.479919][T20083] veth1_macvtap: left promiscuous mode [ 1011.486066][T20083] veth0_macvtap: left promiscuous mode [ 1011.491799][T20083] veth1_vlan: left promiscuous mode [ 1011.498264][T20083] veth0_vlan: left promiscuous mode [ 1011.798819][T20083] team0 (unregistering): Port device team_slave_1 removed [ 1011.818755][T20083] team0 (unregistering): Port device team_slave_0 removed [ 1012.222089][ T1669] bond1: entered promiscuous mode [ 1012.536369][ T1679] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7102'. [ 1012.571683][ T1382] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1012.584012][ T1382] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.940319][ T1382] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1012.951022][ T1382] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.203340][ T1382] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1013.215561][ T1382] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.390560][ T1382] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1013.423341][ T1382] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.536134][ T1706] netlink: 'syz.0.7106': attribute type 4 has an invalid length. [ 1013.579065][ T1701] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7105'. [ 1013.614425][ T1701] netlink: 80 bytes leftover after parsing attributes in process `syz.9.7105'. [ 1013.828310][ T5296] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1014.278440][ T1382] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1014.312582][ T1382] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1014.338055][ T1382] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1014.371794][ T1382] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1014.390915][ T1382] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1014.418905][ T1382] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1014.431937][ T1382] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1014.457748][ T1382] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1014.871870][ T1382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1014.959182][ T1382] 8021q: adding VLAN 0 to HW filter on device team0 [ 1014.998398][T20098] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.005678][T20098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1015.103906][T20095] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.111166][T20095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1015.147826][ T1759] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7119'. [ 1015.543703][ T5296] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1015.560144][ T1782] netlink: 'syz.5.7126': attribute type 1 has an invalid length. [ 1015.644549][ T1782] bond3: entered promiscuous mode [ 1015.650892][ T1782] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1015.723477][ T1782] bond3: (slave bridge2): making interface the new active one [ 1015.750195][ T1782] bridge2: entered promiscuous mode [ 1015.770413][ T1782] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 1016.044557][ T1798] Unsupported ieee802154 address type: 0 [ 1016.308782][ T1809] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7130'. [ 1016.546545][ T1820] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7132'. [ 1016.623713][ T1382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1016.883611][ T1382] veth0_vlan: entered promiscuous mode [ 1016.892866][ T1835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7137'. [ 1016.940575][ T1382] veth1_vlan: entered promiscuous mode [ 1017.093014][ T1382] veth0_macvtap: entered promiscuous mode [ 1017.138076][ T1382] veth1_macvtap: entered promiscuous mode [ 1017.186532][ T5296] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1017.199257][ T1382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1017.255902][ T1382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1017.304705][T20095] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.329447][T20095] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.352723][T20095] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.362995][T20095] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.433217][ T1847] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7141'. [ 1017.686170][T20098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.716461][T20098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.823078][T20098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.843747][T20098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.282689][ T1881] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7148'. [ 1018.312325][ T1881] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7148'. [ 1018.468440][ T1891] lo speed is unknown, defaulting to 1000 [ 1018.494116][ T1893] netlink: 52 bytes leftover after parsing attributes in process `syz.9.7153'. [ 1018.649444][ T1901] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7155'. [ 1018.660572][ T1901] xt_TCPMSS: Only works on TCP SYN packets [ 1019.862240][ T1937] net_ratelimit: 1 callbacks suppressed [ 1019.862264][ T1937] openvswitch: netlink: IP tunnel dst address not specified [ 1020.148085][ T1944] netlink: 52 bytes leftover after parsing attributes in process `syz.9.7166'. [ 1020.222648][ T1946] Cannot find set identified by id 0 to match [ 1020.647708][ T1960] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7173'. [ 1020.901256][ T1967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7176'. [ 1020.903209][ T1970] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7176'. [ 1020.930963][ T1971] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7177'. [ 1020.946561][ T1975] xt_cgroup: path and classid specified [ 1020.954684][ T1967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1020.971474][ T1975] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7179'. [ 1020.990237][ T1970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1021.018800][ T1970] netlink: 'syz.0.7176': attribute type 1 has an invalid length. [ 1021.046763][ T1976] netlink: 'syz.0.7176': attribute type 1 has an invalid length. [ 1021.504206][ T2001] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1021.727416][ T2017] bond1: option min_links: invalid value (18446744073709551612) [ 1021.745376][ T2017] bond1: option min_links: allowed values 0 - 2147483647 [ 1021.761617][ T2017] bond1 (unregistering): Released all slaves [ 1021.799139][ T2019] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7191'. [ 1021.811675][ T2020] syzkaller1: entered promiscuous mode [ 1021.822195][ T2020] syzkaller1: entered allmulticast mode [ 1021.912936][ T2020] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 1021.933893][ T2023] netlink: 212344 bytes leftover after parsing attributes in process `syz.9.7192'. [ 1021.945256][ T2024] netlink: 212344 bytes leftover after parsing attributes in process `syz.9.7192'. [ 1022.767142][ T2066] netlink: 'syz.9.7207': attribute type 1 has an invalid length. [ 1022.794439][ T2066] netlink: 'syz.9.7207': attribute type 1 has an invalid length. [ 1022.817582][ T2070] syzkaller1: entered promiscuous mode [ 1022.828617][ T2070] syzkaller1: entered allmulticast mode [ 1022.933004][ T2066] syzkaller1: entered promiscuous mode [ 1022.940078][ T2066] syzkaller1: entered allmulticast mode [ 1023.080707][ T2080] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1023.094289][ T2080] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1023.670863][ T2101] __nla_validate_parse: 5 callbacks suppressed [ 1023.670886][ T2101] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7220'. [ 1023.909021][ T5639] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1023.929661][ T5639] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1023.942001][ T5639] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1023.946624][ T2115] netlink: 440 bytes leftover after parsing attributes in process `syz.5.7222'. [ 1023.979384][T19671] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1024.001408][ T5639] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1024.041375][ T2122] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7224'. [ 1024.068673][ T2121] gretap0: entered promiscuous mode [ 1024.548818][ T2142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7229'. [ 1024.636990][ T2143] netlink: 'syz.2.7229': attribute type 1 has an invalid length. [ 1024.761157][ T2152] netlink: 68 bytes leftover after parsing attributes in process `syz.9.7230'. [ 1024.970686][ T2161] netlink: 'syz.0.7232': attribute type 1 has an invalid length. [ 1025.003620][ T2161] netlink: 228 bytes leftover after parsing attributes in process `syz.0.7232'. [ 1025.112177][ T2165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7232'. [ 1025.162633][ T2112] lo speed is unknown, defaulting to 1000 [ 1025.250086][ T2168] netlink: 'syz.5.7233': attribute type 1 has an invalid length. [ 1025.428445][ T2168] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1025.525970][ T2175] bond4: (slave geneve2): making interface the new active one [ 1025.538738][ T2175] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 1025.550166][T31233] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.588459][T31233] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.630589][T31233] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.701155][T31233] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.056326][ T2120] Bluetooth: hci4: command tx timeout [ 1026.063049][ T5639] Bluetooth: hci1: command 0x0406 tx timeout [ 1026.084617][ T2168] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1026.110826][ T2168] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 1026.186441][ T2168] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1026.202601][ T2168] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1026.251314][ T2168] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1026.263657][ T2168] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1026.415983][ T2168] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1026.458819][ T2168] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1026.610823][ T2168] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1026.639378][ T2168] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 1026.725134][ T2168] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 1026.746108][ T2168] Bluetooth: hci9: Error when powering off device on rfkill (-4) [ 1026.821011][ T2221] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7246'. [ 1026.836304][ T2221] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7246'. [ 1027.125098][ T2168] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1027.150426][ T6313] IPVS: starting estimator thread 0... [ 1027.150957][ T2168] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1027.156633][ T2229] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20002 [ 1027.275287][ T2231] IPVS: using max 22 ests per chain, 52800 per kthread [ 1027.327795][ T2233] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7249'. [ 1027.380743][ T2168] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1027.407143][ T2168] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1027.570809][ T2240] bridge_slave_0: left allmulticast mode [ 1027.594605][ T2240] bridge_slave_0: left promiscuous mode [ 1027.602436][ T2240] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.632513][ T2240] bridge_slave_1: left allmulticast mode [ 1027.646342][ T2240] bridge_slave_1: left promiscuous mode [ 