last executing test programs: 9m31.849072173s ago: executing program 1 (id=4755): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="030000000000000028"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000024c0)=[{{&(0x7f0000000080)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @bcast, @rose, @bcast]}, 0x80, 0x0}, 0xc}, {{&(0x7f0000000240)=@tipc, 0x80, 0x0}, 0x1}], 0x2, 0x40010002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9m31.206587507s ago: executing program 1 (id=4760): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r5], 0x44}}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x2}, 0x1c) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40) 9m30.765357125s ago: executing program 1 (id=4764): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, 0x0, 0x0) r5 = accept(r1, 0x0, 0x0) connect$unix(r5, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 9m29.83143236s ago: executing program 1 (id=4774): unshare(0x20000400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a34000000060a090400000000000000000200ffff0900020073797a32000000000900010073797a300000000007f5064050111e0014000000110001"], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)={0x1c, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @typed={0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x12000300) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x0, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0xffff0000, 0xc11270e446e71eb1, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x0, 0xb7, 0x4, 0xe8, 0x6, 0x1268, 0xb2a}}, @common=@inet=@recent0={{0xf8}, {0xfffffffe, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) 9m29.698616823s ago: executing program 1 (id=4777): r0 = socket(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000110000009500000000000000b342d6fa216e5e0dfb4e7582c88766e5335e89f075c3d753fdfbd76877fe99031fa0355e8b83423358e2c3bb8d8c6244ec7647a3bd34e0d2157d0559458e05b9b3b8ae7977ab8720d6b15708bfbd386b2b464bf1e9f77a8c1f2db8e17acc06b9"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000300)={@multicast1, 0x0, 0x0, 0x40, 0x0, [{}, {@loopback}, {@loopback}, {@multicast2}]}}) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f00000005c0), 0x10) read(r5, &(0x7f00000027c0)=""/4073, 0xfe9) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000900)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000007c0)={0x110, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc8}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x87000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf08}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe522}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$can_raw(r5, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r6}, 0x10, &(0x7f00000003c0)={&(0x7f0000000500)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x3f57955e7be81d83, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x4000040) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xffffffffffffff58, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6}]}}}]}, 0x48}}, 0x0) 9m29.497201437s ago: executing program 2 (id=4781): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0x44, 0x65, 0x8, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xa, 0xfff1}}, @TCA_ROUTE4_TO={0x8, 0x2, 0x1c}]}}]}, 0x44}}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRESDEC=r1, @ANYBLOB="01000000500000001c0012000c080000626f6e64800000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090000fdf5b4b825d41800540c9a4526bf0000007468000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r12, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000002060108000000200000000000000000140007800800114000000000050015000e000000050005000a000000050001400700000005000400000000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {0x0}], 0x7, &(0x7f0000000600)=""/191, 0xbf, 0xb00}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 9m29.274202345s ago: executing program 2 (id=4783): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000005e44f954c6b311a854a7ce673b46342911d1f0619eb513229688763fe15f0d4aa096c02e25cced2fcbf03a1058b204cd4e661b715479c92805e4805e1a6a5d8a1eef6226761d487dae961904dfa2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000002c0), 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r5, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000340), &(0x7f00000002c0)=@tcp6=r6}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xffffffffffffff5c}}}]}]}]}}]}, 0x54}}, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00'}, 0x94) 9m28.311111204s ago: executing program 1 (id=4787): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 32) unshare(0x62040200) (rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x2c, r2, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) (async, rerun: 64) shutdown(0xffffffffffffffff, 0x1) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="180000e22a005600010600000000000000000700000000000000e5abcf46ae8fd6c74cdbbe3acfbd3d846afb7e153614ab5da1672a67906cf92ab6499d8fdbeb3057006a798265957ba17d507c8b8fd2820b7c082bfa3fd9c4d22d0813bd5c23828ca54688517a3af03e4e37182afe71b66c98d5f627cd8225defb8db47a085730af1f71d87529e78f4f3ce17de6d9fe7702277f792bdb9047a5d4f8ce7cc9e7d22765f4598e779741d816765347bd24b87314baa7896182574c690ef90d9f3d0b31b98642761cf4a5ef984f4d"], 0x18}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES8=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10) (async) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000008c0)={0x24, r10, 0x78967656d0a78869, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x24}}, 0x4004000) (async, rerun: 32) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4004011}, 0xc, &(0x7f0000000280)={&(0x7f0000000b00)={0x1a0, r10, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x78f2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x87}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x37b9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x8880}, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) (rerun: 32) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r9, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4009}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x48, r12, 0x110, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x10}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x480c5}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 9m28.305845765s ago: executing program 2 (id=4788): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x12d, &(0x7f0000000300)=ANY=[@ANYBLOB="c22e99bc529e50a245d5cde008004b62011f0064000006679078ac1414117f000001440c9883ac1414aa0000dc30014420e9e00000020000000002000000000000000500000007000000010000009c8317a0ffffffff0a010102640101017f0000017c0101004410dd90ffff936600000000000000018903f40009c280c1963fb18936c7ad9bcd4a0b339e7af5c925c4a8925b5b8ca2e041d30578268a93b6c977a704708754e5d729b62d226bdc6845d21a1b621c960a24abe05de8ce0d0976dad5486bcc1793c3439da3f18e5077a4ef57964711b5e7ce3dad2a51e28a27171dd32acae626f59c7fac97c80fd0838129aabf43bb8046ca744ba48146723d85243c8c0679a65b271213c2e2f20a55c39270d5211772d629f556127c968fec1b9ee6dad26f8726e6b57e1daf9d4695fc8b9b13fbb039e23bd87c314158b549ff046e8d670655ca8f6cdcfe8b55668c3555ce19add11da7ccdf8cf81969cda4d8d03cdbcb71537c0c32"], 0x0) gettid() sendmmsg$unix(r0, &(0x7f0000001380)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000074488ea05059bbbd27326790c0"], 0x18, 0x4000}}], 0x1, 0x840) 9m27.628637906s ago: executing program 2 (id=4789): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null]}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='bic', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000000c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000002c0)={{r1, 0xff, 0x6, 0x1, 0xffffffff, 0x9, 0x0, 0x8, 0x20, 0x700000, 0x9, 0x4, 0x8, 0x1eae000000000, 0x3}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 9m25.146869253s ago: executing program 2 (id=4793): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x1}}, 0xffd1) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000f80000000a20000000000a030000000000000000000f0000000900010073797a300000000054000000090a010400000000000000000300000008000a40000000f30800020073797a310000004000000023180011800e000100636f6e6e6c696d697400000004000280140000001000010000000000000000000000000a"], 0x9c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) syz_emit_ethernet(0x82, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbb86dd60ee527a004c3c0020010000000000000000000000000001ff02000000000000000000000000000173000000000000000420880b0000000000000800000086dd080088be00000001100000000100000000000000080022eb00000000200000080200000000000000000000000800655800000000"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="70000000000101040000000000000000020000002400018014000180080001"], 0x70}}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="000008000005"], 0xfce) preadv(r6, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000680)=""/180, 0xb4}], 0x2, 0x6, 0x7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) 9m18.656285929s ago: executing program 2 (id=4799): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000001900180100002020000000000000000000007b1af8ff00000000bfc9efce6de9ffafdaad4aa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0x2}, 0x18) unshare(0x62040200) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'ovf\x00', 0x20, 0x1, 0x4f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000440)={{0xc, @broadcast, 0x4e23, 0x3, 'wrr\x00', 0x29, 0x4, 0x69}, {@private=0xa010100, 0x4e24, 0x2000, 0x80c8, 0x263f, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="7106c3604b3896c24ad23870642fef065d940ba1fdfc701cb204b4", 0x1b}], 0x1, &(0x7f0000000a40)=ANY=[], 0x18}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0xb}], 0x1, 0x50, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000800)={&(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000280)="fc", 0x1}], 0x1}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x200, @private1, 0xba63}, 0x1c) connect$inet6(r6, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459eb0710f0000000000bf939e2cecb0f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 9m12.649981627s ago: executing program 32 (id=4787): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 32) unshare(0x62040200) (rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x2c, r2, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) (async, rerun: 64) shutdown(0xffffffffffffffff, 0x1) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="180000e22a005600010600000000000000000700000000000000e5abcf46ae8fd6c74cdbbe3acfbd3d846afb7e153614ab5da1672a67906cf92ab6499d8fdbeb3057006a798265957ba17d507c8b8fd2820b7c082bfa3fd9c4d22d0813bd5c23828ca54688517a3af03e4e37182afe71b66c98d5f627cd8225defb8db47a085730af1f71d87529e78f4f3ce17de6d9fe7702277f792bdb9047a5d4f8ce7cc9e7d22765f4598e779741d816765347bd24b87314baa7896182574c690ef90d9f3d0b31b98642761cf4a5ef984f4d"], 0x18}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES8=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10) (async) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000008c0)={0x24, r10, 0x78967656d0a78869, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x24}}, 0x4004000) (async, rerun: 32) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4004011}, 0xc, &(0x7f0000000280)={&(0x7f0000000b00)={0x1a0, r10, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x78f2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x87}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x37b9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x8880}, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) (rerun: 32) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r9, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4009}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x48, r12, 0x110, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x10}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x480c5}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 9m3.275178043s ago: executing program 33 (id=4799): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000001900180100002020000000000000000000007b1af8ff00000000bfc9efce6de9ffafdaad4aa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0x2}, 0x18) unshare(0x62040200) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'ovf\x00', 0x20, 0x1, 0x4f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000440)={{0xc, @broadcast, 0x4e23, 0x3, 'wrr\x00', 0x29, 0x4, 0x69}, {@private=0xa010100, 0x4e24, 0x2000, 0x80c8, 0x263f, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="7106c3604b3896c24ad23870642fef065d940ba1fdfc701cb204b4", 0x1b}], 0x1, &(0x7f0000000a40)=ANY=[], 0x18}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0xb}], 0x1, 0x50, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000800)={&(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000280)="fc", 0x1}], 0x1}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x200, @private1, 0xba63}, 0x1c) connect$inet6(r6, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459eb0710f0000000000bf939e2cecb0f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 32.004620423s ago: executing program 4 (id=8956): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e1d, 0x4db, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1, 0x0, 0x0, 0x84}}], 0x1, 0x4c040) bpf$PROG_LOAD(0x5, 0x0, 0x0) 31.463259451s ago: executing program 4 (id=8964): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a0000008700", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 31.096255216s ago: executing program 4 (id=8967): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) (async) bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r5, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000100039042cbdf000eaff49e6000003e459e7c12fa0888691fc459c3b1bfe4043cf08ec718c4fd7f491780ac7b8cc460eec89a1747dc089ceba02e60a74b2ff749499f0fb280f3f6997d7d9950a383433adebe7607fbad932f56174e74d06e98fdb757183fd13703c2c73cfe80c6a64c3bf0aae7abcfeee1c6d7cb620aae2910ef6fd83ce87db7a267771082b5057daa5cec0a1d278669bb10111b89a73be95fb0fe27502909d6056625cdaa3984d3bff7610eae342a99781cbf70a46e5bef0244adebbf85aa778c5df3070b33111f13b267289c0b2f4962256", @ANYRES32=r5, @ANYBLOB="8300040000000000400012800800010073697400340002800500090029000000060010000b00000008000c000000008006000d000900000008000300e000000106000e0000000000"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 23.496338097s ago: executing program 6 (id=9012): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000001900180100002020000000000000000000007b1af8ff00000000bfc9efce6de9ffafdaad4aa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0x2}, 0x18) unshare(0x62040200) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'ovf\x00', 0x20, 0x1, 0x4f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000440)={{0xc, @broadcast, 0x4e23, 0x3, 'wrr\x00', 0x29, 0x4, 0x69}, {@private=0xa010100, 0x4e24, 0x2000, 0x80c8, 0x263f, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="7106c3604b3896c24ad23870642fef065d940ba1fdfc701cb204b4", 0x1b}], 0x1, &(0x7f0000000a40)=ANY=[], 0x18}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0xb}], 0x1, 0x50, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000800)={&(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000280)="fc", 0x1}], 0x1}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x200, @private1, 0xba63}, 0x1c) connect$inet6(r6, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x1, @remote, 0x7daa}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000001200)=[{0x0}], 0x1) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459eb0710f0000000000bf939e2cecb0f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 20.828764999s ago: executing program 6 (id=9026): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_devices(r1, 0x0, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000ef73a8ae58fbd3239f19052e1b01a69c1cfeff876abeed705aee52812b", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000040)={0x2, 0x206, 0x8ce, 0xf48}, 0x10) ppoll(&(0x7f0000000300)=[{r2, 0x6040}, {r4, 0xd085}], 0x2, &(0x7f0000000180), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r6 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) connect$llc(r6, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r7, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r9, 0x400442c8, &(0x7f0000000380)=ANY=[@ANYRES32=r8]) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0xfffffffffffffffc) 20.337173239s ago: executing program 0 (id=9028): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0xb, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffec}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x0, 0x1, {0xfffffff9, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4002, 0xfffffdf9, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x27, 0xa1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 20.133899905s ago: executing program 5 (id=9029): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x48, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0x7, 0x0, &(0x7f0000000200)="63eced8e46dc3f", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff3, 0x7}, {}, {0x10, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x84d}, 0x40010) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r11) sendmsg$IPVS_CMD_SET_CONFIG(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, r12, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r12, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008804}, 0x44044854) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x8, 0x4, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r14}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r13}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r14, &(0x7f0000000040)}, 0x20) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 20.128424118s ago: executing program 0 (id=9030): r0 = bpf$BPF_LINK_CREATE(0x8, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x26, 0x0, @val=@tracing={0x0, 0xbe3}}, 0x20) syz_emit_ethernet(0x4e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08006ab39b9cc4c2489800059078ac1414000a01010044140503000000000000000064010101000000008902000000000000d4b8b513321e11ffa8853d59798f0ee00da2dcc98a86a74b082714db0211f559e7ebfc4292374100c5d4d27f2e175a468934c49b259d02e010248ec5603ffe0c3703bdbe0abdfa9416177768c0758d8410cb56dec5758957e417772d53c05b8c420ae1fc5f4394e32717d8adc7405fa6cddb03b2172373a8202aad5965f99aef124a1a4aeb163484a2bb5d1dd7be6ce5fd86f23a585bc9c5314d455e3239e0c748f78ea19c7a4d7aed6818651db6b857f52297b95445f32435c9f2f89d4042d3d982b2bb5874081f542fccd1a8d9a9d4065f76970e07866f40e4", @ANYRES32=0x41424344, @ANYBLOB="6ffea342a8d47c53e1e1cb6868c1eb74093cb04f2b006d403aa277e212b1ceb756a0a1300d48de0d020feb6efc832a4442bc83d79ae4fc5b29fe879795a288b08692c9e72f7b460577e6f67291cbb9900f1e50a4ea2709d657d3db9795885a0c864bf40d0c654b903df128427af3d2944fc3f735239c7ca68c56bd03a84436a5bd658a5084f6", @ANYRES32=r0], 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000020000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="ac0000000906010800000000000000000e0000070900020073797a30000000002400078006001d40000600001800148014000240ff0200000000000000000000000000010800094000000002050001000700000058000880100007800900130073797a320000000018000780140017007663616e300000000000000000000000100007800c00148008000140e00000011000078009001300737d7a31000000000c00"], 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x4044800) 19.980528351s ago: executing program 3 (id=9031): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x0, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x4, 0x3dc], [0x60, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) r10 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r8, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r8, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x20, 0x70bd2d, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x44000) 19.928733568s ago: executing program 0 (id=9032): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001340)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001d40)=[{&(0x7f0000000040)={0x12cc, 0x20, 0x300, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x7, 0x6c, 0x0, 0x0, @str=')$\x00'}, @typed={0x14, 0x106, 0x0, 0x0, @ipv6=@private1}, @generic="3bcb3a05", @nested={0x1014, 0xbc, 0x0, 0x1, [@nested={0x4, 0x9b}, @typed={0x8, 0x19, 0x0, 0x0, @fd=r0}, @generic="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", @nested={0x4, 0x25}]}, @nested={0x1a9, 0x121, 0x0, 0x1, [@typed={0xab, 0x46, 0x0, 0x0, @binary="c97ff06243d2ec341879cfbdc6dd1047b5bcec056f644d97d70f43208ac38d7a28599c77e87706e6e8c6ce45ea9cdb110f04012a2cc23978f937e6d41fe429f74e0dcebd2dff9f9fec367543b1255103fe6a07938c820c19404e46bef58606a21d620096fee0c68dbf4477ce462ddef7bb230db777c310113ed26dc4ca4cea778df5affc810a2c41139b447fa30d8491957ae9f6232b0de55b5ccfa53d8d91dd8f88b9f0fc4d79"}, @typed={0xc, 0x63, 0x0, 0x0, @u64=0x2414}, @nested={0x4, 0x32}, @nested={0x4, 0x14e}, @generic="8dadae1d96c589ec7f007d3b84169d58d273f446dd8d7d087976737a7175c3781b7567b7b6ef5933360a3591f36f95e6a90df064e136ba8ec73af1ef673e4d0f56a2e66ef1409df31a034a08109852c2a918360215afbc5eccb4ce5d9744d0b3b95b5e2489b418a488440200c30388f120bad0d00ab89e0eb097076e8bf27ecde78bb2e50687c797ab85ac3e408222ce6eeeee598418cf7daebe5d54c3598c256c8e0a9623a5f7776ef6430c86e14f84a219589ea3be95346ba47630d43f12ef74baa873f680d1192736613f6cc11e5e04", @nested={0x4, 0x3d}, @typed={0x4, 0x2b}, @typed={0x8, 0x90, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x21}}, @nested={0x4, 0xe7}]}, @generic="8d9ca7870c6195e4f5fcc7a6d3d54be895ea45ad095577baf95ef4f003ad3f55f4f870d7c1a24cb722e03106504d6d4585c9ad701d4624530f97112342dd54cd1acc615031c09e522f31fe205961a9a147d80d01d2efc08043a98babf9e892674170f2715b4c534ef98d80895a0714d9099a1e143f78d4388f70f36af4a3a46c4d8bad69c22cbb44b49d1aeafad6179165eff9b17bd3ad726cf59736643aab205a6a562ae6a732a9f8a29ab87d857f183558c2fe8195f1cb63f198a415d0c075873226e0fa76f5ead8acb3b86d59ad10641df9474c3c065ab78398"]}, 0x12cc}, {&(0x7f0000001380)={0x48c, 0x33, 0x400, 0x70bd2c, 0x25dfdbfe, "", [@nested={0x10, 0x13, 0x0, 0x1, [@nested={0x4, 0xad}, @nested={0x4, 0xb1}, @nested={0x4, 0xcb}]}, @generic="61066ea54bfc6496ac1c1fdf782075f4a291c2e072acc9214f33dd6dc2dfd70fb8cbf48fefb2a6265bc87b7ee6f6498bd130af3aa46ffe0174bbcc53de5f6cc9faba1c051c6eac0b82b7d7aa274aa6868503c3117cca9dfb82178b82f6763262ffc961e2d132f1b3c2f0711b5b03caaf5eb7e823fa9229da3b7e25fbc72a900b3e20c3f4cda80a5edab5c97bb49bbfd7323ca49b7b810e7039f02992083a34007cfbf90730084f8e5d13e50ce6823e8c965e59f2f9ef7b7c7e530b53cc650c840876e1ecd0857988928a34089e76257d0c4a7b6cb6dede9cd7bc5edd2849b29dfc0b1e9d1fd18aa85841054c7e", @generic="2e243f5f61580ee0c76b79731f10a0deb8ca4a59b8024cda1971bfe942da45cbd5cdf2ec7eae31a50ae5bdc4ba14d821dfe2f7f886baefa6", @generic="e4f64ee4bf0b8154ffb5568e33c3024f87e07cdb3f8799d7820ff05894ecba68d5a8551a6627eeaa1fb35cc3a103f38e994c7301c866b609135ee90f23c52f87a9c81bc942f911eda3c026000b802441a3dcfa56fae05dd84185a43370b2487ff8eb88abd4b5c9ccbcdd600f4ccfcc2724c808e9b865b2c5ffa3905a170b5705680adc72c3706f65eeaad4749d1a0a7da739a1c6f32ab14953c81181e16b7705862779d779799fac45267ca5d3f2e9b51aafd1201e20a702f9f136f614f499bae0721915", @nested={0x1de, 0x27, 0x0, 0x1, [@typed={0x8, 0xd4, 0x0, 0x0, @pid=r1}, @generic="1b2848038bec90184878990334fdef7c96e3d4ab4a6a48e023a53fc94c2d89703f9e76023051d97d1555d39e2a76ebef37183a669d386871d19a792580adf84a8edd7c609fb1", @typed={0xf6, 0x11c, 0x0, 0x0, @binary="70bd22d307b9c268a45a29967cbf280b5e56a29d4a889f2b810eeea0dd56664c5bd4fba227992685282b90977cb083a6a72c7f9b5e585851a58ed1cfe82b896b9203a7764e6f6e8e6fbc28c442ca408cdc2f96d9fbdf3d3f728dd25237209b88378d8c26d8ab035024aa12d444e5f1ebbd609173ccb1b785159a3c9479ed31db8089bc6469b66fa8525ac5437e7affa72f051e2cc31aa71a9112889ce03cbe6fa426c08a0781020017a13ed4d69d338be6c608147f2bbca974ce443da8fbc0a3bad238948a073ec584e37fa1b4cd5a32ba900927929293c0a14be7ea4d5bfae8f6b8087dd06fe74e83f8de89d743fd18e0a5"}, @nested={0x4, 0x148}, @generic="f3a21abe19495f8313a34dbcfc567ae68d1b91e4488751211c37afcf62281a8693986d5f360362ed5634e599105e248382a375650dc10212a76d09189361945544b472be789439f18244ef2a6f859140c3c27136f525c63b222bda64510cb63fa216a87f39837b76135d21a7085bce2f03d201fd3081835359e819629e05e0895f545c8c3bdf66f9", @typed={0x8, 0x88, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2c}}]}, @generic="8d6a8a01777746b5b15b89afa368c3a847f52ac8ea919ce71f15f65ecb8f3bf9033623137a896425a19496a48853445b275ce62ce67892eac36f26544be99aaca7aa4f36fb1b582da20dc375d9074144f02a3365d58b41e6ab7116a159a6c17de56a12a41ce6208122df6d83d9b1a03b1ab4c24e474effa987216747c0c3c7b1c1d0ad94b5db915cd625d29379f403a9ee41fe61794ddd8e4c1f00ad968df453"]}, 0x48c}, {&(0x7f0000001840)={0x2a0, 0x27, 0x200, 0x70bd29, 0x25dfdbfc, "", [@typed={0x4, 0xdc}, @nested={0x23e, 0xa3, 0x0, 