last executing test programs: 2m32.735763635s ago: executing program 2 (id=1511): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x698, 0x5, 0x440, 0x220, 0x2f0, 0xfeffffff, 0x2f0, 0x220, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f0000000180)) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) 2m32.645735854s ago: executing program 2 (id=1512): r0 = socket$isdn_base(0x22, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x28, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc6d}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x2}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x6, 0x2, 0x5b}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000300)={"3ae320eb62f551eff646084dfa7f53cb", 0x0, 0x0, {0x5, 0x3}, {0x3, 0x883}, 0x3, [0x2ab6, 0x3, 0x3ab, 0xc78, 0xb4a, 0xfff, 0x40, 0x2, 0xa9b, 0x3, 0x4800000, 0x47, 0x0, 0x2, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{r1}, r2, 0x1c, @unused=[0x6, 0x5617, 0x2cc, 0x7], @devid}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000001400)={0x0, 0x3, 0x10}, &(0x7f0000001440)=0xc) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000001480)={r4, 0x1}, &(0x7f00000014c0)=0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001500), 0x0, 0x0) ioctl$FIONCLEX(r6, 0x5450) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), r7) ioctl$sock_netrom_SIOCDELRT(r3, 0x890c, &(0x7f0000001580)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x6, 'syz1\x00', @default, 0xc, 0x1, [@default, @default, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) r9 = accept4(r5, &(0x7f0000001600)=@in6, &(0x7f0000001680)=0x80, 0x80800) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000016c0)=0x0, &(0x7f0000001700)=0x4) sendmsg$can_j1939(r9, &(0x7f0000001880)={&(0x7f0000001740)={0x1d, r10, 0x3, {0x0, 0x0, 0x1}}, 0x18, &(0x7f0000001840)={&(0x7f0000001780)="7ebd8ce569da8fcf6395929b6f66153c0c672c45e701e3919f0e4c9a84120bd5ee4ac3e7ad85c062a62006a8d1396086c533ec36a3bfdb385da387bc8515a78e5dc56a4a55f22343e97b0cb34270e77fea0e8d06db7b429a0b78efa29163d710290f1a41f29db40c0b8c4ee085f81d6bfad9a200cf1577f1917564c0522d40c1570a7df221931c88d6832ba8e9cb28199c5481bfe13890c224d59d91769258e0e8665e8bd7b8ceaa9d714b4c84454d03edaf259d13f21aefe126c645e2", 0xbd}, 0x1, 0x0, 0x0, 0x800}, 0x40081) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r7, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x50, r8, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x40, 0x6}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x2000c044) ioctl$BTRFS_IOC_GET_DEV_STATS(r9, 0xc4089434, &(0x7f0000001a00)={0x0, 0x99, 0x45fdaf568366830d, [0x101, 0x5, 0x4, 0xcf9, 0x1], [0x100, 0x2, 0x1, 0x8, 0xfff, 0xc2c, 0x7, 0x2, 0xf5de, 0xf, 0x4, 0x5, 0x80, 0x80000001, 0x8000000000000000, 0xdcbc, 0x7ff, 0xe, 0x2, 0xd6bf, 0x41, 0xb2, 0xd, 0x200, 0xd3c0, 0x0, 0x6, 0x1, 0x1, 0x9, 0x6, 