1027.668483][ T2240] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.707769][ T2240] bond0: (slave bond_slave_0): Releasing backup interface [ 1027.735987][ T2240] bond0: (slave bond_slave_1): Releasing backup interface [ 1027.802201][ T2240] team0: Port device team_slave_0 removed [ 1027.859697][ T2240] team0: Port device team_slave_1 removed [ 1027.881217][ T2240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1027.893925][ T2240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1027.910735][ T2240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1027.925169][ T2240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1027.952951][ T2240] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1028.079751][ T2112] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.087345][ T2112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.102376][ T2112] bridge_slave_0: entered allmulticast mode [ 1028.172223][ T2112] bridge_slave_0: entered promiscuous mode [ 1028.224518][ T2112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.270954][ T2112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.332835][ T2112] bridge_slave_1: entered allmulticast mode [ 1028.354516][ T2112] bridge_slave_1: entered promiscuous mode [ 1028.409787][ T2268] FAULT_INJECTION: forcing a failure. [ 1028.409787][ T2268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1028.444345][ T2268] CPU: 0 UID: 0 PID: 2268 Comm: syz.0.7255 Not tainted syzkaller #0 PREEMPT(full) [ 1028.444377][ T2268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1028.444392][ T2268] Call Trace: [ 1028.444402][ T2268] [ 1028.444414][ T2268] dump_stack_lvl+0xe8/0x150 [ 1028.444450][ T2268] should_fail_ex+0x412/0x560 [ 1028.444491][ T2268] _copy_to_user+0x31/0xb0 [ 1028.444522][ T2268] simple_read_from_buffer+0xe1/0x170 [ 1028.444560][ T2268] proc_fail_nth_read+0x1bb/0x230 [ 1028.444596][ T2268] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1028.444633][ T2268] ? rw_verify_area+0x2a6/0x4d0 [ 1028.444667][ T2268] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1028.444700][ T2268] vfs_read+0x20c/0xa70 [ 1028.444741][ T2268] ? __pfx___mutex_lock+0x10/0x10 [ 1028.444769][ T2268] ? __pfx_vfs_read+0x10/0x10 [ 1028.444803][ T2268] ? __fget_files+0x2a/0x420 [ 1028.444852][ T2268] ? __fget_files+0x3a0/0x420 [ 1028.444880][ T2268] ? __fget_files+0x2a/0x420 [ 1028.444920][ T2268] ksys_read+0x150/0x270 [ 1028.444958][ T2268] ? __pfx_ksys_read+0x10/0x10 [ 1028.445002][ T2268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.445030][ T2268] do_syscall_64+0x174/0x580 [ 1028.445055][ T2268] ? trace_irq_disable+0x3b/0x140 [ 1028.445092][ T2268] ? clear_bhb_loop+0x40/0x90 [ 1028.445123][ T2268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.445147][ T2268] RIP: 0033:0x7f9956f5d68e [ 1028.445170][ T2268] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1028.445196][ T2268] RSP: 002b:00007f9957e29fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1028.445222][ T2268] RAX: ffffffffffffffda RBX: 00007f9957e2a6c0 RCX: 00007f9956f5d68e [ 1028.445239][ T2268] RDX: 000000000000000f RSI: 00007f9957e2a0a0 RDI: 0000000000000004 [ 1028.445254][ T2268] RBP: 00007f9957e2a090 R08: 0000000000000000 R09: 0000000000000000 [ 1028.445269][ T2268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1028.445282][ T2268] R13: 00007f9957216038 R14: 00007f9957215fa0 R15: 00007ffe547d4cb8 [ 1028.445321][ T2268] [ 1028.614158][ T2112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1028.849250][ T2273] syzkaller0: entered promiscuous mode [ 1028.856578][ T2273] syzkaller0: entered allmulticast mode [ 1028.910600][ T2112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1028.970831][ T2259] lo speed is unknown, defaulting to 1000 [ 1029.487420][ T2112] team0: Port device team_slave_0 added [ 1029.529499][ T2296] tap0: tun_chr_ioctl cmd 1074025676 [ 1029.535265][ T2296] tap0: owner set to 0 [ 1029.545451][ T2112] team0: Port device team_slave_1 added [ 1029.720422][ T2112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1029.736786][ T2112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.865202][ T2307] __nla_validate_parse: 2 callbacks suppressed [ 1029.865224][ T2307] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7261'. [ 1029.872167][ T2112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1029.936745][ T2112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1029.964981][ T2112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.053743][ T2112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1030.439041][ T2112] hsr_slave_0: entered promiscuous mode [ 1030.469382][ T2112] hsr_slave_1: entered promiscuous mode [ 1030.490661][ T2112] debugfs: 'hsr0' already exists in 'hsr' [ 1030.507770][ T2112] Cannot create hsr debugfs directory [ 1031.052271][ T2334] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7266'. [ 1031.400851][ T2343] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7269'. [ 1031.842440][ T2352] geneve0: entered promiscuous mode [ 1031.870553][ T2352] geneve0: left promiscuous mode [ 1032.238275][ T2112] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.421198][ T2373] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7275'. [ 1032.616397][ T2112] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.687977][ T2373] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1032.695409][ T2373] IPv6: NLM_F_CREATE should be set when creating new route [ 1032.702687][ T2373] IPv6: NLM_F_CREATE should be set when creating new route [ 1032.905465][ T2112] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.195384][ T2112] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.345823][T26573] IPVS: starting estimator thread 0... [ 1033.465637][ T2400] IPVS: using max 31 ests per chain, 74400 per kthread [ 1034.295167][ T2112] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1034.312170][ T2112] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1034.321689][ T2112] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1034.354339][ T2112] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1034.370310][ T2112] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1034.409088][ T2112] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1034.432919][ T2112] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1034.454630][ T2112] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1034.759855][ T2112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1034.815995][ T2112] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.854428][ T1344] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.861652][ T1344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.916701][ T1344] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.924056][ T1344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1035.084882][ T2478] netlink: 256 bytes leftover after parsing attributes in process `syz.9.7295'. [ 1035.111305][ T2478] netlink: 256 bytes leftover after parsing attributes in process `syz.9.7295'. [ 1035.132141][ T2489] ipt_ECN: cannot use operation on non-tcp rule [ 1035.132739][ T2487] netlink: 'syz.0.7298': attribute type 25 has an invalid length. [ 1035.153955][ T2487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7298'. [ 1035.484064][ T2505] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7302'. [ 1036.638758][ T2112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1036.689459][ T2560] siw: device registration error -23 [ 1036.744441][ T2566] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7315'. [ 1036.770184][ T2566] sctp: [Deprecated]: syz.5.7315 (pid 2566) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1036.770184][ T2566] Use struct sctp_sack_info instead [ 1036.808674][ T2566] netlink: 'syz.5.7315': attribute type 1 has an invalid length. [ 1036.822006][ T2566] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7315'. [ 1036.987002][ T2571] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7316'. [ 1037.028692][ T2571] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7316'. [ 1037.068238][ T2572] netlink: 'syz.0.7316': attribute type 2 has an invalid length. [ 1037.096450][ T2571] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7316'. [ 1037.124685][ T2572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7316'. [ 1037.398214][ T2553] netlink: zone id is out of range [ 1037.420280][ T2553] netlink: zone id is out of range [ 1037.447729][ T2553] netlink: zone id is out of range [ 1037.470073][ T2553] netlink: set zone limit has 4 unknown bytes [ 1038.453691][ T2571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1038.526429][ T2571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1039.218841][T14811] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.264565][T14811] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.324686][T14811] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.360446][T14811] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.408558][T14808] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.453892][T14808] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.503618][T14808] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.526555][T14808] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.688461][ T2112] veth0_vlan: entered promiscuous mode [ 1039.725649][ T2112] veth1_vlan: entered promiscuous mode [ 1039.863964][ T2112] veth0_macvtap: entered promiscuous mode [ 1039.913327][ T2112] veth1_macvtap: entered promiscuous mode [ 1040.019196][ T2112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1040.031323][ T2617] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1040.047758][ T2112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1040.184430][T14808] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.223429][T14808] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.257772][T14808] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.295618][T14808] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.952812][ T1343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.991232][ T1343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1041.144168][T14810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1041.174625][T14810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1041.353907][ T2647] netlink: 'syz.2.7334': attribute type 1 has an invalid length. [ 1041.571130][ T2647] bond2: entered promiscuous mode [ 1041.605529][ T2647] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1041.784302][ T2662] __nla_validate_parse: 150 callbacks suppressed [ 1041.784326][ T2662] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.7218'. [ 1041.900532][ T2655] syzkaller0: entered promiscuous mode [ 1041.908186][ T2655] syzkaller0: entered allmulticast mode [ 1042.053136][ T2672] hmac(sha2: entered promiscuous mode [ 1042.091964][ T2682] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7341'. [ 1046.124064][ T2680] lo speed is unknown, defaulting to 1000 [ 1046.331734][ T2700] netlink: 14 bytes leftover after parsing attributes in process `syz.5.7349'. [ 1046.399706][ T2709] netlink: 140 bytes leftover after parsing attributes in process `syz.0.7350'. [ 1046.586483][ T29] audit: type=1804 audit(1780622069.366:22): pid=2718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.7353" name="/newroot/136/cgroup.controllers" dev="tmpfs" ino=707 res=1 errno=0 [ 1046.661852][ T29] audit: type=1800 audit(1780622069.406:23): pid=2718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7353" name="cgroup.controllers" dev="tmpfs" ino=707 