0x1, [@nested={0x4, 0x139}, @nested={0x4, 0x117}, @generic="a6021b0cae4f24fb468e8152c3ff509b000fe435c9618f279cb1464960066574df00f85d54af98e23de9e915d67b13c7f96ca03d9c2e778ed3dc7587d29840f37f19d05fa8f4779500211e5209f209b3047ab6ab6f65f29291f37544800e0441c639bcd8d3db58169d46338400e189434507cc7139ac29757192371fb5d8d27e27593856e1c5e1e125ddb2a51764b8de019f9841effb1c5adb42b1706e53555b71631b957e02368c44cddeda114a63ebf87239dceb5090", @generic="c5e0beee0706039233fb68d5f5f49f427299ba07ff45f611388b923bd25a5534b66279e7b48b6a739ce340d87a", @nested={0x4, 0x132}, @typed={0x14, 0x13c, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @nested={0x4, 0x144}, @generic="e6f354761f9654fe30941426b514139287c2c1d2f634aa70ec8d698beebefc88021d0ef4198473d3670cb9894545b845d94e14c42aed2390f51790f071e2551131ed9d80baf8365819cf7413aa6ecf333663a9dc117fd6705674c8a9437a80cbb7ae91ac513a34501991097226f6d6edc48a", @typed={0xc, 0x12b, 0x0, 0x0, @u64=0x9}, @generic="4a6db3e045ea8276bb813af95cc0e03be7cc7eb981e5dfc90196fc5a08fffd05c19a17b1d730d9990842b8e2528e53152bd80f682d373c4cbdce1e87806cec71163650e1895618d40dc54c4a5b421af9b85f80d991e45a7bbd7b77254198755c180751bed13550d0ed2cdbc97de78877a0d9a63ef309dad11368712c7bd5d82c19f4592731f6b7926e5536809d1deb43a12ebf830bcacb750e486dab8c0dedd66315f0ec6b38c4a246e268fd50455e378242a8cd"]}, @generic="43ae0e02a63dedeb062394d2a6527f8f8394f4e993a09bc7a6857d15150394fc31cf84d264b8c0474938ff7d1079ef8cda86312c8e92a4ae8ee3e8fbcef25b3ccc52008b833cd9ad6b"]}, 0x2a0}, {&(0x7f0000001b00)={0x21c, 0x24, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x20, 0xd6, 0x0, 0x1, [@typed={0x14, 0x45, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0xb3, 0x0, 0x0, @fd=r2}]}, @typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@remote}, @typed={0x14, 0x5a, 0x0, 0x0, @ipv6=@local}, @generic="78ad8653f55d791daec73e252d68dffab17cc5f7cfceb00796f426603382d96a60155c2e1c2696f90408103d80e214fc7c2dc0fb566620ff2b70c15460187760734655c96716535d041c5ca69787e7d7647358235a52f47210a4d0c5484c910c2819bec690a1c8c975a2016987485fb337efc5d719923bcb17a88fb89245a45bed6ab836c56909ff38ec15dda33f20a8161881f6f0a18514371382a5a01550ad2afc3d61fd0b55d9075502f48a8c650be6bb032f76ccef95126442c190acecd6dac803925874bdbb4dbe12ceb9f0f51771f6ea86841360f4", @typed={0xec, 0x18, 0x0, 0x0, @binary="50da2d11bf888b75c82fb3deb25c4c5e0046e13777c1ac3970e3752c8510b3d061d5b5c2322a88f1ca78a2cb728f5e5e84cef6825f66a990b3807e0bd2c0e4f22e0b1b6ed5b57ba7cd20f3efa1b0f7e68535faa3bf51536c809bdccd5cfc0652e0b0e2dd7aa39602edd6759068c50526feb7e6418adfe5da8d1ffe87b10bb14b2c342308da82d14b9a2179ab008140efbd4833371fac239f87728c01e1f673d1a1e507491385531cc57f1c0870de57246e8a0c4fe1a0e966220277a3eabee521d6a7d78a5e7bc290a746533e993120d134a45dd4688aeaf6de1e2d00d38d4081448ccf84924334c6"}]}, 0x21c}], 0x4, 0x0, 0x0, 0x4000001}, 0x4004080) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001d40)=[{&(0x7f0000000040)={0x12cc, 0x20, 0x300, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x7, 0x6c, 0x0, 0x0, @str=')$\x00'}, @typed={0x14, 0x106, 0x0, 0x0, @ipv6=@private1}, @generic="3bcb3a05", @nested={0x1014, 0xbc, 0x0, 0x1, [@nested={0x4, 0x9b}, @typed={0x8, 0x19, 0x0, 0x0, @fd=r0}, @generic="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", @nested={0x4, 0x25}]}, @nested={0x1a9, 0x121, 0x0, 0x1, [@typed={0xab, 0x46, 0x0, 0x0, @binary="c97ff06243d2ec341879cfbdc6dd1047b5bcec056f644d97d70f43208ac38d7a28599c77e87706e6e8c6ce45ea9cdb110f04012a2cc23978f937e6d41fe429f74e0dcebd2dff9f9fec367543b1255103fe6a07938c820c19404e46bef58606a21d620096fee0c68dbf4477ce462ddef7bb230db777c310113ed26dc4ca4cea778df5affc810a2c41139b447fa30d8491957ae9f6232b0de55b5ccfa53d8d91dd8f88b9f0fc4d79"}, @typed={0xc, 0x63, 0x0, 0x0, @u64=0x2414}, @nested={0x4, 0x32}, @nested={0x4, 0x14e}, @generic="8dadae1d96c589ec7f007d3b84169d58d273f446dd8d7d087976737a7175c3781b7567b7b6ef5933360a3591f36f95e6a90df064e136ba8ec73af1ef673e4d0f56a2e66ef1409df31a034a08109852c2a918360215afbc5eccb4ce5d9744d0b3b95b5e2489b418a488440200c30388f120bad0d00ab89e0eb097076e8bf27ecde78bb2e50687c797ab85ac3e408222ce6eeeee598418cf7daebe5d54c3598c256c8e0a9623a5f7776ef6430c86e14f84a219589ea3be95346ba47630d43f12ef74baa873f680d1192736613f6cc11e5e04", @nested={0x4, 0x3d}, @typed={0x4, 0x2b}, @typed={0x8, 0x90, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x21}}, @nested={0x4, 0xe7}]}, @generic="8d9ca7870c6195e4f5fcc7a6d3d54be895ea45ad095577baf95ef4f003ad3f55f4f870d7c1a24cb722e03106504d6d4585c9ad701d4624530f97112342dd54cd1acc615031c09e522f31fe205961a9a147d80d01d2efc08043a98babf9e892674170f2715b4c534ef98d80895a0714d9099a1e143f78d4388f70f36af4a3a46c4d8bad69c22cbb44b49d1aeafad6179165eff9b17bd3ad726cf59736643aab205a6a562ae6a732a9f8a29ab87d857f183558c2fe8195f1cb63f198a415d0c075873226e0fa76f5ead8acb3b86d59ad10641df9474c3c065ab78398"]}, 0x12cc}, {&(0x7f0000001380)={0x48c, 0x33, 0x400, 0x70bd2c, 0x25dfdbfe, "", [@nested={0x10, 0x13, 0x0, 0x1, [@nested={0x4, 0xad}, @nested={0x4, 0xb1}, @nested={0x4, 0xcb}]}, @generic="61066ea54bfc6496ac1c1fdf782075f4a291c2e072acc9214f33dd6dc2dfd70fb8cbf48fefb2a6265bc87b7ee6f6498bd130af3aa46ffe0174bbcc53de5f6cc9faba1c051c6eac0b82b7d7aa274aa6868503c3117cca9dfb82178b82f6763262ffc961e2d132f1b3c2f0711b5b03caaf5eb7e823fa9229da3b7e25fbc72a900b3e20c3f4cda80a5edab5c97bb49bbfd7323ca49b7b810e7039f02992083a34007cfbf90730084f8e5d13e50ce6823e8c965e59f2f9ef7b7c7e530b53cc650c840876e1ecd0857988928a34089e76257d0c4a7b6cb6dede9cd7bc5edd2849b29dfc0b1e9d1fd18aa85841054c7e", @generic="2e243f5f61580ee0c76b79731f10a0deb8ca4a59b8024cda1971bfe942da45cbd5cdf2ec7eae31a50ae5bdc4ba14d821dfe2f7f886baefa6", @generic="e4f64ee4bf0b8154ffb5568e33c3024f87e07cdb3f8799d7820ff05894ecba68d5a8551a6627eeaa1fb35cc3a103f38e994c7301c866b609135ee90f23c52f87a9c81bc942f911eda3c026000b802441a3dcfa56fae05dd84185a43370b2487ff8eb88abd4b5c9ccbcdd600f4ccfcc2724c808e9b865b2c5ffa3905a170b5705680adc72c3706f65eeaad4749d1a0a7da739a1c6f32ab14953c81181e16b7705862779d779799fac45267ca5d3f2e9b51aafd1201e20a702f9f136f614f499bae0721915", @nested={0x1de, 0x27, 0x0, 0x1, [@typed={0x8, 0xd4, 0x0, 0x0, @pid=r1}, @generic="1b2848038bec90184878990334fdef7c96e3d4ab4a6a48e023a53fc94c2d89703f9e76023051d97d1555d39e2a76ebef37183a669d386871d19a792580adf84a8edd7c609fb1", @typed={0xf6, 0x11c, 0x0, 0x0, @binary="70bd22d307b9c268a45a29967cbf280b5e56a29d4a889f2b810eeea0dd56664c5bd4fba227992685282b90977cb083a6a72c7f9b5e585851a58ed1cfe82b896b9203a7764e6f6e8e6fbc28c442ca408cdc2f96d9fbdf3d3f728dd25237209b88378d8c26d8ab035024aa12d444e5f1ebbd609173ccb1b785159a3c9479ed31db8089bc6469b66fa8525ac5437e7affa72f051e2cc31aa71a9112889ce03cbe6fa426c08a0781020017a13ed4d69d338be6c608147f2bbca974ce443da8fbc0a3bad238948a073ec584e37fa1b4cd5a32ba900927929293c0a14be7ea4d5bfae8f6b8087dd06fe74e83f8de89d743fd18e0a5"}, @nested={0x4, 0x148}, @generic="f3a21abe19495f8313a34dbcfc567ae68d1b91e4488751211c37afcf62281a8693986d5f360362ed5634e599105e248382a375650dc10212a76d09189361945544b472be789439f18244ef2a6f859140c3c27136f525c63b222bda64510cb63fa216a87f39837b76135d21a7085bce2f03d201fd3081835359e819629e05e0895f545c8c3bdf66f9", @typed={0x8, 0x88, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2c}}]}, @generic="8d6a8a01777746b5b15b89afa368c3a847f52ac8ea919ce71f15f65ecb8f3bf9033623137a896425a19496a48853445b275ce62ce67892eac36f26544be99aaca7aa4f36fb1b582da20dc375d9074144f02a3365d58b41e6ab7116a159a6c17de56a12a41ce6208122df6d83d9b1a03b1ab4c24e474effa987216747c0c3c7b1c1d0ad94b5db915cd625d29379f403a9ee41fe61794ddd8e4c1f00ad968df453"]}, 0x48c}, {&(0x7f0000001840)={0x2a0, 0x27, 0x200, 0x70bd29, 0x25dfdbfc, "", [@typed={0x4, 0xdc}, @nested={0x23e, 0xa3, 0x0, 0x1, [@nested={0x4, 0x139}, @nested={0x4, 0x117}, @generic="a6021b0cae4f24fb468e8152c3ff509b000fe435c9618f279cb1464960066574df00f85d54af98e23de9e915d67b13c7f96ca03d9c2e778ed3dc7587d29840f37f19d05fa8f4779500211e5209f209b3047ab6ab6f65f29291f37544800e0441c639bcd8d3db58169d46338400e189434507cc7139ac29757192371fb5d8d27e27593856e1c5e1e125ddb2a51764b8de019f9841effb1c5adb42b1706e53555b71631b957e02368c44cddeda114a63ebf87239dceb5090", @generic="c5e0beee0706039233fb68d5f5f49f427299ba07ff45f611388b923bd25a5534b66279e7b48b6a739ce340d87a", @nested={0x4, 0x132}, @typed={0x14, 0x13c, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @nested={0x4, 0x144}, @generic="e6f354761f9654fe30941426b514139287c2c1d2f634aa70ec8d698beebefc88021d0ef4198473d3670cb9894545b845d94e14c42aed2390f51790f071e2551131ed9d80baf8365819cf7413aa6ecf333663a9dc117fd6705674c8a9437a80cbb7ae91ac513a34501991097226f6d6edc48a", @typed={0xc, 0x12b, 0x0, 0x0, @u64=0x9}, @generic="4a6db3e045ea8276bb813af95cc0e03be7cc7eb981e5dfc90196fc5a08fffd05c19a17b1d730d9990842b8e2528e53152bd80f682d373c4cbdce1e87806cec71163650e1895618d40dc54c4a5b421af9b85f80d991e45a7bbd7b77254198755c180751bed13550d0ed2cdbc97de78877a0d9a63ef309dad11368712c7bd5d82c19f4592731f6b7926e5536809d1deb43a12ebf830bcacb750e486dab8c0dedd66315f0ec6b38c4a246e268fd50455e378242a8cd"]}, @generic="43ae0e02a63dedeb062394d2a6527f8f8394f4e993a09bc7a6857d15150394fc31cf84d264b8c0474938ff7d1079ef8cda86312c8e92a4ae8ee3e8fbcef25b3ccc52008b833cd9ad6b"]}, 0x2a0}, {&(0x7f0000001b00)={0x21c, 0x24, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x20, 0xd6, 0x0, 0x1, [@typed={0x14, 0x45, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0xb3, 0x0, 0x0, @fd=r2}]}, @typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@remote}, @typed={0x14, 0x5a, 0x0, 0x0, @ipv6=@local}, @generic="78ad8653f55d791daec73e252d68dffab17cc5f7cfceb00796f426603382d96a60155c2e1c2696f90408103d80e214fc7c2dc0fb566620ff2b70c15460187760734655c96716535d041c5ca69787e7d7647358235a52f47210a4d0c5484c910c2819bec690a1c8c975a2016987485fb337efc5d719923bcb17a88fb89245a45bed6ab836c56909ff38ec15dda33f20a8161881f6f0a18514371382a5a01550ad2afc3d61fd0b55d9075502f48a8c650be6bb032f76ccef95126442c190acecd6dac803925874bdbb4dbe12ceb9f0f51771f6ea86841360f4", @typed={0xec, 0x18, 0x0, 0x0, @binary="50da2d11bf888b75c82fb3deb25c4c5e0046e13777c1ac3970e3752c8510b3d061d5b5c2322a88f1ca78a2cb728f5e5e84cef6825f66a990b3807e0bd2c0e4f22e0b1b6ed5b57ba7cd20f3efa1b0f7e68535faa3bf51536c809bdccd5cfc0652e0b0e2dd7aa39602edd6759068c50526feb7e6418adfe5da8d1ffe87b10bb14b2c342308da82d14b9a2179ab008140efbd4833371fac239f87728c01e1f673d1a1e507491385531cc57f1c0870de57246e8a0c4fe1a0e966220277a3eabee521d6a7d78a5e7bc290a746533e993120d134a45dd4688aeaf6de1e2d00d38d4081448ccf84924334c6"}]}, 0x21c}], 0x4, 0x0, 0x0, 0x4000001}, 0x4004080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001dc0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001dc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000001e00)={0x8}, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001e40)={0x0, 0x7}, &(0x7f0000001e80)=0x8) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001e40)={0x0, 0x7}, &(0x7f0000001e80)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000001ec0)={r6, 0x7, 0x20}, &(0x7f0000001f00)=0xc) r7 = socket$can_bcm(0x1d, 0x2, 0x2) clock_gettime(0x0, &(0x7f0000001f40)) (async) clock_gettime(0x0, &(0x7f0000001f40)={0x0, 0x0}) sendmsg$can_bcm(r7, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f80)={0x1, 0x8, 0x7, {r8, r9/1000+10000}, {0x77359400}, {0x4, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x4, 0x1}, 0xf, 0x3, 0x0, 0x0, "2e2e400adc38537b5757f7b073fc6ed2776af4713f3dd164f098645a138057e72c22fcc70c37505217d55ac66c186827985d05e8831bf098b247f6c97307683e"}}, 0x80}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) r10 = socket$pptp(0x18, 0x1, 0x2) ppoll(&(0x7f0000002080)=[{r10, 0x8008}, {r4, 0x15a6}, {r7, 0x200}, {r4, 0x8000}, {r0, 0x2}, {r3, 0x2ac}], 0x6, &(0x7f00000020c0), &(0x7f0000002100)={[0x3]}, 0x8) accept4$packet(0xffffffffffffffff, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002180)=0x14, 0x80800) (async) r11 = accept4$packet(0xffffffffffffffff, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002180)=0x14, 0x80800) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000022c0)={'team0\x00', 0x0}) recvfrom$packet(r11, &(0x7f00000021c0)=""/212, 0xd4, 0x40010060, &(0x7f0000002300)={0x11, 0x9, r12, 0x1, 0xe9}, 0x14) r13 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000002340)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r13, 0x40046721, &(0x7f0000002380)={r10}) (async) ioctl$INCFS_IOC_PERMIT_FILL(r13, 0x40046721, &(0x7f0000002380)={r10}) pipe(&(0x7f00000023c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000002440), 0xffffffffffffffff) (async) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r14, &(0x7f0000002540)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002500)={&(0x7f0000002480)={0x50, r15, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xec, 0x52}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xffff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x604}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000011}, 0x8000) r16 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000002580), &(0x7f00000025c0)=0xc) r17 = accept$unix(r14, &(0x7f0000002600)=@abs, &(0x7f0000002680)=0x6e) ioctl$sock_kcm_SIOCKCMCLONE(r14, 0x89e2, &(0x7f00000026c0)={r17}) pipe(&(0x7f0000002700)) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r14, &(0x7f0000002800)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x40, 0x140d, 0x8, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}}, 0x24000000) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r14, &(0x7f0000002800)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x40, 0x140d, 0x8, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}}, 0x24000000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002980)={0x1, &(0x7f0000002840)="5901796707814733bfa5928120197809731b6b9fbab1c0f2fffc6c399051a850a35768ff1673c7705fd65272fe235e216f4babf4570425d545643f197cedb8815a15a8850b1aeb197fafbf96abf71ebba60c7e6a1ad5dd38c1c1479efd2c08b2e6b95cf5e2886e003b6a0559d27ee981", &(0x7f00000028c0)=""/162, 0x4}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002980)={0x1, &(0x7f0000002840)="5901796707814733bfa5928120197809731b6b9fbab1c0f2fffc6c399051a850a35768ff1673c7705fd65272fe235e216f4babf4570425d545643f197cedb8815a15a8850b1aeb197fafbf96abf71ebba60c7e6a1ad5dd38c1c1479efd2c08b2e6b95cf5e2886e003b6a0559d27ee981", &(0x7f00000028c0)=""/162, 0x4}, 0x20) socket$phonet(0x23, 0x2, 0x1) 19.916822385s ago: executing program 4 (id=8968): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000440)="e02742e80f1c335a9782762f88a8", 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 2) 19.89224806s ago: executing program 5 (id=9033): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000000206010800"/19], 0x54}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="a80000001000030500004088ee25db4bce", @ANYRES32, @ANYBLOB="1000020000000000600012800b0001006572737061"], 0xa8}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', 0x0, 0x0, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x4000, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r9 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$DEVLINK_CMD_RATE_SET(r9, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x65754f12bc7c30e}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="07002dbd7000fbdbdf254b0000000e00a90066697273746e616d6500000008001c00000000004d074aaf2b1f4cad6f03127ae73840d37b07b6a15a2a827e945f6a18921597bd982958826507728b8bd0361f"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 19.838006538s ago: executing program 6 (id=9034): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20}, 0x50) (fail_nth: 2) 19.75098828s ago: executing program 0 (id=9035): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0xa, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000cbffffff00000000000000008500000041000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2002}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r3, 0x2f, 0x14, 0x4, @void, @value=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000002060520000000000000000000000000008905000700830000000500010006000000050005000200000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000"], 0x60}}, 0x0) getsockopt$inet_int(r1, 0x0, 0x16, 0x0, &(0x7f0000000140)) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="f00000001a000100feffffff00010000ffffffff000000000000000000000000ac1e00010000000000000000100000004001071c4e2300050a00a0003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000000004d400000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c25080000000000050000000000000081000000000000000000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffc030000ff0000008000000000350000020001002000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x844) 19.527636576s ago: executing program 4 (id=9036): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe8000000600000000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090039000000060002001100000008000b007369700008000800000000000600040001"], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) 19.435983076s ago: executing program 4 (id=9037): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000600000000000000fdffffff950000000000000033061322a5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x10}]}, {0x0, [0x30, 0x0, 0x5f]}}, &(0x7f00000003c0)=""/138, 0x35, 0x8a, 0x0, 0xfffffffc}, 0x28) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000007c0)={0x9, 0x4, 0x6, 0xb}, 0x8) read$alg(r5, &(0x7f0000000200)=""/96, 0x60) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x4, 0x1, 0x9, 0x40, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x5}, 0x50) r8 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r8, 0x8917, &(0x7f00000005c0)={'team_slave_0\x00'}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) pwrite64(r9, 0x0, 0xffffffffffffff4d, 0x7fffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000980)={'sit0\x00', &(0x7f00000008c0)={'syztnl1\x00', 0x0, 0x1, 0x8, 0x3, 0x8, {{0x26, 0x4, 0x1, 0x1, 0x98, 0x68, 0x0, 0x2, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x2d, 0xffffffffffffffff, [{0x7, 0x4, "bd94"}, {0x0, 0xd, "924531c484adf4328ed9c2"}, {0x2, 0x3, "9f"}, {0x7, 0x6, "17fceacf"}, {0x2, 0x3, '?'}, {0x0, 0x5, "d5f207"}, {0x2, 0x5, 's\"j'}]}, @timestamp_prespec={0x44, 0x1c, 0x25, 0x3, 0x6, [{@loopback, 0x8}, {@rand_addr=0x64010101, 0x3}, {@rand_addr=0x64010100, 0x6}]}, @lsrr={0x83, 0x1f, 0xd3, [@broadcast, @multicast2, @local, @multicast1, @empty, @remote, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x1c, 0x29, 0x1, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@loopback, 0x7}, {@broadcast, 0x7}]}]}}}}}) setsockopt$inet_mreqn(r6, 0x0, 0x8c4b5d074853f99f, &(0x7f00000009c0)={@multicast1, @empty, r10}, 0xc) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@bloom_filter={0x1e, 0x6, 0x1, 0x8, 0x110, 0x1, 0x3f6, '\x00', r10, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)=r0}, 0x20) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f00000001c0)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @exit, @generic={0x3, 0xd, 0x3, 0x9, 0x1}], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x5c, &(0x7f0000000280)=""/92, 0x41000, 0x1, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x3, 0x10, 0x1, 0x4781}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000780)=[r5, r7, r9, r11, r12, r13, r14], &(0x7f0000000a00)=[{0x1, 0x2, 0x5, 0x4}], 0x10, 0x400}, 0x94) bind$phonet(r3, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r15 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r15, &(0x7f0000000380)={0x2, 0x4e20, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008800) getsockopt$inet_mptcp_buf(r15, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0xfffffcd0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0xb40930bda0bd8256) 19.381132424s ago: executing program 5 (id=9038): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x8, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x7, 0x2}, {0xa, 0x3}, {0x3, 0x4}, {0x7, 0x2}, {0x2, 0x5}]}]}, {0x0, [0x3f, 0x0, 0x2e, 0x61, 0x5f, 0x61]}}, &(0x7f0000000000)=""/18, 0x54, 0x12, 0x0, 0x9, 0x10000}, 0x28) unshare(0x22020400) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0}, 0x94) 19.351989592s ago: executing program 0 (id=9039): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x28, 0x2, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x909}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x460}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48110}, 0x4040000) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x2}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a0103"], 0x7c}}, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000380)=ANY=[]) bind$alg(r1, &(0x7f0000000b00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r3 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="f703010010fff3be522ba800000000", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba12", 0x11}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2000847}], 0x1, 0x40800) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg$unix(r3, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001040)=""/6, 0x6}, {&(0x7f0000001080)=""/27, 0x1b}], 0x2}}], 0x1, 0x40000000, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0xe, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000010000000000000803000000000000000000000200000000010000000091b86ca610d249ecf600001202000000002e00f5fa754afa24560d61462b31fc7bda23f8ccedbbf40dd39a813d90b3591a01b2685e0e8556b706263afad73552a5426a6c62268b1ccb5f0fcb0904fd55ce4dfc91e8fde1ff29335e783045153ef5f2ca2bb6b9b56fd86e194c853c8f01b6a34841d60a06c5a0df456ecf4ed0e45c52672b0ac00008753b786486ffd81b1d03dfb3acfcf90c242b2bfae47a7b74bc7ab3a6cfdfadfb647748b456c607a4d7968e96cfc26b113f3f523c1e198bd8f1b1e0e46339c42b34d41c51434c3e58c665faf3926a69503b9fd130e2165319d2d868"], 0x0, 0x3f, 0x0, 0x1}, 0x28) 19.35066786s ago: executing program 3 (id=9040): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffeffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24008000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000010100000a70000000090a010400000000000000000a0000040900020073797a310200000008000a40fffffffc0900010073797a3100000000080005400000000d"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 19.180397835s ago: executing program 6 (id=9041): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) (fail_nth: 25) 19.179812171s ago: executing program 3 (id=9042): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r2, @ANYBLOB="14005af5b0feb4d2e26798000500020065000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000200)=ANY=[@ANYBLOB="e8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="ab307843", @ANYRES16=r4, @ANYBLOB="00012bbd7000fcdbdf250e0000004001028043000500c6e5f43968fb7aa40a1ed0405be472e8cc080ec4de25e01a39b5843c9b6a0519f64ea0c2ef1992f9facb9c7618de81edefe4c23308f73a6ded9d5c1b32f5f900080002007e0b0000e50005008a8e22a8ab8b292a48fd80ef44e175c6ba94b6cbb14ac9c733ae17bd1c689fab6d0f4c447296fc56cd5dc4baa9d80bfc5eef8c4a84ac2ca935248502f2051b2f72fbd525dbe22c774273dbf87e5e7875436acceed56300adccf1446ad00daa374016df084ca1aade80c3eb88334e0a202afc7cd3b706fc6f6f526b075a396a08c741c33167b00dc0b9d0117d6025b5505533b6e1970597bf9739f92b6bff28e81675050343a92b5f1319857346599d1d4ec4d9b374e5c8adc91352db6e658ed8dcaec007495ed5f38391e19e4829638929d9590b5f537fff3b811733ff4a32c6c5000000080002001ce400006402028004000100e2000500cdf594e8116fbbf64e0e5ec870da53b77babaaa201d55c23eb265c2fb478ba296b5de19dee91bd45102589e2bb569df33a3f8961306f09639aed5bb27363d847ec871312b97d8cb6e9b5d3af00732cf2aace4db31d5dd3069faf2d0f8ce0cc053e764f757fa8372134aa9c433b1a85da222cd0f0d22bac05c349fd24a7cffe9a72841209a22b13934936be5b333c5e83fbb972a313cffe83b0be4a234e7395da4de130b1a4f18de0487264556dc7408ea15d2484835f2a54b4a0a9cc8e93102c2d33c5bcc122468bdc112dd793a5dd6be6ab9aaa9cd76f5791e4773583e7000004000100b40003801c000180080001000900000008000100000000000800010007000000100001800400030008000100000000000c0001800800010072ffffff14000180070002007d2f000008000100090000002800018008000100020000000800010003000000060002007b0000000a000200776c616e300000002000018004000300040003000a000200776c616e3000000008000100070000001c0001800b0002005d5b232b2d2e00000a000200776c616e30000000bc000400ae1e8607f13bac39b7ce267b7178cfb73c2cd0240a08d5778b32ffdc9d315629b09973c71fb5fa2e7c3532cd10e532276ecc114ce4301162f5f596a99dbcf2f8685f160ee661eb7e7e8078bcea28f75fb832c4dc2778cc781e58d4f12275a67e63eb74cfa9f44f4bfa896e4ce0f85c5273f117afe3dde3914e7ce84db8d6655cddc5cdd4a6b5b2ddb7dd981551449959d60b80bcf29d6c5e6064e67cbf7702d94431792243f729347c1ff725472aa6e4b85c0ac41376a7cc040001002c030280e8000400950d97c1f0a16f1aace40f8224dfc57daffd96f570d294a9846ccdc2ef2fd3811aa5c7c7810d73cada1a0541739b1dbc35792b015c44aaacf452fb9a26f43326236eb22a816c2d2dc7bd2926e5487df2e8ac5594a5a0a80f577d2ace52d29c3201fe7710b5683352c4875a69ecb989b07191510b9fa4ca829b10d095ee5b8644692c83ea9e22aa0c50a3ee2ed44fd4ec47b94b8c851ce33b91ee31db187544adebe41d4fa86c3a240dbb5b86067d238e2e4bb7c6a3f7fd10c8860674c15bc7d26454eb7d88e2dbe7146f28ec3a07ea74a0d8f73bf7c7da09079975513651ebf7ea3ed3784c0003801c0001800800010000fcffff080001000500000004000300040003002c000180080001003f0a00000c000200252d2e2940395c000c0002006e6c38303231310005000200000000005000038010000180080001000000008004000300080001800400030014000180080001000900000007000200243a00002000018005000200000000000400030008000100b50e0000080001001900000008000200001800000400010098000380480001800c0002006e6c3830323131000400030008000100060000000400030005000200000000000800020028212f000f000200262e40402f2f2b7d5d2a000004000300040003002400018008000100010100000400030008000100000200000c0002006e6c383032313100280001800c0002006e6c3830323131000500020000000000080001000700000008000100020000000800020005000000a80005007a7ee5919fdca75db9bef465b05114cb7c8cabda309b7231ac8becafc096a380b80dd07a08ee3d68c5e4e57e06a7bd4dd7baebd2a0328a6a49daefd6a943019acbdcacabca3646965d0f3e3324e7ac49d08fb9945f1e2d42a5725dfbba8affebaf0020fd9295e328a56440a5d01d7c16870b7eea8b8e180a2ab70f0396a4065c5de5328a320a5a41bb76e9298fed6818b2f83b62494fc0c292636e0566a8a0a706cd291f080002000300000046000500eb5b015f2d66a45999b63504104f01c42e88b6c9ca90c4e587dbcab6831e808cae5b92a564105ce1ac66ac1cdfd1bfb466715985f648ff43399b3fb975e3b5df586800006c00028067000400a7acc0005999665b643ca9d37bcc1c66913c46266279a1901a19d8d906d740d9bd06cac6b42fabebbd68029c72443997167e6694247241abbc716c86c214aa845c13f66ff64b20b28859a9645989853b720c92a26e4de77c686d068a161ced07f44bfe00081002800410050010c2a08efc415112d4747f9031823b0c8950965a4953334a28851f5ece5e548d20ba79d5b6ebe076607bb0f63e293f85ce1e5306c4bc4abff606d7994ab4cc8167b97d1ef70f1b1448a36d1729755470d7b6942cfd3c8a4230716e30f903599f41b9894666e87e88717ec4575f462a8c1cc5845cd20d7814df766cb68fe3001bd69aca1ff7eec9a119bbdb4ec9ef154a9411f0f406d91e20ff71dc04d91203cb12d9edfb0664097bad8b69b8b4027259ffbf638d8d6ed8a2751aeb5b18144f61b7a6198d1c0bca794f9860b26c3e42076f748829eb2ec75d79fd8b193f91d99d4143d2cd6ebea96e916222b51d8b0969022ab6f0f224424bf5443527616b3b6731b88481f6d8fc9e7e28514fe7ddd11c90907bad5f76493f503c3a6375b089e2cad62851461bf465d592cffa4ea507978fba86568262b517bcf6d8c034714d263218efe3bf591c69ec39ab4af7456f578053697d3ef5a1b0f87049d157cf4572ecee3d9faae8c8195a3b9b253ffc99fea59e166f78f01b88e3b33a3a4188d618f434777d983556c8d5a109d0259449a8bb7ea19849163c9cfac52cc83f083bcaef255f33e062db7d4e6515359d8f4707db61dab12a8f1bd3463e4f4e3f8fcc28dc1d40ef3be8007e078676cc077ec06c408966cef38d65506f9898a3ec087dfc7c53296882541aca31d0185257cecdb300e8f093cec7570fc9f69fcb89995825d09466fc16549ee3db105e0d0067427b40eebe4e47ab08a88a3b9154eb5a210ab3a60fe14183e98bea0caea6ea38c4336726ea1ec13d6714185eec795ea82e8dd201c619f8f1b09d932564de4a4b8e3b2e2663edafc264130eb034d95b7d327f1a20e265bf8f08752577017a5492dccec2834887f3de32f09e7a996a84938ab9b81f73cd5b59667b0394a97864800da437483a3c3ae2f44cceac3a5385f115b062399d99a7642b843f68dd563d9479138184525d6f6ba40ceebc950f39f62e89c165a8409aa8178d510a95ae946a1be8ee617a13fcb3fde0f5743d05af079a97070ba95ebcbc2f7e0c4be762920152120d6d483041a075193b0ed4f1645a99df8deee4f6f8d743059a32ae53cefcf257e53321f46beff714fec66b762150c8fa225a7bdb5a12245841eaeefe922d61917f3cd0fa1008e163897626ed37c3d6057739f358dc6aabf8763a140905671231b789f2b83d3a3ca5e1c84cc64a86b3bff3b2a85ac6ac61e33c5fff1cb72c99c31095ce41dc08cf58b25fda772add75a6a5ead58fa3e74408826d74e70f8c2a19743f75f52f11702372dc54deeab1a73fbd262bfa95564be08679f73299f4499603ccb6db8e481524f48839342582076501be23fc463884ff478ae2d50cd3f4d427d7d52131b530fa408b44d6376a82101d66de1248527bd281fe45629af9b05516a8a3f274f8582a443814276bcecc41386da029921d1dc37f51437280ac617441679f0e8513aa8943ea81eee29a25cf7525235ddd6c6dff9a749372f4e2bc098488286f68bf6294f0da8dda06102adee5a8a5524f2ad31333a2c87dbb0577d7ee67cdc120347a75ef16069ea25d8de2c51e85090ddc1e17b540d54d2d8d02f4aeb200ef06ce55eb1fceb4ea77d9374d6a1f770fc5c594ba656006c5afef11dccc8f0996cc0afb5c666ee6d2903e1afc1a3a586de6e0ae0348d6bb9f2a79ecd5662113dbbdfa6a5a91bb5352afcc7463b7e631756b97be3b9bf5038ec70151cae9494617db78292379e1f46768968dadf39ba4307a9831348eea04a857440fb95857a318f53c9f4a7fbc52ca54b0a9128eb3414b57a07c9892218e51bce4e14dc68acb109536290b8015607d68af3622d9e9a83ab79da0fc93d9991559fe831331ef381f10db4c6273d77a43798e7ac3152de6e52b983d6ee0d83c20dc5823374c2ed8e7f2c4440f2108932dd755e404c5d35ec599633a15a79e6ad49b95b57216e613f1f804f01cde20b6f79df688244e2a8d5a012b2697d50dcc4718d96ab68a3a1a8818a6281e308c4e3e8986f58916c0e7e601770372967b78eb3aa26fd1850df396a7238590cb959c0525dd38e0870e7bd9871edda7b990d80a7f488f84f985270e7e3bef719a766c2d6c3ca7f6b5bed8e9ff1f81ac91eec904f492af01ec6891d441ebbba311e3c9ee5aff84ccdf8452386f411d26c477eeecbf9d46adde458fd0946cc47121cc55b4d4c34ae20ce98711491935719663ea6c505d835efaaf0bd9f0e897e188d8b0d080db0ea17a0f0280728caecd61b93a153c2ae4916cb9205bdd84c281a7f4ffa7efa99a5ca5ec576b040f87c460657a14da39c9266c64e2e3d944ec7eff298c4c6fc0652a973943f05d65038a917192abda5a000cac7799f61a63bf177163e7d35742b8505e2f8c69b3ebba5cc0f9090a43005de3f0e381081b7bedf2899c191a49c78434f00b160073c63a3ad0a1e2ca9227d1e79388fd82a8dc0afd756d7b4fe3b696f9a47095ecd413f555d2a13b1c1c7d187486be54a5f4fa7be81b78c159420e8fca3b45d578b4f0ee047acc82f36847d4eaedf25f0f33d99baee117ca9eb83301fe9310bbfa6752a86067245a1db5268d332c5201638a723daf528aca5303de0b77f99fdf8572211c26cb8c800715909466f81d28f7bd12d62d8ab4848ec5e63d7345ad0478fb5a1d54a33545bc8cd1f660e770fdeda12e1b08dac1e2e3c3105ca30f149f998079407f57993ee54af3d4961acf5954ccaac877620bb40c3a551e163a935cc58e57d2a0efad84c42c7b7a047e37167f2df8fadb645326e15f280522b64ea91b6b55919590f370b4afff399b1b03fc0e0463e2185b869980c11a4c1f1120e3ffadce73e00a42b494294e6c2034bef9ad93fd3126e120dfc4a311062e346da5561cf76d12639364fbfbb1e015d72fdc7d9b3a80ba9917d2a8d0a0275cf969cce72e1180553fb92249e748b8fb83bb1f3a3657c442d6d451c6595d1c42f1053c00820b1ece9d1c8ebee5b2dff8df8b7421702dc52d0a947bdb06995c74ea4b569739da389aa579a0442c0c931cb8d47e98e4c0cb3e20f9ea1a7fd6b4034a6f814606d79fb26bc52e3340476f57531aee8f81185ac957076abfc159944fa61c50cce17a782a309c21f0371ee68acf5bee3a4951d97994ef55736dc7d81ff1d6a21b8fb5bd5a40df67011b294e71879832825f58d391be1d40df751429d0d45ff45a7408ee7389ee3174dac227f897aa17fd626de5e543f2160cd7e19fcb4fc127ac984d5af21fea2a23c500f5f712b676c0d209eaf6af7cadadc280e6d120ee2f4f43d574505c7be264cfa188bbe5f6ec74c3380ef6c3bb0905ff7d425c6c18a8f44e2bac97e412f16e4472d2a20146aa30fbfef33a465e75d1cd747d1b3db50329115f313ffa8c88e322db844a67495b8971d4891ab26f1759782e0a272d74cfe5eb8c2032627b169f400c09e0564cd20cb94486f23c351831114cbe69f732a060b09d3f2655d80f7f4f56bf8d6ccf140ddfb8a802deb42be7d774912c38d4d3ea9567a57cafdaabe1446428bf8fefc34449abbd971c23c22b1178cd5d862632b2fca0d72b2afd038ad24aaa44a02eb4c0043d7f507f3efb6bc9f8d8618bf46fa655350dd592c8b6428851e61d02664055a59329be4546cc8a4bcb22ac45bbd1e115639e7ae920315cadfb1b02d41dfd34b326eed0d7f6fca37f1bc199dbc8f6994237191839784f32546c9d771a65c53bf17f528db7c3d794804ba00610a69cc727691156cdab5a7182ae89554a1a339e63911aca56cc3458844a387db43330899af22ac8d3d4b8fea230298de34caf053cb0cff707b4416ffd5d4ffbe6924d5517d813240ecbf4fee3f1449ef46b53118e75cb49bad1b41618accaaad8c2664de718534e7b7ff957f36a904a00b66cb7aa60a5c67699f42bb7f967722e1135ca1be85d295d4a57037381cf207874b5b3cb57692f3294bcc5e467995060f0fa953b7c67b0eca02f328ab083a8bc792fb9f72eaea2c5e73b23096070d8f4a581cf0b62ed699ead48e8b3993caa45783e3039e8f45d982900a670d7ccef61c978723ca19978be096ad766a7145943f3c55806281d5c0b4f852614f337ed3842125e894b717278e2e69d947642b3bd86666ed11160c1d37a591cf1697faa437a6a7774d8e27646393104fa0c051d74a0a8f4c2a9e8ed84dcdab87be58c95a68b40fd31e947b409f82385e1cf00504190c348540b125a83849cc272610c8254f7946471bfb5c5d643b4d7f29df631f3334cd822703205bd92d87185fe92bdbfd09c5844cb9308418c393537c1d9bebf011def0fa2da9a5e767b694f32eac65219d566510a7dbf0842140c1ba3f4051f74fdda4ee47f4665188706a61cdcbb7c8f64c4209dab5e7c71c88087312000c7b8e9ca7ac9fa0a8d60d95a6081f6c3d1772a3ad111131f5a9cb4d3f01b1b6c1e168a7cafbbf118b6b97533cf3f09a04eb3991b8d14feaf25c1920d78fb113a547898b7f1b20ab7b9446d3168b722886e8e687bd2708c49e105d706180c6b53c840ae1d9d62a8b96d42dcb020bca5e1e56a3aeb2cdbc22265d30f2e25195ca7fb6cc6327d8476fe78e18ca3d082d610f6de58ebb16662e005ddf51f70fcb6579d8796f7f68b8a0c910b9b39212a1aaa6424bde6ca4c3906d976917ba1af8c750a6ed6d90814c29abc83fc369286bcc0500c5635c722c7e96553745f5a93d0de31a62a63dc1c543890bc582db8e54dccc786c1e5f2a132fac55e6f7b713767dd72e8470e25c56422f7719c8079efa44e12fd8205b3d8f25754e4634ddb2fa16f37862bf5913a4146b41661983a896c7b5d19abc5f9176bdeb9e6eb00e453e7c51a7d6c914a3cb6c49761e59b6ee9d306e0d547a319df1ba965012c21caa5626800adbfa264c6cd2573e2ab47dde5fccd1d40b2eabe37db66c3d71943573415e9d5abc340134938cd71ebfa23225c0794ea0dca4f7eeef6eee15e7e2119133693975c4d29fc1127355b5efae789efa6f9d107fe0bd0d802d145c20f964527478e4b0d198090b33abee2b32f0d602e4532014b6b08c24fc8cc93e008de0592d6fe501355ab40da7c4a6d0215e6c0661624d6c60b9b2392e22a7b45934bcaae164100135fe45624a6ef8d9ecff57904f526ae0f418cd9b8cda5ae30a6d44153ad64502fec92a88d7251cdcf4db37fc5f6f4890ced7c000efa4989c8227c3c2e8f8cef5bf3f9aa795dd0f641ec921cc00f63557e418d2ef59a323560e26dcd8ee99abecaa0c26d13e9a9093e5b8da2c16833df2be791b378e627c128b59c63f8521be3a7bd62a5b0509120380be98261d4639d6ec7515512f95e8f03f8721e34975b0c82c4bb0189a6af334e90e6d83c9ba52200d72099895b083a326413f4f4436e3a7f259c6e78926f1322733052eb092df885f8465c52d6a091f2e25426bdd5409ec77ee98c394e40ad1f83d961dba3cddda8fe0711a2ba8128622286e276bdb3ac6dbe0127ad9e7336177fb575e4597b66bdfa2a31902a80661f1970a4057a009584e949a19c538a28ab67385bfe13fe70a664b4b46f76d8a5412fa84750a3289ab470c99954468b05e1f5db618afa5712b141e59bdc74222f66bc5dca839d814c9d8c6653921792a4d2e05c5d72ddfc9841cf539a606b3d8e6d8b36bc4331a0ba0b2179cbf5be9a3e22c1ef26cf73af348f6db779118f09770c38ef3d6926eee10a00118d0bd690bf749f675bf23a77315426de9b1d320bb1606f5b8b3aa49c52e1a23ce667afcfebe67a42f8f0c2600c020280d00003802c0001800400030004000300080002002b282c000a000200776c616e300000000400030008000100080000001800018008000100060000000400030008000100040000001c000180040003000c0002006e6c38303231310008000100080000002000018008000100060000000400030008000100040000000500020000000000100001800a000200776c616e3000000030000180080001000700000005000200000000000500020000000000040003000500020000000000070002003a5d00000c00018008000200402b4000fc00040041d11793f184c73c4a0ced121df46e84c73a7256b4cd8e70f8a082dd3a4a0ba5076c4e0f9423dbff8e5317e82c3acc724da00d1b1e89f3af4b84ff343848895e42122419867e335b7f301219d9883c913b014a6c857441124844363ea0b8f8aa0ee047e7066b999306a97600b1e6eb6c2a80c59addb30be0ff16ea5337752ad642c9ea1ae5e7ab1605ee0aeb486effda0d11cd624749b2e247fd410b66cc1121e7aca77741faf0b5d9504fa2a4e4f431b9659cc72834c23220da6f003bdcbf40d07ad7cb0373ab607129830120c30947d4903987e758e457793c84685ba0dbd36f1d712176cf514429583c0188190c6e154c0c24f3a4f9113c0003802000018009000200282a5e2600000000080001005100000008000100000400001800018004000300050002000000000008000100020000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000400000008000100", @ANYRES32=r6, @ANYBLOB="98000280080002000400000089000500e7e8f927ba64864ebd3cc50496f368241c04bfed7b068afb88c8450a9c267cc077bbffd7ab53ff5ebbef9a60fa1acf09ba827bb56d1c81a95a137097eee12690db93872840178c8f0fc97a4595166f7dd8422cb2866b27ee640ea419206ebe75f9d55b395d590152585c336adfca81c87a809ba44670cd4cc2e42f91b82918f3766ce831e30000000c0001800800030000000000"], 0x1a24}, 0x1, 0x0, 0x0, 0x4000090}, 0x20000010) 19.135213661s ago: executing program 5 (id=9043): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000140)=@dstopts={0x2f}, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff000000f5}}, 0x1c) 19.05051876s ago: executing program 3 (id=9044): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000001c80)="eced09c14f8d672fdf1c9abf972eb256", 0x10}], 0x1}}], 0x1, 0x8014) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000004c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05000000030000000f423f0000400000", @ANYRES64=r0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000002"], 0x38}, 0x20}, 0x2000000) 19.045369684s ago: executing program 6 (id=9045): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1340, 0x1130, 0x178, 0xc, 0x1130, 0x178, 0x1130, 0x258, 0x258, 0x1270, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x1100, 0x1130, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0x0, {0xffffffff}}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x3, 0x9}, {0x1, 0x2, 0x2}, 0x2, 0x2}}}, {{@ipv6={@private2, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'hsr0\x00', {0xff}}, 0x8000000, 0xd0, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xffff, 0x0, 0x59, 0x1, 0x0, "5b5e4637e2c868d14d9be48a2a79837d5499f42d086321ddfda71d6d982957c9efbee097d2c1e45c21510a84843e700c6ab764b15794236650ed3db73c2d916d"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x13a0) 19.001318304s ago: executing program 5 (id=9046): unshare(0x22020600) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r0, 0x0, 0x18, &(0x7f0000000c40)=""/3, &(0x7f0000000c80)=0x3) 19.000858226s ago: executing program 0 (id=9047): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000001004000014001a8010002d800c000180080016000600000008001b"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = socket(0x2, 0x3, 0x4) sendmmsg$inet(r4, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000000}, {{0x0, 0x0, 0x0}}], 0x2, 0x68840) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000000400)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x7, 0x9, 0x8213, 0x1, "42dcba473af40793c80da480352c3f55ae9469edbde3fa00032be32e7d5fd4e7e308a8c941d9c6b702156ac1b96f5094af4d88406b275d0319ad799c80ce7ad974b20fa7f981a99c69a89e47ee5a73de0923e88fcde079bea7485e68548b2fc9038888eadb2ecefb2be8deaab192c8b29273090b58ec18476dccfda6f242a7de"}) r8 = socket(0x1d, 0x2, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET_STATS(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20044004}, 0x40084) 18.926913551s ago: executing program 6 (id=9048): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="50050101040413"], 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000600)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000001c0)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRESDEC=r5], 0x31) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xebc, 0x30, 0xb, 0x0, 0x0, {}, [{0xea8, 0x1, [@m_gact={0x3c, 0x1, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x17f4, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe68, 0x2, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0xf8000000}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x8, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x7, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x81000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x5, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x4, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x203}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x8, 0x6, 0x1, 0x3, 0x4}, {0xd53, 0xffff8001, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6ae, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0x12, 0x10002, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0x400000c, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x1, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0xfffffffb, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x7, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x6, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x10, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0xfe, 0x2, 0x1, 0xaa82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x4, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0xb}, {0x6, 0xc000000, 0x3ff, 0x4, 0x9, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0xff, 0xffff, 0x3}, {0x9, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a22, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0x40f8a, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xebc}}, 0x0) 18.903516591s ago: executing program 5 (id=9049): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2, @ANYBLOB="f45758c65df923cb06768bb549c3980c000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 18.831921109s ago: executing program 3 (id=9050): socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x200000000000017a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe80}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000140)={{0x2e, @loopback, 0x4e23, 0x2, 'sed\x00', 0x4, 0x3, 0x60}, {@multicast1, 0x4e20, 0x4, 0x4, 0x8, 0x5}}, 0x44) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004880)={0x24, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @uid}]}]}, 0x24}], 0x1}, 0x44010) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x2, 0x0, {{@in6=@empty, @in6=@mcast2, 0x1, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) connect$rose(r4, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000036c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x10) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/91, 0x5b}], 0x1}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1801cc002100529bff7fffffffffffff00a50000002300000095a471155e9fb1"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r8}, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCRTMSG(r9, 0x890d, &(0x7f0000000000)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x2, 0x4e20, @local}, {0x2, 0x4e24, @rand_addr=0x64010102}, 0x30f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3, 0x1}) mmap(&(0x7f0000a82000/0x12000)=nil, 0x12000, 0x2, 0x110, r8, 0x0) r10 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r10, 0x10c, 0x4, &(0x7f0000000580)=0xee9a, 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) 18.61993714s ago: executing program 3 (id=9051): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x3, 0x1}}]}}]}, 0x44}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffe0d) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x3, &(0x7f00000003c0)={[0x1]}, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x4, 0x400, 0x0, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x1c, 0xb, 0xff, 0x6, 0xca11, 0x6}}, @TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e01798d28b6d63cf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236743acd06103cd77bd07f2df5989ee40e409b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ffcf44f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990f7acfdb8216ea52f604b9f12033688caa4b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d6"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@RTM_DELMDB={0x38, 0x55, 0x200, 0x70bd29, 0x25dfdbfb, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x2, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}}], {0x14}}, 0xc8}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 282.369491ms ago: executing program 34 (id=9047): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000001004000014001a8010002d800c000180080016000600000008001b"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = socket(0x2, 0x3, 0x4) sendmmsg$inet(r4, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000000}, {{0x0, 0x0, 0x0}}], 0x2, 0x68840) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000000400)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x7, 0x9, 0x8213, 0x1, "42dcba473af40793c80da480352c3f55ae9469edbde3fa00032be32e7d5fd4e7e308a8c941d9c6b702156ac1b96f5094af4d88406b275d0319ad799c80ce7ad974b20fa7f981a99c69a89e47ee5a73de0923e88fcde079bea7485e68548b2fc9038888eadb2ecefb2be8deaab192c8b29273090b58ec18476dccfda6f242a7de"}) r8 = socket(0x1d, 0x2, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET_STATS(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20044004}, 0x40084) 243.861101ms ago: executing program 35 (id=9049): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2, @ANYBLOB="f45758c65df923cb06768bb549c3980c000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 178.874355ms ago: executing program 36 (id=9048): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="50050101040413"], 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000600)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000001c0)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRESDEC=r5], 0x31) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xebc, 0x30, 0xb, 0x0, 0x0, {}, [{0xea8, 0x1, [@m_gact={0x3c, 0x1, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x17f4, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe68, 0x2, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0xf8000000}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x8, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x7, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x81000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x5, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x4, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x203}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x8, 0x6, 0x1, 0x3, 0x4}, {0xd53, 0xffff8001, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6ae, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0x12, 0x10002, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0x400000c, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x1, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0xfffffffb, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x7, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x6, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x10, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0xfe, 0x2, 0x1, 0xaa82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x4, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0xb}, {0x6, 0xc000000, 0x3ff, 0x4, 0x9, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0xff, 0xffff, 0x3}, {0x9, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a22, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0x40f8a, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xebc}}, 0x0) 102.905043ms ago: executing program 37 (id=9051): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x3, 0x1}}]}}]}, 0x44}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffe0d) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x3, &(0x7f00000003c0)={[0x1]}, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x4, 0x400, 0x0, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x1c, 0xb, 0xff, 0x6, 0xca11, 0x6}}, @TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e01798d28b6d63cf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236743acd06103cd77bd07f2df5989ee40e409b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ffcf44f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990f7acfdb8216ea52f604b9f12033688caa4b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d6"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@RTM_DELMDB={0x38, 0x55, 0x200, 0x70bd29, 0x25dfdbfb, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x2, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}}], {0x14}}, 0xc8}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 38 (id=9037): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000600000000000000fdffffff950000000000000033061322a5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x10}]}, {0x0, [0x30, 0x0, 0x5f]}}, &(0x7f00000003c0)=""/138, 0x35, 0x8a, 0x0, 0xfffffffc}, 0x28) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000007c0)={0x9, 0x4, 0x6, 0xb}, 0x8) read$alg(r5, &(0x7f0000000200)=""/96, 0x60) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x4, 0x1, 0x9, 0x40, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x5}, 0x50) r8 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r8, 0x8917, &(0x7f00000005c0)={'team_slave_0\x00'}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) pwrite64(r9, 0x0, 0xffffffffffffff4d, 0x7fffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000980)={'sit0\x00', &(0x7f00000008c0)={'syztnl1\x00', 0x0, 0x1, 0x8, 0x3, 0x8, {{0x26, 0x4, 0x1, 0x1, 0x98, 0x68, 0x0, 0x2, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x2d, 0xffffffffffffffff, [{0x7, 0x4, "bd94"}, {0x0, 0xd, "924531c484adf4328ed9c2"}, {0x2, 0x3, "9f"}, {0x7, 0x6, "17fceacf"}, {0x2, 0x3, '?'