last executing test programs: 8m11.908767429s ago: executing program 3 (id=3031): sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYRESDEC=r0], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x25dfdbfd, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="02ac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) 8m11.529344861s ago: executing program 3 (id=3035): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000f10000000000711228000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 8m11.384900246s ago: executing program 3 (id=3036): getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x80000001}]}, 0x34}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f030041000b05d25a806c8c6394f90324fc60100000000a00022bb6e7fc53e7541700053582c137153e37040280fc5449000c0000", 0x36}], 0x1}, 0x0) 8m11.31735224s ago: executing program 3 (id=3038): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f00000004c0)={&(0x7f00000008c0)=""/4096, 0x1000}) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="e00000001000090500000000fdffffff6f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28712d28"], 0xe0}], 0x1, 0x0, 0x0, 0x800}, 0x40040) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000440)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=0x64010102, 0x7, 0x12}}) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="9110bc000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x31}], 0x1}}], 0x1, 0x24008094) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x70}, 0x1, 0x0, 0x0, 0x15}, 0x20008080) recvfrom$unix(r3, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x3, 0x4, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x3, 0x7fffffff, 0x3f8}, 0x0, 0x0) 8m10.366840284s ago: executing program 3 (id=3051): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3, 0x0, 0x0, 0x0, 0xe, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="7f3d010661"], 0x5) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r4, 0x8b32, &(0x7f0000000040)) syz_emit_ethernet(0x2ed, &(0x7f0000000940)={@random="bdaeb45375fe", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void, {0x8100, 0x2, 0x1, 0x1}}, {@ipv6={0x86dd, @dccp_packet={0x5, 0x6, "d518de", 0x2b3, 0x21, 0x0, @mcast1, @loopback, {[@srh={0x62, 0xa, 0x4, 0x5, 0x3, 0x68, 0x5e, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @hopopts={0x62, 0x27, '\x00', [@calipso={0x7, 0x48, {0x2, 0x10, 0x9, 0x7, [0x8, 0x5, 0x4, 0x9, 0x0, 0x4, 0x1, 0x905a]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @pad1, @jumbo={0xc2, 0x4, 0x8}, @pad1, @generic={0xa, 0xbf, "65f8790ee9322b95ca97ad91a090497bc55afc539356c2521da838ae2e03ec5b5a07a05db0521ed21a213e268bf54afd9a55ba4a2c0a8efdfba53adfac5a62485143b2186c371686005dcc9e834a5f0e9a4729ec790a48326d3d47cfa9f5e2523f8fc21d95c2535edb4bf8d56e3239705693aae32018c8ba807dcb957faff2824a7b22b70a987c929cc8a9abb11a7b53e509cec034b9f0bed6bb93ebce120ac7f27c5b295c5fbb32f9e32d5ef7e3b5155de9eb4c90edaaaf63859ab84ef34f"}]}, @hopopts={0x5c, 0x5, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0x2}, @jumbo={0xc2, 0x4, 0x6}, @enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0x14}, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x8}]}, @srh={0x73, 0x12, 0x4, 0x9, 0x7, 0x40, 0x5, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @routing={0x4, 0x2, 0x2, 0x2, 0x0, [@mcast1]}, @routing={0x88, 0x2, 0x0, 0xf, 0x0, [@mcast1]}], {{0x4e22, 0x4e23, 0x4, 0x1, 0x9, 0x0, 0x0, 0x9, 0x6, "7d94f4", 0x2, "cf73b2"}, "7eb7b3"}}}}}}, &(0x7f00000003c0)={0x0, 0x2, [0x320, 0xc8, 0x390, 0x405]}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x8, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FLUSH={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044010}, 0x40) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000003"], 0xa) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xe5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000380)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x6d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xc4}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000002000000020000000090000000b0000000000000000000000000000000e050000000000000000000030305f005f00"], &(0x7f00000001c0)=""/187, 0x41, 0xbb, 0x0, 0x2}, 0x28) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0x340, 0x7, 0xa, 0x105, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}]}, @NFTA_RULE_USERDATA={0x53, 0x7, 0x1, 0x0, "500f7e9dcdce2eddee9769b062b9ac853a6facda2cccdd87d9f0ad7dfaf3bfe824516ed2d203960688d273fdfbe77566e629595d7266be4e70340324ba87c8f0e458510ea1141711121cc5fd73d94b"}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3a}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x16}]}, @NFTA_RULE_EXPRESSIONS={0x29c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0xfc, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xec, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0xdf, 0x3, "1c36831b9afd690d9826ebab5b994e84117e583ad0237077fc0717893d5310d235d49626026de89abbec6ab05a6d549f0130bb0b6ab57747c275d442f25b5eddd307c80f27f701bb40c872a33349687191d37b05cf66a485386699aed1976b9e1dda28cad894cff250f0f6cec0975ef0bde609af5dfc20b9ad65e46cf26566fafd62144837689c42e9248b981db8873047943328dd7bdd76f54588911fb925aae2b85a4f0babb500e24b21d36eb51d44bdf922c981c8632e9a076b64d77c276202858d16f49aa2a4b6a12c9a35e6b5c7239da87e5e8169768a6993"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0xec, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xdc, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0xa1, 0x3, "0aa4125f5d7ebf3dc4b71e1cb0f93bca3c98b05ee1bd729ff84439b2724cc928e687bbf5ddfb35be295f93a5294f7deaa1b51a8e45cbcfeedb2f55e8d031da844b6f09de4ebaf0bc8a285278fd38f10ca160e5f3b4eef2ad72abc86771f83b78271706e14470610823da06ea9a314b78afeb41090be098d12642ab64ed7c1d5bfab3030e26ec5c7d29c4fbdcc775ec3e7f320c2bfff8b39e0dc6af767b"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_INFO={0x1a, 0x3, "bd6211bae232d8c9bb427273f862d51cb4e7fac430d0"}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x48, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}]}, 0x340}, 0x1, 0x0, 0x0, 0x81}, 0x40040) 8m9.348175419s ago: executing program 3 (id=3063): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) (async, rerun: 32) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (rerun: 32) write$cgroup_pid(r1, &(0x7f0000000180), 0x12) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$unix(0x1, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x8, 0xcb, 0x0, @vifc_lcl_ifindex=r5, @empty}, 0x10) r6 = socket$inet6(0xa, 0x5, 0x40) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f00000000c0)={@private2, 0x80, r7}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$key(0xf, 0x3, 0x2) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4000850) (async) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r8, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (rerun: 32) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/8, 0x8}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x10020) (async) r9 = socket$netlink(0x10, 0x3, 0x8) sendmmsg(r9, &(0x7f0000000800), 0x2, 0x0) (async, rerun: 64) r10 = socket(0x10, 0x803, 0x1) (rerun: 64) sendto(r10, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) (async) recvmmsg(r10, 0x0, 0x0, 0x0, 0x0) 7m54.316952046s ago: executing program 32 (id=3063): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) (async, rerun: 32) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (rerun: 32) write$cgroup_pid(r1, &(0x7f0000000180), 0x12) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$unix(0x1, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x8, 0xcb, 0x0, @vifc_lcl_ifindex=r5, @empty}, 0x10) r6 = socket$inet6(0xa, 0x5, 0x40) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f00000000c0)={@private2, 0x80, r7}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$key(0xf, 0x3, 0x2) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4000850) (async) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r8, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (rerun: 32) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/8, 0x8}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x10020) (async) r9 = socket$netlink(0x10, 0x3, 0x8) sendmmsg(r9, &(0x7f0000000800), 0x2, 0x0) (async, rerun: 64) r10 = socket(0x10, 0x803, 0x1) (rerun: 64) sendto(r10, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) (async) recvmmsg(r10, 0x0, 0x0, 0x0, 0x0) 2m34.027222972s ago: executing program 0 (id=5576): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @private=0xa010101}}}, 0x108) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x4e20, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac"], 0xb8}, 0x1, 0x0, 0x0, 0x40000000}, 0x4008000) r2 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x4, 0x4, 0x4, 0x40007, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={&(0x7f0000000380)="912b149449fc2fdfead6c28bd3b2ce454fc07dd53e4f4d9c71e5da311e5b6dadaf8abf9d8277734dd5bc22ec84d21b2e78692d29535bb32a8a628ce51754825c932f6989954829ab70559694c2483109a1b83aade89df42423d993617c966b2629983e5300a1df702e6e7ed3f2659168", &(0x7f0000000600)=""/4096, &(0x7f0000001680)="660c29d6467ead1cbae01ebf7da673d41d07d28e2e0b8f7d1fbd05f8d9b5ec605c854663fd27f1f1c845ff1852def5e05d0e57c7dfc56366f351b49210b6dd132df967000000008cb9da1e50935fcc0569f300fff9dc268ba9cfc239c4d881c3c968abfff00969ccc6021c47eba133f5edafdb9662d213fe0bfc4efa2d27c172fd", &(0x7f0000001600)="c576858c0c31fea686d8eacabb5fe94c52fa872791ed95ff5402f9b58b41d93b38f1f788060e7df29dbce4979f3bcef50adc1c44487a760916430d705bc3fb81d4af90a77467318d9d130910e7a677910a84c50dd826d76771676f6d5a78966d0f10b373", 0x40, r2}, 0x38) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) (async) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @private=0xa010101}}}, 0x108) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x4e20, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac"], 0xb8}, 0x1, 0x0, 0x0, 0x40000000}, 0x4008000) (async) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x4, 0x4, 0x4, 0x40007, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={&(0x7f0000000380)="912b149449fc2fdfead6c28bd3b2ce454fc07dd53e4f4d9c71e5da311e5b6dadaf8abf9d8277734dd5bc22ec84d21b2e78692d29535bb32a8a628ce51754825c932f6989954829ab70559694c2483109a1b83aade89df42423d993617c966b2629983e5300a1df702e6e7ed3f2659168", &(0x7f0000000600)=""/4096, &(0x7f0000001680)="660c29d6467ead1cbae01ebf7da673d41d07d28e2e0b8f7d1fbd05f8d9b5ec605c854663fd27f1f1c845ff1852def5e05d0e57c7dfc56366f351b49210b6dd132df967000000008cb9da1e50935fcc0569f300fff9dc268ba9cfc239c4d881c3c968abfff00969ccc6021c47eba133f5edafdb9662d213fe0bfc4efa2d27c172fd", &(0x7f0000001600)="c576858c0c31fea686d8eacabb5fe94c52fa872791ed95ff5402f9b58b41d93b38f1f788060e7df29dbce4979f3bcef50adc1c44487a760916430d705bc3fb81d4af90a77467318d9d130910e7a677910a84c50dd826d76771676f6d5a78966d0f10b373", 0x40, r2}, 0x38) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) (async) 2m33.028640305s ago: executing program 0 (id=5578): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x44, 0x4, 0x5a0, 0xffffffff, 0x320, 0x320, 0x3f0, 0xffffffff, 0xffffffff, 0x4d0, 0x4d0, 0x4d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x1f8, 0x320, 0x8502, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6erspan0\x00', {0x3ff, 0x2, 0x0, 0x2, 0xfff, 0x849a, 0x1, 0x18, 0x18}, {0x8}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:initctl_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x11}}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x1000}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x0, 0x2}, {0x3, 0x6, 0x4}, {0x4, 0x0, 0x1}, 0x6, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) 2m33.028308393s ago: executing program 0 (id=5579): r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x8, r4, 0xb}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) close(r5) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 2m31.260014664s ago: executing program 0 (id=5585): r0 = socket$inet6(0xa, 0x3, 0x1) ioctl$sock_proto_private(r0, 0x8993, &(0x7f0000000680)="d8990ef9b33a") (fail_nth: 9) 2m30.810173629s ago: executing program 0 (id=5589): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0xfff0}, {0xffe0, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x200088c0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r6, 0x2) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0x67) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x4000000) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) close(0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="6006c42462b37d4eebb0389d739e974400050000", @ANYRES32=0x0, @ANYBLOB="02000100095001001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x40}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000004080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000010900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001007767310000000000000000000000000014000000110001"], 0x80}}, 0x4000000) close(r8) 2m27.740732792s ago: executing program 1 (id=5609): socketpair(0x8, 0x3, 0x1fee, &(0x7f0000000180)) 2m27.664473902s ago: executing program 1 (id=5611): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) close(r0) socket(0x9, 0x80000, 0x80085) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x20}}, 0x4000004) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="80000000ffffffffffff080211000000080211"], 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0800050008000000733e2d9c2a5820f4954608cdebeff175dd59bbe73aadef682fa7f607fb7030035a183c33252c6532eaf3"], 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0500000000000000000021"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000010001000006020202020202010182"], 0x54) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="00001f00", @ANYRES16=r6, @ANYBLOB="01002abd7000ffdbdf253d00000008000300", @ANYRES32=r8, @ANYBLOB="08005d0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b020000000002000c116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) 2m27.312423736s ago: executing program 0 (id=5615): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid_for_children\x00') unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300200001000010000000000fcdbdf2500000000000000000000000000000000fe80000000000000000000000000001600000000081e00040000208021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x230}, 0x1, 0x0, 0x0, 0x24040021}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000440)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x7}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7ff}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x2}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0xfffffffc}]}}]}, 0x50}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r4, &(0x7f00000000c0), 0x2, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r0, &(0x7f0000000200)='THAWED\x00', 0x7) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e22, @private=0xa010102}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @private=0xa010102}}, 0x9, 0x401}, &(0x7f0000000280)=0x90) r7 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) write$cgroup_int(r8, &(0x7f00000003c0)=0x7, 0x12) bind$alg(r7, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) accept4(r7, 0x0, 0x0, 0x800) 2m26.429905608s ago: executing program 1 (id=5616): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x181341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000005000000000000000000000180000ffffff8e00000000010002009500004000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x302, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) (async) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000840)=""/193, 0xc1}], 0x1}, 0x6}], 0x1, 0x40000026, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x0) 2m26.324896398s ago: executing program 1 (id=5618): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000004380)=ANY=[@ANYBLOB="9feb01001800000000000000e1d9bb90c7700d05020000000000000000b182f01172ca2ad48e3e0505b25ac240d32e78b660c8b97b7417205cd9a9783d2ab70a766f6699c7762fa720e6bdad5357e20c0630baff038f"], 0x0, 0x26}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1000000000000000000000000000009536e22c595a42427408197efa25f74f47564f74022a14cd2f7d3c1496eb130023efb2d95750857f57f8f1b302fa538b752e5164dc655e224d8376eb86de4c716bb600b3d9ec060809e9fe482086c32f7bbaee065dc2c3229f8e838e28ba6393057860200fcd0c4cf7b2b0e9568d809b737c54e4e710df466c8211d398ffeaa850980d7845c41ad51ef79aa0fd2c063552896d"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0), 0x10}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0x1c, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000052a60701000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001855fc361ad2a05d44792f11d5bcb05df66432f185758b42ec2be66c6fd9e81eb2007b15d07fa3cdae0aa487545f37da31afb55ea3e3d38964d035b60861fc77ae835c5abbb2d26794c20ea49de2cd8fc2799c1976357d859606598d2ffe57473b859ebb9b6d9c6999752396c901875ce7b03e0bb7eb28f2415fbee3d7450f78e6a49d094844262f4de375022f98dc34894719843a716dd9527b", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r4, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10023, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0900000000000000000000007110000001000000"], 0x30, 0x20048044}}], 0x1, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(r8, 0x400454ce, r10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004a40)=[{{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000100)="87b4ebe52f50c8e3000ff65efb8886a07ee7131bb68dfbef310f66dd37ed9ec460d4c13f74698d8376f32eeae6f79a1cbbe75f6f19968941c01a31f0d33b1401061294e85c2698", 0x47}], 0x1, &(0x7f0000004e40)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES8=r6, @ANYRES32, @ANYRES32, @ANYBLOB="19cadf9fa40b0485cb6f7e41684604ec30d1f3cff7284091bab6d84b2c74d861488c4192c8574d17464d79c5b42108b8917354c64e4f1c75341e8351e3932ac41bee6bebb1262492bfd334dc3d1375eab0eeb9ff143a5a5274916ca947d9a8b6152c13c4ce7bfecbce9f35f1644a5dc2fbecdda2317aa0fe79fe6e52531f6411970b9855337d7f3cc85415f42c8b9e108c1b882d495ba270187b84d2d69e94c04d5154b40a742a7f7bceffea3cdd95bcaca28dd8ed76f75866b94dd422dc2de9b165fe4d8121fc50534cebd708936f97c67c291499ebe422e7f83e45b633e9fd90922b7adb7ed95c1900"/245, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES8=r8, @ANYRES32=0x0, @ANYBLOB="000000001000000000000000010000000100", @ANYRES32=0x0, @ANYRESHEX=r6, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0xf8}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000003d40)=[{&(0x7f0000000800)="839a9d1b5988c3e523d15877a1e5a44b21ee5369219a1c0585097c16b128a37cf908d572e0e079ac389540e3e7f2d1e956fbb82281084ce27607ae73037c4bdd649452b0600932857f5ee92b65d72e51f442eff7f496d051c4b1549dcd421645208b62f53de96a0a562e06a400695dc3b136a1143fe7424b1a3a4cef320c5996c4d2439fc41feb6db82195e2dabe5c9b5a760c62c7bcc4629bf144e3c4723a954fe83cf52957199c25ae8e3d71ffed365dfb8ec53f31", 0xb6}, {&(0x7f00000008c0)="5542790b9bc9cdd6d361baebf0ed077d0f7c1ed8c33d501e8488b4c101f2c2dee730b3e04afc7316fb87a9ab3a97711a629da9cc4061ba03ee85830b767f7026718e618015333aab65ee438b0478dc900232622d5834b8095ab4064071bdd271c7a5d8c95d81075d48f715a11672a6f6689a9a501ce1f2f18f3c215c827092b105e6cbd6650c8b18b010acd32742455a619ec97187cf93b1496b695fe47376479df8970e27d33703260a811563db0e27d5fc1ba1f2192a68133e169f88a212b226714a8af85b8d008ca975ac426cdc0de5f82f0fdaf3a9d692742746608d3be90c3266dc3e3e3a5f841d59f5e074c8d1e1ad67910b36c846fb03bee4fcce550f264c40e3b05326655be2435b46b3f5c6ecf8742f97178908c66bd25d811c9904b9d1cf74b6b394f6888110b7b2cfdf24250d7d93cd1138d11153b83e97ec5891294dfd4635b61702ebdfd1a6bca4ed4d2ea460d160defc1aaaca92ac0c5d4d73c1d99eb4686ab595c02cec4d8f1cc7aa138212059dbd6c928d6c66cff93158e08c4192383f7903989b95b3863e09a54d5e6d58fbc21d2cbf73c6d7bd951c8db1b3d9bddc5d3d522e4f64c5f223c99648a014997cb272f42657902c1c32696118a3ecad44456f13323d861ef61935daa8f309583d5be2b189b9ae2a7df924e2e3bc59fbac5ab8573e2842d43178e60d99d338983e0b90327d4f7b12f0c6313879257e7aa9a7505753a9f140a84e06258415cb4da94174055d066f222a9d91ce2f12dc2a80892ddb5b4c6630f149eed4ba999bab8dd0520d0a03eb49cc7b146ad16909d1f0cd6360200e067d10583412062067bffc346c141291b01e0207facf428fa7b0fc9a2eb4cf7c64b6839913db5defdfb161f2b9893a1e74eeee4051faafdbc6625d0210d3671a3618a0676a4cbb7e350dd29afa7cf11d1fa12a06af3016dbbfee6d2ffdc992adb651dc3572ad8fe4160716101546ade356a536aff63a5dee79def6feb9d03d1d6c31428fd95fc9b23e3dc9263860a36f5ee2a166abe6df8ebee0be49e6fb629a658251bf3f7e448186ca827bee6aa1aa92a2b8a4ef2eaa916a46bf1143945988d19175cbd5590e7540206cc3d2b86b91c091c94a61b94bf55f554605ce7591067b1c64967a9fb32742eb047332046ecf74ac907f84d8e1ec0078e9cb0ab291285ce0294144e54c7ed09add2796a95b24cdeb79dead433853604a704f5ad16ff5d50b64b5fdc1bc3a04d7471323377b3b4ec237a03317942ebf54681486af11bb2e2ba0bd207620bc58592f6e3ae2e5bbd374b08dbffc76097b7c4388b1fd68d1eec55dcff3fc5fbb3b914f4b2b17735d40635d3983e66e6882ca7080c5ab07dacfa3345377a04ddf017f7bb46b4c5daa843b2b74e7b9eb0a44777c4329d0fc3823e521ab0cf8454de6baa2db76a56e287122186d4df0321d3f6227c0ce1dba066f84c6813b37cebf2be7f8310669ebe9b4edc3de2cedfdfa238466dbd604f6f1afb6aafe2509ac554e9cb128b6582e4030f91589795d5c0c23ef46bdcb712db1a3a625768c1eab1a843f8379fe88010d3a4da65b7abd0acbf87a422d7eea534d64753a8003325904a00a8be554b7d7de1700a9f6832cd39864846075ef7f84e16b3f0b2675edb12fda4c24bb2291b2fc05fba7b528f1df298e492792ce5bf1ec38e3cce49fc61cddc977b0af9cc38e18eff1cd589e368c076b382b7e00fb94d813c3fc7014e1d54e1ae4bc290900c97bc8bee4864d277c13425e818c88d26793c224a395c1a3372118171177c01bed1cd94eebd0db22d4053b54ea9fa5085324794e588b1adcd5482555733d077b0010aba634bcbc9925489d22e6b2014487571bf77c9c3df6a03b37edaa9e3c797454d4511d55e505986b350ce6972319f294c282b85408bddfe2d6a66b35276c1bbf545b4b14a437b016604450c60e5810d29eaf197cb489334bec653d14e6e97c13de2dc09b394f27b959e60f5a5ae6be53fa7c9723953754168469f8937a5d4ff88efcbe90fe56dab2a8c3182f6db4b90fdc2e3deb9a7470b0c46b70be3c2a7fbed7b1c17a27d8197c2739c70b810cb9642454a6ca195b7190deb34b4fb57b37e29a4b642f88a90f94a282f942d81abbf8a7697c04fd6ee3d56d71cdbb6f6d8d3a0872b2629237adb29d5ba0c27428ecdce2371edfcd3bde10968ba015b718669388d788db718945581295d639e90e55d0b3dff9ab5d097827c719d651ff5eee0b93466b64552801e5b2b430d46e39b1983af6fc294e2a527f25d8e85c3d914164b6dbf005453adb1e44fe673953e1728a431bdd864c73f7dcfe59755730f941c4c0618e4569b28356cf52401319dcdb2bca882ce6a5e5a476560a0fc6b28826ef4c10051081f2447705cb27c305a70ff29fb3734bafaa715ff12b3d17b76fc1f45c838ab8a9a540692a0799efa88f78e4341131c5ac81dcba87b31e1cc359ebd064ce4b2af7edf4d6143f293acf3a5da322a672d91d39d9e9e1c73d1cd38b16c1f44e1ea4f5dc97721e95049b17605ac61dd4575129ae14762a4e0b3d860340dccdaf90bd1659424948c209a0114bf17a5785479dbc47d75f3ccfbedf39b38a1e8f986547d3d91dbb8548a65e2466f2b13036dc2c088d4a19fcc32bf0ef5c558be626c6d74c222f8ed30f778d6591b6bbb20f660be21a820074b83c6eb553f21d3078d7991f72bb94fee40c769bb8505cbb3cfdcb3c09edbb437af17d8d8e31af7ce7de11eb3d51da823ca232dfa41ce97105640dcd60d41a1e70004e302066634eeac717825fc0d1a342f24b6fc8425fa375ff3f41dcf02cce671b80d924a35611f5ad6a14d43a35a1960d780382ace54cfbf1e1624b03783f0dd2a3981e32ec9fe0377030f7ec81adf9f6abd08d9af3ef323ab919668c5cde8f5340c6961f3177df4f7f29432b3cb0f25a8c493f676430747aa91887e921fd9311be1c482e8cc5bcb4d046ccdc79e2351197faf5ac31870b9c62b5b7ae8b2c520415ccb2a1fa23e2996e63b540e7759c86a018db3937c2040593132a32c61973252fa6cb253e923aead794287295954af1257d0a24a6fd2a2435a3989983aed4360bd58ac4e4a227a053f43defa070744e60b63f266ca579112d3c3ebc76b26b99e0c42109d3c4620baa48a87f191985aa5430a3abaa7e2b70148b793bbf2a18992244b18c02c131bb69f1c533c07f0f7b355cb4506edf3edb5250b94a9140b05cbf012971f9f6520c73d3a6c3094466d0d74ba711d29f122ce61ba157ddadeb10ae1a9281f7777aeae35f5acfb763787ffbd03e7a5343a9a5fc0006fdb2f0ce0e1de53410cc327c9f71970c5dfd6026cee1f87aec50323795d20a1fb6bd402051e52311b6a07fa6b0923f4c29cd2030ee1b752778bfcf7b34c31c782c6a3681da0da359b706e652c11bed55747b882214377b97457dc3dad7a71e6b88af6454292bd80729b33e6371f70fc1531fcb54335b72c73bf41a7e53a8e03e57eb649b643ebc0bca0c926c515d506ccd90862af8fe717addbbe22b6deec5caa9f3d155f35fa722c1dc2356c59086470e3aa4368f35da950d483ebffdf872df81773b708c09c38e64cd55be50c790a193cdcde2e33c641e13e3fe5a60d9d4a7c1e17945b501f8b20a5fbc672aae46dc73fa1f9f3680765cf2256d76b92bc04f879d1f7ff8582074958c49f014b9d03b3b9f49fd4711a0921a5dc8245d01bd9a859d0a33ca66ff2b668b3169a8c6caf6a164b737cb2273be04a6d2ba60c9f8cca8085d7471b5b19459f09f1efa5d0648b5dc5d900d234d0bbde87b61fcdaa3d676710e9ae13180a9230b3978aa1e74fae56ae575ec24208438b1bedac626aebd4c8072d069000d13c25fd7b4edb75e2126cd88eb3b7d19f5428d11970064888332e604ac599fca96b970f5cd020116385f3f3dc27b716accc9be06478c68291fcabc0fda4265bf9f7ab06fdf12f235617ff1eb8ad14248e9fa094667ec8d054d18453866c2a75e6df1d8450a05a88253c0da662399e6a5a45d898b2d7bb628819b9e13b9c27b31035fb35729dfabf1f31006ad9bb4550c70e275ca244365731acc7c4fa6bd493b118b10afd49830a880a3c904db0b160d10fd069e5d50c36821d34f4fc8e6e6b4f4b57b20bd9ebf23c7840c80dc7041f32ce89c99441afa6304faa6aa6caef3585dd7f0641bd393e600d3d798dc7bdaab6cf95643cf4bb43d2bb8268b375b0f35d725b8576e6d0573d88b6db160ebdf2786d291da0b770a308a8c5d4e62f8dfd6d1fc29dfd3b3edb9fcfebb0918e4d53710137c4acd75216c9ee7c39367ee5478937f0722773e9b297d3e96114236b42dfa93942fc288f3318d4de48c50c88d4e13f68c7697c53cf9d2dd9f70316534213c29d303b2f8ca722b4791305a824109668080e050be01fd36bb3fd5a3ee9d113f4b9d725421528a726a4b7739a478e4703d38331becd30706e8995e33e222674ff48a6b10ad6cd769621d0eb9dd03c9186fba6dc90c969fdb1cf3ee86485c42a71a23f2dae95e0faa65a38b793490b589b8318dadfeeb359fa344a3f27e4e8572bb9f15c11c902e6b9dde0a63437a0612f82bc0ec9515abdf8f6f5d5659cecd3a7df873b83865d21ce0e8e122169d73807672b0d4697e52e666e9ed5b8646ea94b9778bdcad57c3306d0d55eb49647e5b1b4df5f5ebe91c5209cc397f8b0ed9b1443ee2e89eec5976fdb1677a4343c7ef5a6b491c7ae714575ad6cfc8cde28391a0082477fb4dc02cb9e14ccad02fcadbac1fa106b40f02d26b8454abcbec0dd22587c76cb9e721c8f3cb1a1708ae3c8bf0bb7d854756b40a6355d5487ced62de7a849f20a8f120204c200021da419058273a9470b830bf9844c940a89f82a826a2fbe8e87f34183b792facb1027a60a15b714cd285da511fb1123f40ce400098fe8356d0127106011cf3ea613bba5f10836a74adf2c511d235a1ba157a508a0418968810affd367e2edf38433c0ec382b69eb511775c2d562861c4516409c95c1d0fb6cbcecd824d8c11559c4edea4c2851e925e709357970706ead0c5f5d178b15f1c40aa2915d5789504948ec1e5fe6a9cac4fee11c5e4e3ae1152596bc99a803476c027aa71a0b4a839c8a8a4b37fba80dbd864b549bee8c3fa309f073fde57f7ec162720aee996ffec420044808cd947ff0607e264605f040d50cb35a9d0201f7e067978e302eef0a69ed6cb00596bf01b645da2c4febfbc516555fc7db92c2bec8d3a2b5c062a7424c3e9a8e929a7824ca6ea7d6bd47a4ed39b4e13b9ab3fcdc66d25104cbc6a294ce3b8b2b13ed0329e42a41a77ee9b7a27cd84a209549aee7b211ac92e73ef445b97194369fabe856094a64fd953721d6580a07fb5dda6a8789f6f860792fab3daf8e21993818eaabdb4b6046d26913004d3ead3515f629bdfafee9efff57612692d4bcb07c9a3724bb2555508a444d5eb5d635cfb63f7dd54e5b4c12da5cdc5d028f0cdec3f0c3109e03f7990d88aa204bf0e93386cf7455c882f28e5b7cc3dae44951e635b2b4decd7004473b7b6cf7e7751d9f6c4cabb309df260596211c67f51949324033b693cf8ed8dd03ed8bdb97380595ca061906817b21dcf7ee00c86229520d72ad9cd31a09c3cfec78b7e20efb0f67b0eb06eee058d0c465f9f9566db498b9fa966bd530dc3d91ab0114071c9d01a912bc36f524634c53ac40e9c9c010e15fb308e2f5e3452da62723d30ecfb1ac1690bf6a66ee0c8be8a52821fce67fa0021104ef27bfe79c1a5b8a5", 