res=0 errno=0 [ 1046.922035][ T2729] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7355'. [ 1047.213944][ T2737] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7359'. [ 1047.270030][ T2736] netlink: 52 bytes leftover after parsing attributes in process `syz.9.7358'. [ 1047.559625][ T2751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7363'. [ 1047.974708][ T2731] infiniband uyz0: set down [ 1047.981289][ T2731] infiniband uyz0: added bridge_slave_1 [ 1048.000634][ T2731] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1048.017575][ T2731] infiniband uyz0: Couldn't open port 1 [ 1048.036180][ T2731] smbdirect: ib_dev[uyz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1048.052135][ T2731] smbdirect: ib_dev[uyz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1048.101390][ T2731] smbdirect: ib_dev[uyz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1048.206142][ T2731] RDS/IB: uyz0: added [ 1048.218761][ T2731] smc: adding ib device uyz0 with port count 1 [ 1048.239123][ T2731] smc: ib device uyz0 port 1 has no pnetid [ 1048.341193][ T2785] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7371'. [ 1048.476243][ T2792] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7372'. [ 1048.500503][ T2789] lo speed is unknown, defaulting to 1000 [ 1048.520586][ T2794] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7373'. [ 1049.033168][ T2800] netlink: 'syz.2.7375': attribute type 16 has an invalid length. [ 1049.058582][ T2800] netlink: 'syz.2.7375': attribute type 17 has an invalid length. [ 1049.075932][ T2800] netlink: 'syz.2.7375': attribute type 27 has an invalid length. [ 1049.658234][ T2829] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7384'. [ 1051.270282][ T2881] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7391'. [ 1051.282644][ T2881] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7391'. [ 1051.294363][ T2881] netlink: 'syz.2.7391': attribute type 3 has an invalid length. [ 1051.403716][ T2899] hsr_slave_0: left promiscuous mode [ 1051.456576][ T2899] hsr_slave_1: left promiscuous mode [ 1051.767178][ T2911] netlink: 'syz.4.7400': attribute type 1 has an invalid length. [ 1051.780167][ T2911] 8021q: VLANs not supported on ipvlan0 [ 1051.793012][ T2907] xt_hashlimit: size too large, truncated to 1048576 [ 1051.964016][ T2916] netlink: 'syz.2.7401': attribute type 1 has an invalid length. [ 1051.986884][ T2916] netlink: 'syz.2.7401': attribute type 2 has an invalid length. [ 1052.000627][ T2918] __nla_validate_parse: 5 callbacks suppressed [ 1052.000649][ T2918] netlink: 47 bytes leftover after parsing attributes in process `syz.4.7402'. [ 1052.051947][ T2920] netlink: 47 bytes leftover after parsing attributes in process `syz.4.7402'. [ 1052.452896][ T2941] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7408'. [ 1053.199773][ T2120] block nbd10: Receive control failed (result -32) [ 1053.203789][ T5639] block nbd10: Receive control failed (result -32) [ 1053.215352][T19671] block nbd10: Receive control failed (result -32) [ 1053.376175][ T2974] netlink: 52 bytes leftover after parsing attributes in process `syz.9.7421'. [ 1054.011566][ T29] audit: type=1804 audit(1780622076.796:24): pid=3000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.7432" name="/newroot/32/cgroup.controllers" dev="tmpfs" ino=186 res=1 errno=0 [ 1054.076652][ T29] audit: type=1800 audit(1780622076.796:25): pid=3000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7432" name="cgroup.controllers" dev="tmpfs" ino=186 res=0 errno=0 [ 1054.271531][ T3009] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7433'. [ 1054.411634][ T3013] netlink: 14 bytes leftover after parsing attributes in process `syz.9.7434'. [ 1055.404518][ T3034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7444'. [ 1055.414347][ T3034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7444'. [ 1056.174108][ T3052] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7448'. [ 1056.660190][ T3032] lo speed is unknown, defaulting to 1000 [ 1057.212841][ T3064] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1057.940192][ T3085] netlink: 'syz.5.7460': attribute type 1 has an invalid length. [ 1058.204129][ T3086] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.7460'. [ 1059.039071][ T3048] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1059.289404][ T3111] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7465'. [ 1059.333182][ T3111] vlan4: entered promiscuous mode [ 1059.342411][ T3111] geneve1: entered promiscuous mode [ 1059.350613][ T3111] vlan4: entered allmulticast mode [ 1059.356167][ T3111] geneve1: entered allmulticast mode [ 1059.372961][ T3113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7464'. [ 1059.385045][ T3113] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1059.666864][ T3123] lo speed is unknown, defaulting to 1000 [ 1059.944490][T20391] IPVS: starting estimator thread 0... [ 1060.013062][ T3134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7471'. [ 1060.035357][ T3132] IPVS: using max 29 ests per chain, 69600 per kthread [ 1060.346033][ T3152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.353826][ T3152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.362237][ T3152] bridge0: entered allmulticast mode [ 1060.384396][ T3150] netlink: 'syz.9.7476': attribute type 13 has an invalid length. [ 1060.520696][ T3152] bridge_slave_1: left allmulticast mode [ 1060.527910][ T3152] bridge_slave_1: left promiscuous mode [ 1060.543418][ T3152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.559988][ T3152] bridge_slave_0: left allmulticast mode [ 1060.566899][ T3152] bridge_slave_0: left promiscuous