}, {0x0, 0x5, "d5f207"}, {0x2, 0x5, 's\"j'}]}, @timestamp_prespec={0x44, 0x1c, 0x25, 0x3, 0x6, [{@loopback, 0x8}, {@rand_addr=0x64010101, 0x3}, {@rand_addr=0x64010100, 0x6}]}, @lsrr={0x83, 0x1f, 0xd3, [@broadcast, @multicast2, @local, @multicast1, @empty, @remote, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x1c, 0x29, 0x1, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@loopback, 0x7}, {@broadcast, 0x7}]}]}}}}}) setsockopt$inet_mreqn(r6, 0x0, 0x8c4b5d074853f99f, &(0x7f00000009c0)={@multicast1, @empty, r10}, 0xc) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@bloom_filter={0x1e, 0x6, 0x1, 0x8, 0x110, 0x1, 0x3f6, '\x00', r10, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)=r0}, 0x20) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f00000001c0)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @exit, @generic={0x3, 0xd, 0x3, 0x9, 0x1}], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x5c, &(0x7f0000000280)=""/92, 0x41000, 0x1, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x3, 0x10, 0x1, 0x4781}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000780)=[r5, r7, r9, r11, r12, r13, r14], &(0x7f0000000a00)=[{0x1, 0x2, 0x5, 0x4}], 0x10, 0x400}, 0x94) bind$phonet(r3, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r15 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r15, &(0x7f0000000380)={0x2, 0x4e20, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008800) getsockopt$inet_mptcp_buf(r15, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0xfffffcd0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0xb40930bda0bd8256) kernel console output (not intermixed with test programs): ode [ 1098.790018][ T597] bond4: (slave vlan2): Enslaving as an active interface with an up link [ 1098.952789][ T601] lo speed is unknown, defaulting to 1000 [ 1098.982807][ T601] wg1 speed is unknown, defaulting to 1000 [ 1099.429387][ T622] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003 [ 1099.554598][ T621] lo speed is unknown, defaulting to 1000 [ 1099.562812][ T601] wg1 speed is unknown, defaulting to 1000 [ 1099.577821][ T621] wg1 speed is unknown, defaulting to 1000 [ 1100.399055][ T621] wg1 speed is unknown, defaulting to 1000 [ 1101.985136][ T667] netlink: 'syz.0.7979': attribute type 13 has an invalid length. [ 1102.011962][ T667] gretap0: refused to change device tx_queue_len [ 1102.019556][ T667] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1102.064726][ T669] tipc: Enabled bearer , priority 0 [ 1102.074745][ T669] syzkaller0: entered promiscuous mode [ 1102.080954][ T669] syzkaller0: entered allmulticast mode [ 1102.141655][ T672] lo speed is unknown, defaulting to 1000 [ 1102.152706][ T672] wg1 speed is unknown, defaulting to 1000 [ 1102.176127][ T675] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003 [ 1102.220127][ T668] tipc: Resetting bearer [ 1102.259765][ T668] tipc: Disabling bearer [ 1102.516207][ T685] openvswitch: netlink: IP tunnel dst address not specified [ 1102.874858][ T672] wg1 speed is unknown, defaulting to 1000 [ 1104.369049][ T704] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003 [ 1104.380759][ T700] lo speed is unknown, defaulting to 1000 [ 1104.410390][ T700] wg1 speed is unknown, defaulting to 1000 [ 1104.898769][ T726] lo speed is unknown, defaulting to 1000 [ 1104.927978][ T726] wg1 speed is unknown, defaulting to 1000 [ 1105.109279][ T700] wg1 speed is unknown, defaulting to 1000 [ 1105.334604][ T726] wg1 speed is unknown, defaulting to 1000 [ 1105.481025][ T738] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003 [ 1105.579961][ T737] lo speed is unknown, defaulting to 1000 [ 1105.624554][ T737] wg1 speed is unknown, defaulting to 1000 [ 1105.722924][ T745] netlink: 'syz.3.8000': attribute type 2 has an invalid length. [ 1105.855344][ T746] netlink: 'syz.3.8000': attribute type 6 has an invalid length. [ 1105.894032][ T746] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8000'. [ 1106.072342][ T755] netlink: 76 bytes leftover after parsing attributes in process `syz.5.8002'. [ 1106.082222][ T755] netlink: 76 bytes leftover after parsing attributes in process `syz.5.8002'. [ 1106.152258][ T737] wg1 speed is unknown, defaulting to 1000 [ 1107.216035][ T769] tipc: Started in network mode [ 1107.235021][ T769] tipc: Node identity 9275a8e96d7, cluster identity 4711 [ 1107.255693][ T769] tipc: Enabled bearer , priority 0 [ 1107.275610][ T777] syzkaller0: entered promiscuous mode [ 1107.290866][ T777] syzkaller0: entered allmulticast mode [ 1107.403744][ T784] openvswitch: netlink: IP tunnel dst address not specified [ 1107.539607][ T768] tipc: Resetting bearer [ 1107.552309][ T795] netlink: 'syz.0.8013': attribute type 1 has an invalid length. [ 1107.593643][ T768] tipc: Disabling bearer [ 1107.624850][ T795] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1107.704553][ T798] bond9: (slave veth3): Enslaving as an active interface with a down link [ 1107.817261][ T804] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8016'. [ 1107.833565][ T804] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8016'. [ 1108.108766][ T3480] vlan2: left promiscuous mode [ 1108.524326][ T832] tipc: Enabled bearer , priority 0 [ 1108.532437][ T832] syzkaller0: entered promiscuous mode [ 1108.544529][ T832] syzkaller0: entered allmulticast mode [ 1108.558301][ T834] FAULT_INJECTION: forcing a failure. [ 1108.558301][ T834] name failslab, interval 1, probability 0, space 0, times 0 [ 1108.598382][ T834] CPU: 0 UID: 0 PID: 834 Comm: syz.5.8026 Not tainted syzkaller #0 PREEMPT(full) [ 1108.598416][ T834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1108.598432][ T834] Call Trace: [ 1108.598442][ T834] [ 1108.598453][ T834] dump_stack_lvl+0xe8/0x150 [ 1108.598490][ T834] should_fail_ex+0x414/0x560 [ 1108.598548][ T834] should_failslab+0xa8/0x100 [ 1108.598580][ T834] kmem_cache_alloc_noprof+0x88/0x710 [ 1108.598618][ T834] ? dst_alloc+0x105/0x170 [ 1108.598659][ T834] dst_alloc+0x105/0x170 [ 1108.598699][ T834] xfrm_alloc_dst+0x76/0x160 [ 1108.598731][ T834] xfrm_lookup_with_ifid+0x77e/0x1a70 [ 1108.598771][ T834] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 1108.598804][ T834] ? lockdep_hardirqs_on+0x7b/0x110 [ 1108.598832][ T834] ? ip6_dst_lookup_flow+0x9a/0xe0 [ 1108.598873][ T834] xfrm_lookup_route+0x3c/0x1c0 [ 1108.598904][ T834] sctp_v6_get_dst+0xf00/0x1c90 [ 1108.598932][ T834] ? sctp_v6_get_dst+0x479/0x1c90 [ 1108.598968][ T834] ? __pfx_sctp_v6_get_dst+0x10/0x10 [ 1108.598988][ T834] ? __asan_memset+0x22/0x50 [ 1108.599053][ T834] ? dst_release+0x72/0x1b0 [ 1108.599091][ T834] sctp_transport_route+0x118/0x2f0 [ 1108.599132][ T834] sctp_assoc_add_peer+0x650/0x13b0 [ 1108.599176][ T834] sctp_connect_new_asoc+0x30a/0x690 [ 1108.599210][ T834] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1108.599247][ T834] ? __local_bh_enable_ip+0xd0/0x130 [ 1108.599270][ T834] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1108.599295][ T834] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1108.599323][ T834] sctp_sendmsg+0x155c/0x2840 [ 1108.599348][ T834] ? __lock_acquire+0x6b6/0x2cf0 [ 1108.599387][ T834] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1108.599412][ T834] ? aa_sk_perm+0x15f/0x920 [ 1108.599443][ T834] ? aa_sk_perm+0x7ee/0x920 [ 1108.599478][ T834] ? __pfx_aa_sk_perm+0x10/0x10 [ 1108.599519][ T834] ? sock_rps_record_flow+0x19/0x410 [ 1108.599558][ T834] ? inet_sendmsg+0x2f4/0x370 [ 1108.599596][ T834] __sock_sendmsg+0x19c/0x270 [ 1108.599638][ T834] ____sys_sendmsg+0x52d/0x820 [ 1108.599673][ T834] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1108.599712][ T834] ? import_iovec+0x74/0xa0 [ 1108.599743][ T834] ___sys_sendmsg+0x21f/0x2a0 [ 1108.599774][ T834] ? __pfx____sys_sendmsg+0x10/0x10 [ 1108.599810][ T834] ? kstrtouint+0x6e/0xe0 [ 1108.599878][ T834] ? __fget_files+0x2a/0x420 [ 1108.599908][ T834] ? __fget_files+0x3a0/0x420 [ 1108.599951][ T834] __sys_sendmmsg+0x227/0x430 [ 1108.599989][ T834] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1108.600017][ T834] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1108.600081][ T834] ? ksys_write+0x22a/0x250 [ 1108.600108][ T834] ? __pfx_ksys_write+0x10/0x10 [ 1108.600139][ T834] __x64_sys_sendmmsg+0xa0/0xc0 [ 1108.600172][ T834] do_syscall_64+0xec/0xf80 [ 1108.600200][ T834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.600223][ T834] ? trace_irq_disable+0x37/0x100 [ 1108.600253][ T834] ? clear_bhb_loop+0x60/0xb0 [ 1108.600282][ T834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.600305][ T834] RIP: 0033:0x7f1337f8f749 [ 1108.600326][ T834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1108.600347][ T834] RSP: 002b:00007f1338eda038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1108.600372][ T834] RAX: ffffffffffffffda RBX: 00007f13381e5fa0 RCX: 00007f1337f8f749 [ 1108.600389][ T834] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 1108.600422][ T834] RBP: 00007f1338eda090 R08: 0000000000000000 R09: 0000000000000000 [ 1108.600437][ T834] R10: 000000000004c040 R11: 0000000000000246 R12: 0000000000000002 [ 1108.600453][ T834] R13: 00007f13381e6038 R14: 00007f13381e5fa0 R15: 00007ffc1eace058 [ 1108.600494][ T834] [ 1109.197037][ T829] tipc: Resetting bearer [ 1109.368551][ T857] FAULT_INJECTION: forcing a failure. [ 1109.368551][ T857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1109.382720][ T857] CPU: 0 UID: 0 PID: 857 Comm: syz.6.8033 Not tainted syzkaller #0 PREEMPT(full) [ 1109.382753][ T857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1109.382767][ T857] Call Trace: [ 1109.382777][ T857] [ 1109.382786][ T857] dump_stack_lvl+0xe8/0x150 [ 1109.382823][ T857] should_fail_ex+0x414/0x560 [ 1109.382866][ T857] _copy_from_user+0x2d/0xb0 [ 1109.382898][ T857] ___sys_recvmsg+0x12e/0x510 [ 1109.382937][ T857] ? __pfx____sys_recvmsg+0x10/0x10 [ 1109.382974][ T857] ? __fget_files+0x2a/0x420 [ 1109.383039][ T857] do_recvmmsg+0x307/0x770 [ 1109.383079][ T857] ? __pfx_do_recvmmsg+0x10/0x10 [ 1109.383124][ T857] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1109.383186][ T857] __x64_sys_recvmmsg+0x190/0x240 [ 1109.383223][ T857] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1109.383270][ T857] do_syscall_64+0xec/0xf80 [ 1109.383297][ T857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.383320][ T857] ? trace_irq_disable+0x37/0x100 [ 1109.383351][ T857] ? clear_bhb_loop+0x60/0xb0 [ 1109.383379][ T857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.383402][ T857] RIP: 0033:0x7fe4e798f749 [ 1109.383424][ T857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1109.383445][ T857] RSP: 002b:00007fe4e8866038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1109.383471][ T857] RAX: ffffffffffffffda RBX: 00007fe4e7be6090 RCX: 00007fe4e798f749 [ 1109.383488][ T857] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004 [ 1109.383504][ T857] RBP: 00007fe4e8866090 R08: 0000000000000000 R09: 0000000000000000 [ 1109.383519][ T857] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 1109.383534][ T857] R13: 00007fe4e7be6128 R14: 00007fe4e7be6090 R15: 00007ffed362dda8 [ 1109.383573][ T857] [ 1109.578333][ T829] tipc: Disabling bearer [ 1109.603688][ T854] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 1109.614436][T19640] tipc: Node number set to 1837131576 [ 1109.655808][ T861] netlink: 5 bytes leftover after parsing attributes in process `syz.3.8035'. [ 1109.666033][ T861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1110.345699][ T881] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8039'. [ 1110.359199][ T881] netlink: 11 bytes leftover after parsing attributes in process `syz.6.8039'. [ 1110.477231][T23998] vlan2: left promiscuous mode [ 1110.642643][ T896] netlink: 'syz.0.8046': attribute type 2 has an invalid length. [ 1110.750793][ T903] netlink: 'syz.0.8046': attribute type 6 has an invalid length. [ 1110.793796][ T903] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8046'. [ 1110.850914][ T908] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 1111.886923][ T919] netlink: 'syz.6.8055': attribute type 9 has an invalid length. [ 1111.894967][ T919] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8055'. [ 1111.975229][ T926] netlink: 'syz.5.8056': attribute type 1 has an invalid length. [ 1112.051269][ T926] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1112.199570][ T931] bond3: (slave veth3): Enslaving as an active interface with a down link [ 1112.472327][ T944] netlink: 5 bytes leftover after parsing attributes in process `syz.6.8060'. [ 1112.486942][ T944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1113.012972][ T974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8069'. [ 1113.797956][ T987] netlink: 5 bytes leftover after parsing attributes in process `syz.3.8074'. [ 1113.852049][ T987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1114.076945][ T997] pimreg3: entered allmulticast mode [ 1114.531979][ T1013] lo speed is unknown, defaulting to 1000 [ 1114.569771][ T1013] wg1 speed is unknown, defaulting to 1000 [ 1114.572807][ T1022] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003 [ 1114.689914][ T1027] : left promiscuous mode [ 1114.745307][ T1032] netlink: 5 bytes leftover after parsing attributes in process `syz.3.8089'. [ 1114.775797][ T1032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1114.908821][ T1024] lo speed is unknown, defaulting to 1000 [ 1114.933850][ T1024] wg1 speed is unknown, defaulting to 1000 [ 1115.124965][ T1051] 8021q: VLANs not supported on vxcan0 [ 1115.307999][ T1013] wg1 speed is unknown, defaulting to 1000 [ 1115.855071][ T1024] wg1 speed is unknown, defaulting to 1000 [ 1115.896399][ T1077] netlink: 'syz.4.8100': attribute type 2 has an invalid length. [ 1115.909353][ T1064] siw: device registration error -23 [ 1115.921766][ T1076] netlink: 5 bytes leftover after parsing attributes in process `syz.6.8101'. [ 1116.006049][ T1076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1116.022049][ T1082] netlink: 'syz.4.8100': attribute type 6 has an invalid length. [ 1116.134940][ T1077] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8100'. [ 1116.282162][ T1087] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8102'. [ 1116.342935][ T1087] netlink: 296 bytes leftover after parsing attributes in process `syz.6.8102'. [ 1116.402196][ T1091] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8102'. [ 1117.764414][ T1123] netlink: 5 bytes leftover after parsing attributes in process `syz.4.8112'. [ 1117.812890][ T1123] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1117.908881][ T1125] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8113'. [ 1117.937252][ T1125] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8113'. [ 1117.988184][ T1129] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8113'. [ 1118.304807][ T1143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8117'. [ 1118.329841][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1118.430535][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1118.488940][ T1160] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003 [ 1118.757773][ T1157] lo speed is unknown, defaulting to 1000 [ 1118.792437][ T1157] wg1 speed is unknown, defaulting to 1000 [ 1119.042709][ T1175] netlink: 'syz.5.8123': attribute type 2 has an invalid length. [ 1119.082480][ T1175] : entered promiscuous mode [ 1119.234146][ T1175] netlink: 'syz.5.8123': attribute type 6 has an invalid length. [ 1119.383067][ T1175] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8123'. [ 1119.564512][ T1157] wg1 speed is unknown, defaulting to 1000 [ 1119.629295][ T1191] netlink: 5 bytes leftover after parsing attributes in process `syz.0.8127'. [ 1119.696247][ T1191] A link change request failed with some changes committed already. Interface 30 may have been left with an inconsistent configuration, please check. [ 1119.733836][ T1194] tipc: Enabled bearer , priority 0 [ 1119.804115][ T1194] syzkaller0: entered promiscuous mode [ 1119.813356][ T1194] syzkaller0: entered allmulticast mode [ 1119.845717][ T1200] veth0_to_bridge: entered promiscuous mode [ 1119.855838][ T1199] veth0_to_bridge: left promiscuous mode [ 1119.958051][ T1207] syzkaller0: entered promiscuous mode [ 1119.969947][ T1207] syzkaller0: entered allmulticast mode [ 1120.067502][ T1192] tipc: Resetting bearer [ 1120.123828][ T1192] tipc: Disabling bearer [ 1120.441788][ T1228] netlink: 'syz.3.8141': attribute type 2 has an invalid length. [ 1120.519783][ T1233] netlink: 'syz.3.8141': attribute type 6 has an invalid length. [ 1120.606161][ T1233] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8141'. [ 1120.750573][ T1239] netlink: 5 bytes leftover after parsing attributes in process `syz.4.8143'. [ 1120.761414][ T1239] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1120.858789][ T1246] syzkaller0: entered promiscuous mode [ 1120.867571][ T1246] syzkaller0: entered allmulticast mode [ 1120.935754][ T1249] tipc: Enabled bearer , priority 0 [ 1120.943532][ T1249] syzkaller0: entered promiscuous mode [ 1120.949513][ T1249] syzkaller0: entered allmulticast mode [ 1121.290581][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1121.473098][ T1247] tipc: Resetting bearer [ 1121.580861][ T1247] tipc: Disabling bearer [ 1121.918042][ T1282] netlink: 'syz.3.8156': attribute type 2 has an invalid length. [ 1122.034994][ T1289] netlink: 'syz.3.8156': attribute type 6 has an invalid length. [ 1122.044928][ T1287] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1122.067261][ T1287] tipc: Enabled bearer , priority 10 [ 1122.123046][ T1289] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8156'. [ 1122.158576][ T1287] macvlan0: entered allmulticast mode [ 1122.164314][ T1287] veth1_vlan: entered allmulticast mode [ 1122.810380][ T1299] netlink: 'syz.6.8158': attribute type 1 has an invalid length. [ 1122.905384][ T1299] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1123.011711][ T1311] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1123.060430][ T1299] vlan2: entered allmulticast mode [ 1123.081881][ T1299] veth1: entered allmulticast mode [ 1123.172109][ T1319] __nla_validate_parse: 2 callbacks suppressed [ 1123.172134][ T1319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8161'. [ 1123.202363][T18351] tipc: Node number set to 4278561001 [ 1123.221276][ T1319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1123.325861][ T1319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1123.775030][ T1346] netlink: 'syz.5.8169': attribute type 2 has an invalid length. [ 1123.864421][ T1353] netlink: 'syz.5.8169': attribute type 6 has an invalid length. [ 1123.881595][ T1353] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8169'. [ 1124.073944][ T1360] tipc: Enabled bearer , priority 0 [ 1124.289294][ T1359] tipc: Disabling bearer [ 1124.813450][ T1382] can: request_module (can-proto-0) failed. [ 1124.869918][ T1389] netlink: 'syz.4.8182': attribute type 2 has an invalid length. [ 1124.961111][ T1400] netlink: 'syz.4.8182': attribute type 6 has an invalid length. [ 1125.024140][ T1400] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8182'. [ 1125.209967][ T1410] netlink: 5 bytes leftover after parsing attributes in process `syz.0.8187'. [ 1125.221063][ T1408] tipc: Enabled bearer , priority 0 [ 1125.241104][ T1410] A link change request failed with some changes committed already. Interface 30 may have been left with an inconsistent configuration, please check. [ 1125.535428][ T1407] tipc: Disabling bearer [ 1125.967388][ T1447] netlink: 'syz.6.8199': attribute type 2 has an invalid length. [ 1125.988908][ T1448] netlink: 64 bytes leftover after parsing attributes in process `syz.6.8199'. [ 1126.018980][ T1455] netlink: 64 bytes leftover after parsing attributes in process `syz.6.8199'. [ 1126.050609][ T1454] netlink: 5 bytes leftover after parsing attributes in process `syz.3.8201'. [ 1126.067592][ T1447] netlink: 164 bytes leftover after parsing attributes in process `syz.6.8199'. [ 1126.149984][ T1454] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1126.306559][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1126.314786][ C0] lec:lec_tx_timeout: lec0 [ 1126.334136][ T1455] lo speed is unknown, defaulting to 1000 [ 1126.343990][ T1455] wg1 speed is unknown, defaulting to 1000 [ 1126.615366][ T1468] syzkaller0: entered promiscuous mode [ 1126.625838][ T1474] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8208'. [ 1126.635877][ T1468] syzkaller0: entered allmulticast mode [ 1128.618927][ T1455] wg1 speed is unknown, defaulting to 1000 [ 1128.627431][ T1482] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1128.647819][ T1482] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1128.657774][ T1482] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1128.772714][ T1485] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.850075][ T1492] netlink: 5 bytes leftover after parsing attributes in process `syz.4.8213'. [ 1128.904057][ T1485] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.923540][T27240] Bluetooth: hci5: link tx timeout [ 1128.929894][T27240] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1128.942840][T27240] Bluetooth: hci5: link tx timeout [ 1128.948807][T27240] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1128.962720][ T1492] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1129.112714][ T1485] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.278554][ T1501] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1129.440188][ T1485] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.713505][ T2122] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.774169][ T1519] syzkaller0: entered promiscuous mode [ 1129.781913][ T1519] syzkaller0: entered allmulticast mode [ 1129.809203][ T1521] tipc: Enabling of bearer rejected, failed to enable media [ 1131.004705][T27240] Bluetooth: hci5: command 0x0406 tx timeout [ 1131.749243][ T2122] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.820157][ T5098] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.907650][ T5098] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.092804][ T1541] tipc: Enabling of bearer rejected, failed to enable media [ 1132.418075][ T1555] netlink: 'syz.3.8235': attribute type 1 has an invalid length. [ 1132.477148][ T1555] bond5: entered promiscuous mode [ 1132.482438][ T1555] bond5: entered allmulticast mode [ 1132.482458][ T1559] netlink: 'syz.4.8237': attribute type 1 has an invalid length. [ 1132.495220][ T1555] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1132.512591][ T1560] erspan1: entered allmulticast mode [ 1132.527959][ T1560] bond5: (slave erspan1): making interface the new active one [ 1132.535936][ T1560] erspan1: entered promiscuous mode [ 1132.543310][ T1560] bond5: (slave erspan1): Enslaving as an active interface with an up link [ 1132.631839][ T1559] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1132.781681][ T1574] netlink: 'syz.4.8239': attribute type 2 has an invalid length. [ 1132.883370][ T1577] netlink: 'syz.4.8239': attribute type 6 has an invalid length. [ 1132.927792][ T1577] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8239'. [ 1133.067906][T27240] Bluetooth: hci5: command 0x0406 tx timeout [ 1133.414083][ T1595] netlink: 'syz.0.8244': attribute type 39 has an invalid length. [ 1133.566157][ T1602] netlink: 'syz.6.8247': attribute type 1 has an invalid length. [ 1133.587097][ T1602] netlink: 'syz.6.8247': attribute type 2 has an invalid length. [ 1133.628802][ T1604] xt_HMARK: spi-set and port-set can't be combined [ 1133.899348][ T1615] FAULT_INJECTION: forcing a failure. [ 1133.899348][ T1615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1133.937034][ T1615] CPU: 0 UID: 0 PID: 1615 Comm: syz.5.8252 Not tainted syzkaller #0 PREEMPT(full) [ 1133.937086][ T1615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1133.937110][ T1615] Call Trace: [ 1133.937126][ T1615] [ 1133.937143][ T1615] dump_stack_lvl+0xe8/0x150 [ 1133.937189][ T1615] should_fail_ex+0x414/0x560 [ 1133.937231][ T1615] _copy_to_user+0x31/0xb0 [ 1133.937262][ T1615] simple_read_from_buffer+0xe1/0x170 [ 1133.937297][ T1615] proc_fail_nth_read+0x1b3/0x220 [ 1133.937325][ T1615] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1133.937353][ T1615] ? rw_verify_area+0x2a6/0x4d0 [ 1133.937388][ T1615] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1133.937414][ T1615] vfs_read+0x200/0xa30 [ 1133.937445][ T1615] ? __pfx_vfs_read+0x10/0x10 [ 1133.937467][ T1615] ? aa_sk_perm+0x7ee/0x920 [ 1133.937496][ T1615] ? do_sys_openat2+0x15a/0x200 [ 1133.937527][ T1615] ? __pfx_aa_sk_perm+0x10/0x10 [ 1133.937565][ T1615] ksys_read+0x145/0x250 [ 1133.937590][ T1615] ? __pfx_ksys_read+0x10/0x10 [ 1133.937632][ T1615] do_syscall_64+0xec/0xf80 [ 1133.937660][ T1615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.937682][ T1615] ? trace_irq_disable+0x37/0x100 [ 1133.937711][ T1615] ? clear_bhb_loop+0x60/0xb0 [ 1133.937739][ T1615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.937761][ T1615] RIP: 0033:0x7f1337f8e15c [ 1133.937782][ T1615] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1133.937805][ T1615] RSP: 002b:00007f1338eda030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1133.937829][ T1615] RAX: ffffffffffffffda RBX: 00007f13381e5fa0 RCX: 00007f1337f8e15c [ 1133.937846][ T1615] RDX: 000000000000000f RSI: 00007f1338eda0a0 RDI: 0000000000000003 [ 1133.937861][ T1615] RBP: 00007f1338eda090 R08: 0000000000000000 R09: 0000000000000000 [ 1133.937875][ T1615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1133.937889][ T1615] R13: 00007f13381e6038 R14: 00007f13381e5fa0 R15: 00007ffc1eace058 [ 1133.937927][ T1615] [ 1134.837692][ T1641] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8263'. [ 