0x1000}, {&(0x7f00000018c0)="39e2b19104e57bd025bd06891a7b91408e4ae4d4cad649d174ff7134973127fc00000000000000fbb08cd437847d19286c26dfb101adeecb41e117550791173431ba2a094fc2fcd7adc2c71ceae03e539eb256be8b8aa4cd1c87c0edbdb60e733a669615ba488d97011519eb4cba640d3836d76060770a1eaeb7453d102300d9bc5d2ea537b22a63a35e2e85e71185611833d817203c69ccccfbdcb7410200000000000000c5e459c1", 0xa9}, {&(0x7f0000001980)="c677c1203430835456af74f6e7f26da564ace63111f35bbfc9e4c3cc86a7dc08a0b7de4794d173fd1cded4afe9f9c3f9806001f2fe8ccf285c7bbc995faee18ce761f4d5a303ea108d424c595d349205a155ba1d7bb4ac61de145fa00ec67d10e2f21dac5cea2182c3a32820ea9daba104414816e3979f7fc245f8639ba3736178f2c94126e8d08ea5c0c0294a89df4754e9fdbaa82203855a7a4c5e5248741209e18af94ec53bb9b40d77b3dc1ae8584ceeb42927ef11b8596a39926c1b7c36ff26e4593f41303a8706fae3ed0aba5ec03818c76a349ace3db45cbfdfdc5d1202e14b09a7a99d3ad740926add3337b927ebd194f451a0cf5d7dc599f5b2b2a8f4ef1fd3448d302a7c0d9de49d3402dd6345ef12f92af44e10864d675740547e6be3fe7ac536f6972906ddb05a56e6b5c6592b5ea1f171d58e84f686cdb877a40607829712d5b6a8f58d1c58d65e766c0b0751a4cc1e119b7f7c47da65a493319b073104a81a5d131e3222237a29768f5153bceec6ed16e4f116ea5de52461ba3da043572bdec82eae21794b3dfe16b19165ede30390f3c73513a089e8d5dc62662351f8bac9335277d579c61ff7011a4bfd8bc3dc0056409e30de9c70e2a303d4de2f42730bc3db8fa23cae92dd501468260a62300f6190660a01aa70c1413edbda6184ed49e59b7b2b809ea1f73264a41a167dc3d2b3edfdd3183f2ca4502199663e6f464a0f2b59014ae220b59f6f5f0363593adba2eb730aa59efab71f4f97c7532849d18b55c61ba4fc1f9c7d65a285bdbbd8f3dc2e49546a800f88dbcdc74cbb449279089211f751c282a96fb87f432dac6c1105d76ddae6dea3fdf23ce4cc2886d45073674bf4732fcdd249f7de813943f804da27f8e1fea8cb56311747309b50bf3aeb33c3c6c5d356a91ee11b3f9241e3fa0624aa6bbbd9f91e8afd12853b91e6eda18109816cfebd7bdb7db82140cdac672a1266d676878c9c08e30c69a9e7aefe821ae4c650c9391c84a7451df512d9138b86208805d852063ec9063168304a019d065027334c3450099528d99409a7f1ce4016c889d2e715093b462e136442ff8b67fb7487f55a15fd9d104d8f665f570369969393b7fd9dec9e96435da29b6a1529f16eee92a8b415e087b08fbd5ce39fc80a22da84d87daf8046ed8e6564762eb36fdcbe47b4474203b998e0af9532496510d7914674345264a89f1771399c3c82e50bbf8413a5da5581d4de22b0c99e83ee985bca702251b5dbddfcff79ee9c032dd59258feb10bf870728e3c4231107ab8ba4d928cce4d25e99dd6a5179aa2fcb2c6c491376f8b9505642a08b0f88920fe505cd2a351ad7785ea26e9e80a7a494488f9f0b0032b5a37c85770d5c5e37430ce2335ee9ad7c248897520f0a1413aa79ad343d668b7cf2ef4146bc13ec8d21af1b01c2210b36fb87ad24fd2da4345168f8ea9cae8305539d2f2f06599402997d911f8d8fd18d27c3f8f03722333930bd24226944eb154c5a0a68db1fdfa7c33f3185e54eaf3f1bbe8357d06427f1bf48bc17b7b0be2539b5c6b523717632b87881beaec0569db6af80826faa45da3675bb9b1fc14a4b1680bf8514cdb87af8c8aaab93b33f4721dd5fc28f33b1f649e92957b66ee87f33b9998d4f2551ce6589756a2e1da7fd2442bb621b64ac32271097ccf3cfc87cd69174942b61d7110d699a4678f29ac70612eeafe582460d415717f2aa5ed488bf9bf2d1eeec231732a4330c546e21a738ad31916abc0f8a73bf5a27adf0c7cf202daca591bf7c6eba56373cd616065ca556a86fb5962c0d15487f06d97fe8d6c91f9477eb7fdedaa1c8c171b45d3cc3dbee2b9a0eee8b324f0e8a24b145ca55ef071516916fda9541c11ab942cd218b8852dd1f08e4f044ba367404caf5d7f1bca50f2dc6ed48295e47e5da89185472981aec1ad52c27f5fa00e7d75ffeaa37928fa5e687efe0ef337fa12b74fe9b23bf5c5ae94bb6204791d7a1d536d51147c22ac92590b9304298779166ef8166ecde1cafefd4a20098cc216df0be923de386b25db4c5300b0d4f90350f1038e612f6c808883dff39f571b951db70d697f2e4440509ac8f7a84e6d713bef4cf6a22469f5bea60c8ac65f49bd9b2f7652db8be519105b47bb3bb06188882e482d32668fd87fe2f3bdf378b26af5ab3dedf66b2e7f7236f4e283be21b15993be44751356b7e2308932463133167cc81e712d040616528e66d25de3f3131e90e6ec1eede76592420a583751eeef5481fce4a247ac9a98932f56221e3d5383625d63cc38959ca0c5b7b219982472272891c2db80fb749f264793ec1738b207557318bd1fb9b8fdd08bb19119c67921a706013e77dc9b535f91b5de386c36d9713d6042cf645729989b8baff8b448f59279da6909294c1c3515ae4c9014de00cc1052ff4830734bd6f0b0a3172fb3b54c05a840c93a64d1d55e67a32be2c54f59eb01dc9d03406843d6e75c47e102eca2ddd3eadebe02cab0fc29701ef79f5f7d0af5241fb79c3ac6a60bddacbade57c42acffa9b7dd91b36ff65ceca1157d284d5e95d5899187eca5a54b6982fa1dbff8007d06ed284d5d0f2bba5717464dbc3ab38e4b7d71f2cfe4f5e7998d8958dfd9d62de20c7b1bead39d144ddb462bdb6e262aef8b13295f1f6ef2776a52dc11a61ebcf5d32dd1b57c2a45c35253c8d6dfb5dff9a62b4158e0efab7dcffdbfd1cb11876ad910b2114cd3506ad2b710d4d791eb9c3a4ae8be2af9501829fad8389cebd7c0c1f5733986d1e20937712f18617c003ebb8ebfa6ff8940ded9f915400b7b3cc27428edccad4fea4da12426a0436b8e3358fe9f98d3863e0c1a6ff18bdaaff7dfe49959a74d6db10e3c0f870e5b84ca0cba8bcff14d105b53334d6aa48a1e82d904592e88dc657e0d6b00acf5b538bfe661c055cfb299ebde9602f0fdfee5417a198e9b346c102a3240a6b9127f6232c3964902be25bb91bee2e1093511586c3cad0e77b74b98a0fda2061c3d62ad0c86ef94794b26b2d49f647aa0efaa3d9cddc77236989d479ad4927ffc1805ed6fe2615140da58909d58f4ca104acdf286105b0b5437b606cddabef1d6ce308d0065d12234d2c6d0586f49d80f30a311c65665e3d41bb38d1b43ed6220fe0ec9bf512a8c01ceb4b87b745059e3a8249f240ff5f58114102e4ab469fa6e6c81874d385df405e677c66186a5333e97005742fbfd0e3488b43179b4df88070561eedcee255732e35ff86d4c52cb58ae9c02156ca18c4f215c31e96c91235a3bb9aa0315d039169d93e696e0f8a6557d503935539cbeedbbb62cdca9fafaf89fae0caf11ae2012d8a2e1d498427f60d6efbe001ea3b2e41270ccbd8128e8e8d9d473aa67b670aad22809637c9b87725eea5246b4647157e941739f75b4d192ee3e3013167f5f6eec4de8b12ddeb03ff42882f45d1aaebe500602e7a4af32765afe4c4df3925ddb393dad904b6407d1b0946e6f1ce0fd1d187fdb1e23b575a37d66ce0141798f42f37aa60485a6c983c70ccbcf927efc417df8fa7bddc81930c35e0488da3b474e6203cbac0ab219dc298e08e21649101542c9c821444dc6181638fbf38d46e5cc5f82044993afa7b0a3f139af9ee39890c9b5320194bd71e3ca2aac40c0eb51334eba9d00b355b66365a6f66c873ece05b3ed8e2448152f4698d8de7c9e422c47b131e428e719ec86c33f95ec93bb07c7604653e010a7c97dbc5bb9caca9a73b43132dc2ff0de838d62f8675caeb0d50987479606de8d488d37979a38a884ca411a833d423578b5cf91d37fba2ca50a83db0c682af1c487c2bf565b468aa61d5ce40ba7b1da95a87797a35a88fb020a1516d1ee9b42517035345d90f54eb15a3833db447a72ae56555dbaf3abd8c3b027e03b158aa705a2e189b47cae20e3cfd69a0e86537097e853feb5e424e3d59f7ef468c1965b0c88d81ca69e6eb3388de2dc1322377b2c4d06bb27ff4259612af17fdc9d583705d0a5cf7da09aca2ae567457220a651fea11a08594ebc36b67c75536cf5516abdb422e4ece43eca8b44b47d8a4f14d98b43c656f01bda69ac76b4fbe2ab99086f20f1e8a21c8411eafdfb1758a39042ec007819be71167c46e99500631c38c11428bf471cfb7d3ce7c772ad6dee870f74d2b5ed60dcfdd5676275f7375fd74d3071457dae7291585cb7d326bce1006d61355ea26d5679ea4d8a3fdda0c928dab37e825c0b4db23f7bacec3d20356b36c9d3df2f96a45559c0194379a76aba3f544144838dce1a1b28329c65c8fc43595735970a0ca8d9b8cfa21fecacf63af2b30e33424b03e7b731a0d8bc92091cfa52ee497c7b05bb5fa045a662a73155ecf0dfba6d893940bbe8a41e7c25e112ff0089a7b28b3d3319c67c63504ffdfe6e7b2f74781ce228e77df4de891f0900138499eda0fddefa77da90977e45ab93529f9359ff42e399214f68c637002c4f48b02fc4e31251ab67aa8bb7a0596a385db4cfca92c5ff4201cd8a384fad73df9e77879e663d8972bbfaed7b503b92269c2ecb6b9ecbdd6b4ff1af13b7db6036f129b74485038b065c601428298aad01b836eef1ba6c3811145df1cb62a9d0b9f76e40e17ab367fc7314753433d32713e88f570b66b9df5cda140123c6a6f9a032e523e3180337eabf25bc0da8dde3ee17d119f4ed5553337fd62c861b945ed0d0ab3a95d6acd3fee9c156c7aa9b3d4b6e7a9822971d60546ca9e87971a721a3f443562d65613502146c00945991a0981891e2035c2f395e26d9ad0671e6936e8646cf2e3a5c31c5fe86ecf9474aa5641cac6ca6844f6c923305cd6cba907d26bfafa65e81fe954d0a4c40e8a2d45863452955ef3283ad2bd65d11d139d10fbc270eded823e17235f87e42dd95450eee9d529a7c7b4a6c43fe00af5b05af506bb1dfe5126baaa64707b6b69af6537468a6122baff691879cf14a5b3b80cd2aeffdb8af08b03b72a4680df3022e7ee291de202d87fe763094d43a972292125a2688bb45446c33b7a4b43c89f85b168e46e0b42a91819aa490477708e2ba99ee515f4d3fcc5243df4d710a15fa26e4bd39845f2d8691245f036a96ad83e7e00674153259b7b94b72ca1475ed6220dc6151084587e9bb337b402a4708765d55d4f9ef5e38ec100508e21dc8f999a368118621948a11693e33e9079f5fa99b4067afc70ae5e92199fabc4288ac2013ebe66a278f6a03e7bb4f5125be6abd1e93f75763cec1087a6fc6b6f242b0621127df7e27567356e5160a59a3fd4ccbecae55127327304b6a5a34e42e8e982da0a132a30b5539e4655f43c796708cfdab22a2cd18c5e70ec2484cff478d020b94eaf58894bd8331cebf7d8461e23642af925e710955be83c587f8fc9fb1b5e75e3448e6555426d40049aef7a6635041d3cb5d7f6097f8bfa50c9100f05b9f226d579b96883e4eea289a64e3ab72c578a3f79eb4a7d530a84a0920c227efcad1570ef3eef37c3db07198a85cde2599b4192a8c94362c28affce32e3a65d654b1444133eccb09432641633878c84a5f152e0248f2215c2a50be3d3d2dba5e66fa34c89bc62a5f2d7d0681fe57662b021dd7359feaad7dacdf751cbd53cd3642c45ebf2c1fe945d22d37a3cdfd909f592248a49655b4f684adb316dbf8d090f69416921271bedfddc49ad6ec77f9fbfb42ce1dd7e252a1b3cbd30a9c5e03e7693fd1f385e7e67eb519926f74234c595e4bdc94a72c877385a72330e565f2b4cfdb97ae80ebc3a3c239de31dbe6fd4", 0x1000}, {&(0x7f0000002980)="6ae9ffac64a76828ea680b6be6cfe46a55833f3919c47ef412ca9924b5b971fef9837894f3746ff15ab3eccf19e74e3f786996cd4c56d3f2e7a9df50cbf026cf3b1358caa38b099f4294d5c99682df4caa7616d4860cdaa3a918365a16eb91f4b22a2933a0ac5a56a10a0b972de3475f9eb3bdd415ed2cb851d4097b457e24eea4b3cb0f87416e6c8794c12dd539d32fa3896983035575802f06ce7aac5aca01a23a91b7e2221e2323095ebc69a38fc9a6a3ac7ea4f0", 0xb6}, {&(0x7f0000002a40)="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", 0xfe}, {&(0x7f0000002b40)="615af56fed35c6c14149fb62b1914ba31ff3a7f4a80347c28aa11cf815ced0949f2c3f344ceaf156d1e9c2ab8347618f84f32f3370fe9343f88d4bed35756c6f5bf3f04240a01c7c507a88d8199167b2a59d3874e9c6e6fc3e0d88a13608b1ff660d83adb44bbb44cf3cc01e67e2071fe907b2c9cff300bcb8e923d79abb1684a8d9923c09211985fdc799c3683f922557f0388b31731db4694cd2764930e646cd37e3d1f31276dd557539b676459cf50be204f59e42bb86e4d30619f507deddf585070beae70186218780a996eabf5ea913c4e6f170574a91fb135a752aaec3789e", 0xe2}, {&(0x7f0000002c40)="36ac478edc028b1cccd6f82566bd24dcee4153d82030fd5de86dc31771ec22383e15a8eda66b283f6243c4c6a9ba9323ab09dcaf6d024c37ba0d912244e14ba87313ce04f90da48dd7fca5cd725ce2bdb66df4ac4769f2b151c10ee94ff4d16d01b5766617b06ef79332d512ebbc96e6ec1fc06dcf58474917cbeab54dbc7f59065eb049ce0371fa68f7bc6127006ff43342d71029f331442202ce093184ef5e7d8e6b342be2b96a00", 0xa9}, {&(0x7f0000002d00)="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", 0x1000}, {&(0x7f0000003d00)="e5c2023b9c5240f7a75c0996cb086923a86c05113218bac51a79d5964771ace32b1b29e08fce03f2b5735e580e197fd4675140e6b7af54603a5a", 0x3a}], 0xa, &(0x7f0000003f40)=[@cred={{0x1c}}, @cred={{0x1c}}], 0xffffffffffffff6c, 0x1}}, {{&(0x7f0000003f80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000004240)=[{&(0x7f0000004000)="c23d39c1", 0x4}, {&(0x7f0000004040)="637b052ca860f126e33614cea1de07df102643325ba466b8df70f45deb9ea6a8dc247e8221a13259efbf9df8518cc3f7451b0018d7e67e82ee8b1fe285fb046789589c3822c051ae44fff2c15721fe53b44d9c8fb6621b8f50aacdf4b9f64a996a2464d91606f81537f78392f0c07397a8c027f2e69f67c96205079c3609a9ebe741d6c2a131b2a067fb406a3daf1dfc53a776018d4cc940dfc1d22c94509190db15099b51d7f09928578c98e04f1dc13eeaf18f9edee4e10ab0ebea0e08b461fbe355efc80d9c51497ada86eb00c54358", 0xd1}, {&(0x7f0000004140)="517ebb5bfc7872aafea22b01dae5dc061ffa604360f0dc2b35a7a39d20704fb9b243e4d0aed57ad37f2198", 0x2b}, {0x0}], 0x4, &(0x7f0000004280)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50, 0x80002}}, {{&(0x7f0000004300)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000004940)=[{&(0x7f0000004180)="5aec78de25859d5c47b9c583f79fb8f4fad3d2c444979dc364fae54717d46b3deea8c852f6bc98410f523475743b183f938bf91ea92d93f5f9432370f35fa1574df09eff77519aba3f4f748d02958575be0f30a46ebdfb04d9b6bb5037bcdd", 0x5f}, {&(0x7f0000004400)="5e4aeec1290f9b470d4593462167414bf02ec6794134a37796dfd2a9252c359d91916abcdcc56b02694adab7b013cf31a8d445f6d37ce48f7ca472e5aaed90d64159c9b52eb2cdb97a6928feffa02f70b45e45c64bb1f96c1bdc41521ac1ee26fd49e1916aa30b92269969e426fa5a87bcdc3432e219fb09e4ddfab9f3cdc0dbf3ae1db180e408f874da84660908ce616ee85adb46e5c5ba635bc2c633b4f915f0c2a82a81a1913e5114bbf9ad4feb106785d7356d3675f894eced1f8a10a2d0cc146a6a0cf4a89e3979d58e6d175155532a922a8b27945a18cc178f", 0xdc}, {&(0x7f0000004500)}, {&(0x7f0000004540)="26f5f5e85f2afea264d2813c859d91b8d84020aa6c763a965ab8b7b61f86551a2976ce0a4cf40706979def8c4d0c2ecf55ab810863e1b20a03e7f1c749beef075720c31ecb49d16154c8504ff1df1cad21e1df6b8bc57e390751eb11b83762f7e34f24f2c3e0415119", 0x69}, {&(0x7f00000045c0)="6699acb215a64b2421a1995445cf0fb824d5dbebb9c457428bccf9afdb8e873d19347c2a04f6a7539206637311696f5ae9aebb617400886412cffb084e228fa847e68b747221cd5dbca33806ab58ceed9147fd61987cbc38d6a6e79aabd94e82b5dbe89ca5e78d9714746a2bfef1172bad3276ac2e9ea976a0b5e15c0aaf778df9ae6157037f81670ba99f4ec5186c07fcd471542c8aff85caa19ff65646becf441ccf201f61fb34e977289b544631dc29fe7bb73e769c676331fa323613acb28af14b9ab1c63a3205313c1edb02dbdd34155e258ceeec905a985726451c26855242dc9935ea15bd62eeb9c5c0f5209e408f", 0xf2}, {&(0x7f0000004b40)="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", 0xfe}, {&(0x7f00000047c0)="d275e760901d974232a53bd147b7d41e660895f696ac3987431a2853c8bdd094e5a0f2b185c816fd83a674", 0x2b}, {&(0x7f0000004800)="45f44618c81e39ea148c2e800ff41d5bc22918c4448b830093aa50ab9cf858e7c8c54d47d8d435588f15d33576ef89654f7c3a404d35e18d", 0x38}, {&(0x7f0000004840)="76b82a3b56fb74c4f43cb18b533015631ed339315f067e26b9819ea25eb67504b47125dc2ac0d5631c9f8ead203d7f7fd5206ecc83ab6776cb747c8de1fea5a6c41ff461d0a0d6e1212e9786307c82bbb18267cc5548ecab476b27c7a83a0b0cb093cdd08560d8381702dd668ad4ab2d434f633db2f196224dc841542997c94e1dfde4ae09358625c78c708d702919501601a4dd6c7b4f9ddf228969bbb574eaff4347a4cb648a60bbec10fbe564c81e5ca4b689862e7186ca3a8f28ccc0e639cd0c74ee7a830ac7ebd22ed060caf1dbb8bcd32220273185a1b11f447e063b1181c2eb8d5245d7e77bb2fd", 0xeb}], 0x9, &(0x7f0000004a00)=[@cred={{0x1c, 0x1, 0x2, {0x0, r6, r10}}}], 0x20, 0x8081}}], 0x4, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000018c0)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000019c0)=0xe8) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001a00)={0x0, 0x0, 0x0}, &(0x7f0000001a40)=0xc) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001b00)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001b40)={{{@in6=@private0, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000001c40)=0xe8) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001c80)={0x0, 0x0, 0x0}, &(0x7f0000001cc0)=0xc) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001d00)={0x0, 0x0}, &(0x7f0000001d40)=0xc) r17 = getgid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001d80)={0x0}, &(0x7f0000001dc0)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r19, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r20, r21, r22}}}], 0x20, 0x40044}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="114a", 0x2}], 0x1, 0x0, 0x0, 0x400e815}}], 0x2, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000008c0)="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", 0x1000}, {&(0x7f0000000400)="a0d18cd79f0b", 0x6}, {&(0x7f0000000440)="2c675e885af306e1554244f601acc9d773408d16d569a790ebfe775995abf304a8453170aa9b0f06b1d3c2f562e5be65b26d17f3f81fc38dffba95c4b2cc86bc154a233d15346b1296d05494ecbc8d7078f3b4db354178d25d8573484008043a3743cac78b2869de3bc1f840afa89165c19ac87762bbfa88c584267e372ea7a6799072c15314e2fa297e04", 0x8b}], 0x3, &(0x7f0000001e00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="000000001c0000070000a42c34e9000002000000", @ANYRES32=0x0, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r18, @ANYRES32, @ANYRES32=r22, @ANYBLOB='\x00\x00\x00\x00'], 0x98, 0x81}}], 0x1, 0x4002051) r23 = socket$nl_generic(0x10, 0x3, 0x10) r24 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r23, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r24, @ANYBLOB="000126bd7000fddbdf250e000000980002801c0003800800010007000000080001000200000008000100070000002c000380080001000500000008000200090000000800020008000000080001000300000008000100080000000400040008000100030000000400040008000100070000000400040008000100474900001c0003800800010009000000080001000400000008000200ff0f00000c0003800800020003000000440007800c000300730c0000000000000c000300020000000000000008000100000000000c000400070000000000000008000100040000000c00030008000000000000002c0005800c00028008000400030000001c000280080003002705000008000300cb00000008000300fbffffff"], 0x11c}, 0x1, 0x0, 0x0, 0x20004000}, 0x95) 2m26.097134519s ago: executing program 1 (id=5623): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac004000202080002000600010009000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$inet6(0xa, 0x80000, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x48, 0x4, 0x4, 0x19, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x20, 0x196256d47bbe9d62, 0x10, 0xae1}}) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000001c0)=r3) ioctl$sock_proto_private(r1, 0x8993, &(0x7f0000000680)="d8990ef9b33a") 2m25.796285231s ago: executing program 1 (id=5628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000280)=@gcm_128={{0x304}, "cf556c33235019ca", "b21caca21cd0da29761ca41cff49ec55", "2833fbce", "8893ffe76209f4c5"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000240)={'hsr0\x00', @local}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) (async) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r1, r2, 0x0, 0x20000000002) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="a40000000001010400b296fd530000000a0000023c0001802c00018014000300fe8000000000000000000000000000c114000400ff0100000000000000000000000000010c00028005000100000000003c0002800c00028005000100000000002c00018014000000ff02000000000000000000000000000114000400000000010000000000000000000000000800074000000000100005800b000100616d616e64610000"], 0xa4}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000000900010073797a300000000050000000060a090400000000000000000100000008000b40000000000900010073797a300000000028000480240001800b00010072656a6563740000140002800800014000000002050002000300000014000000110001"], 0xd8}}, 0x0) 2m12.268302221s ago: executing program 33 (id=5615): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid_for_children\x00') unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300200001000010000000000fcdbdf2500000000000000000000000000000000fe80000000000000000000000000001600000000081e00040000208021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x230}, 0x1, 0x0, 0x0, 0x24040021}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000440)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x7}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7ff}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x2}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0xfffffffc}]}}]}, 0x50}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r4, &(0x7f00000000c0), 0x2, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r0, &(0x7f0000000200)='THAWED\x00', 0x7) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e22, @private=0xa010102}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @private=0xa010102}}, 0x9, 0x401}, &(0x7f0000000280)=0x90) r7 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) write$cgroup_int(r8, &(0x7f00000003c0)=0x7, 0x12) bind$alg(r7, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) accept4(r7, 0x0, 0x0, 0x800) 2m10.785725344s ago: executing program 34 (id=5628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000280)=@gcm_128={{0x304}, "cf556c33235019ca", "b21caca21cd0da29761ca41cff49ec55", "2833fbce", "8893ffe76209f4c5"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000240)={'hsr0\x00', @local}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) (async) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r1, r2, 0x0, 0x20000000002) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="a40000000001010400b296fd530000000a0000023c0001802c00018014000300fe8000000000000000000000000000c114000400ff0100000000000000000000000000010c00028005000100000000003c0002800c00028005000100000000002c00018014000000ff02000000000000000000000000000114000400000000010000000000000000000000000800074000000000100005800b000100616d616e64610000"], 0xa4}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000000900010073797a300000000050000000060a090400000000000000000100000008000b40000000000900010073797a300000000028000480240001800b00010072656a6563740000140002800800014000000002050002000300000014000000110001"], 0xd8}}, 0x0) 10.981044142s ago: executing program 7 (id=6885): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200000}, 0x1c) listen(r0, 0x9) r1 = socket(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0x3e) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001540)={0x70, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x11, 0x0, 0x1, [@generic="25b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f88d6e1db9b2bb2e5c90fafb663cdebaede447dc8f6f61c6615fcf740adda4853b2d23adb37"]}, @typed={0xc, 0x5, 0x0, 0x0, @u64=0x5}]}, 0x70}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x14) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r6, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x3d) shutdown(r5, 0x1) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e20, @local}}, 0x0, 0x0, 0x5, 0x0, "af930753d5acd754b5bce70c98eaf1933a65b7202145eac36394bd3579d86d4584e5ab496dcf35dab624e30bcd4e0201772b7d805a789e556734cd9d4c2f87637ce413bb7ca06dc3951ccfeb8e689de7"}, 0xd8) setsockopt$inet_tcp_int(r5, 0x6, 0x3, &(0x7f0000000500)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r5) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000380), 0x4) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={r4, 0xaf5}, 0x8) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r7, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r8) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8fba4f98886ec72f26e52d614000000", @ANYRES16=r9, @ANYBLOB="01002cbd7000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 9.904168655s ago: executing program 7 (id=6890): r0 = socket(0x2b, 0x1, 0x0) listen(r0, 0x0) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x10000) 9.691329458s ago: executing program 7 (id=6892): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000440)={0x42, 0x3, 0x2}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x4}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) sendmmsg(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x11) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x134, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x104, 0x2, {{0xfffffffe, 0x2, 0x40, 0xa, 0xe7, 0xcc36}, [@TCA_NETEM_LOSS={0xb8, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x40, 0xf, 0xa, 0x4006559, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xfffffffa, 0xa, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0xd82c, 0x8, 0x6, 0x0, 0xc5e0}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1000, 0x2, 0x0, 0x8, 0x1}}, @NETEM_LOSS_GI={0x18, 0x1, {0x4, 0x4, 0x9de, 0x9, 0xb502}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x0, 0xfffff001, 0xf6, 0x3}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5b, 0x20000, 0x3, 0xa}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x40003, 0x0, 0x6}}]}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x6}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x40009, 0xae}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x100020}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x134}, 0x1, 0x0, 0x0, 0x4546cfee17049510}, 0x0) pwritev(r0, 0x0, 0x0, 0x3f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 9.569443841s ago: executing program 7 (id=6893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000000000006100feff0000000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c260400000000000023edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2040194}, 0x4000800) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 9.388951381s ago: executing program 7 (id=6896): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006a0083130000"], 0x20}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01002abd70000001df2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40040) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000002500010122bd7000fcffffff0a00000004000d001400e50000000000000000000000ff68ac1014aa2300bf931e4d9423f1a13711d4a92a0427fecca69f36fa49b11b7296c00cecd1f974b655a1ce85e85785027c93817a36f56b4bd4d178c1675a6d40028c3da25919e42eca192ac519c699be037b91470f35c90c36a3bd1789120954f934103ef54520cc5faafed979ffa808"], 0x2c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e643000"/94], 0x78}, 0x1, 0xffffffff00000003}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x3c, r10, 0x20, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x20, r10, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044041}, 0x20000000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r11) sendmsg$NLBL_CALIPSO_C_ADD(r11, &(0x7f0000000b80)={0x0, 0x11, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, r12, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004810}, 0x20020000) close(0x4) syz_open_procfs$namespace(0x0, 0x0) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r13, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCSPASS(r13, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x54, 0xff, 0x0, 0x8}, {0x6, 0x74, 0x6}]}) unshare(0x6a040000) 7.835694651s ago: executing program 5 (id=6915): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000002080), 0xe) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000032c0)={0xffffffffffffffff}) getsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000003300), &(0x7f0000003340)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r3], 0x38}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff00000000010000001801000020207325000000000020000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff85000000710000009500"/88], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r5, 0x0, 0xe, 0x0, &(0x7f0000000880)=' \x00'/14, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_int(r1, 