0x1, 0x8, 0x2, 0x1, 0x8, 0x9d10000000000, 0x2, 0x5, 0xd1c, 0x2, 0x4, 0xffff, 0xfffffffffffffffe, 0x3ff, 0x5, 0x1, 0xffffffff, 0x8001, 0x9, 0x7, 0x8, 0x9, 0x4, 0xe153, 0x79b4, 0x8000000000000001, 0x4, 0x7, 0x8, 0x791, 0x4, 0x200, 0x0, 0x4, 0x8b, 0x9, 0x5, 0x7, 0x9, 0x4, 0x7, 0x8, 0x3, 0xfffffffffffffff8, 0x9, 0x3, 0x3, 0xfc5, 0x0, 0x1, 0x3, 0xb, 0x3, 0x7, 0x8000000000000000, 0xaab6, 0x936, 0x7, 0x0, 0xab, 0x7, 0x6, 0x615, 0x4, 0x7, 0x5, 0xffffffffffffffff, 0x3, 0x70e3, 0x0, 0x5, 0xe65, 0x4, 0x18d, 0xb8f6, 0x2, 0x8000000000000001, 0x3, 0x1000000000000, 0x200, 0x3, 0x0, 0x3, 0x10000, 0x0, 0x7, 0x6, 0x400, 0x8, 0x6]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000001e40)={0x0, 0x2, 0x0, [0x843, 0x4f2, 0x9, 0xfffffffffffff800, 0x8b], [0xb6, 0xe, 0x7, 0xf1c1, 0xc7, 0xffffffff, 0x7, 0x0, 0x1, 0x10001, 0xcee4, 0x0, 0x1000, 0x1, 0x3, 0xc, 0x800, 0x9, 0x0, 0x6, 0x100000001, 0x100, 0x2, 0xf5d0, 0x3974000000000, 0x0, 0x101, 0x14aa, 0x1, 0x238, 0x9, 0x6, 0x2, 0x2, 0x7c9f, 0x4, 0x8, 0xa, 0x5, 0x3, 0x4, 0x6, 0x6, 0xd, 0xf221, 0x1, 0xffffffff, 0x80000000, 0xe, 0x2, 0x5, 0xfff, 0x5, 0x2, 0x1, 0x6, 0xc, 0x3, 0x5, 0xa5c00000000000, 0x1, 0x746, 0x5, 0x39c39793, 0x80000000, 0x4963978e, 0x3ff, 0x9, 0x3, 0x9, 0xdad, 0x3, 0x3acc, 0xe, 0x9, 0x8, 0xff, 0x4, 0x0, 0x9, 0x9, 0x9c93, 0x1, 0x9, 0x5, 0xcf, 0x7, 0x9, 0x2a52, 0xb5, 0x3, 0x10, 0x5a, 0x6, 0x9, 0x2, 0x80000000, 0x200, 0x0, 0x2, 0xa4b, 0x9, 0x3, 0x9, 0x80000001, 0x16f8, 0x6, 0x6e39973a, 0x7fffffffffffffff, 0x2, 0x8, 0x63ce7c8b, 0x5, 0x7, 0x7, 0x10, 0x2, 0x7, 0x5, 0xdc, 0x5]}) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000002280)={0x0, 0x3, 0x10, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r9, 0xc4009420, &(0x7f0000002680)={0x11, 0x1, {0x3, @struct={0x4}, r11, 0x1000, 0x8000000000000001, 0x9, 0x3, 0xffffffffffffffff, 0x24, @usage=0x4, 0x10001, 0x5, [0xc7b, 0x6, 0xffffffffffffffff, 0x1, 0x100, 0x3]}, {0x8, @struct={0x1, 0x2}, r12, 0x5, 0x6fdf, 0x9, 0xc, 0x5, 0x8, @struct={0x80, 0xc6}, 0x6, 0x8, [0x5, 0x6, 0xd613, 0x8219, 0x200, 0x3]}, {0x4, @struct={0x496, 0x1}, r13, 0x9, 0x800, 0x5, 0x9, 0x401, 0x18, @struct={0x7fffffff, 0x520e}, 0x8, 0x6, [0x5, 0x10, 0x7, 0x4, 0x9, 0xe9a4]}, {0x24, 0x7, 0x401}}) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000002ac0), r7) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x24, r14, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", ""]}, 0x24}}, 0x40011) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000002bc0)={0x5, 0x9, 0x4, 0x3, r4}, &(0x7f0000002c00)=0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r9, 0x84, 0x1b, &(0x7f0000002c40)={r15, 0xb7, "c72cea41c85664ce6b7945f331e713c315e7fea1325e024be2f2e8ae520b58479633ec35a59ee1ff759e98f0ac927b1d78599869c1742050f665f8481ffc9a7a6e7cda09034e405aa71a05e4a1dd823507a1e763c5d4f40a046419b2f4ef38db9c389ad573c7b25bf8d16858e6e936a8f3a16238acc50300d4abbb1630ad7c8803a7ca109a42b3888c938a3babd7e5daab6d9167cf17f8dfdbd5782a4a5ea5f108cc52245b7d3c90eb31168e7994a9f1287e9c53a355d5"}, &(0x7f0000002d00)=0xbf) ioctl$sock_ax25_SIOCADDRT(r9, 