1134.879576][ T1641] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8263'. [ 1134.999113][ T1649] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8266'. [ 1135.024834][ T1649] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8266'. [ 1135.036351][ T1649] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8266'. [ 1135.046991][ T1649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1135.088580][ T1655] netlink: 'syz.5.8266': attribute type 28 has an invalid length. [ 1135.098592][ T1655] netlink: 'syz.5.8266': attribute type 3 has an invalid length. [ 1135.117848][ T1655] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8266'. [ 1135.155920][ T1649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1135.644911][ T1667] syzkaller0: entered promiscuous mode [ 1135.651434][ T1667] syzkaller0: entered allmulticast mode [ 1138.080303][ T1708] syzkaller0: entered promiscuous mode [ 1138.086342][ T1708] syzkaller0: entered allmulticast mode [ 1138.266799][T27240] Bluetooth: hci5: command 0x0406 tx timeout [ 1138.336871][ T1724] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003 [ 1138.410831][ T1720] lo speed is unknown, defaulting to 1000 [ 1138.418317][ T1720] wg1 speed is unknown, defaulting to 1000 [ 1138.628335][ T1720] wg1 speed is unknown, defaulting to 1000 [ 1139.293511][ T1755] xt_recent: Unsupported userspace flags (000000b1) [ 1139.302912][ T1753] netlink: 5 bytes leftover after parsing attributes in process `syz.4.8295'. [ 1139.337489][ T1753] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1141.465528][ T1814] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.472847][ T1814] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1141.514196][ T1827] netlink: 'syz.3.8317': attribute type 1 has an invalid length. [ 1141.587516][ T1814] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 1141.603423][ T1814] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 1141.618560][ T1814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1141.642777][ T1814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1141.794210][ T1827] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1141.875826][T23985] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.904189][T23985] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.938489][T23985] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.964848][ T1834] syzkaller0: entered promiscuous mode [ 1141.971097][ T1834] syzkaller0: entered allmulticast mode [ 1141.981797][T23985] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.011440][ T1838] batadv_slave_0: entered promiscuous mode [ 1142.023189][ T1838] netlink: 'syz.6.8320': attribute type 3 has an invalid length. [ 1142.263488][ T1851] syzkaller0: entered promiscuous mode [ 1142.282807][ T1851] syzkaller0: entered allmulticast mode [ 1142.293773][ T1843] syzkaller0: left promiscuous mode [ 1142.299752][ T1843] syzkaller0: left allmulticast mode [ 1143.103977][ T1870] netlink: 'syz.6.8332': attribute type 13 has an invalid length. [ 1144.753114][ T1875] netlink: 'syz.3.8333': attribute type 1 has an invalid length. [ 1144.821400][ T1870] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.829184][ T1870] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1145.058659][ T1870] veth1_vlan: left allmulticast mode [ 1145.165347][ T1871] veth4: entered allmulticast mode [ 1145.245488][ T1184] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.254933][ T1184] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.268195][ T1184] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.283579][ T1184] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.322101][ T1898] netlink: 'syz.6.8339': attribute type 7 has an invalid length. [ 1145.332610][ T1898] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8339'. [ 1145.490140][ T1905] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8342'. [ 1145.559663][ T1907] xt_TCPMSS: Only works on TCP SYN packets [ 1145.570423][ T1907] xt_hashlimit: overflow, try lower: 3/0 [ 1145.581559][ T1907] netlink: 'syz.6.8343': attribute type 1 has an invalid length. [ 1145.590645][ T1907] netlink: 'syz.6.8343': attribute type 2 has an invalid length. [ 1145.668398][ T1909] netlink: 'syz.6.8344': attribute type 1 has an invalid length. [ 1145.724285][ T1909] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1145.770348][ T1913] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8345'. [ 1145.871932][ T1909] vlan2: entered allmulticast mode [ 1146.693406][ T1952] netlink: 'syz.0.8360': attribute type 10 has an invalid length. [ 1146.712947][ T1952] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8360'. [ 1146.738809][ T1961] netlink: 5 bytes leftover after parsing attributes in process `syz.5.8362'. [ 1146.767916][ T1961] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1147.174621][ T1983] netlink: 'syz.4.8369': attribute type 2 has an invalid length. [ 1147.400702][ T1987] tipc: Enabled bearer , priority 0 [ 1147.420526][ T1986] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8369'. [ 1147.435337][ T1987] syzkaller0: entered promiscuous mode [ 1147.447964][ T1987] syzkaller0: entered allmulticast mode [ 1147.808888][ T1985] tipc: Resetting bearer [ 1147.853773][ T1985] tipc: Disabling bearer [ 1147.878225][ T1998] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1148.025173][ T2010] FAULT_INJECTION: forcing a failure. [ 1148.025173][ T2010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1148.064000][ T2010] CPU: 0 UID: 0 PID: 2010 Comm: syz.4.8375 Not tainted syzkaller #0 PREEMPT(full) [ 1148.064033][ T2010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1148.064049][ T2010] Call Trace: [ 1148.064058][ T2010] [ 1148.064069][ T2010] dump_stack_lvl+0xe8/0x150 [ 1148.064105][ T2010] should_fail_ex+0x414/0x560 [ 1148.064146][ T2010] _copy_to_user+0x31/0xb0 [ 1148.064178][ T2010] simple_read_from_buffer+0xe1/0x170 [ 1148.064213][ T2010] proc_fail_nth_read+0x1b3/0x220 [ 1148.064247][ T2010] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1148.064276][ T2010] ? rw_verify_area+0x2a6/0x4d0 [ 1148.064316][ T2010] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1148.064346][ T2010] vfs_read+0x200/0xa30 [ 1148.064367][ T2010] ? __pfx_aa_sk_perm+0x10/0x10 [ 1148.064402][ T2010] ? __pfx_vfs_read+0x10/0x10 [ 1148.064422][ T2010] ? l2tp_ip6_connect+0x10e/0x450 [ 1148.064451][ T2010] ? __sys_connect+0x339/0x440 [ 1148.064481][ T2010] ? __pfx___sys_connect+0x10/0x10 [ 1148.064514][ T2010] ksys_read+0x145/0x250 [ 1148.064539][ T2010] ? __pfx_ksys_read+0x10/0x10 [ 1148.064572][ T2010] do_syscall_64+0xec/0xf80 [ 1148.064599][ T2010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.064620][ T2010] ? trace_irq_disable+0x37/0x100 [ 1148.064655][ T2010] ? clear_bhb_loop+0x60/0xb0 [ 1148.064681][ T2010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.064710][ T2010] RIP: 0033:0x7f336058e15c [ 1148.064728][ T2010] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1148.064745][ T2010] RSP: 002b:00007f3361499030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1148.064766][ T2010] RAX: ffffffffffffffda RBX: 00007f33607e5fa0 RCX: 00007f336058e15c [ 1148.064782][ T2010] RDX: 000000000000000f RSI: 00007f33614990a0 RDI: 0000000000000004 [ 1148.064795][ T2010] RBP: 00007f3361499090 R08: 0000000000000000 R09: 0000000000000000 [ 1148.064808][ T2010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1148.064819][ T2010] R13: 00007f33607e6038 R14: 00007f33607e5fa0 R15: 00007ffeea993c98 [ 1148.064853][ T2010] [ 1149.920699][ T2055] tipc: Enabled bearer , priority 0 [ 1149.969864][ T2055] syzkaller0: entered promiscuous mode [ 1149.975417][ T2055] syzkaller0: entered allmulticast mode [ 1150.148132][ T2065] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1150.185284][ T2064] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1150.329779][ T2054] tipc: Resetting bearer [ 1150.391226][ T2054] tipc: Disabling bearer [ 1150.528492][ T2076] netlink: 'syz.0.8395': attribute type 1 has an invalid length. [ 1150.640669][ T2076] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1150.760565][ T2082] vlan2: entered allmulticast mode [ 1150.776703][ T2082] veth1: entered allmulticast mode [ 1150.784454][ T2082] bond10: (slave vlan2): Opening slave failed [ 1150.868552][ T2086] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003 [ 1150.909069][ T2085] lo speed is unknown, defaulting to 1000 [ 1150.940767][ T2085] wg1 speed is unknown, defaulting to 1000 [ 1151.193421][ T2095] netlink: 'syz.0.8401': attribute type 24 has an invalid length. [ 1151.229795][ T2085] wg1 speed is unknown, defaulting to 1000 [ 1151.898072][ T2112] FAULT_INJECTION: forcing a failure. [ 1151.898072][ T2112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1151.935830][ T2112] CPU: 1 UID: 0 PID: 2112 Comm: syz.5.8406 Not tainted syzkaller #0 PREEMPT(full) [ 1151.935863][ T2112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1151.935879][ T2112] Call Trace: [ 1151.935888][ T2112] [ 1151.935899][ T2112] dump_stack_lvl+0xe8/0x150 [ 1151.935934][ T2112] should_fail_ex+0x414/0x560 [ 1151.935977][ T2112] _copy_from_user+0x2d/0xb0 [ 1151.936007][ T2112] kstrtouint_from_user+0xc4/0x170 [ 1151.936034][ T2112] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1151.936079][ T2112] proc_fail_nth_write+0x88/0x200 [ 1151.936104][ T2112] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1151.936136][ T2112] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1151.936163][ T2112] vfs_write+0x27e/0xb30 [ 1151.936197][ T2112] ? __pfx_vfs_write+0x10/0x10 [ 1151.936222][ T2112] ? __fget_files+0x2a/0x420 [ 1151.936256][ T2112] ? __fget_files+0x3a0/0x420 [ 1151.936283][ T2112] ? __fget_files+0x2a/0x420 [ 1151.936322][ T2112] ksys_write+0x145/0x250 [ 1151.936344][ T2112] ? __fget_files+0x3a0/0x420 [ 1151.936384][ T2112] ? __pfx_ksys_write+0x10/0x10 [ 1151.936406][ T2112] ? __pfx_sock_ioctl+0x10/0x10 [ 1151.936453][ T2112] do_syscall_64+0xec/0xf80 [ 1151.936481][ T2112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.936504][ T2112] ? trace_irq_disable+0x37/0x100 [ 1151.936533][ T2112] ? clear_bhb_loop+0x60/0xb0 [ 1151.936561][ T2112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.936582][ T2112] RIP: 0033:0x7f1337f8e1ff [ 1151.936603][ T2112] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1151.936624][ T2112] RSP: 002b:00007f1338eb9030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1151.936649][ T2112] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1337f8e1ff [ 1151.936665][ T2112] RDX: 0000000000000001 RSI: 00007f1338eb90a0 RDI: 0000000000000003 [ 1151.936679][ T2112] RBP: 00007f1338eb9090 R08: 0000000000000000 R09: 0000000000000000 [ 1151.936693][ T2112] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1151.936707][ T2112] R13: 00007f13381e6128 R14: 00007f13381e6090 R15: 00007ffc1eace058 [ 1151.936746][ T2112] [ 1152.285848][ T2116] tipc: Enabled bearer , priority 0 [ 1152.610652][ T2114] tipc: Disabling bearer [ 1152.807792][ T2137] netlink: 'syz.0.8411': attribute type 1 has an invalid length. [ 1152.847138][ T2140] netlink: 'syz.4.8413': attribute type 2 has an invalid length. [ 1152.881070][ T2137] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1152.894107][ T2141] vlan2: entered allmulticast mode [ 1152.921491][ T2141] bond11: (slave vlan2): Opening slave failed [ 1152.971693][ T2145] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8413'. [ 1153.330914][ T2155] netlink: 5 bytes leftover after parsing attributes in process `syz.0.8417'. [ 1153.364593][ T2155] A link change request failed with some changes committed already. Interface 30 may have been left with an inconsistent configuration, please check. [ 1155.825221][ T2179] tipc: Enabled bearer , priority 0 [ 1156.168191][ T2178] tipc: Disabling bearer [ 1156.691280][ T2216] netlink: 'syz.5.8432': attribute type 5 has an invalid length. [ 1156.892225][ T2221] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8434'. [ 1157.101245][ T2228] netlink: 64 bytes leftover after parsing attributes in process `syz.5.8437'. [ 1157.285741][T14886] bridge_slave_1: left allmulticast mode [ 1157.488801][T14886] bridge_slave_1: left promiscuous mode [ 1157.549249][T14886] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.595955][T14886] ¾x9ÿ: left allmulticast mode [ 1157.606959][T14886] ¾x9ÿ: left promiscuous mode [ 1157.613827][T14886] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1157.634309][ T2242] netlink: 596 bytes leftover after parsing attributes in process `syz.4.8438'. [ 1157.727775][T14886] tipc: Resetting bearer [ 1158.337074][T14886] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1158.595195][T14886] tipc: Disabling bearer [ 1158.640703][T14886] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 1158.649162][T14886] bond5 (unregistering): (slave bridge5): the permanent HWaddr of slave - ae:8f:ff:77:66:98 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1158.885296][T14886] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1158.896041][T14886] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1158.906392][T14886] bond0 (unregistering): Released all slaves [ 1159.063319][T14886] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 1159.074520][T14886] wireguard0: left promiscuous mode [ 1159.083169][T14886] bond1 (unregistering): (slave wireguard1): Releasing backup interface [ 1159.102125][T14886] bond1 (unregistering): Released all slaves [ 1159.120629][T14886] bond2 (unregistering): Released all slaves [ 1159.261095][T14886] bond3 (unregistering): Released all slaves [ 1159.275591][T14886] bond4 (unregistering): Released all slaves [ 1159.291451][T14886] bond5 (unregistering): (slave macvlan2): Releasing backup interface [ 1159.301085][T14886] veth1: left promiscuous mode [ 1159.310559][T14886] bond5 (unregistering): Released all slaves [ 1159.350607][ T2249] tipc: Enabling of bearer rejected, failed to enable media [ 1159.477030][T14886] : left promiscuous mode [ 1159.628494][T14886] !: left promiscuous mode [ 1159.739159][T14886] tipc: Left network mode [ 1159.890757][ T2296] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8454'. [ 1160.054139][ T2299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8455'. [ 1160.448980][ T2307] syzkaller0: entered promiscuous mode [ 1160.471236][ T2307] syzkaller0: entered allmulticast mode [ 1160.615383][ T2311] tipc: Enabled bearer , priority 0 [ 1160.656323][ T2309] syzkaller0: entered promiscuous mode [ 1160.691612][ T2315] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8461'. [ 1160.702463][ T2309] syzkaller0: entered allmulticast mode [ 1160.881736][T14886] hsr_slave_0: left promiscuous mode [ 1160.919248][T14886] hsr_slave_1: left promiscuous mode [ 1160.936843][T14886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1160.969520][T14886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1160.979089][ T2329] netlink: 'syz.5.8465': attribute type 1 has an invalid length. [ 1161.169771][ T2338] netlink: 'syz.4.8468': attribute type 2 has an invalid length. [ 1161.524502][ T2344] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8468'. [ 1161.544917][T14886] team0 (unregistering): Port device team_slave_1 removed [ 1161.602545][T14886] team0 (unregistering): Port device team_slave_0 removed [ 1162.118644][ T2318] netlink: 'syz.6.8462': attribute type 8 has an invalid length. [ 1162.126902][ T2318] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8462'. [ 1162.175933][ T2329] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1162.236765][ T5904] tipc: Node number set to 3649847045 [ 1162.958907][T14886] IPVS: stop unused estimator thread 0... [ 1163.225912][ T2394] netlink: 'syz.6.8484': attribute type 10 has an invalid length. [ 1163.241171][ T2394] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8484'. [ 1163.278511][ T2404] veth0_vlan: left promiscuous mode [ 1163.285012][ T2404] veth0_vlan: entered promiscuous mode [ 1163.399799][ T2406] syzkaller0: entered promiscuous mode [ 1163.410998][ T2406] syzkaller0: entered allmulticast mode [ 1163.412313][ T2408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8487'. [ 1163.732234][ T2424] IPv6: NLM_F_CREATE should be specified when creating new route [ 1163.822358][ T2421] lo speed is unknown, defaulting to 1000 [ 1163.830453][ T2421] wg1 speed is unknown, defaulting to 1000 [ 1164.101260][ T2440] netlink: 5 bytes leftover after parsing attributes in process `syz.3.8496'. [ 1164.137248][ T2440] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1164.425355][ T2421] wg1 speed is unknown, defaulting to 1000 [ 1165.531446][ T2485] netlink: 'syz.5.8504': attribute type 2 has an invalid length. [ 1165.549519][ T2485] !: entered promiscuous mode [ 1165.568651][ T2485] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8504'. [ 1165.759584][ T2494] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8506'. [ 1165.769840][ T2494] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8506'. [ 1165.780853][ T2494] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8506'. [ 1165.964594][ T2501] netlink: 5 bytes leftover after parsing attributes in process `syz.6.8508'. [ 1165.987226][ T2501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1166.220269][ T2510] netlink: 7060 bytes leftover after parsing attributes in process `syz.5.8511'. [ 1166.343408][ T2510] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.494837][ T2510] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.642357][ T2510] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.941331][ T2510] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.041149][ T2536] netlink: 'syz.6.8515': attribute type 5 has an invalid length. [ 1167.050627][ T2536] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8515'. [ 1167.313906][T19490] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.436147][T19490] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.534685][T14886] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.573464][T14886] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.664723][ T2565] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8522'. [ 1167.707317][ T2568] netlink: 'syz.4.8519': attribute type 10 has an invalid length. [ 1167.726781][ T2567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8521'. [ 1168.211089][ T2584] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1168.273122][ T2588] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8526'. [ 1168.468878][ T2595] lo speed is unknown, defaulting to 1000 [ 1168.538730][ T2595] wg1 speed is unknown, defaulting to 1000 [ 1168.719341][ T2613] netlink: 'syz.0.8530': attribute type 1 has an invalid length. [ 1168.990180][ T2616] vlan3: entered allmulticast mode [ 1169.213823][ T2629] lo speed is unknown, defaulting to 1000 [ 1169.268022][ T2629] wg1 speed is unknown, defaulting to 1000 [ 1169.550529][ T2595] wg1 speed is unknown, defaulting to 1000 [ 1169.560871][ T2642] netlink: 'syz.3.8536': attribute type 13 has an invalid length. [ 1169.574981][ T2642] gretap0: refused to change device tx_queue_len [ 1169.606515][ T2642] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1169.892868][ T2644] netlink: 'syz.4.8537': attribute type 5 has an invalid length. [ 1169.901057][ T2650] netlink: 'syz.3.8538': attribute type 7 has an invalid length. [ 1169.901085][ T2650] netlink: 'syz.3.8538': attribute type 8 has an invalid length. [ 1169.959650][ T2651] nbd: must specify at least one socket [ 1169.967136][ T2651] openvswitch: netlink: IP tunnel dst address not specified [ 1170.023653][ T2650] dummy0: entered promiscuous mode [ 1170.042948][ T2650] dummy0: left promiscuous mode [ 1170.090145][ T2629] wg1 speed is unknown, defaulting to 1000 [ 1170.093539][ T2598] lo speed is unknown, defaulting to 1000 [ 1170.297397][ T2598] wg1 speed is unknown, defaulting to 1000 [ 1170.899143][ T2598] wg1 speed is unknown, defaulting to 1000 [ 1171.696956][ T2696] netlink: 'syz.0.8549': attribute type 1 has an invalid length. [ 1171.716200][ T2696] netlink: 'syz.0.8549': attribute type 2 has an invalid length. [ 1172.198449][ T2713] __nla_validate_parse: 5 callbacks suppressed [ 1172.198470][ T2713] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8553'. [ 1172.292588][ T2715] FAULT_INJECTION: forcing a failure. [ 1172.292588][ T2715] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.326415][ T2715] CPU: 1 UID: 0 PID: 2715 Comm: syz.6.8554 Not tainted syzkaller #0 PREEMPT(full) [ 1172.326446][ T2715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1172.326462][ T2715] Call Trace: [ 1172.326471][ T2715] [ 1172.326482][ T2715] dump_stack_lvl+0xe8/0x150 [ 1172.326519][ T2715] should_fail_ex+0x414/0x560 [ 1172.326560][ T2715] should_failslab+0xa8/0x100 [ 1172.326592][ T2715] __kmalloc_cache_noprof+0x84/0x700 [ 1172.326618][ T2715] ? sctp_add_bind_addr+0x8c/0x370 [ 1172.326659][ T2715] sctp_add_bind_addr+0x8c/0x370 [ 1172.326699][ T2715] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1172.326739][ T2715] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1172.326789][ T2715] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1172.326827][ T2715] ? sctp_v6_is_any+0x64/0x80 [ 1172.326852][ T2715] ? sctp_copy_one_addr+0x93/0x360 [ 1172.326890][ T2715] sctp_bind_addr_copy+0x189/0x3c0 [ 1172.326933][ T2715] sctp_connect_new_asoc+0x2e0/0x690 [ 1172.326965][ T2715] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1172.326999][ T2715] ? __local_bh_enable_ip+0xd0/0x130 [ 1172.327022][ T2715] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1172.327047][ T2715] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1172.327075][ T2715] sctp_sendmsg+0x155c/0x2840 [ 1172.327101][ T2715] ? __lock_acquire+0x6b6/0x2cf0 [ 1172.327136][ T2715] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1172.327160][ T2715] ? aa_sk_perm+0x15f/0x920 [ 1172.327191][ T2715] ? aa_sk_perm+0x7ee/0x920 [ 1172.327225][ T2715] ? __pfx_aa_sk_perm+0x10/0x10 [ 1172.327257][ T2715] ? sock_rps_record_flow+0x19/0x410 [ 1172.327295][ T2715] ? inet_sendmsg+0x2f4/0x370 [ 1172.327334][ T2715] __sock_sendmsg+0x19c/0x270 [ 1172.327375][ T2715] ____sys_sendmsg+0x52d/0x820 [ 1172.327413][ T2715] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1172.327455][ T2715] ? import_iovec+0x74/0xa0 [ 1172.327489][ T2715] ___sys_sendmsg+0x21f/0x2a0 [ 1172.327522][ T2715] ? __pfx____sys_sendmsg+0x10/0x10 [ 1172.327556][ T2715] ? kstrtouint+0x6e/0xe0 [ 1172.327622][ T2715] ? __fget_files+0x2a/0x420 [ 1172.327650][ T2715] ? __fget_files+0x3a0/0x420 [ 1172.327691][ T2715] __sys_sendmmsg+0x227/0x430 [ 1172.327728][ T2715] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1172.327765][ T2715] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1172.327825][ T2715] ? ksys_write+0x22a/0x250 [ 1172.327851][ T2715] ? __pfx_ksys_write+0x10/0x10 [ 1172.327881][ T2715] __x64_sys_sendmmsg+0xa0/0xc0 [ 1172.327914][ T2715] do_syscall_64+0xec/0xf80 [ 1172.327942][ T2715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.327965][ T2715] ? trace_irq_disable+0x37/0x100 [ 1172.327996][ T2715] ? clear_bhb_loop+0x60/0xb0 [ 1172.328025][ T2715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.328047][ T2715] RIP: 0033:0x7fe4e798f749 [ 1172.328069][ T2715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1172.328091][ T2715] RSP: 002b:00007fe4e8887038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1172.328116][ T2715] RAX: ffffffffffffffda RBX: 00007fe4e7be5fa0 RCX: 00007fe4e798f749 [ 1172.328134][ T2715] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 1172.328149][ T2715] RBP: 00007fe4e8887090 R08: 0000000000000000 R09: 0000000000000000 [ 1172.328164][ T2715] R10: 000000000004c040 R11: 0000000000000246 R12: 0000000000000002 [ 1172.328179][ T2715] R13: 00007fe4e7be6038 R14: 00007fe4e7be5fa0 R15: 00007ffed362dda8 [ 1172.328219][ T2715] [ 1172.734512][ T2718] lo speed is unknown, defaulting to 1000 [ 1173.307929][ T2744] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8559'. [ 1173.397518][ T2718] wg1 speed is unknown, defaulting to 1000 [ 1173.565544][ T2744] netlink: 'syz.0.8559': attribute type 1 has an invalid length. [ 1173.999264][ T2762] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8566'. [ 1174.029587][ T2718] wg1 speed is unknown, defaulting to 1000 [ 1174.156339][ T2772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8567'. [ 1174.179970][ T2772] syz_tun (unregistering): left allmulticast mode [ 1174.995116][ T2802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8576'. [ 1175.108843][ T2805] netlink: 'syz.4.8577': attribute type 2 has an invalid length. [ 1175.358384][ T2831] netlink: 'syz.6.8579': attribute type 10 has an invalid length. [ 1175.437858][ T2810] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8577'. [ 1177.961569][ T2831] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1177.970575][ T2834] netlink: 'syz.6.8579': attribute type 25 has an invalid length. [ 1177.979091][ T2837] netlink: 'syz.0.8582': attribute type 10 has an invalid length. [ 1177.989320][ T2837] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8582'. [ 1178.080639][ T2863] netlink: 'syz.4.8583': attribute type 1 has an invalid length. [ 1178.144872][ T2863] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8583'. [ 1178.194253][ T2871] netlink: 5 bytes leftover after parsing attributes in process `syz.5.8585'. [ 1178.202171][ T2864] netlink: 'syz.4.8583': attribute type 1 has an invalid length. [ 1178.211665][ T2864] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8583'. [ 1178.219264][ T2871] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1178.453180][ T2893] FAULT_INJECTION: forcing a failure. [ 1178.453180][ T2893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1178.467288][ T2893] CPU: 0 UID: 0 PID: 2893 Comm: syz.5.8588 Not tainted syzkaller #0 PREEMPT(full) [ 1178.467320][ T2893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1178.467334][ T2893] Call Trace: [ 1178.467344][ T2893] [ 1178.467353][ T2893] dump_stack_lvl+0xe8/0x150 [ 1178.467389][ T2893] should_fail_ex+0x414/0x560 [ 1178.467429][ T2893] _copy_from_user+0x2d/0xb0 [ 1178.467460][ T2893] ___sys_sendmsg+0x158/0x2a0 [ 1178.467492][ T2893] ? __pfx____sys_sendmsg+0x10/0x10 [ 1178.467562][ T2893] ? __fget_files+0x2a/0x420 [ 1178.467590][ T2893] ? __fget_files+0x3a0/0x420 [ 1178.467630][ T2893] __x64_sys_sendmsg+0x19b/0x260 [ 1178.467663][ T2893] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1178.467703][ T2893] ? __pfx_ksys_write+0x10/0x10 [ 1178.467738][ T2893] do_syscall_64+0xec/0xf80 [ 1178.467766][ T2893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.467788][ T2893] ? trace_irq_disable+0x37/0x100 [ 1178.467818][ T2893] ? clear_bhb_loop+0x60/0xb0 [ 1178.467846][ T2893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.467868][ T2893] RIP: 0033:0x7f1337f8f749 [ 1178.467889][ T2893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1178.467910][ T2893] RSP: 002b:00007f1338eda038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1178.467934][ T2893] RAX: ffffffffffffffda RBX: 00007f13381e5fa0 RCX: 00007f1337f8f749 [ 1178.467951][ T2893] RDX: 0000000020008000 RSI: 0000200000000440 RDI: 0000000000000004 [ 1178.467967][ T2893] RBP: 00007f1338eda090 R08: 0000000000000000 R09: 0000000000000000 [ 1178.467981][ T2893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1178.467995][ T2893] R13: 00007f13381e6038 R14: 00007f13381e5fa0 R15: 00007ffc1eace058 [ 1178.468032][ T2893] [ 1178.695490][ T2891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8589'. [ 1178.839982][ T2901] netlink: 'syz.5.8594': attribute type 2 has an invalid length. [ 1178.925256][ T2906] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8594'. [ 1178.938235][ T2907] netlink: 'syz.0.8596': attribute type 2 has an invalid length. [ 1178.943661][ T2905] tipc: Enabled bearer , priority 0 [ 1178.962525][ T2907] : entered promiscuous mode [ 1178.970714][ T2905] syzkaller0: entered promiscuous mode [ 1179.006723][ T2905] syzkaller0: entered allmulticast mode [ 1179.089869][ T2912] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8596'. [ 1179.257482][ T2917] netlink: 'syz.6.8597': attribute type 10 has an invalid length. [ 1179.266153][ T2917] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8597'. [ 1179.289594][ T2922] netlink: 5 bytes leftover after parsing attributes in process `syz.0.8599'. [ 1179.290612][ T2903] tipc: Resetting bearer [ 1179.329370][ T2903] tipc: Disabling bearer [ 1179.348396][ T2922] A link change request failed with some changes committed already. Interface 30 may have been left with an inconsistent configuration, please check. [ 1179.431001][ T2928] FAULT_INJECTION: forcing a failure. [ 1179.431001][ T2928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1179.460017][ T2928] CPU: 0 UID: 0 PID: 2928 Comm: syz.4.8600 Not tainted syzkaller #0 PREEMPT(full) [ 1179.460051][ T2928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1179.460064][ T2928] Call Trace: [ 1179.460073][ T2928] [ 1179.460084][ T2928] dump_stack_lvl+0xe8/0x150 [ 1179.460119][ T2928] should_fail_ex+0x414/0x560 [ 1179.460170][ T2928] _copy_from_user+0x2d/0xb0 [ 1179.460200][ T2928] ___sys_sendmsg+0x158/0x2a0 [ 1179.460244][ T2928] ? __pfx____sys_sendmsg+0x10/0x10 [ 1179.460278][ T2928] ? kstrtouint+0x6e/0xe0 [ 1179.460338][ T2928] ? __fget_files+0x2a/0x420 [ 1179.460364][ T2928] ? __fget_files+0x3a0/0x420 [ 1179.460401][ T2928] __sys_sendmmsg+0x227/0x430 [ 1179.460433][ T2928] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1179.460457][ T2928] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1179.460510][ T2928] ? ksys_write+0x22a/0x250 [ 1179.460532][ T2928] ? __pfx_ksys_write+0x10/0x10 [ 1179.460561][ T2928] __x64_sys_sendmmsg+0xa0/0xc0 [ 1179.460590][ T2928] do_syscall_64+0xec/0xf80 [ 1179.460617][ T2928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.460636][ T2928] ? trace_irq_disable+0x37/0x100 [ 1179.460663][ T2928] ? clear_bhb_loop+0x60/0xb0 [ 1179.460688][ T2928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.460710][ T2928] RIP: 0033:0x7f336058f749 [ 1179.460731][ T2928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1179.460752][ T2928] RSP: 002b:00007f3361478038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1179.460777][ T2928] RAX: ffffffffffffffda RBX: 00007f33607e6090 RCX: 00007f336058f749 [ 1179.460794][ T2928] RDX: 0000000000000001 RSI: 0000200000005880 RDI: 0000000000000004 [ 1179.460807][ T2928] RBP: 00007f3361478090 R08: 0000000000000000 R09: 0000000000000000 [ 1179.460821][ T2928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1179.460834][ T2928] R13: 00007f33607e6128 R14: 00007f33607e6090 R15: 00007ffeea993c98 [ 1179.460868][ T2928] [ 1179.758517][ T2932] netlink: 'syz.3.8603': attribute type 10 has an invalid length. [ 1179.775883][ T2932] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1179.818216][ T2937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8605'. [ 1180.021673][ T2946] netlink: 'syz.6.8609': attribute type 2 has an invalid length. [ 1180.041301][ T2946] : entered promiscuous mode [ 1180.930146][ T2977] lo speed is unknown, defaulting to 1000 [ 1180.947559][ T2977] wg1 speed is unknown, defaulting to 1000 [ 1181.597561][ T2977] wg1 speed is unknown, defaulting to 1000 [ 1181.913799][ T3010] vlan4: entered promiscuous mode [ 1181.929830][ T3013] FAULT_INJECTION: forcing a failure. [ 1181.929830][ T3013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1181.930322][ T3010] macvtap0: entered promiscuous mode [ 1181.968336][ T3013] CPU: 0 UID: 0 PID: 3013 Comm: syz.4.8628 Not tainted syzkaller #0 PREEMPT(full) [ 1181.968369][ T3013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1181.968384][ T3013] Call Trace: [ 1181.968394][ T3013] [ 1181.968404][ T3013] dump_stack_lvl+0xe8/0x150 [ 1181.968440][ T3013] should_fail_ex+0x414/0x560 [ 1181.968483][ T3013] _copy_from_user+0x2d/0xb0 [ 1181.968512][ T3013] ___sys_sendmsg+0x158/0x2a0 [ 1181.968545][ T3013] ? __pfx____sys_sendmsg+0x10/0x10 [ 1181.968614][ T3013] ? __fget_files+0x2a/0x420 [ 1181.968643][ T3013] ? __fget_files+0x3a0/0x420 [ 1181.968683][ T3013] __x64_sys_sendmsg+0x19b/0x260 [ 1181.968716][ T3013] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1181.968754][ T3013] ? __pfx_ksys_write+0x10/0x10 [ 1181.968789][ T3013] do_syscall_64+0xec/0xf80 [ 1181.968815][ T3013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.968835][ T3013] ? trace_irq_disable+0x37/0x100 [ 1181.968864][ T3013] ? clear_bhb_loop+0x60/0xb0 [ 1181.968891][ T3013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.968912][ T3013] RIP: 0033:0x7f336058f749 [ 1181.968940][ T3013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1181.968958][ T3013] RSP: 002b:00007f3361499038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1181.968982][ T3013] RAX: ffffffffffffffda RBX: 00007f33607e5fa0 RCX: 00007f336058f749 [ 1181.968998][ T3013] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 1181.969012][ T3013] RBP: 00007f3361499090 R08: 0000000000000000 R09: 0000000000000000 [ 1181.969027][ T3013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1181.969040][ T3013] R13: 00007f33607e6038 R14: 00007f33607e5fa0 R15: 00007ffeea993c98 [ 1181.969076][ T3013] [ 1182.691008][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1182.758829][ T3039] pimreg3: entered allmulticast mode [ 1183.372619][ T3058] bond0: entered promiscuous mode [ 1183.399708][ T3058] bond_slave_0: entered promiscuous mode [ 1183.476326][ T3058] bond_slave_1: entered promiscuous mode [ 1183.517180][ T3058] bridge0: entered promiscuous mode [ 1183.530835][ T3058] bond0: left promiscuous mode [ 1183.566677][ T3058] bond_slave_0: left promiscuous mode [ 1183.574909][ T3058] bond_slave_1: left promiscuous mode [ 1183.587618][ T3058] bridge0: left promiscuous mode [ 1183.855767][ T3072] tipc: Enabled bearer , priority 0 [ 1183.863860][ T3072] syzkaller0: entered promiscuous mode [ 1183.869774][ T3072] syzkaller0: entered allmulticast mode [ 1183.931013][ T3071] tipc: Resetting bearer [ 1184.002727][ T3071] tipc: Disabling bearer [ 1184.026607][ T3076] netlink: 'syz.5.8646': attribute type 10 has an invalid length. [ 1184.034759][ T3076] __nla_validate_parse: 5 callbacks suppressed [ 1184.034780][ T3076] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8646'. [ 1184.052517][ T3082] netlink: 5 bytes leftover after parsing attributes in process `syz.4.8648'. [ 1184.068780][ T3082] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1184.195044][ T3086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8650'. [ 1184.737648][ T3112] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8660'. [ 1184.808742][ T3110] netlink: 'syz.6.8659': attribute type 10 has an invalid length. [ 1184.872663][ T3110] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8659'. [ 1185.064717][ T3119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8664'. [ 1185.092672][ T3117] netlink: 5 bytes leftover after parsing attributes in process `syz.3.8662'. [ 1185.103181][ T3117] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1186.001127][ T3136] openvswitch: netlink: Flow actions attr not present in new flow. [ 1186.782230][ T3159] netlink: 5 bytes leftover after parsing attributes in process `syz.4.8676'. [ 1186.875783][ T3159] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1187.237795][ T3192] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.8688'. [ 1187.344840][ T3199] xt_HMARK: spi-set and port-set can't be combined [ 1187.430971][ T3207] netlink: 7060 bytes leftover after parsing attributes in process `syz.0.8691'. [ 1187.477199][ T3209] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1187.601734][ T3211] IPv6: sit1: Disabled Multicast RS [ 1187.625689][ T3211] sit1: entered allmulticast mode [ 1187.889251][ T3228] netlink: 'syz.3.8699': attribute type 2 has an invalid length. [ 1188.106531][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5410 ms [ 1188.114686][ C0] lec:lec_tx_timeout: lec0 [ 1188.149964][ T3234] lo speed is unknown, defaulting to 1000 [ 1188.214609][ T3236] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1188.226210][ T3234] wg1 speed is unknown, defaulting to 1000 [ 1188.576303][ T3234] wg1 speed is unknown, defaulting to 1000 [ 1188.778012][ T3256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1189.048477][ T3271] netlink: 'syz.5.8710': attribute type 1 has an invalid length. [ 1189.083197][ T3271] netlink: 'syz.5.8710': attribute type 2 has an invalid length. [ 1189.339053][ T3280] netlink: 'syz.6.8714': attribute type 2 has an invalid length. [ 1189.365613][ T3282] netem: incorrect ge model size [ 1189.378939][ T3282] netem: change failed [ 1189.421603][ T3286] __nla_validate_parse: 7 callbacks suppressed [ 1189.421626][ T3286] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8714'. [ 1189.710244][ T3301] lo speed is unknown, defaulting to 1000 [ 1189.735351][ T3301] wg1 speed is unknown, defaulting to 1000 [ 1189.889284][ T3308] netlink: 'syz.5.8724': attribute type 10 has an invalid length. [ 1189.898225][ T3308] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8724'. [ 1190.054417][ T3315] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8728'. [ 1190.079252][ T3320] netlink: 'syz.4.8729': attribute type 2 has an invalid length. [ 1190.220505][ T3320] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8729'. [ 1190.559454][ T3301] wg1 speed is unknown, defaulting to 1000 [ 1190.608691][ T3339] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8734'. [ 1191.232859][ T3351] netlink: 'syz.6.8737': attribute type 10 has an invalid length. [ 1191.244418][ T3351] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8737'. [ 1191.394852][ T3364] netlink: 'syz.6.8742': attribute type 2 has an invalid length. [ 1191.482718][ T3369] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8742'. [ 1191.493462][ T3363] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8741'. [ 1191.936335][ T3385] FAULT_INJECTION: forcing a failure. [ 1191.936335][ T3385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1192.001624][ T3385] CPU: 1 UID: 0 PID: 3385 Comm: syz.3.8748 Not tainted syzkaller #0 PREEMPT(full) [ 1192.001656][ T3385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1192.001671][ T3385] Call Trace: [ 1192.001680][ T3385] [ 1192.001691][ T3385] dump_stack_lvl+0xe8/0x150 [ 1192.001735][ T3385] should_fail_ex+0x414/0x560 [ 1192.001777][ T3385] _copy_from_user+0x2d/0xb0 [ 1192.001807][ T3385] __sys_bpf+0x1e3/0x860 [ 1192.001841][ T3385] ? __pfx___sys_bpf+0x10/0x10 [ 1192.001890][ T3385] ? ksys_write+0x22a/0x250 [ 1192.001915][ T3385] ? __pfx_ksys_write+0x10/0x10 [ 1192.001945][ T3385] __x64_sys_bpf+0x7c/0x90 [ 1192.001974][ T3385] do_syscall_64+0xec/0xf80 [ 1192.002002][ T3385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.002023][ T3385] ? trace_irq_disable+0x37/0x100 [ 1192.002052][ T3385] ? clear_bhb_loop+0x60/0xb0 [ 1192.002079][ T3385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.002101][ T3385] RIP: 0033:0x7fe3d278f749 [ 1192.002121][ T3385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1192.002141][ T3385] RSP: 002b:00007fe3d366c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1192.002164][ T3385] RAX: ffffffffffffffda RBX: 00007fe3d29e5fa0 RCX: 00007fe3d278f749 [ 1192.002181][ T3385] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1192.002196][ T3385] RBP: 00007fe3d366c090 R08: 0000000000000000 R09: 0000000000000000 [ 1192.002210][ T3385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1192.002224][ T3385] R13: 00007fe3d29e6038 R14: 00007fe3d29e5fa0 R15: 00007fff89ae61a8 [ 1192.002261][ T3385] [ 1192.303932][ T3407] tipc: Enabling of bearer rejected, failed to enable media [ 1192.594176][ T3426] netlink: 'syz.5.8757': attribute type 2 has an invalid length. [ 1192.724900][ T3430] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8757'. [ 1193.119364][ T3439] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8760'. [ 1193.739966][ T3455] syzkaller0: entered promiscuous mode [ 1193.745618][ T3455] syzkaller0: entered allmulticast mode [ 1193.913412][ T3465] syzkaller0: entered promiscuous mode [ 1193.919293][ T3465] syzkaller0: entered allmulticast mode [ 1196.575018][ T3500] netlink: 'syz.6.8771': attribute type 2 has an invalid length. [ 1198.479005][ T3484] tipc: Enabling of bearer rejected, failed to enable media [ 1198.720920][ T3513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8773'. [ 1198.802935][T22001] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1199.257557][T22001] bond8 (unregistering): (slave erspan1): Releasing active interface [ 1199.265784][T22001] erspan1 (unregistering): left promiscuous mode [ 1199.413521][T22001] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 1199.424305][T22001] gretap1 (unregistering): left promiscuous mode [ 1199.431210][T22001] gretap1 (unregistering): left allmulticast mode [ 1200.106788][T27240] Bluetooth: hci3: command 0x0406 tx timeout [ 1200.245857][T22001] bond0 (unregistering): Released all slaves [ 1200.383596][T22001] bond1 (unregistering): Released all slaves [ 1200.531122][T22001] bond2 (unregistering): Released all slaves [ 1200.662314][T22001] bond3 (unregistering): Released all slaves [ 1200.801875][T22001] bond4 (unregistering): Released all slaves [ 1200.951061][T22001] bond5 (unregistering): Released all slaves [ 1200.965008][T22001] bond6 (unregistering): Released all slaves [ 1201.110372][T22001] bond7 (unregistering): Released all slaves [ 1201.238593][T22001] bond8 (unregistering): Released all slaves [ 1201.460559][T22001] : left promiscuous mode [ 1201.696793][ T3558] syzkaller0: entered promiscuous mode [ 1201.713206][ T3558] syzkaller0: entered allmulticast mode [ 1201.720906][T22001] tipc: Left network mode [ 1201.725515][ T3564] tipc: Enabling of bearer rejected, failed to enable media [ 1201.854868][ T3570] netlink: 92 bytes leftover after parsing attributes in process `syz.5.8787'. [ 1203.224992][ T3582] netlink: 'syz.4.8789': attribute type 11 has an invalid length. [ 1204.182997][ T3595] netlink: 'syz.0.8792': attribute type 3 has an invalid length. [ 1204.199226][ T3597] netlink: 5 bytes leftover after parsing attributes in process `syz.4.8793'. [ 1204.234154][ T3597] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1204.419605][ T3604] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8795'. [ 1204.916191][ T3621] netlink: 5 bytes leftover after parsing attributes in process `syz.5.8800'. [ 1205.023147][T22001] hsr_slave_0: left promiscuous mode [ 1205.040194][T22001] hsr_slave_1: left promiscuous mode [ 1205.165661][ T3630] netlink: 92 bytes leftover after parsing attributes in process `syz.3.8802'. [ 1206.474020][ T3621] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1206.490787][ T3623] tipc: Enabling of bearer rejected, already enabled [ 1206.500103][ T3631] netlink: 'syz.4.8797': attribute type 11 has an invalid length. [ 1206.510083][ T3631] netlink: 'syz.4.8797': attribute type 11 has an invalid length. [ 1206.518220][ T3631] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8797'. [ 1206.528752][ T3631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1206.579867][ T3626] batadv0: entered promiscuous mode [ 1206.591110][ T3626] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1206.817457][ T3647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8806'. [ 1206.895393][ T3644] syzkaller0: entered promiscuous mode [ 1206.915678][ T3644] syzkaller0: entered allmulticast mode [ 1207.005727][ T3660] netlink: 'syz.3.8809': attribute type 5 has an invalid length. [ 1207.087176][ T3665] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8809'. [ 1207.143044][ T3668] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8809'. [ 1207.180773][ T3672] netlink: 'syz.4.8810': attribute type 13 has an invalid length. [ 1210.226020][ T3672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1210.743000][ T3674] veth4: entered allmulticast mode [ 1210.799331][ T3549] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.807181][ T3689] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1210.823147][T22001] IPVS: stop unused estimator thread 0... [ 1210.848343][ T3689] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1210.858323][ T3549] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.874943][ T3689] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1210.886361][ T3549] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.895941][ T3549] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.969622][ T3705] netlink: 92 bytes leftover after parsing attributes in process `syz.4.8815'. [ 1211.234889][ T3717] FAULT_INJECTION: forcing a failure. [ 1211.234889][ T3717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1211.250813][ T3717] CPU: 0 UID: 0 PID: 3717 Comm: syz.3.8818 Not tainted syzkaller #0 PREEMPT(full) [ 1211.250841][ T3717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1211.250853][ T3717] Call Trace: [ 1211.250861][ T3717] [ 1211.250871][ T3717] dump_stack_lvl+0xe8/0x150 [ 1211.250900][ T3717] should_fail_ex+0x414/0x560 [ 1211.250934][ T3717] _copy_from_user+0x2d/0xb0 [ 1211.250957][ T3717] ___sys_sendmsg+0x158/0x2a0 [ 1211.250985][ T3717] ? __pfx____sys_sendmsg+0x10/0x10 [ 1211.251043][ T3717] ? __fget_files+0x2a/0x420 [ 1211.251066][ T3717] ? __fget_files+0x3a0/0x420 [ 1211.251098][ T3717] __x64_sys_sendmsg+0x19b/0x260 [ 1211.251123][ T3717] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1211.251155][ T3717] ? __pfx_ksys_write+0x10/0x10 [ 1211.251184][ T3717] do_syscall_64+0xec/0xf80 [ 1211.251205][ T3717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.251222][ T3717] ? trace_irq_disable+0x37/0x100 [ 1211.251254][ T3717] ? clear_bhb_loop+0x60/0xb0 [ 1211.251276][ T3717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.251294][ T3717] RIP: 0033:0x7fe3d278f749 [ 1211.251311][ T3717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1211.251328][ T3717] RSP: 002b:00007fe3d364b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1211.251348][ T3717] RAX: ffffffffffffffda RBX: 00007fe3d29e6090 RCX: 00007fe3d278f749 [ 1211.251361][ T3717] RDX: 0000000000000c00 RSI: 0000200000000140 RDI: 0000000000000003 [ 1211.251373][ T3717] RBP: 00007fe3d364b090 R08: 0000000000000000 R09: 0000000000000000 [ 1211.251384][ T3717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1211.251395][ T3717] R13: 00007fe3d29e6128 R14: 00007fe3d29e6090 R15: 00007fff89ae61a8 [ 1211.251424][ T3717] [ 1211.609715][T22001] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 1211.620268][T22001] gretap1 (unregistering): left promiscuous mode [ 1211.627042][T22001] gretap1 (unregistering): left allmulticast mode [ 1212.357802][T22001] bond0 (unregistering): Released all slaves [ 1212.499874][T22001] bond1 (unregistering): Released all slaves [ 1212.639810][T22001] bond2 (unregistering): Released all slaves [ 1212.772023][T22001] bond3 (unregistering): Released all slaves [ 1212.902746][T22001] bond4 (unregistering): Released all slaves [ 1213.034162][T22001] bond5 (unregistering): Released all slaves [ 1213.180673][T22001] bond6 (unregistering): Released all slaves [ 1213.322025][T22001] bond7 (unregistering): Released all slaves [ 1213.469886][T22001] bond8 (unregistering): Released all slaves [ 1213.607781][T22001] bond9 (unregistering): (slave veth5): Releasing backup interface [ 1213.617103][T22001] bond9 (unregistering): Released all slaves [ 1213.749243][T22001] bond10 (unregistering): Released all slaves [ 1213.873815][T22001] bond11 (unregistering): Released all slaves [ 1213.899115][ T3702] netlink: 'syz.5.8814': attribute type 10 has an invalid length. [ 1213.907366][ T3702] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8814'. [ 1213.922828][ T3710] tipc: Enabling of bearer rejected, failed to enable media [ 1214.059146][T22001] : left promiscuous mode [ 1214.143903][ T3726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8822'. [ 1214.193712][ T3726] netlink: 348 bytes leftover after parsing attributes in process `syz.4.8822'. [ 1214.259488][ T3726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8822'. [ 1214.298772][ T3726] netlink: 348 bytes leftover after parsing attributes in process `syz.4.8822'. [ 1214.349791][ T3739] wg1: entered promiscuous mode [ 1214.363914][ T3739] wg1: entered allmulticast mode [ 1214.369159][T22001] tipc: Left network mode [ 1214.376242][ T3726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8822'. [ 1214.538553][ T3745] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8824'. [ 1214.616705][ T3748] FAULT_INJECTION: forcing a failure. [ 1214.616705][ T3748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1214.648522][ T3740] syzkaller0: entered promiscuous mode [ 1214.654170][ T3748] CPU: 0 UID: 0 PID: 3748 Comm: syz.4.8826 Not tainted syzkaller #0 PREEMPT(full) [ 1214.654203][ T3748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1214.654218][ T3748] Call Trace: [ 1214.654228][ T3748] [ 1214.654238][ T3748] dump_stack_lvl+0xe8/0x150 [ 1214.654273][ T3748] should_fail_ex+0x414/0x560 [ 1214.654316][ T3748] _copy_to_user+0x31/0xb0 [ 1214.654347][ T3748] __htab_map_lookup_and_delete_batch+0x103f/0x13b0 [ 1214.654418][ T3748] ? __pfx___htab_map_lookup_and_delete_batch+0x10/0x10 [ 1214.654458][ T3748] ? __pfx_htab_map_lookup_and_delete_batch+0x10/0x10 [ 1214.654484][ T3748] bpf_map_do_batch+0x44f/0x630 [ 1214.654526][ T3748] __sys_bpf+0x778/0x860 [ 1214.654560][ T3748] ? __pfx___sys_bpf+0x10/0x10 [ 1214.654609][ T3748] ? ksys_write+0x22a/0x250 [ 1214.654635][ T3748] ? __pfx_ksys_write+0x10/0x10 [ 1214.654665][ T3748] __x64_sys_bpf+0x7c/0x90 [ 1214.654702][ T3748] do_syscall_64+0xec/0xf80 [ 1214.654730][ T3748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.654750][ T3748] ? trace_irq_disable+0x37/0x100 [ 1214.654778][ T3748] ? clear_bhb_loop+0x60/0xb0 [ 1214.654804][ T3748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.654824][ T3748] RIP: 0033:0x7f336058f749 [ 1214.654861][ T3748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1214.654880][ T3748] RSP: 002b:00007f3361499038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1214.654902][ T3748] RAX: ffffffffffffffda RBX: 00007f33607e5fa0 RCX: 00007f336058f749 [ 1214.654917][ T3748] RDX: 0000000000000038 RSI: 0000200000000800 RDI: 0000000000000019 [ 1214.654932][ T3748] RBP: 00007f3361499090 R08: 0000000000000000 R09: 0000000000000000 [ 1214.654946][ T3748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1214.654958][ T3748] R13: 00007f33607e6038 R14: 00007f33607e5fa0 R15: 00007ffeea993c98 [ 1214.654995][ T3748] [ 1214.848155][ T3740] syzkaller0: entered allmulticast mode [ 1214.878018][ T3742] tipc: Enabling of bearer rejected, failed to enable media [ 1215.225271][ T3761] netlink: 5 bytes leftover after parsing attributes in process `syz.0.8831'. [ 1217.480840][ T3761] A link change request failed with some changes committed already. Interface 30 may have been left with an inconsistent configuration, please check. [ 1217.504825][ T3777] syzkaller0: entered promiscuous mode [ 1217.517300][ T3777] syzkaller0: entered allmulticast mode [ 1217.692575][ T3788] vlan4: entered promiscuous mode [ 1217.699218][ T3788] geneve1: entered promiscuous mode [ 1217.704678][ T3788] vlan4: entered allmulticast mode [ 1217.717700][ T3788] geneve1: entered allmulticast mode [ 1217.836012][ T3800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8838'. [ 1217.968358][ T3808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8840'. [ 1218.118747][T22001] hsr_slave_0: left promiscuous mode [ 1218.147605][T22001] hsr_slave_1: left promiscuous mode [ 1218.593288][ T3824] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8843'. [ 1219.811667][ T3821] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1219.821919][ T3821] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1219.831866][ T3821] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1219.851126][ T3842] netem: incorrect ge model size [ 1219.860330][ T3842] netem: change failed [ 1219.992325][ T3849] syzkaller0: entered promiscuous mode [ 1220.010046][ T3849] syzkaller0: entered allmulticast mode [ 1220.175275][ T3871] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8852'. [ 1222.087368][ T3856] tipc: Enabling of bearer rejected, failed to enable media [ 1222.098434][ T3875] netlink: 'syz.5.8853': attribute type 10 has an invalid length. [ 1222.117808][ T3875] netlink: 228 bytes leftover after parsing attributes in process `syz.5.8853'. [ 1222.348479][ T3886] netlink: 'syz.5.8858': attribute type 2 has an invalid length. [ 1222.447997][ T3894] netlink: 'syz.3.8856': attribute type 1 has an invalid length. [ 1222.470212][ T3895] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8857'. [ 1222.494454][ T3896] netlink: 'syz.5.8858': attribute type 6 has an invalid length. [ 1222.536030][ T3894] netlink: 'syz.3.8856': attribute type 2 has an invalid length. [ 1222.759870][ T3880] wg1: left promiscuous mode [ 1222.777130][ T3880] wg1: left allmulticast mode [ 1222.789773][ T3912] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8858'. [ 1222.922071][ T3880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1223.114744][ T3880] vlan2: left allmulticast mode [ 1223.126870][ T3880] veth1: left allmulticast mode [ 1223.157910][ T3880] bond5: left promiscuous mode [ 1223.162772][ T3880] erspan1: left promiscuous mode [ 1223.176077][ T3880] bond5: left allmulticast mode [ 1223.185298][ T3880] erspan1: left allmulticast mode [ 1223.223299][ T3895] bond0: invalid ARP target 0.0.0.0 specified for addition [ 1223.247255][ T3895] bond0: option arp_ip_target: invalid value (0) [ 1223.272524][ T3893] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1223.287351][ T1134] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.307305][ T3893] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1223.325718][ T1134] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.345399][ T3893] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1223.354531][ T1134] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.441924][ T1134] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.483742][T22001] IPVS: stop unused estimator thread 0... [ 1223.503535][ T3923] netlink: 'syz.0.8864': attribute type 1 has an invalid length. [ 1223.533836][ T3925] FAULT_INJECTION: forcing a failure. [ 1223.533836][ T3925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1223.552941][ T3925] CPU: 0 UID: 0 PID: 3925 Comm: syz.5.8862 Not tainted syzkaller #0 PREEMPT(full) [ 1223.552975][ T3925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1223.552990][ T3925] Call Trace: [ 1223.553000][ T3925] [ 1223.553010][ T3925] dump_stack_lvl+0xe8/0x150 [ 1223.553046][ T3925] should_fail_ex+0x414/0x560 [ 1223.553088][ T3925] _copy_from_user+0x2d/0xb0 [ 1223.553118][ T3925] ___sys_sendmsg+0x158/0x2a0 [ 1223.553152][ T3925] ? __pfx____sys_sendmsg+0x10/0x10 [ 1223.553222][ T3925] ? __fget_files+0x2a/0x420 [ 1223.553250][ T3925] ? __fget_files+0x3a0/0x420 [ 1223.553289][ T3925] __x64_sys_sendmsg+0x19b/0x260 [ 1223.553322][ T3925] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1223.553362][ T3925] ? __pfx_ksys_write+0x10/0x10 [ 1223.553396][ T3925] do_syscall_64+0xec/0xf80 [ 1223.553424][ T3925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.553446][ T3925] ? trace_irq_disable+0x37/0x100 [ 1223.553475][ T3925] ? clear_bhb_loop+0x60/0xb0 [ 1223.553503][ T3925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.553525][ T3925] RIP: 0033:0x7f1337f8f749 [ 1223.553546][ T3925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1223.553566][ T3925] RSP: 002b:00007f1338eb9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1223.553591][ T3925] RAX: ffffffffffffffda RBX: 00007f13381e6090 RCX: 00007f1337f8f749 [ 1223.553608][ T3925] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000007 [ 1223.553625][ T3925] RBP: 00007f1338eb9090 R08: 0000000000000000 R09: 0000000000000000 [ 1223.553640][ T3925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1223.553654][ T3925] R13: 00007f13381e6128 R14: 00007f13381e6090 R15: 00007ffc1eace058 [ 1223.553688][ T3925] [ 1223.603140][ T3923] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1223.801051][ T3927] bond12: (slave veth7): Enslaving as an active interface with an up link [ 1223.948875][ T3938] netlink: 'syz.0.8866': attribute type 1 has an invalid length. [ 1223.997210][ T3938] bond13: entered promiscuous mode [ 1224.003025][ T3938] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1224.091078][ T3942] syzkaller0: entered promiscuous mode [ 1224.110536][ T3942] syzkaller0: entered allmulticast mode [ 1224.117628][ T3940] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8866'. [ 1224.127845][ T3940] bond13: entered allmulticast mode [ 1224.169362][ T3940] bond13: (slave bridge5): making interface the new active one [ 1224.177527][ T3940] bridge5: entered promiscuous mode [ 1224.182965][ T3940] bridge5: entered allmulticast mode [ 1224.190972][ T3940] bond13: (slave bridge5): Enslaving as an active interface with an up link [ 1224.311378][ T3944] syzkaller0: entered promiscuous mode [ 1224.320712][ T3944] syzkaller0: entered allmulticast mode [ 1224.466374][ T3954] netlink: 'syz.5.8872': attribute type 2 has an invalid length. [ 1224.577920][ T3962] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8870'. [ 1224.603144][ T3964] netlink: 'syz.5.8872': attribute type 6 has an invalid length. [ 1224.654039][ T3966] sctp: [Deprecated]: syz.3.8870 (pid 3966) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1224.654039][ T3966] Use struct sctp_sack_info instead [ 1224.693357][ T3966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8870'. [ 1224.955581][ T3973] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8872'. [ 1226.600246][ T3952] veth0_to_bridge: entered promiscuous mode [ 1226.607264][ T3957] veth0_to_bridge: left promiscuous mode [ 1226.932734][ T3983] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1226.994187][ T3983] bond7: (slave veth7): Enslaving as an active interface with an up link [ 1227.324923][ T4003] lo speed is unknown, defaulting to 1000 [ 1227.334544][ T4003] wg1 speed is unknown, defaulting to 1000 [ 1227.343723][ T4006] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003 [ 1227.535678][ T4011] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8889'. [ 1227.691815][ T4013] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.6.8890:4013 [ 1227.741794][ T4019] syz_tun: entered allmulticast mode [ 1227.765748][ T4019] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8892'. [ 1227.859155][ T4019] syz_tun (unregistering): left allmulticast mode [ 1227.890487][ T4003] wg1 speed is unknown, defaulting to 1000 [ 1227.968515][ T4024] syzkaller0: entered promiscuous mode [ 1227.984918][ T4024] syzkaller0: entered allmulticast mode [ 1228.081099][ T4029] tipc: Enabling of bearer rejected, failed to enable media [ 1228.342464][ T4037] netlink: 'syz.5.8896': attribute type 26 has an invalid length. [ 1228.392713][ T4039] syzkaller0: entered promiscuous mode [ 1228.398455][ T4039] syzkaller0: entered allmulticast mode [ 1229.245112][ T4069] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8901'. [ 1230.970753][ T4051] netlink: 'syz.0.8902': attribute type 10 has an invalid length. [ 1230.979046][ T4051] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8902'. [ 1231.115005][ T4078] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003 [ 1231.220452][ T4075] lo speed is unknown, defaulting to 1000 [ 1231.253893][ T4082] lo speed is unknown, defaulting to 1000 [ 1231.273469][ T4075] wg1 speed is unknown, defaulting to 1000 [ 1231.284842][ T4082] wg1 speed is unknown, defaulting to 1000 [ 1231.410626][ T4090] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003 [ 1231.421420][ T4089] lo speed is unknown, defaulting to 1000 [ 1231.462363][ T4089] wg1 speed is unknown, defaulting to 1000 [ 1231.559352][ T4093] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8910'. [ 1231.584785][ T4075] wg1 speed is unknown, defaulting to 1000 [ 1231.683634][ T4093] netlink: 96 bytes leftover after parsing attributes in process `syz.6.8910'. [ 1231.808771][ T4082] wg1 speed is unknown, defaulting to 1000 [ 1232.273427][ T4089] wg1 speed is unknown, defaulting to 1000 [ 1232.291893][ T4103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8913'. [ 1232.370549][ T4107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8913'. [ 1232.453116][ T4111] netlink: 260 bytes leftover after parsing attributes in process `syz.4.8915'. [ 1232.823101][ T4121] netlink: 212304 bytes leftover after parsing attributes in process `syz.4.8920'. [ 1232.845069][ T4121] FAULT_INJECTION: forcing a failure. [ 1232.845069][ T4121] name failslab, interval 1, probability 0, space 0, times 0 [ 1232.889225][ T4121] CPU: 0 UID: 0 PID: 4121 Comm: syz.4.8920 Not tainted syzkaller #0 PREEMPT(full) [ 1232.889267][ T4121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1232.889283][ T4121] Call Trace: [ 1232.889294][ T4121] [ 1232.889305][ T4121] dump_stack_lvl+0xe8/0x150 [ 1232.889344][ T4121] should_fail_ex+0x414/0x560 [ 1232.889391][ T4121] should_failslab+0xa8/0x100 [ 1232.889424][ T4121] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 1232.889462][ T4121] ? kmem_cache_alloc_noprof+0x3ce/0x710 [ 1232.889496][ T4121] ? __alloc_skb+0x290/0x3b0 [ 1232.889522][ T4121] ? ovs_flow_alloc+0x103/0x1f0 [ 1232.889553][ T4121] ? ovs_flow_alloc+0x24/0x1f0 [ 1232.889593][ T4121] ovs_flow_alloc+0x103/0x1f0 [ 1232.889631][ T4121] ovs_packet_cmd_execute+0x568/0xe70 [ 1232.889683][ T4121] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 1232.889728][ T4121] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1232.889767][ T4121] genl_family_rcv_msg_doit+0x215/0x300 [ 1232.889804][ T4121] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1232.889848][ T4121] ? bpf_lsm_capable+0x9/0x20 [ 1232.889877][ T4121] ? security_capable+0x7e/0x2e0 [ 1232.889914][ T4121] genl_rcv_msg+0x60e/0x790 [ 1232.889949][ T4121] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1232.889975][ T4121] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 1232.890041][ T4121] netlink_rcv_skb+0x208/0x470 [ 1232.890078][ T4121] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1232.890106][ T4121] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1232.890138][ T4121] ? genl_rcv+0x19/0x40 [ 1232.890184][ T4121] ? down_read+0x274/0x2e0 [ 1232.890214][ T4121] ? genl_rcv+0xd/0x40 [ 1232.890241][ T4121] genl_rcv+0x28/0x40 [ 1232.890265][ T4121] netlink_unicast+0x82f/0x9e0 [ 1232.890308][ T4121] ? __pfx_netlink_unicast+0x10/0x10 [ 1232.890342][ T4121] ? netlink_sendmsg+0x642/0xb30 [ 1232.890375][ T4121] ? skb_put+0x11b/0x210 [ 1232.890408][ T4121] netlink_sendmsg+0x805/0xb30 [ 1232.890455][ T4121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1232.890496][ T4121] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1232.890530][ T4121] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1232.890553][ T4121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1232.890590][ T4121] __sock_sendmsg+0x21c/0x270 [ 1232.890632][ T4121] ____sys_sendmsg+0x505/0x820 [ 1232.890670][ T4121] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1232.890714][ T4121] ? import_iovec+0x74/0xa0 [ 1232.890748][ T4121] ___sys_sendmsg+0x21f/0x2a0 [ 1232.890783][ T4121] ? __pfx____sys_sendmsg+0x10/0x10 [ 1232.890860][ T4121] ? __fget_files+0x2a/0x420 [ 1232.890889][ T4121] ? __fget_files+0x3a0/0x420 [ 1232.890933][ T4121] __x64_sys_sendmsg+0x19b/0x260 [ 1232.890968][ T4121] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1232.891019][ T4121] ? __pfx_ksys_write+0x10/0x10 [ 1232.891058][ T4121] do_syscall_64+0xec/0xf80 [ 1232.891087][ T4121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.891111][ T4121] ? trace_irq_disable+0x37/0x100 [ 1232.891143][ T4121] ? clear_bhb_loop+0x60/0xb0 [ 1232.891173][ T4121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.891198][ T4121] RIP: 0033:0x7f336058f749 [ 1232.891219][ T4121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1232.891241][ T4121] RSP: 002b:00007f3361499038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1232.891268][ T4121] RAX: ffffffffffffffda RBX: 00007f33607e5fa0 RCX: 00007f336058f749 [ 1232.891287][ T4121] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1232.891303][ T4121] RBP: 00007f3361499090 R08: 0000000000000000 R09: 0000000000000000 [ 1232.891320][ T4121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1232.891335][ T4121] R13: 00007f33607e6038 R14: 00007f33607e5fa0 R15: 00007ffeea993c98 [ 1232.891377][ T4121] [ 1233.832477][ T4139] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8924'. [ 1233.854968][ T4139] netlink: 'syz.6.8924': attribute type 30 has an invalid length. [ 1234.166359][ T4151] FAULT_INJECTION: forcing a failure. [ 1234.166359][ T4151] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.232238][ T4151] CPU: 1 UID: 0 PID: 4151 Comm: syz.4.8927 Not tainted syzkaller #0 PREEMPT(full) [ 1234.232272][ T4151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1234.232287][ T4151] Call Trace: [ 1234.232298][ T4151] [ 1234.232308][ T4151] dump_stack_lvl+0xe8/0x150 [ 1234.232345][ T4151] should_fail_ex+0x414/0x560 [ 1234.232389][ T4151] should_failslab+0xa8/0x100 [ 1234.232422][ T4151] __kmalloc_node_noprof+0xe7/0x820 [ 1234.232445][ T4151] ? qdisc_create+0x64/0xea0 [ 1234.232469][ T4151] ? lock_acquire+0x107/0x340 [ 1234.232491][ T4151] ? qdisc_alloc+0x92/0x900 [ 1234.232525][ T4151] qdisc_alloc+0x92/0x900 [ 1234.232565][ T4151] qdisc_create+0x12c/0xea0 [ 1234.232595][ T4151] ? nla_strcmp+0xe6/0x140 [ 1234.232626][ T4151] tc_modify_qdisc+0x1547/0x2020 [ 1234.232667][ T4151] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1234.232728][ T4151] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1234.232753][ T4151] rtnetlink_rcv_msg+0x77c/0xb70 [ 1234.232785][ T4151] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1234.232812][ T4151] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1234.232838][ T4151] ? __lock_acquire+0x6b6/0x2cf0 [ 1234.232888][ T4151] netlink_rcv_skb+0x208/0x470 [ 1234.232925][ T4151] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1234.232954][ T4151] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1234.233002][ T4151] ? netlink_deliver_tap+0x2e/0x1b0 [ 1234.233044][ T4151] netlink_unicast+0x82f/0x9e0 [ 1234.233085][ T4151] ? __pfx_netlink_unicast+0x10/0x10 [ 1234.233114][ T4151] ? __alloc_skb+0x198/0x3b0 [ 1234.233141][ T4151] ? netlink_sendmsg+0x642/0xb30 [ 1234.233173][ T4151] ? skb_put+0x11b/0x210 [ 1234.233205][ T4151] netlink_sendmsg+0x805/0xb30 [ 1234.233250][ T4151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1234.233289][ T4151] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1234.233323][ T4151] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1234.233346][ T4151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1234.233382][ T4151] __sock_sendmsg+0x21c/0x270 [ 1234.233421][ T4151] ____sys_sendmsg+0x505/0x820 [ 1234.233459][ T4151] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1234.233501][ T4151] ? import_iovec+0x74/0xa0 [ 1234.233534][ T4151] ___sys_sendmsg+0x21f/0x2a0 [ 1234.233568][ T4151] ? __pfx____sys_sendmsg+0x10/0x10 [ 1234.233641][ T4151] ? __fget_files+0x2a/0x420 [ 1234.233671][ T4151] ? __fget_files+0x3a0/0x420 [ 1234.233712][ T4151] __x64_sys_sendmsg+0x19b/0x260 [ 1234.233746][ T4151] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1234.233788][ T4151] ? __pfx_ksys_write+0x10/0x10 [ 1234.233826][ T4151] do_syscall_64+0xec/0xf80 [ 1234.233855][ T4151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.233878][ T4151] ? trace_irq_disable+0x37/0x100 [ 1234.233917][ T4151] ? clear_bhb_loop+0x60/0xb0 [ 1234.233946][ T4151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.233970][ T4151] RIP: 0033:0x7f336058f749 [ 1234.233991][ T4151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1234.234012][ T4151] RSP: 002b:00007f3361499038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1234.234038][ T4151] RAX: ffffffffffffffda RBX: 00007f33607e5fa0 RCX: 00007f336058f749 [ 1234.234056][ T4151] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 1234.234071][ T4151] RBP: 00007f3361499090 R08: 0000000000000000 R09: 0000000000000000 [ 1234.234086][ T4151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1234.234100][ T4151] R13: 00007f33607e6038 R14: 00007f33607e5fa0 R15: 00007ffeea993c98 [ 1234.234139][ T4151] [ 1234.674041][ T4158] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 1234.802255][ T4166] tipc: Enabling of bearer rejected, failed to enable media [ 1235.004878][ T4173] bond8: entered promiscuous mode [ 1235.010875][ T4173] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1235.297527][ T4195] netem: incorrect ge model size [ 1235.312175][ T4195] netem: change failed [ 1235.317252][ T4196] netlink: 5 bytes leftover after parsing attributes in process `syz.0.8942'. [ 1235.338314][ T4196] A link change request failed with some changes committed already. Interface 30 may have been left with an inconsistent configuration, please check. [ 1235.359529][ T4199] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8943'. [ 1235.648576][ T4205] netlink: 'syz.6.8946': attribute type 10 has an invalid length. [ 1235.662585][ T4205] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8946'. [ 1235.996701][ T4228] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 1236.017755][ T4226] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8952'. [ 1236.058091][ T4226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8952'. [ 1236.129925][ T4231] FAULT_INJECTION: forcing a failure. [ 1236.129925][ T4231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1236.159080][ T4231] CPU: 0 UID: 0 PID: 4231 Comm: syz.6.8953 Not tainted syzkaller #0 PREEMPT(full) [ 1236.159124][ T4231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1236.159139][ T4231] Call Trace: [ 1236.159149][ T4231] [ 1236.159160][ T4231] dump_stack_lvl+0xe8/0x150 [ 1236.159196][ T4231] should_fail_ex+0x414/0x560 [ 1236.159240][ T4231] _copy_from_user+0x2d/0xb0 [ 1236.159271][ T4231] ___sys_recvmsg+0x12e/0x510 [ 1236.159309][ T4231] ? __pfx____sys_recvmsg+0x10/0x10 [ 1236.159385][ T4231] do_recvmmsg+0x307/0x770 [ 1236.159426][ T4231] ? __pfx_do_recvmmsg+0x10/0x10 [ 1236.159473][ T4231] ? kmem_cache_free+0x197/0x620 [ 1236.159496][ T4231] ? do_sys_openat2+0x15a/0x200 [ 1236.159544][ T4231] __x64_sys_recvmmsg+0x190/0x240 [ 1236.159579][ T4231] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1236.159625][ T4231] do_syscall_64+0xec/0xf80 [ 1236.159653][ T4231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.159676][ T4231] ? trace_irq_disable+0x37/0x100 [ 1236.159734][ T4231] ? clear_bhb_loop+0x60/0xb0 [ 1236.159763][ T4231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.159793][ T4231] RIP: 0033:0x7fe4e798f749 [ 1236.159814][ T4231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1236.159835][ T4231] RSP: 002b:00007fe4e8887038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1236.159860][ T4231] RAX: ffffffffffffffda RBX: 00007fe4e7be5fa0 RCX: 00007fe4e798f749 [ 1236.159878][ T4231] RDX: 015cbc1ab4c0933f RSI: 0000200000001980 RDI: 0000000000000004 [ 1236.159895][ T4231] RBP: 00007fe4e8887090 R08: 0000000000000000 R09: 0000000000000000 [ 1236.159910][ T4231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1236.159925][ T4231] R13: 00007fe4e7be6038 R14: 00007fe4e7be5fa0 R15: 00007ffed362dda8 [ 1236.159964][ T4231] [ 1236.355155][ T4233] IPv6: Can't replace route, no match found [ 1236.728974][ T4243] netlink: 'syz.5.8960': attribute type 10 has an invalid length. [ 1236.739862][ T4243] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8960'. [ 1236.748046][ T4256] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003 [ 1236.784593][ T4253] lo speed is unknown, defaulting to 1000 [ 1236.801187][ T4253] wg1 speed is unknown, defaulting to 1000 [ 1237.038057][ T4266] tipc: Enabled bearer , priority 0 [ 1237.059929][ T4266] syzkaller0: entered promiscuous mode [ 1237.076054][ T4266] syzkaller0: entered allmulticast mode [ 1237.102757][ T4268] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8967'. [ 1237.112574][ T4266] tipc: Resetting bearer [ 1237.139956][ T4265] tipc: Resetting bearer [ 1237.197494][ T4265] tipc: Disabling bearer [ 1237.432162][ T4253] wg1 speed is unknown, defaulting to 1000 [ 1237.593978][T27240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1237.628171][T27240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1237.646835][T27240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1237.669782][T27240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1237.677839][T27240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1237.893744][ T4282] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8970'. [ 1238.033756][ T4275] lo speed is unknown, defaulting to 1000 [ 1238.119253][ T4275] wg1 speed is unknown, defaulting to 1000 [ 1238.342885][ T4291] xt_hashlimit: max too large, truncated to 1048576 [ 1238.397145][ T4291] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1238.481297][ T4296] netlink: 5 bytes leftover after parsing attributes in process `syz.0.8975'. [ 1238.513786][ T4294] netlink: 'syz.3.8974': attribute type 4 has an invalid length. [ 1238.524559][ T4291] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8974'. [ 1238.536069][ T4296] A link change request failed with some changes committed already. Interface 30 may have been left with an inconsistent configuration, please check. [ 1238.573096][ T4291] netlink: 'syz.3.8974': attribute type 4 has an invalid length. [ 1238.904251][ T4305] tipc: Enabled bearer , priority 0 [ 1238.927889][ T4305] syzkaller0: entered promiscuous mode [ 1238.933446][ T4305] syzkaller0: entered allmulticast mode [ 1238.975441][ T4310] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003 [ 1238.993393][ T4275] wg1 speed is unknown, defaulting to 1000 [ 1239.053885][ T4308] lo speed is unknown, defaulting to 1000 [ 1239.098733][ T4308] wg1 speed is unknown, defaulting to 1000 [ 1239.447224][ T4304] tipc: Resetting bearer [ 1239.539075][ T4304] tipc: Disabling bearer [ 1239.598174][ T4308] wg1 speed is unknown, defaulting to 1000 [ 1239.611029][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 