0x1, 0x44, &(0x7f0000000140)=0x1, 0x4) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @broadcast}, &(0x7f0000000380)=0xc) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000004", @ANYRES16=r8, @ANYBLOB="010025bd7000ffdbdf2501000000000000000841000000140018000000a17564703a73797a3200000000"], 0x30}, 0x1, 0x0, 0x0, 0x4880}, 0x40090) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) socket(0x27, 0x800, 0x8001) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000003180)=0xc) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000031c0)={{{@in=@local, @in6=@remote, 0x4e20, 0xe, 0x4e21, 0x2, 0xa, 0x20, 0xa0, 0x2, r6, r9}, {0xa, 0x4, 0x8000000000000001, 0x80000000, 0x9, 0x9, 0x9, 0x200}, {0x100000001, 0x3, 0xf05, 0x8}, 0x7b, 0x6e6bb9, 0x1, 0x1, 0x1, 0xef2443fbee144576}, {{@in=@multicast2, 0x4d6, 0x3c}, 0xa, @in6=@remote, 0x3501, 0x1, 0x2, 0xe, 0x4, 0x7, 0x7}}, 0xe8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000fdff12000100000003000000850000003600000095000000000000006e7ed8890fbfeecf50ff73af0dcb3c5ae1f8d2c179eec0c382bad33a2544f6797018dc5aa660617d9b"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r10, 0x0, 0x1, 0x0, &(0x7f00000002c0)="87fc5d85f1a1cc8a0c3eae62060015c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x7a9d08cc}, 0x50) sendmmsg$sock(r1, &(0x7f0000001500)=[{{&(0x7f0000000480)=@pppoe={0x18, 0x0, {0x0, @local, 'ip6erspan0\x00'}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000540)="4ce5cf58c1db7b989e178fd6952d1715a1d838ac5d14b6edc1acab649cc9f4c615524daf4c6c14726800d4c2b78914ad25c8b234b1905467240add14f3cc5fd05dd51e8b0804e8623a1c4fa7ebcb394e9d3a41439719e83fcb78b848815773e218e103c23372df30552c9b512c89d0e2e6a957125541bc422c4bd9077e317087e819dd16269b3469af50570a4caa11f8bd8b40f078938ef8e13e", 0x9a}], 0x1}}, {{&(0x7f0000000600)=@xdp={0x2c, 0x0, r6, 0x32}, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)="97119b8de66e877e9054a0998b1a3700f0b5522a969f77697e", 0x19}, {&(0x7f0000000700)="cc9d6d06b6ed5fe28d237a298298bbe6ad1fd8145a8f7b5cf68e2d60b16c0274e9c645f2b7c4f47b0c9dae097e14feed79309b51fed00b9d07ce9159217af9e5", 0x40}], 0x2, &(0x7f0000001600)=[@mark={{0x14, 0x1, 0x24, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x77d}}], 0x48}}, {{&(0x7f0000000800)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000940)="1cdc9d22d2d3e2fd5929073a9b4f83971bff6ab3308dddb0093fbb5bcdc68b2f10072760be77681dc0d2c6a6cacb4ab8f6b3a0bdf36b6d917d69cadf092a39ef97493a52387710b168486df08ab7cf3966c3932efa2fe8540f5c5b7fda6cccf9566ff126133d40187af939a3b8dc3f694bd7f466d456cdc14099457b678bb2761fba7b0a2cd1d6b93cc07a2b97b5324f3abf2a654151846945f1cdbfa8c1e1264ec7d119f7fc7281b5a6ddd0d2969a18eb5f28c3885371739f09f1da325863f68a4460e5abcaec2bf9bf79a1c927dac6a249663c268596e5123f2803c625031279e1a181192b8f807f7dd9617e", 0xed}, {&(0x7f0000000a40)="63b195d71405374686b2ef79749fb2e8133c3491fc947a93a0add2f986e9e07d46ab6019c9140c10fb5589622ee2eacf7cea582c8eab257cc798165088e5db2c0749b48575756429c96b36636fbf925f0b4463ec2a08ded592522c82691ed75fb84a7debe28ddf35bb465d60bde9872c0f854e9b33e39222715e04464b14ba693398b3893ffc7c0c913341bbfb2cbe574b4e9a28d8b38723eddceb7104386d981f77ccd14ce813020416c7f85d073c1b6917d6510175bb34ba9dfb1a6ab9b9", 0xbf}, {&(0x7f0000000b00)="b749ad86f454bfb4489f4c6081e3a10fa7507464c8d259c772c1d7bb5e3e0551384ddb01ada9d7625e9239dbc367ad11d0e5cd7a262f712d7628f37c772ea919590aff4d80cf4c1debdf186c3c3e4d872bbe5aacc11df3a58a03d3031b0edea26994426996ef7d67f3c4b14bde5c8ae3596998dd12f98a2bf1da60ffee88d74b7bb14d09a40a366c695e95ffeaac", 0x8e}, {&(0x7f0000000880)="235c48fb7e2c4c77396e6a0b9ab7ba1c116963d220eac25abeefda", 0x1b}, {&(0x7f0000000bc0)="556c50bfc58b385ec381f8b04080a32c79387e2911939b622cbad10dd643cb705bf87100a71a3cdf57da0c8646e4b50beb0c8d934545058cb8bcf49c", 0x3c}], 0x5, &(0x7f0000000c80)=[@mark={{0x14, 0x1, 0x24, 0x7ff}}, @mark={{0x14, 0x1, 0x24, 0x8ec}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffff81}}, @mark={{0x14, 0x1, 0x24, 0xe}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18}}], 0xd8}}, {{&(0x7f0000000d80)=@llc={0x1a, 0x313, 0xfc, 0x0, 0x9, 0x1, @broadcast}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000e00)="d4a2c5f57a33500772cf367629edbe76b284289e754ab412cb206026e580bd5c36f9a6533f88155f2f9490aef608bcec8b1181a5f12080ef2ec22539b22fb7ff6412686978cd95dcdc8924880fcee83cf1bf4e5d16b82f28938f82301bc5ebd921521fd6ec4b18a6e4f772cebcbce1a7d058529f9c6f3564cbd5868ee725b0db9a10fd8d84a6c72a4e8d5a34787d43b6e9024b1525e06de764d1e3a815ba4acb18a5f0fa6ed73696711bd757b83b2513739edf4f5f46ac93279256c3a9d2c43b37594f292d9879b4130b3b29955d68ea42a0e6a8c02df4c804fb2fa28fb4532d3ae3151a54bd4e302d", 0xe9}, {&(0x7f0000000f00)="57104811ba2251f6c551a84d32b5bf01314aebfc85879314fd287788f2869f091b5957d7a3735454adc4e1d7fbc78feabfc93a1ff796253746c5bf18db9d792898a75778bb75fef78b8c63160dd86bf30c884198aff2be9276d7edfb155d3353afdb23337793bb82c283cce35dacd64174efe654782f0dd588d412dce9b08328bb1e99eef43030c140808e813cd375d9c1806d2c862ce335f906071377c560b27fc286afc922e7490936f3d1cf59c4c79ed61243a195832c30483db6e3e2fd301f4f29b4d7b35daa167f419a6892059ab2762a001e67db35bcaf05711f60f11945a28205bbda", 0xe6}, {&(0x7f0000001000)="acc18b47af6d67e4666a3e2e0d1142a1322e9ce241da867c9b3b9912f0ee0027e250937533f2cca24cac8639bf03abbfcb9a05e8af01310883fa183c29678f5acda96052bd17b527f1e08e8ab480f909794bcf756b158842c045c6e9c350baadc26c", 0x62}, {&(0x7f0000001080)="09186b71f3e1aa396e7f53f0ab16d2f842bd8101d1adc3ac199608880e3fdf827e7240cdc4f8d63d8936b5138a3fb29323002f326699d8a1cd82203de7ddfc49d668a8797ad0e89a836f4955e0bd15cc816be27e6cf93d07d2d45579f535d59cfe13e237c1ebc1318c60169e12d05af3e2d49586130303eff399e45f71d145651319f50a284a06f68949f62f252592db61c256931efb58710777a4f113d047a5efd93ff57d1c15b9680b6f29d70f18a2e3e6e5271d54417a2336220f1a926ec6e9ef40c767543f02ea5dd85d79c2ae4d8aaa07c85f2025190e63f26c5ec1973e72aa04cd", 0xe4}, {&(0x7f00000020c0)="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", 0x1000}, {&(0x7f0000001180)="06a4e9839ab74bab0dcea2e5b51e2264bae1740c09cc81671c042ea9f8ce9e1ba6ca07c86c43edd94c01a3f86b26b2f00935a23686110ce6ba86b5efbb8651143b8d7c3e07e46811a2dc9bdc1ce9ed5574422ec22e251ecc1cebcdde939b616a957d2f4946d1cd86ef66657b974ca304468369dd246b427cef7f5847771533beecdf", 0x82}, {&(0x7f0000001240)="cfd669cc0c87c0789c287f191ecc770529b18ebee952ea3f535b98498c72d18b632c5a61a46f5b255c3e31a756dcce4f6e1a15fad2a62c790171b31c4aece338cb0e913c99316079279c13158fee5d63cf1159a4febdab2c5fdc71953dafe8d52f8023ef88597ae3d906a8e6f0f3249d1fd5356fda9d1b83fa834ab6bb4af5d033a68aec82d4d3b1a18ae7b5bc5aca7c03608d7977699e050fd22f3a9a4bd700e8c5bdacf5d3d6d29be45ff97215c8cee575576be45d41e5ae93da26fe4055d337d72a4938e306fc08c961dd599e9f4607", 0xd1}, {&(0x7f0000001340)="06181e4a0a4986401986cc83d1fcd7f1a137fd6c75c11156544dccad5effd041fe63c9336a9a05065892f6fc6f0b1d08f0c70451a01c4f866d4325abc27f6af1ab59373c36902ae73131f7eaf720917f09e19b110ff7ff6a6e6f3d4e8a31b69b452e76c64612a353cb1c1711e1787cec16162911fd896c8e837535dbdd92aa4c1564fe3374738042dc35955aca2de19adbec621d2d845d8ed3698afa1b3a805e079a130f3446ea9a9e8cf3295a9f1ae023c0d3cc7c98b0a8e8291f3bcd172ccadd7fa157f0c6a782ba82c2d2a46f263ea1c1a38d65514e0552ca41", 0xdb}], 0x8, &(0x7f00000014c0)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}], 0x4, 0x4040004) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100"/17, @ANYRES32], 0x48) 7.683682762s ago: executing program 5 (id=6917): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c08000010482e80cc6931cd4300000000000000", @ANYRES32=0x0, @ANYBLOB="91800300000000001c001280080001006772650010000280060002002100000004001200"], 0x3c}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) socket$kcm(0x11, 0x3, 0x0) (async) r3 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000c40)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x4, 0x0, {0xa, 0x4e22, 0x4, @mcast2, 0x5}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7a5a32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf800000000000000005a08ffd35ed8371cff78019319b2b62c7cd9378c73ae90c80168685aef26cb00000000000000", 0x76}, {&(0x7f0000000f80)="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", 0x138}, {&(0x7f0000000100)="6f0300000001000000814402840000766c90af7d10d4996ce1f3c34465a10e3cc7589ae1520aed8daf4cba583e8118f49e3e87de65fdda29207c53a6f73188be0eea87de09d9a43e82c5ba42c31bb4027f04dd788f1c09000000000000002d36523a3d9bcfb204d992b9ead66d45dcb435fb47275157961495b2cb45d2", 0x7d}], 0x4}, 0x0) unshare(0x62040400) (async) unshare(0x62040400) unshare(0x44000000) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000200)={{0x2, 0x0, @empty}, {0x0, @dev}, 0x12, {0x2, 0x0, @remote}, 'lo\x00'}) (async) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000200)={{0x2, 0x0, @empty}, {0x0, @dev}, 0x12, {0x2, 0x0, @remote}, 'lo\x00'}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffff7, @empty, 0x1}, 0x1c) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffff7, @empty, 0x1}, 0x1c) sendmsg$NFT_BATCH(r1, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0xa17bdf2450447a2e}, 0xc, &(0x7f0000000600)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x248}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000004) listen(r4, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00006dbffc), 0x4) (async) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405}, 0x94) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r7, 0x0, 0x0) (async) sendmsg$xdp(r7, 0x0, 0x0) close(0x3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r7, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000e40)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) sendmsg$IPCTNL_MSG_EXP_NEW(r8, 0x0, 0x2000c090) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f00000007c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x80000005, 0x5, 0x5, 0xc}, 0x10, 0x2489f, 0xffffffffffffffff, 0x4, &(0x7f0000000bc0)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000c00)=[{0x3, 0x5, 0xc, 0xc}, {0x4, 0x2, 0x8, 0x5}, {0x2, 0x4, 0x1, 0x9}, {0x5, 0x1, 0x5, 0xb}], 0x10, 0x2c9}, 0x94) accept(0xffffffffffffffff, 0x0, 0x0) 7.069666607s ago: executing program 4 (id=6924): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00', 0x1, 0x1, 0x1, 0x3, 0xa5c, 0x802}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000043c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}], {0x14, 0x10}}, 0xc8}}, 0x0) 6.8331324s ago: executing program 7 (id=6927): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r3 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x6180, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRES64, @ANYRESDEC=r2], 0x1d0}, 0x1, 0x0, 0x0, 0x4000051}, 0x20048045) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@bridge_setlink={0x20, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x20}}, 0x0) 6.761544688s ago: executing program 4 (id=6928): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0x1) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000380)={0xcae1, 0x5, 0x1, 0xd4, 0xc7, 0x3e, 0x5, "e47236e11a1302a67de9c0faf798890440f4dad9", "da794ad366c49b9ac0d05c5473e0094aa880d038"}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15e3000000004000140012800c0001006d616376746170002100028008000500", @ANYRES32=r2, @ANYBLOB="0a000100aaaaaaaaaabb0000"], 0x48}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f00000002c0), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x0]}]}]}, 0x30}}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x78, r7, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_WOL_MODES={0x4}, @ETHTOOL_A_WOL_SOPASS={0x44, 0x3, "96eb513ed2c73a58a51f058a8512ff07e00c02968e3dc10f18056e313bb9e29093b53e4bb836dff692e4ac7ee4dd8c7caf654185a0112e52d18c1cb6c2650e57"}]}, 0x78}, 0x1, 0x0, 0x0, 0x805}, 0x20004000) 6.538312738s ago: executing program 4 (id=6931): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xec}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000100)='Z', 0x1, 0x14, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x0, 0x25dfdbfd, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(r0, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000a40)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74c05d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0ea0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a78", 0xcd}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)="b91951e2e6630d285edbd9e5d05aec1c67faf8282eb689a682382d4938a03e48710d854ad01a2a5e0428d37671013b5a567805634d8558f0a063eac517cdd760d3eb8db90655502980ad5259c86f5a99fb1e609690142c021fb82389a9d81bf1ae1ea4380cd91614a1581a398b8e89dc65ab0812d10e60704825dbc5d3550734266dd8b9db5ae785dee8d8b05deca7d52c9336206a3cf00d727fc6c6cbf95af7c6ac79dccc02d46db3db29b20e814d", 0xaf}, {&(0x7f00000003c0)="3efaf5be04e7699faba2b7865e0233e75843ebe7f2f047f11f27d3b420096e4cd3e2c82c7ec75352f3c94b1f8cec1768aa740df9e33d1f3a28826dcd7d5038b8924846fe84524c592c03add30883626b2d1f105e2a98adb35342b017bef7d5397331402bcb45a278c4fe6f98c03c0ed3bb59abcd25375344380af5559cf44c1a0e55a6cfe0f93554f098e301434025adc77e12c1cc3d7362d07219d99e8dc95cac3286ec410d6e1108b0856b367f035585aafb6f72a3a6d3d1908da356ac12ca5576651313d8ad", 0xc7}, {&(0x7f00000004c0)="eedb3cb0a55cc1ce2ec41b149aedac0c1b3e2f658e963d89af7cb9a9e78a97247a5a95e0498088288e88d75014bf941b4b640cab41b4b5aa6602d2e0ca92290fb14964ddf4dce67a9ba4df1225ba00689898c4b8d81dcad51f22f50e583d9c20fdfacc359ca02a2ca4ee38f422d9ec97f8c41601daf75cbc4202e4550dd1eaef6f146806fd9e31139d0003f0ba045b87d1c2d9c970b4db77eef3f19145de", 0x9e}], 0x3}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000900)="802dc6eeb4ee6b56011afcf0bd4674ea158d3eb0d1633d2b1388ab80a104a74a985d9c", 0x23}, {&(0x7f0000000940)}], 0x2, &(0x7f0000000b40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8000}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000e80)=[{0x0}, {0x0}, {&(0x7f0000002000)="1ab2539912cad449b92e759dab1f17f5cdafd7a3811cc50fe9c0deeb1c9ab8c74c0b06821c826fe1d1ed8617bf8ddffb6616c4f4359565512c6d494b27f84021033632fb7fc5477388165d8a644f3aaa2f1388633b19d0fcd99d717183df1cdfa8864ccced825ddf30610b25f9b452a64179460156c55fa920a4d0a3466bb6c921cb9071a5039e9507632ed984c39aa165e065ad48589798ba378147a1fd318e65ae6fecca2e2835e3715e745038bc1e", 0xb0}], 0x3, &(0x7f0000002100)}}], 0x5, 0x408e0) shutdown(r0, 0x1) 6.417360093s ago: executing program 4 (id=6932): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000280)="f040be7bcf348c9e9dba5ee1d2a305ea2b3870e261b0dd2cd2a4e9248619e8c207cb49edd6fe42306eb16cf65b859eec536f018de5653053b55bf6b74735f624cc198d5cfe751e6d3424b92ad282d1e0ce61dfb4f862c0c5624c924d0bcb0db68397e426380cbe43664b39823e3b61ba01148536bdbf6254ee650262d13295876127fdefc6b665f5548d35b8e48342662e4abdcb283bd39b0612f8abec2004d34a4a85d8fa13abf73b1f9dca25d3a377a2b966753e73bedda67152039064dc2b1ac56db2afb7fe7326b6549abae3c9f0081a2c4c950d288f0e2f21b167aa", 0xde}, {&(0x7f0000000000)="c5e78fbdb4605e66e036d4fc5f9ae66a12b0503d4c9ea04e70c5f65c4b03b7ef48ff4a8a399c56a271a686e0ab62cbe0ed11e0960776e40bee5d", 0x3a}, {&(0x7f0000000080)="c16e8420f0534a7151e4bd8cd2dbc1c1db6e5e8fb53dcb8c082b55018680ab064cb780e5c7a169aa2f118328e9438effd5fb694fed8a665bb5816dee1bd0534db41947c7f3aa2509f1ae03b41a6d978ff6ea5b5820834ebc00ab45d041054fde9c6427627604f4e9ab09342256", 0x6d}], 0x3, 0xff, 0x1) epoll_create1(0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f00000003c0), 0x0, 0x2400c040) unshare(0x2c020400) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0xd6f, &(0x7f0000001280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local, @void, {@ipv6={0x86dd, @udp={0x5, 0x6, "efdf22", 0xd39, 0x11, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@srh={0x2f, 0xa, 0x4, 0x5, 0x11, 0x8, 0x6, [@remote, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, @local, @mcast1]}, @srh={0xc, 0x8, 0x4, 0x4, 0x2, 0x40, 0x1, [@mcast1, @mcast2, @private2, @mcast2]}, @hopopts={0x67, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x40}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x4}]}, @dstopts={0x32, 0x16e, '\x00', [@ra={0x5, 0x2, 0x3}, @generic={0xfb, 0xb6d, "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"}]}], {0x4e20, 0x4e20, 0xf9, 0x0, @gue={{0x2, 0x1, 0x3, 0x9}, "ec214c88c5b5fab209fd8c6777d6f72fc0c4d1f01926328d871e69436cd7afeb66b5507aa0ef5bef87f06eabc61540fd2f022b27e689aef9bfd3cecab0acaf4ed328b7af1beba1619f0ddccfdc43c0024cfeae03efe2170bb8135331ac32516e8e37f9198cccb0577d2f54b25dbfb9a31f35b8594cf01cc189353acc433e7b4396e54bfeb4761f565e6c963903debf0644b31e8a2582cdb8b9c627f8f23b616e3cea4c9ea9f0fc3b0f7f625091564739d7a3338b8667e2307bcfd4d04a4beac2173964f59edd44b52856c1ef6563e96ef5ef1413f9049351aa6b9b2dce32111c296489583307bfbdf5"}}}}}}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value=0x180}, 0x50) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ec}, [], {0x14, 0x3f8}}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000008000000e27f000001"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0xfe, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x5973599c}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x20, 0xcd, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5, 0x1}, {}, {0x0, 0x0, 0xfd, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x0, 0x2}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {0x800}, {}, {0x20, 0x6}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x0, 0x4b}, {}, {}, {0x0, 0x0, 0xe2}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfc}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2}, {0x0, 0xb}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) getsockopt$inet6_opts(r5, 0x29, 0x39, &(0x7f0000000380)=""/134, &(0x7f00000002c0)=0x86) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000000)={0x8, 0x4, 0x7, 0x3}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000023c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_DELTABLE={0x54, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0xa}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x8000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) listen(0xffffffffffffffff, 0xa596) 5.62656618s ago: executing program 4 (id=6936): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) (async) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3b, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write(0xffffffffffffffff, 0x0, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)=0x2000000) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x43, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0xc, 0x1f, 0x0, 0x0, @u64=0x7ffffffffffffffc}, @typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000540)) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x80000001}, 0x10) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0xfffffffffffffceb) (async) shutdown(r0, 0x2) 5.41420157s ago: executing program 4 (id=6937): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000140)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e23}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="89ed4df4a553042326ac7276dddf7fe96a6a0f738446f559a63caa87931c26ff1ce3812a", 0x24}, {&(0x7f00000000c0)="1964155420a18b9c8bf7e3d3da57126574cc4e9930c505e49f4c1f1ea6a61bce", 0x20}], 0x2, 0x0, 0x0, 0x4000004}, 0x4000000) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01f71800000000000000240000002400000002000000000000000000000400000003000000000000000000000000000000000000000d020000000000000600"/94], 0xffffffffffffffff, 0x3e, 0xb1, 0xa}, 0x1b) unshare(0x6a040000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="f6eb09454900000400000000a08f", 0x0, 0x804, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.473524374s ago: executing program 2 (id=6944): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x10, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x3}, 0x94) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x3}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x7) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x20050800) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r8}, &(0x7f0000000080), &(0x7f0000000280)=r10}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r10, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 4.421074727s ago: executing program 6 (id=6945): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='GPL\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000008000000000000000080000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000c2498500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (fail_nth: 80) 1.445233316s ago: executing program 6 (id=6946): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000fc0)=[{&(0x7f0000000ac0)=""/244, 0xf4}], 0x1, 0x0, 0x0) (async) r2 = socket(0x2a, 0x803, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYRES32=r2], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000001700)={{r3}, 0x0, 0x18, @unused=[0x5, 0x3, 0x3, 0xfffffffffffffff7], @devid}) (async) socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xa5dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0xdbfd0bf4725ae7b3}, 0x4000004) r7 = socket$unix(0x1, 0x1, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket(0x1f, 0x1, 0x3) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x14, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async, rerun: 32) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400faced5df4aa0863fff090000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x68, 0x2c, 0x200, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x34, 0x2, [@TCA_MATCHALL_ACT={0x30, 0x2, [@m_ife={0x2c, 0x3ffe, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048081}, 0x0) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42, 0x0) close(r12) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async, rerun: 64) r13 = socket$kcm(0x11, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r13, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r14, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x10) 964.67425ms ago: executing program 6 (id=6947): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = accept$netrom(r1, &(0x7f0000000040)={{0x3, @bcast}, [@null, @remote, @default, @rose, @bcast, @bcast, @bcast, @null]}, &(0x7f00000002c0)=0x48) ioctl(r5, 0xa, &(0x7f00000007c0)="860b81e053b7d83368991d6fd2aa08d2630f121f6b3183ff9440a421f200d72de5eda158ae80744e20d021d0e1176d912780d92dbe2ab366e4708e480fcc16596728a530728be99a7a9c3883848f14482d3c65e10228a12f913ef424fbe3de9303e1ee5ec5a17e91a0f496b8cb1d3cce0aedad9fafd9d4974ec1a2a60a2f96e18be73f845e7b1b573cf065789289aa7919cfc3faf0e3e9e712603e6a43890e666ad6521446b52621a73aaa37306a80c37e0b3ba49a0924568f5945efb50b7a22966035c732a3d2ef3eb0425d5205cdc2a3c3046d40d5777eda41710e1e766d1b46135afca0f42179ffd438fdf091d14173efd353b249d707") (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r4}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipmr_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x90, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_SRC={0x8, 0x2, @private=0xa010101}, @RTA_PREFSRC={0x8, 0x7, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000071123500000000009500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 957.053898ms ago: executing program 2 (id=6948): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7f00fedbdf2504000000140001800def00"], 0x28}, 0x1, 0x0, 0x0, 0x42054}, 0x14) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="000000fd0001040008001b"], 0x28}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r3) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}}], {0x14}}, 0x78}}, 0x0) 912.506751ms ago: executing program 6 (id=6949): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) close(r0) socket(0x9, 0x80000, 0x80085) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x20}}, 0x4000004) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="80000000ffffffffffff080211000000080211"], 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0800050008000000733e2d9c2a5820f4954608cdebeff175dd59bbe73aadef682fa7f607fb7030035a183c33252c6532eaf3"], 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0500000000000000000021"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000010001000006020202020202010182"], 0x54) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="00001f00", @ANYRES16=r6, @ANYBLOB="01002abd7000ffdbdf253d00000008000300", @ANYRES32=r8, @ANYBLOB="08005d0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b020000000002000c116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) 835.906309ms ago: executing program 5 (id=6950): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001440)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000001480)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r3, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$llc(r1, &(0x7f00000013c0)={0x1a, 0x30c, 0x9, 0x7f, 0xfe, 0x1, @multicast}, 0x10) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4148b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0xa}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x48}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x101100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r8, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000400}, 0x240008a0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1340, 0x1130, 0x178, 0xc, 0x1130, 0x178, 0x1130, 0x258, 0x258, 0x1270, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x1100, 0x1130, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0x0, {0xffffffff}}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x3, 0x9}, {0x1, 0x2, 0x2}, 0x2, 0x2}}}, {{@ipv6={@private2, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'hsr0\x00', {0xff}}, 0x0, 0xd0, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xffff, 0x0, 0x59, 0x1, 0x0, "5b5e4637e2c868d14d9be48a2a79837d5499f42d086321ddfda71d6d982957c9efbee097d2c1e45c21510a84843e700c6ab764b15794236650ed3db73c2d916d"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x13a0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x4, 0x9}, {0xffff, 0xffff}, {0xb, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x2000080c) 733.544103ms ago: executing program 2 (id=6951): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb4, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6ef86656401a9a8a2e86f57570d6917d4769983f67794e6d"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0xb4}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x149ab3f33a73c847}, @TCA_TBF_PARMS={0x28, 0x1, {{0xaf, 0x0, 0x4, 0x4, 0xfff6, 0x101}, {0xb, 0x2, 0x80, 0x0, 0x3, 0xb0}, 0x6498, 