0x890b, &(0x7f0000002d40)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002e00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r7, &(0x7f0000005980)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000005940)={&(0x7f0000002e40)={0x2ae8, r8, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r16}, @val={0xc, 0x99, {0x1, 0x2e}}}}, [@NL80211_ATTR_IE={0x138, 0x2a, [@mesh_chsw={0x76, 0x6, {0x2, 0x36, 0x1c, 0x3}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @random_vendor={0xdd, 0x46, "8628d288fbeb222c844fc265edd207ec00c6164ecdfc30f35492b381e98c71f952cb5237150d2ed50d0ff2ed0505913b65ed8d54133a8a9b8f76956c96445debc10ddb31af51"}, @random={0xa, 0x2e, "7757bb9397b843d5ab4e6ff0543360bda214863704878259b39be04de4256d4e3e9a5eec4f4bcf4ed6fd85ac5672"}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xb7, 0x6, @device_b, 0xffffff80, @value=@device_b, 0x9, 0x3ff, @device_a, 0x9}}, @perr={0x84, 0x88, {0x3, 0x8, [{{0x0, 0x1}, @device_b, 0xfffffff7, @value=@device_b, 0x20}, {{}, @device_a, 0x400, @void, 0x1f}, {{0x0, 0x1}, @broadcast, 0x3, @value=@device_b}, {{}, @device_b, 0xdc, @void, 0x15}, {{}, @device_a, 0x0, @void, 0xa}, {{0x0, 0x1}, @broadcast, 0x81, @value=@broadcast, 0xf}, {{0x0, 0x1}, @device_a, 0x2, @value=@broadcast, 0x1e}, {{0x0, 0x1}, @device_b, 0x3, @value=@device_b, 0x34}]}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8}], @NL80211_ATTR_IE={0x55, 0x2a, [@preq={0x82, 0x30, {{0x0, 0x0, 0x1}, 0xff, 0x0, 0x1, @broadcast, 0x55d, @void, 0x5, 0x897, 0x2, [{{}, @device_a, 0x6c3}, {{0x1, 0x0, 0x1}, @device_b, 0x1}]}}, @ht={0x2d, 0x1a, {0x8000, 0x1, 0x2, 0x0, {0x80, 0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x408, 0x0, 0x7f}}, @challenge={0x10, 0x1, 0x5c}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xaa, 0xfa, "ad41cc8df2e7751474acf78c4bbea637d2c759aa77226672c65d4fb85bcad34c879d4bb8e75860cb36e63c5b31510e7ba8e8a82a39c87676f1af3dfb419ed08239fb1a8a3eb3cb4200f8bb8655283c7d04ba65a041bc4a203d9151c8fc8f5ab2550c2b6d8eca8d407b23b43fa05fde3c211d892de3f3bebfd52c9dc58732f112dafd3f22f0c63ec829a48eaa30259d901b3a2c0126861ec91d3f369ca90460e682be1364164f"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x99f4}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "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"}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_FILS_ERP_REALM={0xa2, 0xfa, "67e0c265740a32a4f1d0aecd6308e7fa68d4091ec1d36964ca256bb45a4c688cacb7ce23c24cef770a8b3ef0903787e391d71558cd9a40bee71ba18271d2f1923b1aa8ea974c362ecbdc93322960e8db105b5e401c45877540f817e7e1f2520e4b050e94dd360556565be106e17fe9b239248df6e648e1bfba0c6b0c8984a1c12aa45ea13799353ce6750b79d53d0c53c4e80464c53d31f8f1c3af8aa55e"}, @NL80211_ATTR_FILS_ERP_RRK={0x95, 