mode [ 1060.572771][ T3152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.852653][ T3159] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1060.867796][ T3159] bond1 (unregistering): Released all slaves [ 1061.189531][ T3176] lo: Caught tx_queue_len zero misconfig [ 1061.231755][ T3176] netlink: 16166 bytes leftover after parsing attributes in process `syz.9.7484'. [ 1061.671221][ T3185] bond2: option updelay: invalid value (18446744073709518847) [ 1061.690119][ T3185] bond2: option updelay: allowed values 0 - 2147483647 [ 1061.714068][ T3200] openvswitch: netlink: Flow actions attr not present in new flow. [ 1061.723160][ T3185] bond2 (unregistering): Released all slaves [ 1061.923997][ T3204] netlink: 'syz.9.7490': attribute type 13 has an invalid length. [ 1061.979247][ T3203] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7490'. [ 1061.993250][ T3203] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7490'. [ 1062.159984][ T3209] lo speed is unknown, defaulting to 1000 [ 1062.378608][T14808] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1062.406460][T14808] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1062.433649][T14808] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1062.497920][T14808] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1062.697378][T20391] IPVS: starting estimator thread 0... [ 1062.703213][ T3240] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1062.794994][ T3241] IPVS: using max 27 ests per chain, 64800 per kthread [ 1063.827482][ T3271] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7508'. [ 1064.204386][ T3279] bridge1: entered promiscuous mode [ 1064.319272][ T3285] netdevsim netdevsim9: Firmware load for '..' refused, path contains '..' component [ 1064.416512][ T3285] netlink: 'syz.9.7513': attribute type 11 has an invalid length. [ 1064.428594][ T3285] netlink: 60 bytes leftover after parsing attributes in process `syz.9.7513'. [ 1064.482933][ T3288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7515'. [ 1064.552311][ T3293] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7516'. [ 1064.583503][ T3293] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7516'. [ 1064.648822][ T3290] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1064.706132][ T3290] bond6 (unregistering): Released all slaves [ 1064.850024][ T3300] netlink: 52 bytes leftover after parsing attributes in process `syz.9.7518'. [ 1064.924549][ T3288] bond1: option miimon: invalid value (18446744073709551607) [ 1064.935533][ T30] INFO: task syz.4.6595:31775 blocked for more than 144 seconds. [ 1064.943422][ T30] Not tainted syzkaller #0 [ 1064.949118][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1064.958219][ T30] task:syz.4.6595 state:D stack:26072 pid:31775 tgid:31761 ppid:29541 task_flags:0x400140 flags:0x00080002 [ 1064.979627][ T30] Call Trace: [ 1064.983474][ T30] [ 1064.984926][ T3288] bond1: option miimon: allowed values 0 - 2147483647 [ 1064.995877][ T30] __schedule+0x1821/0x5740 [ 1065.000709][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1065.006965][ T30] ? __pfx___schedule+0x10/0x10 [ 1065.012373][ T30] ? schedule+0x90/0x360 [ 1065.020478][ T30] schedule+0x164/0x360 [ 1065.025289][ T30] schedule_preempt_disabled+0x13/0x30 [ 1065.031356][ T30] __mutex_lock+0x7f7/0x1550 [ 1065.036811][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1065.042737][ T30] ? __mutex_lock+0x608/0x1550 [ 1065.048319][ T30] ? nfsd_nl_listener_set_doit+0x141/0x1670 [ 1065.055364][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1065.060746][ T30] ? __asan_memset+0x22/0x50 [ 1065.066254][ T30] ? __nla_validate_parse+0x2480/0x2dc0 [ 1065.072176][ T30] nfsd_nl_listener_set_doit+0x141/0x1670 [ 1065.080993][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 1065.090774][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1065.099633][ T30] ? __nla_parse+0x40/0x60 [ 1065.104476][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1065.116155][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1065.123566][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 1065.131173][ T30] ? __asan_memcpy+0x40/0x70 [ 1065.136533][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1065.143267][ T30] ? bpf_lsm_capable+0x9/0x20 [ 1065.149125][ T30] ? security_capable+0x7e/0x2c0 [ 1065.154556][ T30] genl_rcv_msg+0x61c/0x7a0 [ 1065.160091][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1065.165955][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1065.172472][ T30] netlink_rcv_skb+0x232/0x4b0 [ 1065.202381][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1065.214369][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1065.222909][ T30] ? down_read+0x270/0x2e0 [ 1065.229436][ T30] ? genl_rcv+0xd/0x40 [ 1065.233976][ T30] genl_rcv+0x28/0x40 [ 1065.239497][ T30] netlink_unicast+0x75c/0x8e0 [ 1065.246715][ T30] netlink_sendmsg+0x813/0xb40 [ 1065.251788][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1065.258864][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1065.264097][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1065.276457][ T30] ____sys_sendmsg+0x972/0x9f0 [ 1065.281641][ T30] ? __might_fault+0xaf/0x130 [ 1065.287086][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1065.292809][ T30] ? import_iovec+0x73/0xa0 [ 1065.299364][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1065.304465][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1065.317865][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1065.328223][ T30] ? futex_wake+0x4ac/0x580 [ 1065.340477][ T30] ? __fget_files+0x2a/0x420 [ 1065.346748][ T30] ? __fget_files+0x3a0/0x420 [ 1065.351734][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1065.357560][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1065.363328][ T30] ? rcu_is_watching+0x15/0xb0 [ 1065.368884][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.375738][ T30] do_syscall_64+0x174/0x580 [ 1065.380584][ T30] ? trace_irq_disable+0x3b/0x140 [ 1065.386357][ T30] ? clear_bhb_loop+0x40/0x90 [ 1065.391285][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.398142][ T30] RIP: 0033:0x7fbe58d9ce59 [ 1065.402794][ T30] RSP: 002b:00007fbe59c59028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1065.413508][ T30] RAX: ffffffffffffffda RBX: 00007fbe59016180 RCX: 00007fbe58d9ce59 [ 1065.427910][ T30] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 000000000000000c [ 1065.441362][ T30] RBP: 00007fbe58e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1065.451655][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1065.462079][ T30] R13: 00007fbe59016218 R14: 00007fbe59016180 R15: 00007fff7fd06298 [ 1065.470555][ T30] [ 1065.475953][ T3288] bond1 (unregistering): Released all slaves [ 1065.482273][ T30] [ 1065.482273][ T30] Showing all locks held in the system: [ 1065.500868][ T30] 1 lock held by khungtaskd/30: [ 1065.507503][ T30] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1065.536103][ T30] 2 locks held by getty/5391: [ 1065.541109][ T30] #0: ffff88823bf460a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1065.551324][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1065.564167][ T30] 1 lock held by syz-executor/5622: [ 1065.570475][ T30] #0: ffff8880b863aee0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1065.581904][ T30] 2 locks held by syz.2.5042/26329: [ 1065.588202][ T30] #0: ffffffff8fe393a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1065.597011][ T30] #1: ffffffff8ec8b1c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 1065.607634][ T30] 4 locks held by kworker/u8:0/31233: [ 1065.613038][ T30] #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1065.624258][ T30] #1: ffffc9000633fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1065.636214][ T30] #2: ffffffff8fdba228 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1065.646474][ T30] #3: ffffffff8fdc8f40 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x19/0xe0 [ 1065.657270][ T30] 2 locks held by syz.4.6595/31775: [ 1065.662519][ T30] #0: ffffffff8fe393a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1065.671273][ T30] #1: ffffffff8ec8b1c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 1065.682222][ T30] 2 locks held by syz.1.6763/32407: [ 1065.687694][ T30] #0: ffffffff8fe393a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1065.696280][ T30] #1: ffffffff8ec8b1c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 1065.707030][ T30] 3 locks held by kworker/u8:3/1343: [ 1065.712383][ T30] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1065.724535][ T30] #1: ffffc90004ad7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1065.736846][ T30] #2: ffffffff8fdc8f40 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1065.746237][ T30] 2 locks held by syz.7.7081/1604: [ 1065.751639][ T30] #0: ffffffff8fe393a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1065.760436][ T30] #1: ffffffff8ec8b1c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x181/0xcd0 [ 1065.770936][ T30] 2 locks held by syz.2.7461/3101: [ 1065.776216][ T30] #0: ffffffff8fe393a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1065.784711][ T30] #1: ffffffff8ec8b1c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 1065.797310][ T30] 3 locks held by syz.4.7515/3288: [ 1065.802482][ T30] #0: ffffffff9030c4a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1065.813150][ T30] #1: ffffffff8fdc8f40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1065.823090][ T30] #2: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1065.835115][ T30] 2 locks held by syz.5.7516/3293: [ 1065.840308][ T30] #0: ffffffff9030cfc8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1065.850482][ T30] #1: ffffffff8fdc8f40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1065.859989][ T30] 1 lock held by syz.0.7517/3291: [ 1065.865337][ T30] #0: ffffffff8fdc8f40 (rtnl_mutex){+.+.}-{4:4}, at: bpf_xdp_link_release+0x29/0x540 [ 1065.875181][ T30] 2 locks held by syz.9.7518/3299: [ 1065.880518][ T30] #0: ffff888078691940 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1065.891254][ T30] #1: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1065.902531][ T30] 1 lock held by syz.9.7518/3300: [ 1065.907729][ T30] #0: ffffffff8fdc8f40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1065.935404][ T30] [ 1065.938329][ T30] ============================================= [ 1065.938329][ T30] [ 1065.985623][ T30] NMI backtrace for cpu 0 [ 1065.985648][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1065.985674][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1065.985689][ T30] Call Trace: [ 1065.985699][ T30] [ 1065.985710][ T30] dump_stack_lvl+0xe8/0x150 [ 1065.985744][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1065.985785][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1065.985833][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1065.985870][ T30] sys_info+0x135/0x170 [ 1065.985897][ T30] watchdog+0xfd3/0x1030 [ 1065.985949][ T30] ? watchdog+0x1c9/0x1030 [ 1065.985990][ T30] kthread+0x389/0x470 [ 1065.986020][ T30] ? __pfx_watchdog+0x10/0x10 [ 1065.986051][ T30] ? __pfx_kthread+0x10/0x10 [ 1065.986083][ T30] ret_from_fork+0x514/0xb70 [ 1065.986114][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1065.986146][ T30] ? __switch_to+0xc79/0x1410 [ 1065.986183][ T30] ? __pfx_kthread+0x10/0x10 [ 1065.986215][ T30] ret_from_fork_asm+0x1a/0x30 [ 1065.986264][ T30] [ 