0x4, 0x58f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x6f5b6e3c5b04231c}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x33, 0x100, 0x70bd2b, 0x25dfdbff, {0x6, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) 405.836837ms ago: executing program 5 (id=6952): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) (async) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)=0x28) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{}, {&(0x7f0000000080)="7d4f52b3a02df0fda865e0c939c76de3b94b64f08ae35170262ea0ccdb964853cf7f3daaf6bafaf4c13d08076a455969e2b142bf38ea62d7a470242306252af8f249232e9e2e50f17072074680f344fe214911923efc6111e303532d1a72a59ea9e8d4"}, {&(0x7f0000000100)="7704e309f6e65aa215c75627f575aae4bd762bb21441bcdad378201956d88faecf212eeb697c531c987fef275fa093986f474dec7b2b768402f1db12ad0ebd80a25ee73660ab7e544ae4bde16ef9498ed1aac6b9c8356e6d934e26"}, {&(0x7f0000000240)="a63c9497e16e4a6a1183101669145ce61b8df8acfc6124b1657ab0e324fac3795fcf128fd3cfb6ff7dcfa781241fb15c5bdf866a6f380abcae9b7c16f9e7022d88a23a"}], 0x1}, 0x4004010) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000000)={0x6, 'veth1\x00', {0x8}, 0x2000}) 395.070767ms ago: executing program 2 (id=6953): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xec}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000100)='Z', 0x1, 0x14, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x0, 0x25dfdbfd, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(r0, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000a40)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74c05d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0ea0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a78", 0xcd}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)="b91951e2e6630d285edbd9e5d05aec1c67faf8282eb689a682382d4938a03e48710d854ad01a2a5e0428d37671013b5a567805634d8558f0a063eac517cdd760d3eb8db90655502980ad5259c86f5a99fb1e609690142c021fb82389a9d81bf1ae1ea4380cd91614a1581a398b8e89dc65ab0812d10e60704825dbc5d3550734266dd8b9db5ae785dee8d8b05deca7d52c9336206a3cf00d727fc6c6cbf95af7c6ac79dccc02d46db3db29b20e814d157a2b520a860549d1a33c81abe6a3fe40e54d8b780db66f14c56c52db", 0xcc}, {&(0x7f00000003c0)="3efaf5be04e7699faba2b7865e0233e75843ebe7f2f047f11f27d3b420096e4cd3e2c82c7ec75352f3c94b1f8cec1768aa740df9e33d1f3a28826dcd7d5038b8924846fe84524c592c03add30883626b2d1f105e2a98adb35342b017bef7d5397331402bcb45a278c4fe6f98c03c0ed3bb59abcd25375344380af5559cf44c1a0e55a6cfe0f93554f098e301434025adc77e12c1cc3d7362d07219d99e8dc95cac3286ec410d6e1108b0856b367f035585aafb6f72a3a6d3d1908da356ac12ca5576651313d8ad", 0xc7}, {&(0x7f00000004c0)="eedb3cb0a55cc1ce2ec41b149aedac0c1b3e2f658e963d89af7cb9a9e78a97247a5a95e0498088288e88d75014bf941b4b640cab41b4b5aa6602d2e0ca92290fb14964ddf4dce67a9ba4df1225ba00689898c4b8d81dcad51f22f50e583d9c20fdfacc359ca02a2ca4ee38f422d9ec97f8c41601daf75cbc4202e4550dd1eaef6f146806fd9e31139d0003f0ba045b87d1c2d9c970b4db77eef3f19145de", 0x9e}], 0x3}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000900)="802dc6eeb4ee6b56011afcf0bd4674ea158d3eb0d1633d2b1388ab80a104a74a985d9c", 0x23}, {&(0x7f0000000940)}], 0x2, &(0x7f0000000b40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8000}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000e80)=[{0x0}, {0x0}, {&(0x7f0000002000)="1ab2539912cad449b92e759dab1f17f5cdafd7a3811cc50fe9c0deeb1c9ab8c74c0b06821c826fe1d1ed8617bf8ddffb6616c4f4359565512c6d494b27f84021033632fb7fc5477388165d8a644f3aaa2f1388633b19d0fcd99d717183df1cdfa8864ccced825ddf30610b25f9b452a64179460156c55fa920a4d0a3466bb6c921cb9071a5039e9507632ed984c39aa165e065ad48589798ba378147a1fd318e65ae6fecca2e2835e3715e745038bc1e", 0xb0}], 0x3, &(0x7f0000002100)}}], 0x5, 0x408e0) shutdown(r0, 0x1) 257.511709ms ago: executing program 5 (id=6954): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000008500000007000000950000000000000028"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000080)=0x29f) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x13, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x91}]}, 0x44}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000040)=@ethtool_sfeatures}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x1852, r5, 0xffffe000) 227.86459ms ago: executing program 6 (id=6955): r0 = socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$sock_timeval(r0, 0x1, 0x29, &(0x7f0000000280), &(0x7f00000002c0)=0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x5, &(0x7f0000000b80)=ANY=[@ANYBLOB="660a00000000000063110d000000000018000000000000000000000000e0ff0095"], &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$sock(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="6e81a8601d6c18ea3d61ad28ba598d99f8a76062af87c26ecf8ff1cee7ad7b994522da7330bfea70b36db1c0f4d700859c7670ac5d6c1facfe4b39048d408cb90c88874fd55095aa6da41895a6071ae889b7156123367211b2322f90498f9683f42bea1f2487d9049e161c01112b33611d235463add700e3", 0x78}, {&(0x7f00000000c0)="b4aef820861a7634f626755b3ef845", 0xf}], 0x2, &(0x7f0000000140)=[@txtime={{0x18, 0x1, 0x3d, 0x800}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x7f}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x61}}, @timestamping={{0x14, 0x1, 0x25, 0xf20eaab}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0xc0}, 0x8000) 214.089387ms ago: executing program 2 (id=6956): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x20000010) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@rand_addr=' \x01\x00'}, 0x14) writev(r2, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a0603a6ff8000000001000000006302496b3a17b42e64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="4dc07f947163300c", 0x8) (async) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd1, &(0x7f0000000000), 0x4) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000feffffff180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="00000000000000f4b70500000800000085000000a70000009504000000000000c53c917ad89873a0cd"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xfe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000080)={0x1d, 0x4, 0x3f, 0x2003206, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010104}, 0x10) 124.906359ms ago: executing program 6 (id=6957): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8918, 0x0) bind(r2, &(0x7f0000000300)=@hci={0x1f, 0x1, 0x5}, 0x80) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)={0xb0, r3, 0x632, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a59caadb696450a10c0acbb23b6d0843c8a43a8aed7647a0"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94) (async, rerun: 64) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000300)=@ethtool_dump={0x3e, 0x0, 0x2}}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x4000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl(r6, 0x8b1b, &(0x7f0000000040)) (async, rerun: 64) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x0]}]}]}, 0x30}}, 0x0) (rerun: 64) r7 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) (rerun: 32) epoll_pwait(r7, 0x0, 0x0, 0x2d516fb6, 0x0, 0x0) (async) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000000100)={0x20000014}) (async) epoll_wait(r7, &(0x7f0000000040)=[{}], 0x1, 0x400) (async, rerun: 32) unshare(0x2c020400) (async, rerun: 32) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008040) (async) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) (async) socket$inet(0x2, 0x3, 0x6) 39.191606ms ago: executing program 2 (id=6958): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e000006a001c000000000000000000000008000000", @ANYRESDEC], 0x38}, 0x20000014) 0s ago: executing program 5 (id=6959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000040)=0x1, 0x4) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe7b}, 0x90) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x34, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0xfffffffffffffd35, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc4612bd791b6d2ed}, 0x40840) kernel console output (not intermixed with test programs): 709.824488][T28142] vlan2: entered promiscuous mode [ 709.829694][T28142] team0: entered promiscuous mode [ 710.060216][T28160] nbd: must specify a size in bytes for the device [ 710.068903][T28160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5784'. [ 710.086679][T28162] bridge_slave_0: entered promiscuous mode [ 710.521740][ T5153] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 710.533902][ T5153] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 710.546453][ T5153] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 710.557118][ T5153] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 710.566672][ T5153] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 710.757932][T28184] syz.5.5794 uses old SIOCAX25GETINFO [ 710.836975][T28176] lo speed is unknown, defaulting to 1000 [ 711.403910][T28176] chnl_net:caif_netlink_parms(): no params data found [ 711.527544][T28198] netlink: 'syz.2.5797': attribute type 1 has an invalid length. [ 711.633711][T28198] bond1: entered promiscuous mode [ 711.665727][T28198] 8021q: adding VLAN 0 to HW filter on device bond1 [ 711.721490][T28200] 8021q: adding VLAN 0 to HW filter on device bond1 [ 711.734028][T28200] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 711.746114][T28200] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 711.756582][T28200] bond1: (slave gre1): Opening slave failed [ 711.781333][T28176] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.816386][T28176] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.844023][T28176] bridge_slave_0: entered allmulticast mode [ 711.862260][T28176] bridge_slave_0: entered promiscuous mode [ 712.033959][T28176] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.042790][T28176] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.071512][T28207] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 712.072640][T28208] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 712.083092][T28176] bridge_slave_1: entered allmulticast mode [ 712.140916][ T5153] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 712.151908][ T5153] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 712.161013][T28176] bridge_slave_1: entered promiscuous mode [ 712.168774][ T5153] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 712.177642][ T5153] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 712.187335][ T5153] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 712.400024][T28176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.473432][T28176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.580430][T28176] team0: Port device team_slave_0 added [ 712.606492][T28176] team0: Port device team_slave_1 added [ 712.676895][ T5153] Bluetooth: hci5: command tx timeout [ 712.683434][T28176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 712.714218][T28176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 712.744395][ T30] audit: type=1800 audit(1769203086.440:11): pid=28230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5803" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2805 res=0 errno=0 [ 712.814060][T28176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 712.845640][T28176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 712.859766][T28176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 712.918375][T28176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 712.945623][T28234] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input6 [ 712.969789][T28210] lo speed is unknown, defaulting to 1000 [ 713.183931][T11388] batman_adv: batadv0: Interface deactivated: geneve3 [ 713.736965][T11388] batman_adv: batadv0: Removing interface: geneve3 [ 714.033855][T28250] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5811'. [ 714.033855][T28251] __nla_validate_parse: 5 callbacks suppressed [ 714.033874][T28251] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5811'. [ 714.253743][T11388] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 714.262657][T11388] dummy0: left promiscuous mode [ 714.273342][T11388] bond0 (unregistering): Released all slaves [ 714.279456][ T5153] Bluetooth: hci7: command tx timeout [ 714.389631][T11388] bond1 (unregistering): Released all slaves [ 714.514663][T11388] bond2 (unregistering): Released all slaves [ 714.646123][T11388] bond3 (unregistering): Released all slaves [ 714.659176][T11388] bond4 (unregistering): Released all slaves [ 714.758338][ T5153] Bluetooth: hci5: command tx timeout [ 714.796624][T11388] bond5 (unregistering): Released all slaves [ 714.809133][T11388] bond6 (unregistering): Released all slaves [ 714.821310][T11388] bond7 (unregistering): Released all slaves [ 714.847418][T28176] hsr_slave_0: entered promiscuous mode [ 714.853907][T28176] hsr_slave_1: entered promiscuous mode [ 714.874354][T28176] debugfs: 'hsr0' already exists in 'hsr' [ 714.890223][T28176] Cannot create hsr debugfs directory [ 714.921335][T28248] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5809'. [ 714.986657][T11388] : left promiscuous mode [ 715.098108][T11388] m1Ie5n: left promiscuous mode [ 715.166465][T11388] !: left promiscuous mode [ 715.221653][T11388] : left promiscuous mode [ 715.370258][T11388] tipc: Left network mode [ 715.446348][T11388] IPVS: stopping backup sync thread 18262 ... [ 715.641993][T28210] chnl_net:caif_netlink_parms(): no params data found [ 715.736753][T28287] netlink: 'syz.4.5817': attribute type 1 has an invalid length. [ 715.766713][T28287] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5817'. [ 716.047511][T28265] lo speed is unknown, defaulting to 1000 [ 716.092776][T28294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5819'. [ 716.152349][T28294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.255915][T28294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 716.355909][ T5841] Bluetooth: hci7: command tx timeout [ 716.380201][T28210] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.388121][T28210] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.395455][T28210] bridge_slave_0: entered allmulticast mode [ 716.403329][T28210] bridge_slave_0: entered promiscuous mode [ 716.446712][T28301] tipc: Enabling of bearer rejected, failed to enable media [ 716.456444][T28302] netlink: 'syz.4.5821': attribute type 1 has an invalid length. [ 716.464508][T28210] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.465431][T28302] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5821'. [ 716.472890][T28210] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.488119][T28302] netlink: 658 bytes leftover after parsing attributes in process `syz.4.5821'. [ 716.488433][T28210] bridge_slave_1: entered allmulticast mode [ 716.505656][T28210] bridge_slave_1: entered promiscuous mode [ 716.513202][T28302] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5821'. [ 716.533502][T28176] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 716.559374][T28304] netlink: 'syz.2.5822': attribute type 1 has an invalid length. [ 716.617143][T28176] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 716.637079][T28176] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 716.759967][T28210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 716.778493][T28176] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 716.837854][ T5841] Bluetooth: hci5: command tx timeout [ 716.895212][T28210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.985079][T28319] sctp: [Deprecated]: syz.2.5824 (pid 28319) Use of int in maxseg socket option. [ 716.985079][T28319] Use struct sctp_assoc_value instead [ 717.144565][T28210] team0: Port device team_slave_0 added [ 717.157892][T11388] hsr_slave_0: left promiscuous mode [ 717.164357][T11388] hsr_slave_1: left promiscuous mode [ 717.218491][T11388] pimreg (unregistering): left allmulticast mode [ 717.859472][T28332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5827'. [ 717.892696][T28332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5827'. [ 718.056865][T28210] team0: Port device team_slave_1 added [ 718.062507][ T5941] lo speed is unknown, defaulting to 1000 [ 718.068916][ T5941] syz2: Port: 1 Link DOWN [ 718.188194][T28210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.208169][T28210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.235198][T28210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.297753][T28210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.305216][T28210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.335497][T28210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.429940][T28210] hsr_slave_0: entered promiscuous mode [ 718.435666][ T5841] Bluetooth: hci7: command 0x040f tx timeout [ 718.438282][T28210] hsr_slave_1: entered promiscuous mode [ 718.460586][T28210] debugfs: 'hsr0' already exists in 'hsr' [ 718.467353][T28210] Cannot create hsr debugfs directory [ 718.822292][T28346] netlink: 'syz.5.5832': attribute type 8 has an invalid length. [ 718.865911][T28176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.911794][T28176] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.918614][ T5153] Bluetooth: hci5: command tx timeout [ 718.931420][T11388] IPVS: stop unused estimator thread 0... [ 718.958042][T27335] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.965259][T27335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.060015][T27335] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.067296][T27335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.222754][T28210] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 719.233722][T28210] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 719.248751][T28210] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 719.261508][T28210] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 719.410777][T28210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.420940][T28360] __nla_validate_parse: 2 callbacks suppressed [ 719.420956][T28360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5833'. [ 719.452858][T28360] erspan0: entered promiscuous mode [ 719.460114][T28360] macvtap1: entered promiscuous mode [ 719.468604][T28360] macvtap1: entered allmulticast mode [ 719.474662][T28360] erspan0: entered allmulticast mode [ 719.484204][T28210] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.496435][T28362] erspan0: left allmulticast mode [ 719.501648][T28362] erspan0: left promiscuous mode [ 719.526839][T27335] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.533976][T27335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.559323][ T4511] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.566567][ T4511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.615937][T28364] netlink: 'syz.2.5834': attribute type 3 has an invalid length. [ 719.626947][T28364] netlink: 'syz.2.5834': attribute type 1 has an invalid length. [ 719.640581][T28176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 719.648126][T28364] netlink: 212 bytes leftover after parsing attributes in process `syz.2.5834'. [ 719.678700][T28364] NCSI netlink: No device for ifindex 813332851 [ 719.687224][T28210] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 720.189253][T28210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.305624][T28176] veth0_vlan: entered promiscuous mode [ 720.336194][T28176] veth1_vlan: entered promiscuous mode [ 720.393424][T28176] veth0_macvtap: entered promiscuous mode [ 720.415212][T28176] veth1_macvtap: entered promiscuous mode [ 720.441601][T28176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 720.463085][T28176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 720.494578][T27335] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.516815][ T5153] Bluetooth: hci7: command 0x040f tx timeout [ 720.525843][T27335] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.561223][T27335] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.575915][T27335] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.785344][T28408] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5841'. [ 720.940031][T28412] tipc: Enabling of bearer rejected, failed to enable media [ 720.963862][T28210] veth0_vlan: entered promiscuous mode [ 720.980026][ T1337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.025174][ T1337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.063641][T28210] veth1_vlan: entered promiscuous mode [ 721.122094][ T1337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.131487][ T1337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.171894][T28417] openvswitch: netlink: Message has 572 unknown bytes. [ 721.178970][T28417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 721.293787][T28210] veth0_macvtap: entered promiscuous mode [ 721.306454][T28210] veth1_macvtap: entered promiscuous mode [ 721.338675][T28210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.355514][T28210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.371776][T27335] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.408085][T27335] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.440463][T28431] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5845'. [ 721.470712][T27335] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.480797][T27335] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.558228][T28428] bond10: (slave bridge7): Enslaving as an active interface with an up link [ 721.606964][T28434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5846'. [ 721.630036][T28428] bond10: entered promiscuous mode [ 721.654573][T28428] bridge7: entered promiscuous mode [ 721.677019][T28428] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 721.686671][T28428] bond10: left promiscuous mode [ 721.691555][T28428] bridge7: left promiscuous mode [ 721.818371][T11394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.846081][T11394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.892156][ T1337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.901088][ T1337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.987984][T28444] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5849'. [ 722.022461][T28446] netlink: 'syz.2.5848': attribute type 3 has an invalid length. [ 722.108622][T28448] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5850'. [ 722.134550][T28452] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5851'. [ 722.174257][T28452] nbd: couldn't find a device at index 0 [ 722.322886][T28452] netlink: 'syz.5.5851': attribute type 1 has an invalid length. [ 722.335870][T28466] xfrm1: entered allmulticast mode [ 722.450441][T28472] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5856'. [ 722.494659][T28474] netlink: 'syz.4.5857': attribute type 10 has an invalid length. [ 722.524052][T28474] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5857'. [ 722.595013][ T5153] Bluetooth: hci7: command 0x040f tx timeout [ 722.834648][T28476] netlink: set zone limit has 4 unknown bytes [ 723.712609][T28548] xt_CT: You must specify a L4 protocol and not use inversions on it [ 723.736489][T28549] xt_CT: You must specify a L4 protocol and not use inversions on it [ 723.794542][T28544] bond11: option packets_per_slave: invalid value (1048582) [ 723.802552][T28544] bond11: option packets_per_slave: allowed values 0 - 65535 [ 723.815784][T28544] bond11 (unregistering): Released all slaves [ 723.995756][T28562] netlink: 'syz.2.5882': attribute type 1 has an invalid length. [ 724.435965][T28582] __nla_validate_parse: 9 callbacks suppressed [ 724.435983][T28582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5889'. [ 724.485616][T28582] ipt_REJECT: TCP_RESET invalid for non-tcp [ 724.505758][T28582] x_tables: duplicate underflow at hook 1 [ 724.804889][T28608] netlink: 'syz.5.5896': attribute type 2 has an invalid length. [ 724.848223][T28608] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5896'. [ 725.017541][T28615] IPv6: NLM_F_CREATE should be specified when creating new route [ 725.632557][T28638] netlink: 165 bytes leftover after parsing attributes in process `syz.2.5908'. [ 725.672232][T28643] netlink: 'syz.5.5909': attribute type 2 has an invalid length. [ 725.683503][T28643] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5909'. [ 725.714025][T28638] netlink: 277 bytes leftover after parsing attributes in process `syz.2.5908'. [ 725.771801][T28647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.870642][T28651] netlink: 'syz.5.5912': attribute type 1 has an invalid length. [ 725.909946][T28652] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5911'. [ 725.928870][T28647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.943289][T28654] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5912'. [ 725.953179][T28654] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5912'. [ 725.973554][T28647] xt_l2tp: missing protocol rule (udp|l2tpip) [ 726.005436][T28647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 726.103441][T28660] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5914'. [ 726.661819][T28676] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5919'. [ 726.718940][T28672] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 726.842598][T28685] netlink: 'syz.4.5922': attribute type 2 has an invalid length. [ 726.990784][T28694] netlink: 'syz.5.5923': attribute type 4 has an invalid length. [ 727.282772][T27335] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 727.291901][T27335] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 727.334962][T27335] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 727.359148][T27335] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 727.418635][T28712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 727.516027][T28721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 727.599026][T28726] xt_l2tp: missing protocol rule (udp|l2tpip) [ 727.636064][ T5841] Bluetooth: hci7: command 0x040f tx timeout [ 727.695233][T28721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.093223][T28742] netlink: 'syz.2.5936': attribute type 2 has an invalid length. [ 728.121756][T28742] !: entered promiscuous mode [ 729.010414][T28793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.098497][T28793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.143825][T28793] xt_l2tp: missing protocol rule (udp|l2tpip) [ 