1239.707205][T27240] Bluetooth: hci0: command tx timeout [ 1239.856197][ T4327] netlink: 'syz.5.8982': attribute type 19 has an invalid length. [ 1239.875995][ T4330] netlink: 'syz.3.8981': attribute type 2 has an invalid length. [ 1239.904123][ T4334] netlink: 'syz.5.8982': attribute type 13 has an invalid length. [ 1239.914770][ T4327] netlink: 'syz.5.8982': attribute type 19 has an invalid length. [ 1239.993402][ T4330] netlink: 'syz.3.8981': attribute type 6 has an invalid length. [ 1240.032922][ T2964] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1240.042300][ T2964] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1240.128427][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.136017][ T4334] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1240.243284][ T4334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1240.424436][ T4333] @: option packets_per_slave: invalid value (65547) [ 1240.432065][ T4333] @: option packets_per_slave: allowed values 0 - 65535 [ 1240.442462][ T4333] @ (unregistering): Released all slaves [ 1240.523253][ T4333] __nla_validate_parse: 5 callbacks suppressed [ 1240.523276][ T4333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8983'. [ 1240.599766][ T2964] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.692812][ T4351] netlink: 5 bytes leftover after parsing attributes in process `syz.3.8986'. [ 1240.699102][ T4333] @: option packets_per_slave: invalid value (65547) [ 1240.733588][ T4333] @: option packets_per_slave: allowed values 0 - 65535 [ 1240.745594][ T4333] @ (unregistering): Released all slaves [ 1240.856074][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.866630][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.874190][ T4275] bridge_slave_0: entered allmulticast mode [ 1240.883553][ T4275] bridge_slave_0: entered promiscuous mode [ 1240.909549][ T2964] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.929699][ T4351] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1240.979807][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 1241.012186][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.022781][ T4275] bridge_slave_1: entered allmulticast mode [ 1241.038767][ T4275] bridge_slave_1: entered promiscuous mode [ 1241.056830][ T2964] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1241.065556][ T2964] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.109908][ T2964] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1241.118852][ T2964] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.202796][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1241.239779][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1241.328246][ T4275] team0: Port device team_slave_0 added [ 1241.355606][ T4275] team0: Port device team_slave_1 added [ 1241.494873][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1241.513361][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1241.558469][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1241.601950][ T4371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8992'. [ 1241.614499][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1241.629410][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1241.657948][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1241.796117][T27240] Bluetooth: hci0: command tx timeout [ 1241.830213][ T4275] hsr_slave_0: entered promiscuous mode [ 1241.839196][ T4275] hsr_slave_1: entered promiscuous mode [ 1242.063919][ T4384] bond0: entered promiscuous mode [ 1242.069453][ T4384] bond_slave_0: entered promiscuous mode [ 1242.075375][ T4384] bond_slave_1: entered promiscuous mode [ 1242.082685][ T4384] dummy0: entered promiscuous mode [ 1242.089191][ T4384] mac80211_hwsim hwsim71 wlan1: entered promiscuous mode [ 1242.102542][ T4384] bond0: left promiscuous mode [ 1242.108184][ T4384] bond_slave_0: left promiscuous mode [ 1242.113979][ T4384] bond_slave_1: left promiscuous mode [ 1242.120583][ T4384] dummy0: left promiscuous mode [ 1242.125831][ T4384] mac80211_hwsim hwsim71 wlan1: left promiscuous mode [ 1242.383596][ T4395] lo speed is unknown, defaulting to 1000 [ 1242.392260][ T4395] wg1 speed is unknown, defaulting to 1000 [ 1242.412153][ T4401] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003 [ 1242.920939][ T4395] wg1 speed is unknown, defaulting to 1000 [ 1243.344614][ T4275] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1243.358646][ T4275] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1243.409224][ T4427] netlink: 'syz.3.9006': attribute type 2 has an invalid length. [ 1243.425652][ T4275] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1243.562053][ T4431] netlink: 'syz.3.9006': attribute type 6 has an invalid length. [ 1243.622831][ T4275] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1243.700597][ T4431] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9006'. [ 1243.867059][T27240] Bluetooth: hci0: command tx timeout [ 1244.116345][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1244.137071][ T4448] netlink: 'syz.0.9009': attribute type 1 has an invalid length. [ 1244.291334][ T4447] netlink: 136 bytes leftover after parsing attributes in process `syz.0.9009'. [ 1244.379225][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1244.407860][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 1244.442149][ T871] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.449494][ T871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1244.479645][ T871] bridge0: port 2(bridge_slave_1) entered blocking state [ 1244.486906][ T871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1244.560834][ T4453] tipc: Enabling of bearer rejected, already enabled [ 1244.758590][ T4460] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003 [ 1244.790520][ T4456] lo speed is unknown, defaulting to 1000 [ 1244.800978][ T4456] wg1 speed is unknown, defaulting to 1000 [ 1245.180881][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1245.521003][ T4477] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1245.720064][ T4456] wg1 speed is unknown, defaulting to 1000 [ 1245.790627][ T4484] FAULT_INJECTION: forcing a failure. [ 1245.790627][ T4484] name failslab, interval 1, probability 0, space 0, times 0 [ 1245.803708][ T4484] CPU: 1 UID: 0 PID: 4484 Comm: syz.3.9017 Not tainted syzkaller #0 PREEMPT(full) [ 1245.803741][ T4484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1245.803756][ T4484] Call Trace: [ 1245.803765][ T4484] [ 1245.803775][ T4484] dump_stack_lvl+0xe8/0x150 [ 1245.803810][ T4484] should_fail_ex+0x414/0x560 [ 1245.803853][ T4484] should_failslab+0xa8/0x100 [ 1245.803884][ T4484] __kvmalloc_node_noprof+0x175/0x920 [ 1245.803920][ T4484] ? alloc_netdev_mqs+0xa4b/0x11b0 [ 1245.803963][ T4484] alloc_netdev_mqs+0xa4b/0x11b0 [ 1245.804007][ T4484] rtnl_create_link+0x31f/0xcf0 [ 1245.804038][ T4484] rtnl_newlink_create+0x25c/0xb00 [ 1245.804076][ T4484] ? __mutex_lock+0x5bb/0x1350 [ 1245.804112][ T4484] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1245.804146][ T4484] ? __pfx___mutex_lock+0x10/0x10 [ 1245.804189][ T4484] ? ns_capable+0x8a/0xf0 [ 1245.804218][ T4484] rtnl_newlink+0x16e7/0x1c90 [ 1245.804265][ T4484] ? __pfx_rtnl_newlink+0x10/0x10 [ 1245.804295][ T4484] ? __lock_acquire+0x6b6/0x2cf0 [ 1245.804328][ T4484] ? __lock_acquire+0x6b6/0x2cf0 [ 1245.804355][ T4484] ? __lock_acquire+0x6b6/0x2cf0 [ 1245.804391][ T4484] ? unwind_next_frame+0xa5/0x23d0 [ 1245.804428][ T4484] ? unwind_next_frame+0xa5/0x23d0 [ 1245.804459][ T4484] ? is_bpf_text_address+0x26/0x2b0 [ 1245.804509][ T4484] ? __lock_acquire+0x6b6/0x2cf0 [ 1245.804537][ T4484] ? is_bpf_text_address+0x292/0x2b0 [ 1245.804571][ T4484] ? is_bpf_text_address+0x26/0x2b0 [ 1245.804609][ T4484] ? kernel_text_address+0xa5/0xe0 [ 1245.804644][ T4484] ? __kernel_text_address+0xd/0x40 [ 1245.804677][ T4484] ? unwind_get_return_address+0x4d/0x90 [ 1245.804716][ T4484] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1245.804762][ T4484] ? __pfx_rtnl_newlink+0x10/0x10 [ 1245.804790][ T4484] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1245.804822][ T4484] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1245.804848][ T4484] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1245.804875][ T4484] ? __lock_acquire+0x6b6/0x2cf0 [ 1245.804924][ T4484] netlink_rcv_skb+0x208/0x470 [ 1245.804960][ T4484] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1245.804990][ T4484] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1245.805038][ T4484] ? netlink_deliver_tap+0x2e/0x1b0 [ 1245.805081][ T4484] netlink_unicast+0x82f/0x9e0 [ 1245.805123][ T4484] ? __pfx_netlink_unicast+0x10/0x10 [ 1245.805151][ T4484] ? __alloc_skb+0x198/0x3b0 [ 1245.805179][ T4484] ? netlink_sendmsg+0x642/0xb30 [ 1245.805211][ T4484] ? skb_put+0x11b/0x210 [ 1245.805242][ T4484] netlink_sendmsg+0x805/0xb30 [ 1245.805286][ T4484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1245.805325][ T4484] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1245.805358][ T4484] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1245.805380][ T4484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1245.805416][ T4484] __sock_sendmsg+0x21c/0x270 [ 1245.805457][ T4484] ____sys_sendmsg+0x505/0x820 [ 1245.805494][ T4484] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1245.805536][ T4484] ? import_iovec+0x74/0xa0 [ 1245.805570][ T4484] ___sys_sendmsg+0x21f/0x2a0 [ 1245.805603][ T4484] ? __pfx____sys_sendmsg+0x10/0x10 [ 1245.805678][ T4484] ? __fget_files+0x2a/0x420 [ 1245.805708][ T4484] ? __fget_files+0x3a0/0x420 [ 1245.805750][ T4484] __x64_sys_sendmsg+0x19b/0x260 [ 1245.805784][ T4484] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1245.805827][ T4484] ? __pfx_ksys_write+0x10/0x10 [ 1245.805865][ T4484] do_syscall_64+0xec/0xf80 [ 1245.805892][ T4484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.805924][ T4484] ? trace_irq_disable+0x37/0x100 [ 1245.805954][ T4484] ? clear_bhb_loop+0x60/0xb0 [ 1245.805983][ T4484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.806007][ T4484] RIP: 0033:0x7fe3d278f749 [ 1245.806029][ T4484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1245.806050][ T4484] RSP: 002b:00007fe3d366c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1245.806076][ T4484] RAX: ffffffffffffffda RBX: 00007fe3d29e5fa0 RCX: 00007fe3d278f749 [ 1245.806095][ T4484] RDX: 0000000000004040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1245.806111][ T4484] RBP: 00007fe3d366c090 R08: 0000000000000000 R09: 0000000000000000 [ 1245.806126][ T4484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1245.806141][ T4484] R13: 00007fe3d29e6038 R14: 00007fe3d29e5fa0 R15: 00007fff89ae61a8 [ 1245.806181][ T4484] [ 1245.946969][T27240] Bluetooth: hci0: command tx timeout [ 1246.317888][ T4487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9018'. [ 1246.494401][ T4495] netlink: 47 bytes leftover after parsing attributes in process `syz.3.9021'. [ 1246.640951][ T4275] veth0_vlan: entered promiscuous mode [ 1246.688242][ T4275] veth1_vlan: entered promiscuous mode [ 1247.121618][ T4275] veth0_macvtap: entered promiscuous mode [ 1247.137007][ T4275] veth1_macvtap: entered promiscuous mode [ 1247.192452][ T4505] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9023'. [ 1247.201875][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1247.253477][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1247.428124][ T4509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1247.438894][ T4509] 8021q: adding VLAN 0 to HW filter on device team0 [ 1247.467436][ T4509] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1247.493721][T21931] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.572932][T21931] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.603145][T21931] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.659403][T21931] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.751330][ T2964] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 1247.827428][ T2964] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 1247.857184][ T2964] bond0: (slave wlan1): link status definitely down, disabling slave [ 1248.014952][ T2964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1248.038293][ T2964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1248.088272][T21931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1248.099353][T21931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1248.108385][ T4530] netlink: 'syz.0.9030': attribute type 1 has an invalid length. [ 1248.297551][ T4537] FAULT_INJECTION: forcing a failure. [ 1248.297551][ T4537] name failslab, interval 1, probability 0, space 0, times 0 [ 1248.336996][ T4537] CPU: 0 UID: 0 PID: 4537 Comm: syz.4.8968 Not tainted syzkaller #0 PREEMPT(full) [ 1248.337029][ T4537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1248.337043][ T4537] Call Trace: [ 1248.337052][ T4537] [ 1248.337062][ T4537] dump_stack_lvl+0xe8/0x150 [ 1248.337101][ T4537] should_fail_ex+0x414/0x560 [ 1248.337143][ T4537] should_failslab+0xa8/0x100 [ 1248.337173][ T4537] __kmalloc_noprof+0xdf/0x800 [ 1248.337194][ T4537] ? bpf_test_init+0x9f/0x150 [ 1248.337231][ T4537] bpf_test_init+0x9f/0x150 [ 1248.337265][ T4537] bpf_prog_test_run_skb+0x376/0x1d50 [ 1248.337305][ T4537] ? __fget_files+0x2a/0x420 [ 1248.337336][ T4537] ? __fget_files+0x2a/0x420 [ 1248.337361][ T4537] ? __fget_files+0x3a0/0x420 [ 1248.337387][ T4537] ? __fget_files+0x2a/0x420 [ 1248.337419][ T4537] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1248.337452][ T4537] bpf_prog_test_run+0x2c7/0x340 [ 1248.337489][ T4537] __sys_bpf+0x562/0x860 [ 1248.337521][ T4537] ? __pfx___sys_bpf+0x10/0x10 [ 1248.337566][ T4537] ? ksys_write+0x22a/0x250 [ 1248.337590][ T4537] ? __pfx_ksys_write+0x10/0x10 [ 1248.337620][ T4537] __x64_sys_bpf+0x7c/0x90 [ 1248.337649][ T4537] do_syscall_64+0xec/0xf80 [ 1248.337685][ T4537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.337707][ T4537] ? clear_bhb_loop+0x60/0xb0 [ 1248.337735][ T4537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.337756][ T4537] RIP: 0033:0x7f3b3438f749 [ 1248.337776][ T4537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1248.337795][ T4537] RSP: 002b:00007f3b3527a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1248.337818][ T4537] RAX: ffffffffffffffda RBX: 00007f3b345e5fa0 RCX: 00007f3b3438f749 [ 1248.337835][ T4537] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1248.337849][ T4537] RBP: 00007f3b3527a090 R08: 0000000000000000 R09: 0000000000000000 [ 1248.337863][ T4537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1248.337876][ T4537] R13: 00007f3b345e6038 R14: 00007f3b345e5fa0 R15: 00007ffc3068c9f8 [ 1248.337912][ T4537] [ 1248.339471][ T4541] netlink: 64 bytes leftover after parsing attributes in process `syz.5.9033'. [ 1248.462242][ T4544] netlink: 136 bytes leftover after parsing attributes in process `syz.5.9033'. [ 1248.598776][ T4542] nbd: device at index 3 is going down [ 1248.646661][ T3688] IPVS: starting estimator thread 0... [ 1248.718283][ T4548] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9035'. [ 1248.766524][ T4551] IPVS: using max 27 ests per chain, 64800 per kthread [ 1248.880488][ T4557] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9040'. [ 1249.146483][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 1249.154660][ C0] lec:lec_tx_timeout: lec0 [ 1249.209266][ T4575] netlink: 'syz.0.9047': attribute type 1 has an invalid length. [ 1249.233753][ T4575] A link change request failed with some changes committed already. Interface 30 may have been left with an inconsistent configuration, please check. [ 1249.296097][ T4582] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9049'. [ 1249.314629][ T4575] bond0: (slave bridge0): Releasing backup interface [ 1249.329045][ T4575] ¾x9ÿ: left allmulticast mode [ 1249.334098][ T4575] ¾x9ÿ: left promiscuous mode [ 1249.339416][ T4575] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1249.349745][ T4575] bridge_slave_1: left allmulticast mode [ 1249.355426][ T4575] bridge_slave_1: left promiscuous mode [ 1249.362451][ T4575] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.382211][ T4575] bond0: (slave bond_slave_0): Releasing backup interface [ 1249.383901][ T4584] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20003 [ 1249.400292][ T4575] bond0: (slave bond_slave_1): Releasing backup interface [ 1249.415473][ T4575] team0: Port device team_slave_0 removed [ 1249.423544][ T4575] team0: Port device team_slave_1 removed [ 1249.430908][ T4575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1249.440385][ T4575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1249.449711][ T4575] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1249.469449][ T4591] netlink: 'syz.0.9047': attribute type 10 has an invalid length. [ 1249.524598][ T4585] can: request_module (can-proto-5) failed. [ 1249.601065][ T4591] bond0: (slave wlan1): refused to change device type [ 1268.381943][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1268.397751][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1268.406842][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1268.417571][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1268.439010][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1268.487659][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1268.509477][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1268.519543][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1268.536662][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1268.544591][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1268.581776][T28938] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1268.594268][T28938] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1268.602475][T28938] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1268.654271][ T4608] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1268.662298][ T4608] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1268.708890][ T4608] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1268.733576][ T4602] lo speed is unknown, defaulting to 1000 [ 1268.741296][ T4608] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1268.750385][ T4608] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1268.759282][ T4608] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1268.783527][ T4602] wg1 speed is unknown, defaulting to 1000 [ 1268.790851][ T4604] lo speed is unknown, defaulting to 1000 [ 1268.798333][ T4608] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1268.825408][ T4604] wg1 speed is unknown, defaulting to 1000 [ 1268.886290][ T4608] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1268.896193][ T4608] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1268.908275][ T4608] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1268.933486][ T4609] lo speed is unknown, defaulting to 1000 [ 1268.946945][ T4608] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1268.958452][ T4608] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1268.991398][ T4606] lo speed is unknown, defaulting to 1000 [ 1268.998257][ T4609] wg1 speed is unknown, defaulting to 1000 [ 1269.018632][ T4606] wg1 speed is unknown, defaulting to 1000 [ 1269.135707][ T4611] lo speed is unknown, defaulting to 1000 [ 1269.262038][T27023] Oops: stack segment: 0000 [#1] SMP KASAN PTI [ 1269.268286][T27023] CPU: 0 UID: 0 PID: 27023 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1269.277866][T27023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1269.287965][T27023] RIP: 0010:kernfs_rename_ns+0x3a/0x7a0 [ 1269.293647][T27023] Code: ec 48 48 89 cb 48 89 54 24 10 49 89 f5 49 89 fe 49 bc 00 00 00 00 00 fc ff df e8 41 34 5d ff 4d 8d 7e 30 4c 89 fd 48 c1 ed 03 <42> 80 7c 25 00 00 74 08 4c 89 ff e8 56 54 c3 ff 49 83 3f 00 0f 84 [ 1269.313290][T27023] RSP: 0018:ffffc9000427f5e0 EFLAGS: 00010206 [ 1269.319404][T27023] RAX: ffffffff8263c37f RBX: 0000000000000000 RCX: ffff88802ed10000 [ 1269.327419][T27023] RDX: 0000000000000000 RSI: ffff88801de94780 RDI: 0000000000000000 [ 1269.335424][T27023] RBP: 0000000000000006 R08: ffff88802ed10000 R09: 0000000000000008 [ 1269.343425][T27023] R10: 0000000000000007 R11: 0000000000000000 R12: dffffc0000000000 [ 1269.351425][T27023] R13: ffff88801de94780 R14: 0000000000000000 R15: 0000000000000030 [ 1269.359505][T27023] FS: 0000000000000000(0000) GS:ffff888125e1e000(0000) knlGS:0000000000000000 [ 1269.368456][T27023] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1269.375058][T27023] CR2: 00007f023b915000 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 1269.383056][T27023] Call Trace: [ 1269.386356][T27023] [ 1269.389307][T27023] ? trace_kmalloc+0x1f/0xb0 [ 1269.393921][T27023] ? kobject_move+0x368/0x6e0 [ 1269.398625][T27023] kobject_move+0x525/0x6e0 [ 1269.403155][T27023] ? __pfx_kobject_move+0x10/0x10 [ 1269.408204][T27023] ? do_raw_spin_unlock+0x122/0x240 [ 1269.413437][T27023] ? get_device_parent+0x366/0x3a0 [ 1269.418577][T27023] device_move+0xe0/0x730 [ 1269.422934][T27023] hci_conn_del_sysfs+0xb8/0x1a0 [ 1269.427899][T27023] hci_conn_del+0xc36/0x1240 [ 1269.432532][T27023] hci_conn_hash_flush+0x191/0x260 [ 1269.437714][T27023] hci_dev_close_sync+0x821/0x1100 [ 1269.442866][T27023] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 1269.448442][T27023] ? up_write+0x1ac/0x410 [ 1269.452800][T27023] ? rcu_is_watching+0x15/0xb0 [ 1269.457604][T27023] hci_unregister_dev+0x21a/0x5b0 [ 1269.462656][T27023] vhci_release+0x152/0x1a0 [ 1269.467188][T27023] ? __pfx_vhci_release+0x10/0x10 [ 1269.472244][T27023] __fput+0x44c/0xa70 [ 1269.476267][T27023] task_work_run+0x1d4/0x260 [ 1269.480891][T27023] ? __pfx_task_work_run+0x10/0x10 [ 1269.486035][T27023] ? kmem_cache_free+0x197/0x620 [ 1269.490998][T27023] ? do_exit+0x68f/0x22f0 [ 1269.495356][T27023] do_exit+0x694/0x22f0 [ 1269.499576][T27023] ? cgroup1_freezing+0x20/0x350 [ 1269.504542][T27023] ? __pfx_do_exit+0x10/0x10 [ 1269.509168][T27023] do_group_exit+0x21c/0x2d0 [ 1269.513807][T27023] ? _raw_spin_unlock_irq+0x23/0x50 [ 1269.519030][T27023] get_signal+0x1285/0x1340 [ 1269.523570][T27023] arch_do_signal_or_restart+0x9a/0x7a0 [ 1269.529149][T27023] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1269.535338][T27023] ? ksys_read+0x1e1/0x250 [ 1269.539786][T27023] exit_to_user_mode_loop+0x87/0x4e0 [ 1269.545199][T27023] ? rcu_is_watching+0x15/0xb0 [ 1269.549992][T27023] do_syscall_64+0x2c1/0xf80 [ 1269.554608][T27023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.560699][T27023] ? trace_irq_disable+0x37/0x100 [ 1269.565749][T27023] ? clear_bhb_loop+0x60/0xb0 [ 1269.570459][T27023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.576632][T27023] RIP: 0033:0x7f29dfb8e15c [ 1269.581077][T27023] Code: Unable to access opcode bytes at 0x7f29dfb8e132. [ 1269.588110][T27023] RSP: 002b:00007fffb1930b40 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1269.596542][T27023] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f29dfb8e15c [ 1269.604539][T27023] RDX: 0000000000000030 RSI: 00007fffb1930c00 RDI: 00000000000000f9 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1269.612533][T27023] RBP: 00007fffb1930bac R08: 0000000000000000 R09: 0079746972756365 [ 1269.620523][T27023] R10: 00007f29dfdb7800 R11: 0000000000000246 R12: 0000000000000245 [ 1269.628514][T27023] R13: 0000000000000064 R14: 000000000013112f R15: 00007fffb1930c00 [ 1269.636560][T27023] [ 1269.639614][T27023] Modules linked in: [ 1269.644998][T27023] ---[ end trace 0000000000000000 ]--- [ 1269.694772][ T4611] wg1 speed is unknown, defaulting to 1000 [ 1269.771194][T27023] RIP: 0010:kernfs_rename_ns+0x3a/0x7a0 [ 1269.776948][T27023] Code: ec 48 48 89 cb 48 89 54 24 10 49 89 f5 49 89 fe 49 bc 00 00 00 00 00 fc ff df e8 41 34 5d ff 4d 8d 7e 30 4c 89 fd 48 c1 ed 03 <42> 80 7c 25 00 00 74 08 4c 89 ff e8 56 54 c3 ff 49 83 3f 00 0f 84 [ 1269.798191][T27023] RSP: 0018:ffffc9000427f5e0 EFLAGS: 00010206 [ 1269.804371][T27023] RAX: ffffffff8263c37f RBX: 0000000000000000 RCX: ffff88802ed10000 [ 1269.812542][T27023] RDX: 0000000000000000 RSI: ffff88801de94780 RDI: 0000000000000000 [ 1269.834283][T27023] RBP: 0000000000000006 R08: ffff88802ed10000 R09: 0000000000000008 [ 1269.843029][T27023] R10: 0000000000000007 R11: 0000000000000000 R12: dffffc0000000000 [ 1269.856466][T27023] R13: ffff88801de94780 R14: 0000000000000000 R15: 0000000000000030 [ 1269.864509][T27023] FS: 0000000000000000(0000) GS:ffff888125f1e000(0000) knlGS:0000000000000000 [ 1269.874856][T27023] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1269.881931][T27023] CR2: 00005653e6678f40 CR3: 000000008c622000 CR4: 00000000003526f0 [ 1269.890103][T27023] Kernel panic - not syncing: Fatal exception [ 1269.896823][T27023] Kernel Offset: disabled [ 1269.901159][T27023] Rebooting in 86400 seconds..