1065.986273][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1066.099148][ C1] NMI backtrace for cpu 1 [ 1066.099170][ C1] CPU: 1 UID: 0 PID: 5001 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 1066.099193][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1066.099206][ C1] RIP: 0010:__lock_acquire+0x43c/0x2cf0 [ 1066.099234][ C1] Code: 84 d6 01 00 00 41 8b 45 20 66 85 c0 0f 88 c9 01 00 00 4c 89 ed 0f b6 89 c5 00 00 00 84 c9 0f b6 d3 0f b6 c9 0f 44 ca 89 0c 24 <45> 8b a6 88 0b 00 00 41 8d 4c 24 ff 83 f9 ff 41 bd ff ff ff ff 44 [ 1066.099252][ C1] RSP: 0018:ffffc90002f77510 EFLAGS: 00000002 [ 1066.099271][ C1] RAX: 0000000000020007 RBX: 0000000000000003 RCX: 0000000000000001 [ 1066.099284][ C1] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 1066.099296][ C1] RBP: ffff8880614eaab8 R08: ffffffff8176e256 R09: ffffffff8e95cca0 [ 1066.099312][ C1] R10: ffffc90002f77818 R11: ffffffff81b0e0e0 R12: 0000000000000007 [ 1066.099326][ C1] R13: ffff8880614eaab8 R14: ffff8880614e9f00 R15: ffff8880614eaa90 [ 1066.099341][ C1] FS: 00007f1dfa82c880(0000) GS:ffff88812538a000(0000) knlGS:0000000000000000 [ 1066.099359][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1066.099373][ C1] CR2: 0000001b2fff9ff8 CR3: 00000000616c0000 CR4: 00000000003526f0 [ 1066.099391][ C1] Call Trace: [ 1066.099399][ C1] [ 1066.099418][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1066.099448][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1066.099470][ C1] lock_acquire+0x106/0x350 [ 1066.099490][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1066.099518][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1066.099540][ C1] ? __kasan_slab_free+0x5c/0x80 [ 1066.099571][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1066.099594][ C1] unwind_next_frame+0xc3/0x2550 [ 1066.099617][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1066.099650][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1066.099674][ C1] ? kasan_save_free_info+0x46/0x50 [ 1066.099697][ C1] ? __kasan_slab_free+0x5c/0x80 [ 1066.099726][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1066.099756][ C1] arch_stack_walk+0x11b/0x150 [ 1066.099783][ C1] ? __kasan_slab_free+0x5c/0x80 [ 1066.099814][ C1] stack_trace_save+0xa9/0x100 [ 1066.099845][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1066.099879][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1066.099900][ C1] kasan_save_track+0x3e/0x80 [ 1066.099925][ C1] ? kasan_save_track+0x3e/0x80 [ 1066.099951][ C1] ? kasan_save_free_info+0x46/0x50 [ 1066.099973][ C1] ? __kasan_slab_free+0x5c/0x80 [ 1066.100028][ C1] kasan_save_free_info+0x46/0x50 [ 1066.100051][ C1] __kasan_slab_free+0x5c/0x80 [ 1066.100079][ C1] kfree+0x1c5/0x640 [ 1066.100103][ C1] ? __free_slab+0x149/0x290 [ 1066.100126][ C1] __free_slab+0x149/0x290 [ 1066.100152][ C1] __slab_free+0x274/0x2c0 [ 1066.100183][ C1] ? qlist_free_all+0x8e/0x100 [ 1066.100211][ C1] qlist_free_all+0x99/0x100 [ 1066.100237][ C1] ? do_getname+0x2e/0x250 [ 1066.100258][ C1] kasan_quarantine_reduce+0x148/0x160 [ 1066.100287][ C1] __kasan_slab_alloc+0x22/0x80 [ 1066.100316][ C1] kmem_cache_alloc_noprof+0x2bc/0x650 [ 1066.100341][ C1] ? do_getname+0x2e/0x250 [ 1066.100362][ C1] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 1066.100391][ C1] do_getname+0x2e/0x250 [ 1066.100411][ C1] ? getname_flags+0x11/0x20 [ 1066.100432][ C1] do_readlinkat+0xc8/0x510 [ 1066.100459][ C1] ? __pfx_do_readlinkat+0x10/0x10 [ 1066.100488][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.100509][ C1] __x64_sys_readlink+0x7f/0x90 [ 1066.100534][ C1] do_syscall_64+0x174/0x580 [ 1066.100556][ C1] ? clear_bhb_loop+0x40/0x90 [ 1066.100579][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.100598][ C1] RIP: 0033:0x7f1dfa1153a7 [ 1066.100614][ C1] Code: 00 00 90 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 00 31 c9 e8 8a 20 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 21 ba 0d 00 f7 d8 64 89 02 48 [ 1066.100637][ C1] RSP: 002b:00007fff9dfe31a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 1066.100657][ C1] RAX: ffffffffffffffda RBX: 00007fff9dfe3680 RCX: 00007f1dfa1153a7 [ 1066.100671][ C1] RDX: 0000000000000400 RSI: 00007fff9dfe31b0 RDI: 00007fff9dfe3680 [ 1066.100685][ C1] RBP: 00007fff9dfe31b0 R08: 000055a7eccad514 R09: 0000000000000001 [ 1066.100698][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000400 [ 1066.100710][ C1] R13: 00000000000000fe R14: 000055a7e41dbbe0 R15: 00007fff9dfe4180 [ 1066.100734][ C1] [ 1066.556667][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1066.563605][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1066.572756][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1066.582839][ T30] Call Trace: [ 1066.586177][ T30] [ 1066.589133][ T30] vpanic+0x56c/0xa60 [ 1066.593141][ T30] ? __pfx___schedule+0x10/0x10 [ 1066.598044][ T30] ? __pfx_vpanic+0x10/0x10 [ 1066.602660][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1066.608844][ T30] panic+0xc5/0xd0 [ 1066.612590][ T30] ? __pfx_panic+0x10/0x10 [ 1066.617067][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1066.622483][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1066.628697][ T30] watchdog+0x102c/0x1030 [ 1066.633071][ T30] ? watchdog+0x1c9/0x1030 [ 1066.637523][ T30] kthread+0x389/0x470 [ 1066.641655][ T30] ? __pfx_watchdog+0x10/0x10 [ 1066.646393][ T30] ? __pfx_kthread+0x10/0x10 [ 1066.651183][ T30] ret_from_fork+0x514/0xb70 [ 1066.655826][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1066.660985][ T30] ? __switch_to+0xc79/0x1410 [ 1066.665700][ T30] ? __pfx_kthread+0x10/0x10 [ 1066.670325][ T30] ret_from_fork_asm+0x1a/0x30 [ 1066.675151][ T30] [ 1066.678365][ T30] Kernel Offset: disabled [ 1066.682794][ T30] Rebooting in 86400 seconds..