729.194541][T28793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.296967][T28806] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.304771][T28806] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.316492][T28812] netlink: 'syz.4.5954': attribute type 2 has an invalid length. [ 729.437515][T28806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.456759][T28806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.618660][T28811] geneve3: entered promiscuous mode [ 729.639757][T11390] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.665884][T11390] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.765279][T11390] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.787197][T11390] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.806335][T11390] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20001 - 0 [ 729.816017][T11390] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20001 - 0 [ 729.824322][T11390] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20001 - 0 [ 729.894855][T11390] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20001 - 0 [ 729.981550][T28827] netlink: 'syz.5.5958': attribute type 13 has an invalid length. [ 730.049194][T28821] __nla_validate_parse: 14 callbacks suppressed [ 730.049213][T28821] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5957'. [ 730.068314][T28821] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5957'. [ 730.175684][T28828] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5957'. [ 730.215011][T28828] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5957'. [ 730.296477][T28840] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5961'. [ 730.488872][T28853] netlink: 388 bytes leftover after parsing attributes in process `syz.4.5963'. [ 730.534236][T28855] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5964'. [ 730.589967][T28855] netlink: 'syz.2.5964': attribute type 1 has an invalid length. [ 730.657204][T28855] erspan1: entered allmulticast mode [ 730.670441][T28862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 730.705737][T28862] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5967'. [ 730.777218][T28869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 730.817159][T28862] xt_l2tp: missing protocol rule (udp|l2tpip) [ 730.847226][T28862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 730.931249][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 730.943926][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 730.956075][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 730.968750][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 730.977912][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 731.111897][T28889] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5973'. [ 731.125344][T28891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5972'. [ 731.536557][T28898] bond10: (slave veth9): Enslaving as an active interface with a down link [ 731.552927][T28904] tipc: Enabling of bearer rejected, media not registered [ 731.600212][T28901] bond10: (slave ip6gretap1): making interface the new active one [ 731.617008][T28901] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link [ 731.709622][T28911] syzkaller0: entered promiscuous mode [ 731.724870][T28911] syzkaller0: entered allmulticast mode [ 731.775500][T28911] macsec1: entered promiscuous mode [ 731.819424][T28917] netlink: 'syz.7.5982': attribute type 2 has an invalid length. [ 731.837764][T28917] !: entered promiscuous mode [ 732.152769][T28936] netlink: 'syz.2.5987': attribute type 10 has an invalid length. [ 732.200026][T28880] chnl_net:caif_netlink_parms(): no params data found [ 732.220831][T28941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.252873][T28936] dummy0: entered promiscuous mode [ 732.259776][T28936] team0: Failed to send options change via netlink (err -105) [ 732.268741][T28936] team0: Port device dummy0 added [ 732.330207][T28947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.388389][T28941] xt_l2tp: missing protocol rule (udp|l2tpip) [ 732.452065][T28941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.629333][T28966] netlink: 'syz.2.5993': attribute type 2 has an invalid length. [ 732.658460][T28969] atomic_op ffff88803ee56998 conn xmit_atomic 0000000000000000 [ 732.695016][T28880] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.702127][T28880] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.721459][T28880] bridge_slave_0: entered allmulticast mode [ 732.732197][T28880] bridge_slave_0: entered promiscuous mode [ 732.748563][T28880] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.756309][T28880] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.763603][T28880] bridge_slave_1: entered allmulticast mode [ 732.786800][T28880] bridge_slave_1: entered promiscuous mode [ 732.841259][T11388] tipc: Resetting bearer [ 733.085638][ T5153] Bluetooth: hci6: command tx timeout [ 734.484283][T11388] tipc: Disabling bearer [ 734.746543][T11388] team0: Port device bridge4 removed [ 734.927252][T11388] bond10 (unregistering): (slave bridge7): Releasing backup interface [ 734.992238][T11388] bond0 (unregistering): Released all slaves [ 735.003965][T11388] bond1 (unregistering): Released all slaves [ 735.017624][T11388] bond2 (unregistering): Released all slaves [ 735.134500][T11388] bond3 (unregistering): Released all slaves [ 735.146968][T11388] bond4 (unregistering): Released all slaves [ 735.154918][ T5153] Bluetooth: hci6: command tx timeout [ 735.162808][T11388] bond5 (unregistering): Released all slaves [ 735.278561][T11388] bond6 (unregistering): Released all slaves [ 735.394524][T11388] bond7 (unregistering): (slave bond8): Releasing backup interface [ 735.403500][T11388] bond8 (unregistering): left promiscuous mode [ 735.409911][T11388] bond8 (unregistering): left allmulticast mode [ 735.416581][T11388] bond7 (unregistering): Released all slaves [ 735.536908][T11388] bond8 (unregistering): Released all slaves [ 735.658038][T11388] bond9 (unregistering): Released all slaves [ 735.670785][T11388] bond10 (unregistering): Released all slaves [ 735.769155][T28880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.801551][T28880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.898213][T29014] netlink: 'syz.2.6004': attribute type 2 has an invalid length. [ 735.931087][T11388] !: left promiscuous mode [ 735.997761][T28880] team0: Port device team_slave_0 added [ 736.007761][T28880] team0: Port device team_slave_1 added [ 736.025054][T29016] __nla_validate_parse: 7 callbacks suppressed [ 736.025073][T29016] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6004'. [ 736.093106][T29022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.095784][T28880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.122198][T28880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.160657][T28880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.184473][T11388] tipc: Disabling bearer [ 736.201412][T29022] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6006'. [ 736.201956][T28880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.218116][T11388] tipc: Left network mode [ 736.222602][T28880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.249641][T28880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.261838][T29027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.368630][T29022] xt_l2tp: missing protocol rule (udp|l2tpip) [ 736.415861][T29022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.448959][T11388] IPVS: stopping backup sync thread 26151 ... [ 736.486415][T28880] hsr_slave_0: entered promiscuous mode [ 736.502786][T28880] hsr_slave_1: entered promiscuous mode [ 736.512579][T28880] debugfs: 'hsr0' already exists in 'hsr' [ 736.531584][T28880] Cannot create hsr debugfs directory [ 736.621747][T29040] geneve4: entered promiscuous mode [ 736.660413][T29044] netlink: 'syz.2.6011': attribute type 39 has an invalid length. [ 736.752082][T29051] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6011'. [ 736.778154][T29051] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6011'. [ 736.816149][T29051] netlink: 'syz.2.6011': attribute type 5 has an invalid length. [ 736.824158][T29051] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6011'. [ 737.120120][T29059] vlan2: entered allmulticast mode [ 737.177752][T29068] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6015'. [ 737.236440][ T5153] Bluetooth: hci6: command tx timeout [ 737.351551][T29072] bridge0: port 3(gretap0) entered blocking state [ 737.358252][T29072] bridge0: port 3(gretap0) entered disabled state [ 737.366179][T29072] gretap0: entered allmulticast mode [ 737.391414][T29072] gretap0: entered promiscuous mode [ 737.694326][T29097] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 737.704974][T29082] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:20001 [ 737.804307][T29099] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6021'. [ 737.840354][T29099] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6021'. [ 737.878571][T29099] vlan2: entered promiscuous mode [ 737.883944][T29099] bond0: entered promiscuous mode [ 737.889653][T29099] bond_slave_0: entered promiscuous mode [ 737.896979][T29099] bond_slave_1: entered promiscuous mode [ 738.096900][T29102] openvswitch: netlink: Duplicate or invalid key (type 0). [ 738.097085][T29103] openvswitch: netlink: Duplicate or invalid key (type 0). [ 738.104150][T29102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 738.155727][T29103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 738.317757][T29113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 738.387351][T29113] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6025'. [ 738.444010][T29118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 738.502871][T29118] xt_l2tp: missing protocol rule (udp|l2tpip) [ 738.546773][T29113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 738.584335][T29122] batadv1: entered promiscuous mode [ 738.859856][T11388] dummy0: left promiscuous mode [ 738.873034][T11388] macvlan0: left promiscuous mode [ 738.886192][T11388] hsr_slave_0: left promiscuous mode [ 738.892444][T11388] hsr_slave_1: left promiscuous mode [ 738.899110][T11388] batman_adv: batadv0: Removing interface: vlan3 [ 739.315048][ T5153] Bluetooth: hci6: command tx timeout [ 740.107388][T28880] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 740.157977][T28880] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 740.238306][T28880] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 740.294942][T28880] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 740.532424][T11388] IPVS: stop unused estimator thread 0... [ 740.636043][T29180] netlink: 'syz.2.6036': attribute type 1 has an invalid length. [ 740.639006][T29177] netlink: zone id is out of range [ 740.669958][T29177] netlink: get zone limit has 4 unknown bytes [ 740.893475][T28880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.981814][T29190] pim6reg: entered allmulticast mode [ 741.016339][T28880] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.315569][T29184] pim6reg: left allmulticast mode [ 741.361936][ T8714] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.369189][ T8714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.395459][ T5153] Bluetooth: hci6: command tx timeout [ 741.450652][ T8714] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.457873][ T8714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.856325][T29228] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6042'. [ 741.899399][T29230] netlink: 'syz.4.6043': attribute type 2 has an invalid length. [ 741.930912][T29232] netlink: 332 bytes leftover after parsing attributes in process `syz.6.6044'. [ 741.982149][T29232] netlink: 'syz.6.6044': attribute type 9 has an invalid length. [ 742.005468][T29232] netlink: 'syz.6.6044': attribute type 10 has an invalid length. [ 742.137298][T28880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.718655][T29268] netlink: 71 bytes leftover after parsing attributes in process `syz.6.6048'. [ 742.991511][T28880] veth0_vlan: entered promiscuous mode [ 743.208661][T28880] veth1_vlan: entered promiscuous mode [ 743.339525][T28880] veth0_macvtap: entered promiscuous mode [ 743.380756][T28880] veth1_macvtap: entered promiscuous mode [ 743.452754][T29290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6053'. [ 743.479597][T28880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.516169][T28880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.560466][T29290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6053'. [ 743.592265][ T8714] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.688146][T29297] bond11: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 743.705493][T29297] bond11 (unregistering): Released all slaves [ 743.737202][ T8714] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.747242][ T8714] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.757024][T29306] netlink: 'syz.6.6055': attribute type 7 has an invalid length. [ 743.788810][ T8714] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.866523][ T8714] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.884137][ T8714] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.934844][ T8714] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.943599][ T8714] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.018589][T29316] dummy0: left promiscuous mode [ 744.046238][T29316] team0: Port device dummy0 removed [ 744.073235][T29316] bridge_slave_0: left promiscuous mode [ 744.082278][T29316] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.094536][T29316] bridge_slave_1: left allmulticast mode [ 744.103072][T29316] bridge_slave_1: left promiscuous mode [ 744.111365][T29316] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.130416][T29316] bond0: (slave bond_slave_0): Releasing backup interface [ 744.150334][T29316] bond0: (slave bond_slave_1): Releasing backup interface [ 744.165750][T29316] team_slave_0: left promiscuous mode [ 744.177231][T29316] team0: Port device team_slave_0 removed [ 744.184295][T29316] team_slave_1: left promiscuous mode [ 744.197028][T29316] team0: Port device team_slave_1 removed [ 744.203867][T29316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 744.213124][T29316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.227006][T29316] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 744.281230][T29328] netpci0: tun_chr_ioctl cmd 1074025677 [ 744.295497][T29328] netpci0: linktype set to 6 [ 744.480472][ T1337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.493003][ T1337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.605495][ T8714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.616455][ T8714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.636229][T29337] netlink: 'syz.7.6061': attribute type 2 has an invalid length. [ 744.696721][T29337] : entered promiscuous mode [ 744.817451][T29342] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6061'. [ 744.906719][T19723] IPVS: starting estimator thread 0... [ 745.034962][T29357] IPVS: using max 26 ests per chain, 62400 per kthread [ 745.956163][T29372] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 746.046181][T29365] @0: renamed from bond_slave_1 (while UP) [ 746.100928][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 746.123351][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 746.132818][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 746.147222][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 746.158325][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 746.318210][T29381] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6073'. [ 746.401681][T29387] syzkaller0: entered promiscuous mode [ 746.413444][T29387] syzkaller0: entered allmulticast mode [ 746.507498][T29389] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6076'. [ 746.534912][T29389] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6076'. [ 747.034462][T29405] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6078'. [ 747.095212][T29406] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6078'. [ 747.751540][T29377] chnl_net:caif_netlink_parms(): no params data found [ 747.823403][T29420] netlink: 'syz.2.6084': attribute type 12 has an invalid length. [ 747.871133][T29423] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.879788][T29423] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.081877][T29377] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.105524][T29377] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.112833][T29377] bridge_slave_0: entered allmulticast mode [ 748.140350][T29377] bridge_slave_0: entered promiscuous mode [ 748.151985][T29377] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.159697][T29377] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.171754][T29377] bridge_slave_1: entered allmulticast mode [ 748.179836][T29377] bridge_slave_1: entered promiscuous mode [ 748.194984][ T5153] Bluetooth: hci4: command tx timeout [ 748.298359][T29377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 748.354595][T29377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 748.419123][T29377] team0: Port device team_slave_0 added [ 748.911844][T29377] team0: Port device team_slave_1 added [ 748.949884][T29465] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6094'. [ 749.035185][T29377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.042258][T29377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.124507][T29377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.148557][T29377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.156984][T29377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.203141][T29377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.226249][T29477] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 749.300543][T29479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 749.441171][T29377] hsr_slave_0: entered promiscuous mode [ 749.453518][T29377] hsr_slave_1: entered promiscuous mode [ 749.460959][T29377] debugfs: 'hsr0' already exists in 'hsr' [ 749.467136][T29377] Cannot create hsr debugfs directory [ 750.275027][ T5153] Bluetooth: hci4: command tx timeout [ 750.520442][T29518] xt_ecn: cannot match TCP bits for non-tcp packets [ 750.552729][T29377] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.573027][T29518] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6107'. [ 750.602051][T29377] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.633162][T29377] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 750.739837][T29377] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.777759][T29377] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.806222][T29377] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 750.901605][T29377] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.918223][T29377] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.929080][T29377] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 750.993796][T29377] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.011121][T29377] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.021972][T29377] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 751.158306][T29536] nbd1: detected capacity change from 0 to 127 [ 751.209685][T29377] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 751.217664][ T5153] block nbd1: Receive control failed (result -104) [ 751.259457][T29377] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 751.271163][T29377] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 751.311151][T29377] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 751.502435][T29377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.526683][T29377] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.540396][ T1305] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.547602][ T1305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.576751][ T1305] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.583927][ T1305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.612802][T29566] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.6119'. [ 751.662270][T29569] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6120'. [ 751.683825][T29569] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6120'. [ 752.354895][ T5153] Bluetooth: hci4: command tx timeout [ 752.453315][T29377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 752.528317][T29586] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6122'. [ 752.544426][T29586] openvswitch: netlink: ufid size 4235 bytes exceeds the range (1, 16) [ 752.554179][T29586] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 752.567894][T29586] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6122'. [ 752.578646][T29590] IPv6: NLM_F_CREATE should be specified when creating new route [ 752.624029][T29592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6123'. [ 752.701339][T29596] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6125'. [ 752.963354][T29605] 8021q: adding VLAN 0 to HW filter on device bond2 [ 753.017601][T29607] bond2: (slave ip6gretap1): making interface the new active one [ 753.026798][T29607] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 753.066131][T29377] veth0_vlan: entered promiscuous mode [ 753.093210][T29377] veth1_vlan: entered promiscuous mode [ 753.187967][T29377] veth0_macvtap: entered promiscuous mode [ 753.223408][T29377] veth1_macvtap: entered promiscuous mode [ 753.328650][T29613] netlink: 'syz.6.6129': attribute type 13 has an invalid length. [ 753.364792][T29613] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6129'. [ 753.413304][T29377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.475171][T29377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.511184][T29108] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.551231][T29108] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.587718][T29623] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6132'. [ 753.597236][T29108] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.608992][T29108] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.140502][T29648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6139'. [ 754.186366][T11388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.210338][T11388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.211669][T29652] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6139'. [ 754.283131][T29648] mac80211_hwsim hwsim74 wlan1: entered promiscuous mode [ 754.318797][T29648] macvtap1: entered promiscuous mode [ 754.370384][T29660] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6142'. [ 754.371146][T29661] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6141'. [ 754.439304][ T5153] Bluetooth: hci4: command tx timeout [ 754.445929][T11389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.458053][T11389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.533941][ T25] block nbd1: Connection timed out, retrying (0/1 alive) [ 754.544214][ T25] block nbd1: Connection timed out, retrying (0/1 alive) [ 754.552154][ T25] block nbd1: Connection timed out, retrying (0/1 alive) [ 754.559982][ T25] block nbd1: Connection timed out, retrying (0/1 alive) [ 754.568089][T29665] block nbd1: Dead connection, failed to find a fallback [ 754.581025][T29665] block nbd1: shutting down sockets [ 754.588777][T29665] blk_print_req_error: 138 callbacks suppressed [ 754.588797][T29665] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 754.607765][T29665] buffer_io_error: 138 callbacks suppressed [ 754.607782][T29665] Buffer I/O error on dev nbd1, logical block 2, async page read [ 754.622571][T29665] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 754.632727][T29665] Buffer I/O error on dev nbd1, logical block 1, async page read [ 754.640713][T29665] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 754.650368][T29665] Buffer I/O error on dev nbd1, logical block 0, async page read [ 754.650433][T29667] netlink: 'syz.5.6144': attribute type 2 has an invalid length. [ 754.658210][T29665] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 754.658267][T29665] Buffer I/O error on dev nbd1, logical block 3, async page read [ 754.660025][T27702] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 754.695125][T27702] Buffer I/O error on dev nbd1, logical block 0, async page read [ 754.702948][T27702] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 754.712573][T27702] Buffer I/O error on dev nbd1, logical block 1, async page read [ 754.721571][T27702] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 754.731169][T27702] Buffer I/O error on dev nbd1, logical block 2, async page read [ 754.739002][T27702] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 754.748544][T27702] Buffer I/O error on dev nbd1, logical block 3, async page read [ 754.757283][T27702] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 754.766845][T27702] Buffer I/O error on dev nbd1, logical block 0, async page read [ 754.772999][T29667] !9: entered promiscuous mode [ 754.774634][T27702] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 754.789515][T27702] Buffer I/O error on dev nbd1, logical block 1, async page read [ 754.797993][T27702] ldm_validate_partition_table(): Disk read failed. [ 754.806548][T27702] Dev nbd1: unable to read RDB block 0 [ 754.812596][T27702] nbd1: unable to read partition table [ 754.850391][T27702] ldm_validate_partition_table(): Disk read failed. [ 754.868559][T27702] Dev nbd1: unable to read RDB block 0 [ 754.876742][T27702] nbd1: unable to read partition table [ 754.923506][T29667] netlink: 'syz.5.6144': attribute type 2 has an invalid length. [ 755.376946][T29688] bond1: option arp_validate: invalid value (18446744073491447809) [ 755.413581][T29688] bond1 (unregistering): Released all slaves [ 755.507676][T29699] netlink: 'syz.6.6151': attribute type 9 has an invalid length. [ 755.525335][T29699] netlink: 'syz.6.6151': attribute type 6 has an invalid length. [ 756.179719][T29725] ip6tnl2: entered promiscuous mode [ 756.294851][T29725] ip6tnl2: entered allmulticast mode [ 756.465209][T29734] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 756.473181][T29734] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 756.481133][T29734] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 756.489045][T29734] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 756.497009][T29734] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 756.504927][T29734] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 756.512832][T29734] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 756.520751][T29734] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 756.528700][T29734] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 756.536631][T29734] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 757.304933][T29758] netlink: 'syz.4.6168': attribute type 5 has an invalid length. [ 757.694909][T29776] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 757.705251][T29773] __nla_validate_parse: 9 callbacks suppressed [ 757.705263][T29773] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6172'. [ 757.792674][T29773] vlan2: entered promiscuous mode [ 757.844800][T29773] veth0: entered promiscuous mode [ 758.171410][T29783] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6175'. [ 758.258340][T29783] 8021q: adding VLAN 0 to HW filter on device bond3 [ 758.292770][T29786] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6174'. [ 758.347985][T29791] pim6reg1: entered promiscuous mode [ 758.378784][T29791] pim6reg1: entered allmulticast mode [ 758.562264][T29799] syzkaller0: entered promiscuous mode [ 758.567951][T29799] syzkaller0: entered allmulticast mode [ 758.590393][T29789] delete_channel: no stack [ 758.880434][T29816] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6184'. [ 758.891487][T29816] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6184'. [ 758.906214][T29816] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6184'. [ 759.003601][T29819] tipc: Started in network mode [ 759.012207][T29819] tipc: Node identity , cluster identity 4711 [ 759.022689][T29819] tipc: Failed to obtain node identity [ 759.035916][T29816] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6184'. [ 759.051764][T29816] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6184'. [ 759.061406][T29819] tipc: Enabling of bearer rejected, failed to enable media [ 759.070178][T29816] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6184'. [ 759.136287][ T30] audit: type=1800 audit(1769203132.840:12): pid=29819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6185" name="memory.events" dev="tmpfs" ino=460 res=0 errno=0 [ 759.232052][T29816] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6184'. [ 759.303940][T29826] netlink: 'syz.6.6186': attribute type 11 has an invalid length. [ 759.420480][T29830] macvtap2: entered promiscuous mode [ 760.733588][T29880] FAULT_INJECTION: forcing a failure. [ 760.733588][T29880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 760.747794][T29880] CPU: 1 UID: 0 PID: 29880 Comm: syz.6.6202 Not tainted syzkaller #0 PREEMPT(full) [ 760.747820][T29880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 760.747832][T29880] Call Trace: [ 760.747839][T29880] [ 760.747847][T29880] dump_stack_lvl+0xe8/0x150 [ 760.747876][T29880] should_fail_ex+0x412/0x560 [ 760.747904][T29880] _copy_from_user+0x2d/0xb0 [ 760.747924][T29880] vlan_ioctl_handler+0xbd/0x630 [ 760.747949][T29880] ? __pfx___mutex_lock+0x10/0x10 [ 760.747967][T29880] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 760.747989][T29880] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 760.748020][T29880] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 760.748043][T29880] sock_ioctl+0x668/0x7f0 [ 760.748067][T29880] ? __pfx_sock_ioctl+0x10/0x10 [ 760.748087][T29880] ? __fget_files+0x2a/0x420 [ 760.748108][T29880] ? __fget_files+0x3a0/0x420 [ 760.748127][T29880] ? __fget_files+0x2a/0x420 [ 760.748158][T29880] ? bpf_lsm_file_ioctl+0x9/0x20 [ 760.748178][T29880] ? __pfx_sock_ioctl+0x10/0x10 [ 760.748197][T29880] __se_sys_ioctl+0xfc/0x170 [ 760.748224][T29880] do_syscall_64+0xe2/0xf80 [ 760.748239][T29880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.748256][T29880] ? trace_irq_disable+0x37/0x100 [ 760.748277][T29880] ? clear_bhb_loop+0x60/0xb0 [ 760.748298][T29880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.748316][T29880] RIP: 0033:0x7f0e5979acb9 [ 760.748334][T29880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.748349][T29880] RSP: 002b:00007f0e5a5d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 760.748368][T29880] RAX: ffffffffffffffda RBX: 00007f0e59a15fa0 RCX: 00007f0e5979acb9 [ 760.748381][T29880] RDX: 0000200000000000 RSI: 0000000000008983 RDI: 0000000000000003 [ 760.748392][T29880] RBP: 00007f0e5a5d7090 R08: 0000000000000000 R09: 0000000000000000 [ 760.748404][T29880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.748413][T29880] R13: 00007f0e59a16038 R14: 00007f0e59a15fa0 R15: 00007ffefc9442c8 [ 760.748442][T29880] [ 761.558946][T29918] FAULT_INJECTION: forcing a failure. [ 761.558946][T29918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 761.588581][T29918] CPU: 1 UID: 0 PID: 29918 Comm: syz.5.6216 Not tainted syzkaller #0 PREEMPT(full) [ 761.588608][T29918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 761.588620][T29918] Call Trace: [ 761.588628][T29918] [ 761.588637][T29918] dump_stack_lvl+0xe8/0x150 [ 761.588664][T29918] should_fail_ex+0x412/0x560 [ 761.588693][T29918] _copy_to_user+0x31/0xb0 [ 761.588721][T29918] simple_read_from_buffer+0xe1/0x170 [ 761.588747][T29918] proc_fail_nth_read+0x1bb/0x230 [ 761.588769][T29918] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 761.588789][T29918] ? rw_verify_area+0x2a6/0x4d0 [ 761.588812][T29918] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 761.588831][T29918] vfs_read+0x20c/0xa70 [ 761.588847][T29918] ? fdget_pos+0x246/0x320 [ 761.588872][T29918] ? __pfx___mutex_lock+0x10/0x10 [ 761.588891][T29918] ? __pfx_vfs_read+0x10/0x10 [ 761.588909][T29918] ? __fget_files+0x2a/0x420 [ 761.588934][T29918] ? __fget_files+0x3a0/0x420 [ 761.588953][T29918] ? __fget_files+0x2a/0x420 [ 761.588982][T29918] ksys_read+0x150/0x270 [ 761.589001][T29918] ? __pfx_ksys_read+0x10/0x10 [ 761.589030][T29918] do_syscall_64+0xe2/0xf80 [ 761.589046][T29918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.589064][T29918] ? trace_irq_disable+0x37/0x100 [ 761.589085][T29918] ? clear_bhb_loop+0x60/0xb0 [ 761.589107][T29918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.589124][T29918] RIP: 0033:0x7f6233d5b58e [ 761.589141][T29918] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 761.589156][T29918] RSP: 002b:00007f6234c72fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 761.589177][T29918] RAX: ffffffffffffffda RBX: 00007f6234c736c0 RCX: 00007f6233d5b58e [ 761.589190][T29918] RDX: 000000000000000f RSI: 00007f6234c730a0 RDI: 0000000000000004 [ 761.589201][T29918] RBP: 00007f6234c73090 R08: 0000000000000000 R09: 0000000000000000 [ 761.589213][T29918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 761.589224][T29918] R13: 00007f6234016038 R14: 00007f6234015fa0 R15: 00007fff470036a8 [ 761.589256][T29918] [ 762.015527][T29929] veth3: entered promiscuous mode [ 762.036091][T29933] net_ratelimit: 44 callbacks suppressed [ 762.036113][T29933] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 762.113824][T29931] tipc: Started in network mode [ 762.130939][T29935] can: request_module (can-proto-0) failed. [ 762.144890][T29931] tipc: Node identity b2d5f08b5b55, cluster identity 4711 [ 762.152641][T29931] tipc: Enabled bearer , priority 0 [ 762.172215][T29931] syzkaller0: entered promiscuous mode [ 762.184782][T29931] syzkaller0: entered allmulticast mode [ 762.222074][T29931] tipc: Resetting bearer [ 762.264067][T29930] tipc: Resetting bearer [ 762.336610][T29930] tipc: Disabling bearer [ 763.377152][T30017] __nla_validate_parse: 13 callbacks suppressed [ 763.377175][T30017] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6247'. [ 763.422694][T30027] netlink: 'syz.6.6247': attribute type 39 has an invalid length. [ 763.627015][T30035] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6252'. [ 763.789473][T30045] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20000 [ 763.971612][T30058] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6255'. [ 764.371897][T30068] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6260'. [ 764.427067][T30073] netlink: 'syz.7.6261': attribute type 5 has an invalid length. [ 764.438000][T30073] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6261'. [ 764.604323][T30081] syzkaller0: entered promiscuous mode [ 764.610008][T30081] syzkaller0: entered allmulticast mode [ 764.704989][T30087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6267'. [ 765.089608][T30109] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6272'. [ 765.122201][T30114] Bluetooth: MGMT ver 1.23 [ 765.193043][T30114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6273'. [ 765.210042][T30109] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6272'. [ 765.540392][T30107] delete_channel: no stack [ 765.561200][T30135] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6278'. [ 766.321188][ T8714] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.335139][ T8714] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.378472][ T8714] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.401666][ T8714] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.662897][T30201] IPVS: set_ctl: invalid protocol: 12 100.1.1.1:20004 [ 766.715378][T30201] bond1: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 766.725333][T30201] bond1: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 766.787055][T30204] netlink: 'syz.7.6295': attribute type 7 has an invalid length. [ 766.869810][T30211] netlink: 'syz.5.6296': attribute type 1 has an invalid length. [ 767.084026][ T30] audit: type=1800 audit(1769203140.780:13): pid=30219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6299" name="memory.events" dev="tmpfs" ino=572 res=0 errno=0 [ 767.723244][T30238] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 767.822099][T30244] nbd: couldn't find a device at index 0 [ 768.651084][T30274] __nla_validate_parse: 6 callbacks suppressed [ 768.651105][T30274] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6313'. [ 768.761037][T30276] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6314'. [ 768.764828][T30279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6315'. [ 768.796720][T30276] netlink: 'syz.5.6314': attribute type 1 has an invalid length. [ 768.951922][T30286] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6317'. [ 768.978862][T30286] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6317'. [ 769.130815][T30288] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6318'. [ 769.250655][T30290] xfrm0 speed is unknown, defaulting to 1000 [ 769.293601][T30294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6320'. [ 769.306606][T30290] xfrm0 speed is unknown, defaulting to 1000 [ 769.313374][T30290] xfrm0 speed is unknown, defaulting to 1000 [ 769.725166][T30301] vlan2: entered promiscuous mode [ 769.754874][T30301] geneve1: entered promiscuous mode [ 769.760294][T30301] vlan2: entered allmulticast mode [ 769.793770][T30301] geneve1: entered allmulticast mode [ 769.884516][T30290] infiniband syz1: set active [ 769.904851][T30290] infiniband syz1: added xfrm0 [ 769.911718][T30290] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 769.914242][T30290] infiniband syz1: Couldn't open port 1 [ 769.930127][T30302] 8021q: adding VLAN 0 to HW filter on device bond2 [ 769.951857][T30290] RDS/IB: syz1: added [ 769.957178][ T5920] xfrm0 speed is unknown, defaulting to 1000 [ 769.970262][T30290] smc: adding ib device syz1 with port count 1 [ 769.980786][T30290] smc: ib device syz1 port 1 has no pnetid [ 770.027620][T28347] xfrm0 speed is unknown, defaulting to 1000 [ 770.039511][T30290] xfrm0 speed is unknown, defaulting to 1000 [ 770.060110][T30310] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6325'. [ 770.070953][T30310] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6325'. [ 770.092291][T30310] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6325'. [ 770.210425][T30325] netlink: 'syz.4.6328': attribute type 13 has an invalid length. [ 770.220359][T30325] netlink: 'syz.4.6328': attribute type 17 has an invalid length. [ 770.513660][T30290] xfrm0 speed is unknown, defaulting to 1000 [ 770.619770][T30344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 770.656997][T30344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 770.707964][T30344] xt_l2tp: missing protocol rule (udp|l2tpip) [ 770.738650][T30344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 771.011066][T30290] xfrm0 speed is unknown, defaulting to 1000 [ 771.547234][T30354] xfrm0 speed is unknown, defaulting to 1000 [ 771.983820][T30290] xfrm0 speed is unknown, defaulting to 1000 [ 772.023393][T30381] bond2: (slave veth5): Enslaving as a backup interface with an up link [ 772.512948][T30290] xfrm0 speed is unknown, defaulting to 1000 [ 772.556388][T30416] veth0_virt_wifi: entered allmulticast mode [ 772.627300][T30418] tipc: Enabled bearer , priority 0 [ 772.732553][T30418] syzkaller0: entered promiscuous mode [ 772.775053][T30418] syzkaller0: entered allmulticast mode [ 772.781223][T30418] tipc: Resetting bearer [ 772.876333][T30417] tipc: Resetting bearer [ 773.804934][T11393] wlan0: Trigger new scan to find an IBSS to join [ 774.795856][T30417] tipc: Disabling bearer [ 774.804834][T30290] xfrm0 speed is unknown, defaulting to 1000 [ 774.814490][T28347] tipc: Node number set to 2206808570 [ 774.897241][T30441] __nla_validate_parse: 12 callbacks suppressed [ 774.897263][T30441] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6358'. [ 774.930631][T30441] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6358'. [ 775.135669][T30447] netlink: 'syz.6.6361': attribute type 4 has an invalid length. [ 775.143941][T30290] xfrm0 speed is unknown, defaulting to 1000 [ 775.479408][T30290] xfrm0 speed is unknown, defaulting to 1000 [ 775.496808][T30460] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 775.860247][T30473] FAULT_INJECTION: forcing a failure. [ 775.860247][T30473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 775.876645][T30290] xfrm0 speed is unknown, defaulting to 1000 [ 775.915092][T30473] CPU: 0 UID: 0 PID: 30473 Comm: syz.2.6369 Not tainted syzkaller #0 PREEMPT(full) [ 775.915120][T30473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 775.915131][T30473] Call Trace: [ 775.915139][T30473] [ 775.915147][T30473] dump_stack_lvl+0xe8/0x150 [ 775.915175][T30473] should_fail_ex+0x412/0x560 [ 775.915203][T30473] _copy_from_user+0x2d/0xb0 [ 775.915223][T30473] __sys_bpf+0x229/0x920 [ 775.915250][T30473] ? __pfx___sys_bpf+0x10/0x10 [ 775.915286][T30473] ? ksys_write+0x242/0x270 [ 775.915307][T30473] ? __pfx_ksys_write+0x10/0x10 [ 775.915331][T30473] __x64_sys_bpf+0x7c/0x90 [ 775.915353][T30473] do_syscall_64+0xe2/0xf80 [ 775.915371][T30473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.915388][T30473] ? trace_irq_disable+0x37/0x100 [ 775.915410][T30473] ? clear_bhb_loop+0x60/0xb0 [ 775.915431][T30473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.915460][T30473] RIP: 0033:0x7fdffd39acb9 [ 775.915476][T30473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.915492][T30473] RSP: 002b:00007fdffe25b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 775.915511][T30473] RAX: ffffffffffffffda RBX: 00007fdffd615fa0 RCX: 00007fdffd39acb9 [ 775.915525][T30473] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 775.915536][T30473] RBP: 00007fdffe25b090 R08: 0000000000000000 R09: 0000000000000000 [ 775.915548][T30473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.915559][T30473] R13: 00007fdffd616038 R14: 00007fdffd615fa0 R15: 00007ffc38202988 [ 775.915588][T30473] [ 776.253679][T30290] xfrm0 speed is unknown, defaulting to 1000 [ 776.410196][T30482] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.6373'. [ 776.423883][T30481] xt_hashlimit: size too large, truncated to 1048576 [ 776.754910][ T8714] wlan0: Trigger new scan to find an IBSS to join [ 777.673812][T30496] netlink: 'syz.5.6377': attribute type 4 has an invalid length. [ 777.771682][T30496] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 778.022145][T30506] FAULT_INJECTION: forcing a failure. [ 778.022145][T30506] name failslab, interval 1, probability 0, space 0, times 0 [ 778.050702][T30506] CPU: 0 UID: 0 PID: 30506 Comm: syz.7.6380 Not tainted syzkaller #0 PREEMPT(full) [ 778.050727][T30506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 778.050738][T30506] Call Trace: [ 778.050745][T30506] [ 778.050753][T30506] dump_stack_lvl+0xe8/0x150 [ 778.050779][T30506] should_fail_ex+0x412/0x560 [ 778.050805][T30506] should_failslab+0xa8/0x100 [ 778.050827][T30506] __kmalloc_noprof+0xde/0x7e0 [ 778.050845][T30506] ? bpf_test_init+0x9f/0x150 [ 778.050866][T30506] bpf_test_init+0x9f/0x150 [ 778.050887][T30506] bpf_prog_test_run_xdp+0x529/0x1160 [ 778.050918][T30506] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 778.050941][T30506] ? __fget_files+0x2a/0x420 [ 778.050963][T30506] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 778.050983][T30506] bpf_prog_test_run+0x2c7/0x340 [ 778.051011][T30506] __sys_bpf+0x5cb/0x920 [ 778.051033][T30506] ? __pfx___sys_bpf+0x10/0x10 [ 778.051067][T30506] ? ksys_write+0x242/0x270 [ 778.051085][T30506] ? __pfx_ksys_write+0x10/0x10 [ 778.051108][T30506] __x64_sys_bpf+0x7c/0x90 [ 778.051129][T30506] do_syscall_64+0xe2/0xf80 [ 778.051146][T30506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.051163][T30506] ? trace_irq_disable+0x37/0x100 [ 778.051183][T30506] ? clear_bhb_loop+0x60/0xb0 [ 778.051202][T30506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.051219][T30506] RIP: 0033:0x7fe71f99acb9 [ 778.051236][T30506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.051251][T30506] RSP: 002b:00007fe7207fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 778.051283][T30506] RAX: ffffffffffffffda RBX: 00007fe71fc15fa0 RCX: 00007fe71f99acb9 [ 778.051297][T30506] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 778.051309][T30506] RBP: 00007fe7207fc090 R08: 0000000000000000 R09: 0000000000000000 [ 778.051320][T30506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.051332][T30506] R13: 00007fe71fc16038 R14: 00007fe71fc15fa0 R15: 00007ffffac52d48 [ 778.051361][T30506] [ 778.052975][T30508] netlink: 'syz.5.6381': attribute type 2 has an invalid length. [ 778.275433][T30508] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6381'. [ 778.362020][T30519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6385'. [ 778.445746][T30523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6387'. [ 778.463820][T30523] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6387'. [ 778.485407][T30521] netlink: 'syz.4.6386': attribute type 1 has an invalid length. [ 778.542983][T30521] bond3: entered promiscuous mode [ 778.549210][T30521] 8021q: adding VLAN 0 to HW filter on device bond3 [ 778.551751][T30523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6387'. [ 778.567633][ T4255] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.578525][T30523] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6387'. [ 778.587704][ T4255] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.597796][ T4255] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.612886][ T4255] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.636299][T30521] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 778.648961][T30521] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 778.660419][T30521] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 778.713722][T30523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6387'. [ 778.746876][T30521] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 778.768188][T30521] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 778.843646][T30542] FAULT_INJECTION: forcing a failure. [ 778.843646][T30542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 778.859440][T30542] CPU: 0 UID: 0 PID: 30542 Comm: syz.7.6393 Not tainted syzkaller #0 PREEMPT(full) [ 778.859467][T30542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 778.859478][T30542] Call Trace: [ 778.859485][T30542] [ 778.859493][T30542] dump_stack_lvl+0xe8/0x150 [ 778.859520][T30542] should_fail_ex+0x412/0x560 [ 778.859548][T30542] _copy_from_user+0x2d/0xb0 [ 778.859570][T30542] bpf_test_init+0xd8/0x150 [ 778.859590][T30542] bpf_prog_test_run_xdp+0x529/0x1160 [ 778.859620][T30542] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 778.859643][T30542] ? __fget_files+0x2a/0x420 [ 778.859666][T30542] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 778.859684][T30542] bpf_prog_test_run+0x2c7/0x340 [ 778.859710][T30542] __sys_bpf+0x5cb/0x920 [ 778.859732][T30542] ? __pfx___sys_bpf+0x10/0x10 [ 778.859766][T30542] ? ksys_write+0x242/0x270 [ 778.859785][T30542] ? __pfx_ksys_write+0x10/0x10 [ 778.859810][T30542] __x64_sys_bpf+0x7c/0x90 [ 778.859832][T30542] do_syscall_64+0xe2/0xf80 [ 778.859848][T30542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.859865][T30542] ? trace_irq_disable+0x37/0x100 [ 778.859885][T30542] ? clear_bhb_loop+0x60/0xb0 [ 778.859906][T30542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.859923][T30542] RIP: 0033:0x7fe71f99acb9 [ 778.859938][T30542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.859954][T30542] RSP: 002b:00007fe7207fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 778.859973][T30542] RAX: ffffffffffffffda RBX: 00007fe71fc15fa0 RCX: 00007fe71f99acb9 [ 778.859986][T30542] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 778.859998][T30542] RBP: 00007fe7207fc090 R08: 0000000000000000 R09: 0000000000000000 [ 778.860007][T30542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.860018][T30542] R13: 00007fe71fc16038 R14: 00007fe71fc15fa0 R15: 00007ffffac52d48 [ 778.860046][T30542] [ 779.478678][T30397] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 779.488017][T30397] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 779.499344][T30397] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 779.509424][T30397] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 779.734536][T30592] FAULT_INJECTION: forcing a failure. [ 779.734536][T30592] name failslab, interval 1, probability 0, space 0, times 0 [ 779.751420][T30594] netlink: 'syz.2.6407': attribute type 1 has an invalid length. [ 779.764728][T30592] CPU: 1 UID: 0 PID: 30592 Comm: syz.6.6405 Not tainted syzkaller #0 PREEMPT(full) [ 779.764754][T30592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 779.764775][T30592] Call Trace: [ 779.764783][T30592] [ 779.764791][T30592] dump_stack_lvl+0xe8/0x150 [ 779.764818][T30592] should_fail_ex+0x412/0x560 [ 779.764845][T30592] should_failslab+0xa8/0x100 [ 779.764864][T30592] __kvmalloc_node_noprof+0x166/0x8d0 [ 779.764885][T30592] ? bpf_test_run_xdp_live+0x1f2/0x1cf0 [ 779.764912][T30592] bpf_test_run_xdp_live+0x1f2/0x1cf0 [ 779.764937][T30592] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 779.764963][T30592] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 779.764990][T30592] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 779.765027][T30592] ? 0xffffffffa02028f0 [ 779.765064][T30592] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 779.765092][T30592] ? _copy_from_user+0x94/0xb0 [ 779.765111][T30592] ? bpf_test_init+0x113/0x150 [ 779.765126][T30592] ? xdp_convert_md_to_buff+0x5b/0x330 [ 779.765147][T30592] bpf_prog_test_run_xdp+0x81c/0x1160 [ 779.765179][T30592] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 779.765203][T30592] ? __fget_files+0x2a/0x420 [ 779.765227][T30592] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 779.765248][T30592] bpf_prog_test_run+0x2c7/0x340 [ 779.765278][T30592] __sys_bpf+0x5cb/0x920 [ 779.765302][T30592] ? __pfx___sys_bpf+0x10/0x10 [ 779.765340][T30592] ? ksys_write+0x242/0x270 [ 779.765359][T30592] ? __pfx_ksys_write+0x10/0x10 [ 779.765384][T30592] __x64_sys_bpf+0x7c/0x90 [ 779.765405][T30592] do_syscall_64+0xe2/0xf80 [ 779.765423][T30592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.765441][T30592] ? trace_irq_disable+0x37/0x100 [ 779.765462][T30592] ? clear_bhb_loop+0x60/0xb0 [ 779.765483][T30592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.765500][T30592] RIP: 0033:0x7f0e5979acb9 [ 779.765517][T30592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.765532][T30592] RSP: 002b:00007f0e5a5d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 779.765552][T30592] RAX: ffffffffffffffda RBX: 00007f0e59a15fa0 RCX: 00007f0e5979acb9 [ 779.765565][T30592] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 779.765577][T30592] RBP: 00007f0e5a5d7090 R08: 0000000000000000 R09: 0000000000000000 [ 779.765588][T30592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 779.765600][T30592] R13: 00007f0e59a16038 R14: 00007f0e59a15fa0 R15: 00007ffefc9442c8 [ 779.765630][T30592] [ 780.028180][T11388] wlan0: Trigger new scan to find an IBSS to join [ 780.124302][T30607] netlink: 'syz.2.6409': attribute type 4 has an invalid length. [ 780.157702][T30603] delete_channel: no stack [ 780.193958][T30607] __nla_validate_parse: 6 callbacks suppressed [ 780.193975][T30607] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6409'. [ 780.299157][T30607] .`: renamed from bond0 (while UP) [ 780.397929][T30614] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 780.562733][T30628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6413'. [ 780.945082][ T7191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.101677][T30637] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6415'. [ 781.729144][T30647] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6418'. [ 781.740157][T30647] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6418'. [ 781.888294][T30656] FAULT_INJECTION: forcing a failure. [ 781.888294][T30656] name failslab, interval 1, probability 0, space 0, times 0 [ 781.907329][T30656] CPU: 0 UID: 0 PID: 30656 Comm: syz.7.6420 Not tainted syzkaller #0 PREEMPT(full) [ 781.907354][T30656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 781.907365][T30656] Call Trace: [ 781.907373][T30656] [ 781.907381][T30656] dump_stack_lvl+0xe8/0x150 [ 781.907407][T30656] should_fail_ex+0x412/0x560 [ 781.907433][T30656] should_failslab+0xa8/0x100 [ 781.907455][T30656] __kvmalloc_node_noprof+0x166/0x8d0 [ 781.907475][T30656] ? bpf_test_run_xdp_live+0x223/0x1cf0 [ 781.907501][T30656] bpf_test_run_xdp_live+0x223/0x1cf0 [ 781.907524][T30656] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 781.907554][T30656] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 781.907578][T30656] ? __pfx_autoremove_wake_function+0x10/0x10 [ 781.907614][T30656] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 781.907651][T30656] ? 0xffffffffa0202878 [ 781.907689][T30656] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 781.907717][T30656] ? _copy_from_user+0x94/0xb0 [ 781.907736][T30656] ? bpf_test_init+0x113/0x150 [ 781.907752][T30656] ? xdp_convert_md_to_buff+0x5b/0x330 [ 781.907773][T30656] bpf_prog_test_run_xdp+0x81c/0x1160 [ 781.907808][T30656] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 781.907832][T30656] ? __fget_files+0x2a/0x420 [ 781.907856][T30656] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 781.907875][T30656] bpf_prog_test_run+0x2c7/0x340 [ 781.907900][T30656] __sys_bpf+0x5cb/0x920 [ 781.907924][T30656] ? __pfx___sys_bpf+0x10/0x10 [ 781.907959][T30656] ? ksys_write+0x242/0x270 [ 781.907977][T30656] ? __pfx_ksys_write+0x10/0x10 [ 781.908001][T30656] __x64_sys_bpf+0x7c/0x90 [ 781.908021][T30656] do_syscall_64+0xe2/0xf80 [ 781.908039][T30656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.908057][T30656] ? trace_irq_disable+0x37/0x100 [ 781.908079][T30656] ? clear_bhb_loop+0x60/0xb0 [ 781.908100][T30656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.908116][T30656] RIP: 0033:0x7fe71f99acb9 [ 781.908132][T30656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.908146][T30656] RSP: 002b:00007fe7207fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 781.908165][T30656] RAX: ffffffffffffffda RBX: 00007fe71fc15fa0 RCX: 00007fe71f99acb9 [ 781.908178][T30656] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 781.908190][T30656] RBP: 00007fe7207fc090 R08: 0000000000000000 R09: 0000000000000000 [ 781.908201][T30656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 781.908212][T30656] R13: 00007fe71fc16038 R14: 00007fe71fc15fa0 R15: 00007ffffac52d48 [ 781.908242][T30656] [ 782.641974][T30691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6432'. [ 784.112247][T30743] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6445'. [ 784.183010][T30718] xfrm0 speed is unknown, defaulting to 1000 [ 784.254486][T30741] netlink: 34 bytes leftover after parsing attributes in process `syz.5.6444'. [ 784.431833][T30757] netlink: 'syz.4.6448': attribute type 1 has an invalid length. [ 784.932549][T30784] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6451'. [ 785.136972][T30794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 785.173863][T30724] xfrm0 speed is unknown, defaulting to 1000 [ 785.295349][T30790] pim6reg1: entered allmulticast mode [ 785.522136][T30747] xfrm0 speed is unknown, defaulting to 1000 [ 785.614981][T30807] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6457'. [ 785.677240][T30805] : option downdelay: invalid value (18446744073709547007) [ 785.684641][T30805] : option downdelay: allowed values 0 - 2147483647 [ 785.703911][T30805] (unregistering): Released all slaves [ 786.061285][T30821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6461'. [ 786.302794][T30826] bridge1: port 1(ip6gretap1) entered blocking state [ 786.320191][T30826] bridge1: port 1(ip6gretap1) entered disabled state [ 786.341776][T30826] ip6gretap1: entered allmulticast mode [ 786.390295][T30826] ip6gretap1: entered promiscuous mode [ 786.476803][T30821] bridge1: port 2(veth5) entered blocking state [ 786.483357][T30821] bridge1: port 2(veth5) entered disabled state [ 786.492564][T30821] veth5: entered allmulticast mode [ 786.514112][T30821] veth5: entered promiscuous mode [ 786.522445][T30821] bridge1: port 2(veth5) entered blocking state [ 786.528921][T30821] bridge1: port 2(veth5) entered forwarding state [ 786.539387][T11392] bridge1: port 2(veth5) entered disabled state [ 786.744297][T30838] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 787.250614][T30851] netlink: 100 bytes leftover after parsing attributes in process `syz.7.6468'. [ 787.261450][T30849] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6467'. [ 787.415230][T30860] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.6471'. [ 787.705747][T30871] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6469'. [ 788.186928][T30830] xfrm0 speed is unknown, defaulting to 1000 [ 788.549639][T30901] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6479'. [ 788.579945][T30901] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6479'. [ 788.827704][T30908] netlink: 364 bytes leftover after parsing attributes in process `syz.5.6481'. [ 789.129422][T30919] gretap0: entered promiscuous mode [ 789.294425][T30933] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6487'. [ 789.320820][T30933] netlink: 'syz.5.6487': attribute type 1 has an invalid length. [ 789.420282][T30933] bond2: entered promiscuous mode [ 789.430094][T30933] bond2: entered allmulticast mode [ 789.445696][T30933] 8021q: adding VLAN 0 to HW filter on device bond2 [ 789.515481][T30893] xfrm0 speed is unknown, defaulting to 1000 [ 789.577142][T30937] erspan1: entered allmulticast mode [ 789.609417][T30937] bond2: (slave erspan1): making interface the new active one [ 789.625224][T30937] erspan1: entered promiscuous mode [ 789.632447][T30937] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 789.663866][T30943] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)% ]3DL̥!!b.>nS#^' [ 789.686663][T30943] CPU: 1 UID: 0 PID: 30943 Comm: syz.2.6490 Not tainted syzkaller #0 PREEMPT(full) [ 789.686689][T30943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 789.686702][T30943] Call Trace: [ 789.686710][T30943] [ 789.686719][T30943] dump_stack_lvl+0xe8/0x150 [ 789.686748][T30943] sysfs_warn_dup+0x8e/0xa0 [ 789.686770][T30943] sysfs_do_create_link_sd+0xc0/0x110 [ 789.686797][T30943] device_add_class_symlinks+0x1cf/0x240 [ 789.686829][T30943] device_add+0x475/0xb70 [ 789.686860][T30943] wiphy_register+0x1d6c/0x2d50 [ 789.686899][T30943] ? __pfx_wiphy_register+0x10/0x10 [ 789.686922][T30943] ? __pfx_netdev_run_todo+0x10/0x10 [ 789.686945][T30943] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 789.686972][T30943] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 789.686996][T30943] ieee80211_register_hw+0x34d2/0x4150 [ 789.687038][T30943] ? ieee80211_register_hw+0x1441/0x4150 [ 789.687070][T30943] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 789.687110][T30943] ? __hrtimer_setup+0x181/0x200 [ 789.687132][T30943] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 789.687156][T30943] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 789.687206][T30943] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 789.687226][T30943] ? kstrndup+0xbf/0x160 [ 789.687258][T30943] hwsim_new_radio_nl+0xf85/0x1c30 [ 789.687285][T30943] ? __pfx___nla_validate_parse+0x10/0x10 [ 789.687320][T30943] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 789.687347][T30943] ? rcu_is_watching+0x15/0xb0 [ 789.687373][T30943] ? __nla_parse+0x40/0x60 [ 789.687395][T30943] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 789.687431][T30943] genl_family_rcv_msg_doit+0x22a/0x330 [ 789.687463][T30943] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 789.687501][T30943] ? bpf_lsm_capable+0x9/0x20 [ 789.687524][T30943] ? security_capable+0x7e/0x2c0 [ 789.687558][T30943] genl_rcv_msg+0x61c/0x7a0 [ 789.687595][T30943] ? __pfx_genl_rcv_msg+0x10/0x10 [ 789.687622][T30943] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 789.687660][T30943] netlink_rcv_skb+0x232/0x4b0 [ 789.687684][T30943] ? __pfx_genl_rcv_msg+0x10/0x10 [ 789.687715][T30943] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 789.687736][T30943] ? genl_rcv+0x19/0x40 [ 789.687781][T30943] ? down_read+0x272/0x2e0 [ 789.687800][T30943] ? genl_rcv+0xd/0x40 [ 789.687830][T30943] genl_rcv+0x28/0x40 [ 789.687856][T30943] netlink_unicast+0x80f/0x9b0 [ 789.687887][T30943] ? __pfx_netlink_unicast+0x10/0x10 [ 789.687911][T30943] ? netlink_sendmsg+0x650/0xb40 [ 789.687933][T30943] ? skb_put+0x11b/0x210 [ 789.687957][T30943] netlink_sendmsg+0x813/0xb40 [ 789.687992][T30943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 789.688026][T30943] ? aa_sock_msg_perm+0xf1/0x1b0 [ 789.688057][T30943] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 789.688076][T30943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 789.688102][T30943] __sock_sendmsg+0x21c/0x270 [ 789.688132][T30943] ____sys_sendmsg+0x4d7/0x810 [ 789.688154][T30943] ? __might_fault+0xaf/0x130 [ 789.688190][T30943] ? __pfx_____sys_sendmsg+0x10/0x10 [ 789.688222][T30943] ? import_iovec+0x73/0xa0 [ 789.688248][T30943] ___sys_sendmsg+0x2a5/0x360 [ 789.688268][T30943] ? __lock_acquire+0x6b5/0x2cf0 [ 789.688294][T30943] ? __pfx____sys_sendmsg+0x10/0x10 [ 789.688324][T30943] ? futex_wait+0x29a/0x380 [ 789.688379][T30943] ? __fget_files+0x2a/0x420 [ 789.688403][T30943] ? __fget_files+0x3a0/0x420 [ 789.688440][T30943] __x64_sys_sendmsg+0x1bd/0x2a0 [ 789.688464][T30943] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 789.688496][T30943] ? rcu_is_watching+0x15/0xb0 [ 789.688535][T30943] do_syscall_64+0xe2/0xf80 [ 789.688553][T30943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.688571][T30943] ? trace_irq_disable+0x37/0x100 [ 789.688597][T30943] ? clear_bhb_loop+0x60/0xb0 [ 789.688620][T30943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.688639][T30943] RIP: 0033:0x7fdffd39acb9 [ 789.688659][T30943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 789.688677][T30943] RSP: 002b:00007fdffe25b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 789.688700][T30943] RAX: ffffffffffffffda RBX: 00007fdffd615fa0 RCX: 00007fdffd39acb9 [ 789.688715][T30943] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 789.688729][T30943] RBP: 00007fdffd408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 789.688743][T30943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 789.688755][T30943] R13: 00007fdffd616038 R14: 00007fdffd615fa0 R15: 00007ffc38202988 [ 789.688790][T30943] [ 790.679959][T30961] __nla_validate_parse: 2 callbacks suppressed [ 790.679978][T30961] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6494'. [ 790.732892][T30963] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6494'. [ 790.805401][T30966] netlink: 'syz.5.6495': attribute type 1 has an invalid length. [ 790.907316][T30970] RDS: rds_bind could not find a transport for 4004:0:20:0:c002:0:20:0, load rds_tcp or rds_rdma? [ 791.137894][T30960] sit1: left promiscuous mode [ 791.142604][T30960] sit1: left allmulticast mode [ 791.149661][T30960] bridge1: left allmulticast mode [ 791.160083][T30960] macvtap1: left promiscuous mode [ 791.165473][T30960] macvtap1: left allmulticast mode [ 791.225381][T30966] 8021q: adding VLAN 0 to HW filter on device bond3 [ 791.241126][T30949] xfrm0 speed is unknown, defaulting to 1000 [ 791.246278][ T8714] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 791.282485][ T8714] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.363037][T11393] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 791.372899][T11393] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.383516][T11393] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 791.393385][T11393] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.419069][T11393] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 791.432341][T30975] netlink: 'syz.6.6497': attribute type 1 has an invalid length. [ 791.447615][T11393] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.493898][T30977] macsec1: entered promiscuous mode [ 791.504861][T30977] macsec1: entered allmulticast mode [ 791.542380][T30983] xt_TCPMSS: Only works on TCP SYN packets [ 791.550580][T30983] netlink: 'syz.6.6497': attribute type 13 has an invalid length. [ 791.562504][T30979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 791.598584][T30975] 8021q: adding VLAN 0 to HW filter on device bond6 [ 791.628637][T30984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6498'. [ 791.739788][T30991] netlink: 'syz.5.6499': attribute type 13 has an invalid length. [ 792.141335][T30995] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6500'. [ 792.192610][T30997] RDS: rds_bind could not find a transport for ::ffff:172.30.1.7, load rds_tcp or rds_rdma? [ 792.247141][T30979] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6498'. [ 792.291190][ T5911] xfrm0 speed is unknown, defaulting to 1000 [ 792.751227][T31020] netlink: 'syz.6.6505': attribute type 30 has an invalid length. [ 792.863763][T31020] bond7: option arp_missed_max: invalid value (0) [ 792.964749][T31020] bond7: option arp_missed_max: allowed values 1 - 255 [ 793.047788][T31020] bond7 (unregistering): Released all slaves [ 793.064913][T31032] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 793.101323][T31032] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 793.151775][T31038] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6508'. [ 793.285277][T31043] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6510'. [ 793.382147][T31048] netlink: 'syz.7.6512': attribute type 13 has an invalid length. [ 793.703969][T31064] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6517'. [ 793.975458][T31080] gre0: entered promiscuous mode [ 793.987578][T31080] gre0: entered allmulticast mode [ 794.149999][T31067] xfrm0 speed is unknown, defaulting to 1000 [ 794.211218][T31092] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6524'. [ 794.284915][T31093] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 794.711375][T31122] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6531'. [ 795.104516][T31130] ip6_vti0: Caught tx_queue_len zero misconfig [ 795.152119][T31130] syzkaller1: entered promiscuous mode [ 795.171920][T31130] syzkaller1: entered allmulticast mode [ 795.354019][T31140] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.404364][T31117] xfrm0 speed is unknown, defaulting to 1000 [ 795.516268][T31145] netlink: 'syz.4.6541': attribute type 2 has an invalid length. [ 795.569803][T31145] !: entered promiscuous mode [ 795.914614][T31160] __nla_validate_parse: 1 callbacks suppressed [ 795.914631][T31160] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6545'. [ 795.943767][T31155] pimreg: entered allmulticast mode [ 796.013945][T31167] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6547'. [ 796.065338][T31168] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6547'. [ 796.118018][T31156] syzkaller0: entered promiscuous mode [ 796.123534][T31156] syzkaller0: entered allmulticast mode [ 796.136514][T31167] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 796.159746][T31175] tipc: Started in network mode [ 796.164752][T31175] tipc: Node identity c261328a573c, cluster identity 4711 [ 796.172065][T31175] tipc: Enabled bearer , priority 0 [ 796.181124][T31156] syzkaller0: tun_net_xmit 1280 [ 796.195550][T31173] team_slave_1: Caught tx_queue_len zero misconfig [ 796.212381][T31156] syzkaller0: create flow: hash 699072663 index 1 [ 796.487628][T31190] netlink: 'syz.7.6552': attribute type 2 has an invalid length. [ 796.516924][T31192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6548'. [ 796.532808][T31153] syzkaller0: delete flow: hash 699072663 index 1 [ 796.543556][T31193] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6553'. [ 796.564997][T31195] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6552'. [ 796.911110][T31206] netlink: 'syz.5.6556': attribute type 1 has an invalid length. [ 796.941578][T31206] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6556'. [ 798.671545][T31172] syzkaller0: entered promiscuous mode [ 798.677711][T31172] syzkaller0: entered allmulticast mode [ 798.689427][T31185] geneve2: entered promiscuous mode [ 798.705712][T31203] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 798.734963][T31169] tipc: Resetting bearer [ 798.820465][T31169] tipc: Disabling bearer [ 798.833070][T31231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 798.879954][T31231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 798.893664][T19723] tipc: Node number set to 2505912970 [ 799.000649][T31240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 799.085740][T31243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 799.272868][T31212] xfrm0 speed is unknown, defaulting to 1000 [ 799.344193][T31255] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6565'. [ 799.494085][T31260] netlink: 'syz.4.6567': attribute type 2 has an invalid length. [ 799.528831][T31260] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6567'. [ 799.688263][T31234] xfrm0 speed is unknown, defaulting to 1000 [ 800.181836][T31235] xfrm0 speed is unknown, defaulting to 1000 [ 800.422699][T31282] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.6573'. [ 800.442860][T31278] bond2: option mode: unable to set because the bond device has slaves [ 800.647808][T31292] tipc: Enabled bearer , priority 0 [ 800.698833][T31292] tipc: Disabling bearer [ 800.879370][T31304] netlink: 'syz.6.6578': attribute type 2 has an invalid length. [ 800.938256][T31309] __nla_validate_parse: 2 callbacks suppressed [ 800.938274][T31309] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6578'. [ 800.953130][T31304] !: entered promiscuous mode [ 801.187181][T31319] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6584'. [ 801.211803][T31320] sctp: [Deprecated]: syz.7.6585 (pid 31320) Use of int in max_burst socket option. [ 801.211803][T31320] Use struct sctp_assoc_value instead [ 801.254371][T31321] xt_l2tp: missing protocol rule (udp|l2tpip) [ 801.272058][T31320] ip6tnl0: Caught tx_queue_len zero misconfig [ 801.313426][T31310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.491733][T31325] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 801.510877][T31325] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 801.752811][T31343] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6591'. [ 802.031347][T31345] bridge0: port 1(bridge_slave_0) entered learning state [ 802.050997][T31345] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.055764][T31358] netlink: 'syz.7.6594': attribute type 2 has an invalid length. [ 802.079303][T31358] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6594'. [ 802.442831][T31352] xfrm0 speed is unknown, defaulting to 1000 [ 802.451312][T31375] syzkaller0: entered promiscuous mode [ 802.457756][T31375] syzkaller0: entered allmulticast mode [ 802.489908][T31375] tipc: Started in network mode [ 802.495028][T31375] tipc: Node identity 42d3ba7e1758, cluster identity 4711 [ 802.502858][T31375] tipc: Enabled bearer , priority 0 [ 802.534330][T31374] tipc: Resetting bearer [ 802.667325][T31374] tipc: Disabling bearer [ 803.226014][T31409] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6606'. [ 803.695269][T31398] xfrm0 speed is unknown, defaulting to 1000 [ 803.851585][T31437] netlink: 296 bytes leftover after parsing attributes in process `syz.4.6613'. [ 804.075390][T31441] bond5: option arp_validate: invalid value (18446744073491447809) [ 804.085838][T31441] bond5 (unregistering): Released all slaves [ 804.099645][T31446] netlink: 'syz.4.6614': attribute type 13 has an invalid length. [ 804.430428][T31446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 804.446528][T31446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 804.620178][T11390] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 804.629524][T11390] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.648417][T11390] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 804.659669][T11390] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.708905][T11390] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 804.718981][T11390] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.733273][T11390] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 804.748810][T11390] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.969102][T31472] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6622'. [ 805.017039][T31473] netlink: 'syz.4.6620': attribute type 5 has an invalid length. [ 805.225140][T31477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6624'. [ 805.390453][T31484] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6625'. [ 805.420323][T31477] syzkaller0: entered promiscuous mode [ 805.427049][T31477] syzkaller0: entered allmulticast mode [ 806.800407][T31489] netlink: 'syz.5.6627': attribute type 11 has an invalid length. [ 808.259071][T31471] xfrm0 speed is unknown, defaulting to 1000 [ 808.596553][T31498] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 808.679313][T31497] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6629'. [ 808.830288][T31512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6633'. [ 808.840494][ T30] audit: type=1107 audit(1769203182.540:14): pid=31513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 809.466351][T31541] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 809.894194][T31517] veth7: entered promiscuous mode [ 809.925371][T31551] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6645'. [ 810.196599][T31561] pim6reg99999999: entered allmulticast mode [ 810.240858][T31572] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6651'. [ 810.303629][T31568] xt_l2tp: missing protocol rule (udp|l2tpip) [ 810.467927][T31580] vlan0: entered promiscuous mode [ 810.512716][T31580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6653'. [ 810.960282][T31606] netlink: 'syz.6.6659': attribute type 13 has an invalid length. [ 811.136900][T31613] vlan2: left promiscuous mode [ 811.142794][T31613] geneve1: left promiscuous mode [ 811.148186][T31613] vlan2: left allmulticast mode [ 811.153396][T31613] geneve1: left allmulticast mode [ 811.160823][T31613] bond3: left promiscuous mode [ 811.168355][T31613] geneve2: left promiscuous mode [ 811.175808][T31613] veth7: left promiscuous mode [ 811.805448][T31625] syzkaller0: entered promiscuous mode [ 811.820938][T31625] syzkaller0: entered allmulticast mode [ 811.967880][T31629] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6666'. [ 811.989785][T31634] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 812.130283][T31650] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6673'. [ 812.148719][T31650] 8021q: VLANs not supported on nlmon0 [ 812.161103][T31650] tunl0: Caught tx_queue_len zero misconfig [ 812.265310][T31663] netlink: 212336 bytes leftover after parsing attributes in process `syz.6.6677'. [ 812.312866][T31663] netlink: 'syz.6.6677': attribute type 1 has an invalid length. [ 812.322461][T31668] syzkaller0: entered promiscuous mode [ 812.328376][T31668] syzkaller0: entered allmulticast mode [ 812.373355][T31674] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6679'. [ 812.541308][T31680] netlink: 'syz.6.6681': attribute type 1 has an invalid length. [ 812.822628][T31697] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6686'. [ 812.879552][T31701] syzkaller0: entered promiscuous mode [ 812.897504][T31701] syzkaller0: entered allmulticast mode [ 812.927164][T31701] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 812.969211][T31704] batadv1: entered promiscuous mode [ 813.000357][T31706] gtp0: entered promiscuous mode [ 813.006817][T31706] gtp0: entered allmulticast mode [ 813.076526][T30958] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 813.297832][T31720] netlink: 'syz.4.6694': attribute type 1 has an invalid length. [ 813.308856][T31720] netlink: 'syz.4.6694': attribute type 1 has an invalid length. [ 813.530221][T31704] xfrm0 speed is unknown, defaulting to 1000 [ 813.688006][T31732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 813.768456][T31732] __nla_validate_parse: 4 callbacks suppressed [ 813.768474][T31732] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6697'. [ 813.816579][T31732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 813.829722][T31732] xt_l2tp: missing protocol rule (udp|l2tpip) [ 813.843667][T31732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 814.175655][T31735] xfrm0 speed is unknown, defaulting to 1000 [ 814.302179][T31726] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 814.527242][T31752] openvswitch: netlink: Message has -2 unknown bytes. [ 814.538586][T31752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 814.651998][T31754] netlink: 152 bytes leftover after parsing attributes in process `syz.6.6702'. [ 814.725134][T31759] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6704'. [ 814.759099][T31759] netlink: 'syz.2.6704': attribute type 1 has an invalid length. [ 814.827309][T31765] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6704'. [ 815.003327][T31759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.035658][T31769] netlink: 'syz.6.6706': attribute type 36 has an invalid length. [ 815.090727][T31765] bond0: entered allmulticast mode [ 815.204253][T31774] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6709'. [ 815.309719][T31781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 815.332577][T31781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6711'. [ 815.384393][T31781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 815.400803][T31781] xt_l2tp: missing protocol rule (udp|l2tpip) [ 815.411324][T31781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 815.456224][T31788] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 815.556400][T31802] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6714'. [ 815.669207][T31807] xt_CT: You must specify a L4 protocol and not use inversions on it [ 815.733299][T31811] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 815.872376][T31828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6724'. [ 815.883352][T31828] openvswitch: netlink: Flow actions attr not present in new flow. [ 815.935850][T31830] bond5: entered promiscuous mode [ 815.954561][T31830] 8021q: adding VLAN 0 to HW filter on device bond5 [ 816.469477][T31869] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6736'. [ 816.644564][T31875] gtp0: left promiscuous mode [ 816.652034][T31875] gtp0: left allmulticast mode [ 816.693661][T31875] bond5: left promiscuous mode [ 816.733501][T31877] vlan2: entered allmulticast mode [ 816.738879][T31877] syz_tun: entered allmulticast mode [ 816.744597][T31877] bridge0: port 3(vlan2) entered blocking state [ 816.751282][T31877] bridge0: port 3(vlan2) entered disabled state [ 816.773175][T31877] vlan2: entered promiscuous mode [ 816.806067][T31877] syz_tun: entered promiscuous mode [ 817.005482][T31837] xfrm0 speed is unknown, defaulting to 1000 [ 817.030908][T31901] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6739'. [ 818.599686][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 819.396718][T31916] netlink: 'syz.4.6742': attribute type 1 has an invalid length. [ 819.923062][T31904] xfrm0 speed is unknown, defaulting to 1000 [ 820.142340][T31961] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 820.157332][T31957] netlink: 'syz.4.6753': attribute type 13 has an invalid length. [ 820.185884][T31969] pim6reg: entered allmulticast mode [ 820.293330][T31976] netlink: 207952 bytes leftover after parsing attributes in process `syz.6.6757'. [ 820.369730][T31967] pim6reg: left allmulticast mode [ 820.860923][T31978] xfrm0 speed is unknown, defaulting to 1000 [ 821.110520][T31993] ip6t_srh: unknown srh match flags 4000 [ 821.413221][T32003] netlink: 316 bytes leftover after parsing attributes in process `syz.4.6765'. [ 821.426224][T32003] Cannot find add_set index 0 as target [ 821.477338][T32005] netlink: 'syz.2.6766': attribute type 2 has an invalid length. [ 821.509928][T32008] geneve3: entered promiscuous mode [ 821.515605][T32005] netlink: 'syz.2.6766': attribute type 1 has an invalid length. [ 821.516058][T32005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6766'. [ 821.578634][ T4255] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 821.608396][ T4255] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 821.634969][T31985] xfrm0 speed is unknown, defaulting to 1000 [ 821.636988][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 821.665746][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 821.736875][T32015] bond6: Unable to set down delay as MII monitoring is disabled [ 821.766737][T32015] bond6 (unregistering): Released all slaves [ 821.985325][T32029] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6773'. [ 822.005465][T32029] netlink: 7 bytes leftover after parsing attributes in process `syz.4.6773'. [ 822.349707][T32037] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6776'. [ 822.374940][T32037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6776'. [ 822.467156][T32048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6779'. [ 822.618754][T32048] veth5: entered promiscuous mode [ 822.981734][T32064] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 823.011524][T32069] netlink: 'syz.6.6784': attribute type 1 has an invalid length. [ 823.183871][T32082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6788'. [ 823.205018][T32069] 8021q: adding VLAN 0 to HW filter on device bond8 [ 823.280934][T32073] 8021q: adding VLAN 0 to HW filter on device bond8 [ 823.288613][T32073] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 823.319181][T32073] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 823.375463][T32077] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 823.384409][T32077] bond8: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 823.442403][T32082] macvtap0: entered promiscuous mode [ 823.476668][T32082] macvtap0: left promiscuous mode [ 823.510884][T32069] bridge2: entered allmulticast mode [ 823.725634][T32097] bond9: Removing last ns target with arp_interval on [ 823.748669][T32097] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6793'. [ 824.167270][T32117] netlink: 'syz.5.6798': attribute type 9 has an invalid length. [ 824.322446][T32136] netlink: Unknown conntrack attr (0) [ 824.330801][T32136] netlink: 'syz.5.6802': attribute type 13 has an invalid length. [ 824.424007][T32136] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.431742][T32136] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.550157][T32136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 824.567039][T32136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 824.927742][T19723] xfrm0 speed is unknown, defaulting to 1000 [ 824.927759][T11390] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 824.927788][T11390] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.944030][T19723] syz1: Port: 1 Link DOWN [ 825.002423][T32144] bridge5: port 1(ip6gretap1) entered blocking state [ 825.036459][T32144] bridge5: port 1(ip6gretap1) entered disabled state [ 825.043457][T32144] ip6gretap1: entered allmulticast mode [ 825.066855][T32144] ip6gretap1: entered promiscuous mode [ 825.079726][ T5920] xfrm0 speed is unknown, defaulting to 1000 [ 825.079800][T11390] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 825.127730][T11390] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.162392][T11390] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 825.201186][T11390] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.227557][T32150] batadv1: entered promiscuous mode [ 825.271893][T11390] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 825.283630][T11390] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.299813][T32169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 825.317232][T32166] __nla_validate_parse: 6 callbacks suppressed [ 825.317249][T32166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6810'. [ 825.317359][T32171] syzkaller1: entered promiscuous mode [ 825.344530][T32171] syzkaller1: entered allmulticast mode [ 825.353550][T32166] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6810'. [ 825.363721][T32169] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6811'. [ 825.424550][T32179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 825.452130][T32169] xt_l2tp: missing protocol rule (udp|l2tpip) [ 825.469313][T32169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 825.666621][T32192] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6816'. [ 825.719216][T32199] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6816'. [ 825.962013][T32180] xfrm0 speed is unknown, defaulting to 1000 [ 826.133410][T32217] xt_hashlimit: max too large, truncated to 1048576 [ 826.158989][T32217] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 826.305088][T32224] veth0: entered promiscuous mode [ 826.327172][T32220] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6826'. [ 826.385045][T32226] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6828'. [ 826.453733][T32216] veth0: left promiscuous mode [ 826.548266][T32230] 8021q: VLANs not supported on caif0 [ 826.575734][T32230] tunl0: Caught tx_queue_len zero misconfig [ 827.141841][T32260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 827.209318][T32261] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6838'. [ 827.228931][T32260] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6837'. [ 827.240170][T32260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 827.254990][T32260] xt_l2tp: missing protocol rule (udp|l2tpip) [ 827.280518][T32260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 827.417226][T32271] netlink: 'syz.6.6840': attribute type 4 has an invalid length. [ 827.564143][T32276] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 827.609735][T32278] : renamed from veth0_to_bond (while UP) [ 827.921783][T32258] xfrm0 speed is unknown, defaulting to 1000 [ 827.970462][T32294] gretap1: entered allmulticast mode [ 828.113484][ T13] nci: nci_rx_work: unknown MT 0x6 [ 828.117935][T32304] ip6erspan0: entered promiscuous mode [ 828.133964][T32304] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20000 [ 828.799910][T32329] syzkaller0: entered promiscuous mode [ 828.806436][T32329] syzkaller0: entered allmulticast mode [ 829.113825][T32344] bond6: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 829.134567][T32349] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6857'. [ 829.146207][T32344] bond6 (unregistering): Released all slaves [ 830.276847][T32371] netlink: 'syz.2.6869': attribute type 83 has an invalid length. [ 830.404216][T32380] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6872'. [ 830.415395][T32380] nbd: couldn't find a device at index 0 [ 830.424441][T32380] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6872'. [ 830.477308][T32380] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6872'. [ 830.631252][T32392] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6876'. [ 830.703044][T32357] xfrm0 speed is unknown, defaulting to 1000 [ 830.717923][T32397] netlink: 'syz.7.6876': attribute type 28 has an invalid length. [ 831.112933][T32411] netlink: 'syz.2.6881': attribute type 5 has an invalid length. [ 831.645270][T32415] xfrm0 speed is unknown, defaulting to 1000 [ 831.883066][T32432] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 832.730388][T32440] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6888'. [ 832.750521][T32440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6888'. [ 832.768209][T32440] hsr_slave_0: left promiscuous mode [ 832.785545][T32440] hsr_slave_1: left promiscuous mode [ 832.913919][T32451] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6891'. [ 832.950531][T32451] netlink: 108 bytes leftover after parsing attributes in process `syz.5.6891'. [ 832.971431][T32451] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6891'. [ 832.986027][T32451] tipc: Invalid UDP bearer configuration [ 832.986084][T32451] tipc: Enabling of bearer rejected, failed to enable media [ 833.052615][T32455] xt_limit: Overflow, try lower: 271964/0 [ 833.196981][T32460] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6895'. [ 833.272507][T32463] netlink: 'syz.7.6896': attribute type 13 has an invalid length. [ 833.930015][T32463] xfrm0 speed is unknown, defaulting to 1000 [ 835.743395][T32560] xfrm0 speed is unknown, defaulting to 1000 [ 835.828023][T32599] __nla_validate_parse: 10 callbacks suppressed [ 835.828055][T32599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6928'. [ 836.018006][T32605] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6929'. [ 836.274834][T32614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 836.277816][T31880] Bluetooth: hci1: command 0x0406 tx timeout [ 836.292829][T31880] Bluetooth: hci5: command 0x0406 tx timeout [ 836.308006][T32614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 836.326331][T32614] xt_l2tp: missing protocol rule (udp|l2tpip) [ 836.388368][T32618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 836.425294][T32555] xfrm0 speed is unknown, defaulting to 1000 [ 836.968547][T32556] xfrm0 speed is unknown, defaulting to 1000 [ 836.997191][T32623] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 837.279054][T32639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6938'. [ 837.490780][T32642] syzkaller1: entered promiscuous mode [ 837.496591][T32642] syzkaller1: entered allmulticast mode [ 837.503878][T32600] xfrm0 speed is unknown, defaulting to 1000 [ 837.931460][T32655] batman_adv: batadv0: Adding interface: macsec1 [ 837.944806][T32655] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.971980][T32655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.983829][T32655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.027032][T32655] batman_adv: batadv0: Interface activated: macsec1 [ 838.066680][T32638] xfrm0 speed is unknown, defaulting to 1000 [ 838.373849][T32661] FAULT_INJECTION: forcing a failure. [ 838.373849][T32661] name failslab, interval 1, probability 0, space 0, times 0 [ 838.386538][T32661] CPU: 1 UID: 0 PID: 32661 Comm: syz.6.6945 Not tainted syzkaller #0 PREEMPT(full) [ 838.386563][T32661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 838.386575][T32661] Call Trace: [ 838.386583][T32661] [ 838.386590][T32661] dump_stack_lvl+0xe8/0x150 [ 838.386617][T32661] should_fail_ex+0x412/0x560 [ 838.386641][T32661] should_failslab+0xa8/0x100 [ 838.386663][T32661] kmem_cache_alloc_bulk_noprof+0x8c/0x710 [ 838.386682][T32661] ? pfn_valid+0x125/0x4c0 [ 838.386702][T32661] ? pfn_valid+0x125/0x4c0 [ 838.386725][T32661] bpf_test_run_xdp_live+0x179c/0x1cf0 [ 838.386764][T32661] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 838.386801][T32661] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 838.386843][T32661] ? 0xffffffffa0201728 [ 838.386858][T32661] ? 0xffffffffa02017d8 [ 838.386898][T32661] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 838.386930][T32661] ? _copy_from_user+0x94/0xb0 [ 838.386949][T32661] ? bpf_test_init+0x113/0x150 [ 838.386967][T32661] ? xdp_convert_md_to_buff+0x5b/0x330 [ 838.386991][T32661] bpf_prog_test_run_xdp+0x81c/0x1160 [ 838.387026][T32661] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 838.387052][T32661] ? __fget_files+0x2a/0x420 [ 838.387078][T32661] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 838.387100][T32661] bpf_prog_test_run+0x2c7/0x340 [ 838.387128][T32661] __sys_bpf+0x5cb/0x920 [ 838.387153][T32661] ? __pfx___sys_bpf+0x10/0x10 [ 838.387192][T32661] ? ksys_write+0x242/0x270 [ 838.387212][T32661] ? __pfx_ksys_write+0x10/0x10 [ 838.387237][T32661] __x64_sys_bpf+0x7c/0x90 [ 838.387259][T32661] do_syscall_64+0xe2/0xf80 [ 838.387276][T32661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.387294][T32661] ? trace_irq_disable+0x37/0x100 [ 838.387315][T32661] ? clear_bhb_loop+0x60/0xb0 [ 838.387336][T32661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.387354][T32661] RIP: 0033:0x7f0e5979acb9 [ 838.387370][T32661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.387385][T32661] RSP: 002b:00007f0e5a5d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 838.387405][T32661] RAX: ffffffffffffffda RBX: 00007f0e59a15fa0 RCX: 00007f0e5979acb9 [ 838.387417][T32661] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 838.387428][T32661] RBP: 00007f0e5a5d7090 R08: 0000000000000000 R09: 0000000000000000 [ 838.387437][T32661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 838.387447][T32661] R13: 00007f0e59a16038 R14: 00007f0e59a15fa0 R15: 00007ffefc9442c8 [ 838.387476][T32661] [ 841.661509][T32675] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6948'. [ 841.706576][T32675] vlan0: left promiscuous mode [ 841.712140][T32675] veth5: left promiscuous mode [ 841.714023][T32677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 841.733196][T32677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 841.746322][T32677] xt_l2tp: missing protocol rule (udp|l2tpip) [ 841.767708][T32677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 841.838883][T32681] syzkaller0: entered promiscuous mode [ 841.844580][T32681] syzkaller0: entered allmulticast mode [ 841.868745][T32682] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6950'. [ 842.341030][T32690] netlink: 3 bytes leftover after parsing attributes in process `syz.5.6954'. [ 842.523584][ T31] INFO: task syz.1.5628:27602 blocked for more than 143 seconds. [ 842.542260][ T31] Not tainted syzkaller #0 [ 842.554821][ T31] Blocked by coredump. [ 842.574719][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 842.586757][ T31] task:syz.1.5628 state:D stack:26968 pid:27602 tgid:27598 ppid:18586 task_flags:0x40044c flags:0x00080001 [ 842.608777][ T31] Call Trace: [ 842.612171][ T31] [ 842.615605][ T31] __schedule+0x14ef/0x4fb0 [ 842.620210][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 842.633798][ T31] ? look_up_lock_class+0x57/0x110 [ 842.640942][ T31] ? __pfx___schedule+0x10/0x10 [ 842.644965][T32714] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6959'. [ 842.655598][ T31] ? schedule+0x90/0x360 [ 842.659970][ T31] schedule+0x164/0x360 [ 842.663832][T32714] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6959'. [ 842.664209][ T31] schedule_timeout+0xc3/0x2c0 [ 842.680064][ T31] ? check_noncircular+0xda/0x150 [ 842.685693][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 842.691177][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 842.695916][T32715] sctp: [Deprecated]: syz.6.6960 (pid 32715) Use of int in maxseg socket option. [ 842.695916][T32715] Use struct sctp_assoc_value instead [ 842.696926][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 842.716161][ T31] ? wait_for_completion+0x274/0x5e0 [ 842.721489][ T31] wait_for_completion+0x2cc/0x5e0 [ 842.726719][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 842.732368][ T31] ? __flush_work+0x100/0xc50 [ 842.741850][ T31] __flush_work+0xa17/0xc50 [ 842.746431][ T31] ? __flush_work+0x100/0xc50 [ 842.751116][ T31] ? __pfx___flush_work+0x10/0x10 [ 842.756350][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 842.761655][ T31] ? __cancel_work_sync+0x5c/0x110 [ 842.766894][ T31] __cancel_work_sync+0xbe/0x110 [ 842.771845][ T31] tls_sk_proto_close+0xc7/0x8c0 [ 842.776937][ T31] ? ip_mc_drop_socket+0x25a/0x270 [ 842.782157][ T31] inet_release+0x143/0x190 [ 842.786898][ T31] sock_close+0xc3/0x240 [ 842.791152][ T31] ? __pfx_sock_close+0x10/0x10 [ 842.796200][ T31] __fput+0x44f/0xa70 [ 842.800207][ T31] task_work_run+0x1d9/0x270 [ 842.804908][ T31] ? __pfx_task_work_run+0x10/0x10 [ 842.810047][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 842.815282][ T31] do_exit+0x69b/0x2310 [ 842.819461][ T31] ? cgroup1_freezing+0x20/0x350 [ 842.824405][ T31] ? __pfx_do_exit+0x10/0x10 [ 842.829288][ T31] ? cgroup1_freezing+0x20/0x350 [ 842.834237][ T31] ? cgroup1_freezing+0x20/0x350 [ 842.839775][ T31] do_group_exit+0x21b/0x2d0 [ 842.844391][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 842.849687][ T31] get_signal+0x1284/0x1330 [ 842.854206][ T31] arch_do_signal_or_restart+0xbc/0x830 [ 842.859888][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 842.866117][ T31] ? ksys_write+0x242/0x270 [ 842.870628][ T31] exit_to_user_mode_loop+0x86/0x480 [ 842.876075][ T31] ? rcu_is_watching+0x15/0xb0 [ 842.880847][ T31] do_syscall_64+0x2b7/0xf80 [ 842.885602][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.891676][ T31] ? trace_irq_disable+0x37/0x100 [ 842.896866][ T31] ? clear_bhb_loop+0x60/0xb0 [ 842.901555][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.907500][ T31] RIP: 0033:0x7fe9bc39acb9 [ 842.911914][ T31] RSP: 002b:00007fe9bd2b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 842.923404][ T31] RAX: 0000000000047000 RBX: 00007fe9bc616090 RCX: 00007fe9bc39acb9 [ 842.931862][ T31] RDX: 00000000ffffff6a RSI: 0000200000000000 RDI: 0000000000000005 [ 842.940211][ T31] RBP: 00007fe9bc408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 842.948465][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 842.961267][ T31] R13: 00007fe9bc616128 R14: 00007fe9bc616090 R15: 00007ffd95f44818 [ 842.969355][ T31] [ 842.972839][ T31] [ 842.972839][ T31] Showing all locks held in the system: [ 842.982489][ T31] 1 lock held by khungtaskd/31: [ 842.987685][ T31] #0: ffffffff8e35a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 842.998194][ T31] 2 locks held by getty/5591: [ 843.002891][ T31] #0: ffff888034ffe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 843.013175][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 843.023814][ T31] 3 locks held by kworker/1:3/5891: [ 843.029082][ T31] #0: ffff88813fe15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 843.040270][ T31] #1: ffffc900047dfbc0 ((work_completion)(&(&sw_ctx_tx->tx_work.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 843.054053][ T31] #2: ffff8880786338f0 (&ctx->tx_lock){+.+.}-{4:4}, at: tx_work_handler+0x10a/0x200 [ 843.063690][ T31] 3 locks held by kworker/1:4/5911: [ 843.068963][ T31] #0: ffff88813fe15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 843.081756][ T31] #1: ffffc9000491fbc0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 843.093528][ T31] #2: ffffffff8e360b40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 843.103739][ T31] 2 locks held by kworker/0:10/19723: [ 843.109216][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 843.119321][ T31] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 843.128610][ T31] 1 lock held by syz.1.5628/27602: [ 843.133727][ T31] #0: ffff88805ae063c8 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 843.144114][ T31] 2 locks held by syz.4.6937/32638: [ 843.149358][ T31] #0: ffffffff8f79a1d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cb/0x570 [ 843.160252][ T31] #1: ffffffff8e360b40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 843.170402][ T31] 2 locks held by syz.6.6960/32712: [ 843.175747][ T31] #0: ffffffff8f7ac2e8 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0xc6/0xd70 [ 843.187299][ T31] #1: ffffffff8e360c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 843.198537][ T31] [ 843.200875][ T31] ============================================= [ 843.200875][ T31] [ 843.219231][ T31] NMI backtrace for cpu 1 [ 843.219252][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 843.219273][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 843.219292][ T31] Call Trace: [ 843.219300][ T31] [ 843.219308][ T31] dump_stack_lvl+0xe8/0x150 [ 843.219336][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 843.219359][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 843.219380][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 843.219404][ T31] sys_info+0x135/0x170 [ 843.219426][ T31] watchdog+0xf90/0xfe0 [ 843.219461][ T31] ? watchdog+0x209/0xfe0 [ 843.219490][ T31] kthread+0x726/0x8b0 [ 843.219515][ T31] ? __pfx_watchdog+0x10/0x10 [ 843.219537][ T31] ? __pfx_kthread+0x10/0x10 [ 843.219561][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 843.219583][ T31] ? __pfx_kthread+0x10/0x10 [ 843.219604][ T31] ret_from_fork+0x51b/0xa40 [ 843.219624][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 843.219641][ T31] ? __switch_to+0xc82/0x1410 [ 843.219670][ T31] ? __pfx_kthread+0x10/0x10 [ 843.219693][ T31] ret_from_fork_asm+0x1a/0x30 [ 843.219728][ T31] [ 843.219735][ T31] Sending NMI from CPU 1 to CPUs 0: [ 843.340062][ C0] NMI backtrace for cpu 0 [ 843.340080][ C0] CPU: 0 UID: 0 PID: 11390 Comm: kworker/u8:34 Not tainted syzkaller #0 PREEMPT(full) [ 843.340098][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 843.340109][ C0] Workqueue: events_unbound toggle_allocation_gate [ 843.340132][ C0] RIP: 0010:insn_get_opcode+0x3a/0x11b0 [ 843.340155][ C0] Code: ec 98 00 00 00 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 99 4a 4a f6 4d 8d 66 1c 4c 89 e0 48 c1 e8 03 48 89 84 24 90 00 00 00 <0f> b6 04 18 84 c0 0f 85 3b 0d 00 00 45 0f b6 3c 24 31 ed 31 ff 44 [ 843.340168][ C0] RSP: 0018:ffffc9001b1ff558 EFLAGS: 00000a07 [ 843.340182][ C0] RAX: 1ffff9200363feff RBX: dffffc0000000000 RCX: ffff88807b1e0000 [ 843.340193][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9001b1ff7e0 [ 843.340203][ C0] RBP: 0000000000000000 R08: ffffc9001b1ff84f R09: 0000000000000000 [ 843.340213][ C0] R10: ffffc9001b1ff7e0 R11: fffff5200363ff0a R12: ffffc9001b1ff7fc [ 843.340225][ C0] R13: ffffc9001b1ff804 R14: ffffc9001b1ff7e0 R15: 0000000000000000 [ 843.340236][ C0] FS: 0000000000000000(0000) GS:ffff888125927000(0000) knlGS:0000000000000000 [ 843.340249][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 843.340259][ C0] CR2: 00007f0e599de2f8 CR3: 000000000e146000 CR4: 00000000003526f0 [ 843.340274][ C0] Call Trace: [ 843.340287][ C0] [ 843.340303][ C0] insn_get_modrm+0x64/0x7d0 [ 843.340324][ C0] ? __mutex_trylock_common+0x158/0x260 [ 843.340345][ C0] insn_get_displacement+0x155/0x9f0 [ 843.340368][ C0] insn_get_immediate+0x64/0x1280 [ 843.340388][ C0] ? trace_contention_end+0x39/0x100 [ 843.340408][ C0] ? __kmalloc_node_track_caller_noprof+0x108/0x7f0 [ 843.340424][ C0] insn_decode+0x30e/0x4f0 [ 843.340445][ C0] ? __kmalloc_node_track_caller_noprof+0xf9/0x7f0 [ 843.340459][ C0] __jump_label_patch+0x114/0x4a0 [ 843.340482][ C0] ? __pfx___jump_label_patch+0x10/0x10 [ 843.340505][ C0] ? __kmalloc_node_track_caller_noprof+0xf9/0x7f0 [ 843.340520][ C0] ? __kmalloc_node_track_caller_noprof+0x108/0x7f0 [ 843.340534][ C0] ? __kmalloc_node_track_caller_noprof+0xf9/0x7f0 [ 843.340555][ C0] arch_jump_label_transform_queue+0x69/0x110 [ 843.340577][ C0] __jump_label_update+0x185/0x380 [ 843.340601][ C0] static_key_disable_cpuslocked+0xc5/0x1a0 [ 843.340621][ C0] static_key_disable+0x1a/0x20 [ 843.340639][ C0] toggle_allocation_gate+0x1fe/0x290 [ 843.340656][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 843.340673][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 843.340692][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 843.340707][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 843.340723][ C0] process_scheduled_works+0xaec/0x17a0 [ 843.340751][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 843.340766][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 843.340788][ C0] ? assign_work+0x3d3/0x440 [ 843.340805][ C0] worker_thread+0x89f/0xd90 [ 843.340832][ C0] kthread+0x726/0x8b0 [ 843.340852][ C0] ? __pfx_worker_thread+0x10/0x10 [ 843.340867][ C0] ? __pfx_kthread+0x10/0x10 [ 843.340886][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 843.340905][ C0] ? __pfx_kthread+0x10/0x10 [ 843.340924][ C0] ret_from_fork+0x51b/0xa40 [ 843.340940][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 843.340955][ C0] ? __switch_to+0xc82/0x1410 [ 843.340976][ C0] ? __pfx_kthread+0x10/0x10 [ 843.340994][ C0] ret_from_fork_asm+0x1a/0x30 [ 843.341020][ C0] [ 843.675293][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 843.682155][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 843.691256][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 843.701305][ T31] Call Trace: [ 843.704575][ T31] [ 843.707496][ T31] vpanic+0x1e0/0x670 [ 843.711476][ T31] panic+0xc5/0xd0 [ 843.715185][ T31] ? __pfx_panic+0x10/0x10 [ 843.719595][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 843.724967][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 843.731112][ T31] watchdog+0xfda/0xfe0 [ 843.735261][ T31] ? watchdog+0x209/0xfe0 [ 843.739586][ T31] kthread+0x726/0x8b0 [ 843.743645][ T31] ? __pfx_watchdog+0x10/0x10 [ 843.748311][ T31] ? __pfx_kthread+0x10/0x10 [ 843.752895][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 843.758095][ T31] ? __pfx_kthread+0x10/0x10 [ 843.762673][ T31] ret_from_fork+0x51b/0xa40 [ 843.767251][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 843.772348][ T31] ? __switch_to+0xc82/0x1410 [ 843.777037][ T31] ? __pfx_kthread+0x10/0x10 [ 843.781617][ T31] ret_from_fork_asm+0x1a/0x30 [ 843.786380][ T31] [ 843.789746][ T31] Kernel Offset: disabled [ 843.794058][ T31] Rebooting in 86400 seconds..