0xfc, "b78f995f2b15f753dd932e45203d0d6f106237a89917544928b6ef3a1df6f1eed12d6478ac3724ff02d89d086cd6cfbad33d02bb3b5d618dbb75936e524bc64e9d4a185ad0a190bf5f341cd27f55660bdf9593e2c6ac51196b96412258236acbca7bc08c1789e20ec6438730cb9a47b14c7aef9a0786b50375c81871f7c75f353644c9eb337a3180f4cee995e2ed7128f6"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "0365cd6316232c9084ba70"}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_RRK={0xca, 0xfc, "c3e446727b8294bb14a2d403ba221ff81d8a0097962768254e44c971b3c7f04008fb91aea5cf886dcb415ba8781f7d57dba339cfaabf425d991c1728f1121755468005b4a53beb97e6e4a1c59ae85e5f4da2bbfe7d8371737fd6e565ae9c44b31f67776e3fafaa4b75c91d61f3dbe1f9941682eb97478f876d643124078467e57d191297ddc039cf8123caffd6f417141306740bf1a73ed0062d362bd01d01204817ad7b491eeb74ae85a9c5aea7bd4f5011fa4c2f679ac470c2b6be3a43cbebd7d2635c7603"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "863736d8591e08f763c18e481770fe24"}, @NL80211_ATTR_FILS_ERP_REALM={0xf4, 0xfa, "92bea5bb2e2c84c7733be5bf0179e41ba3014960eb13228311632eeb9a32717a8cf85b4b93176eac9f6bdfafb2d0e1a61adcdf4cba26c8fc216c46ced7c7414c4d860d31f3633ed501f89659c75561c82bee63b6a30f4db22d990a5b9700c53b8606d98b1ef1cc467711cd2273b3869d4b3b1a7ce4aecec69317a933646de280f104d4dacd5585b8654e61d66841164ec04ffe69b7b78153a102b5068557364e1c20d32d0592e6396f305a4850eae1de4fc8d5b1fc7e0cc929515a2f674fa5bd03a450d354c75a0bca5a153d3f2eb8280fb3f2b803c8f8ae5fb5e8c5b3403fe228b0a713d2e970c48e5c42afa2ba91a6"}, @NL80211_ATTR_FILS_ERP_RRK={0xf5, 0xfc, "8c03607558d983fd26f668205134621f0776a51af6234ab3451c8526a06c687f46f05eb45e3ee36c44ae96638e61e9cd22e8c69894fa85e2e4bdf47c9363d2491be475b8ddd677120518eae3c713c7eba7bdcb0a0229bb48f03823034918f1e6460d54eb8db26b67f8a1702f54301aba337943b2547a679e838cf1e0c9422c6888502abfef94e558f9f919cdd0d6908683d280b636a151ef6e7916196cfa28121ff66b2c3fa1df63d2c5f38fd86c34f8122acbc1800de1299106f9dc6331c722aa0f2a8148af8ed1f096848bb46c98e120d16311afba7c090aa33b8716c4522bacc0b9669fc95da6a52667be5d3d2dcde5"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "1a94cb12c3282dbccc2883619801c020"}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x8e, 0xfa, "7132e80f5f213a8f563347c21c166c6160c166a412141aee290b9f0671ae8ef46691defdfe52d2ab84e02309647fd158464134f81c24621a33fdcefbf014afd0300e0f4ea4565cde5ca5e16fff4f62f83983f6c9bf784476aeb9493aaa8e2b50829ba3b98f40443c3d44dd719eeeadd8190f844d2c5d599a1527bc0a6fa264c7fe13d5f9198afc5983a4"}, @NL80211_ATTR_FILS_ERP_REALM={0x97, 0xfa, "3bbcff244a605e67e720ef018506f7402cfeb357467b7b82ab40c4d51c170da764170cd267822294692120f8a3bc62156e3bd29f08981b67a7b4e90c4514285e89fca81061e31ad8e3120f1a3d070a74f56576662814f4af20865c57411c3a9118e04b4d9e46c1676f89c5255b13120e9a1cf058139580cce9e5dd3484f4bc924874d638e3b3e9959b208d5d005b4425897074"}, @NL80211_ATTR_FILS_ERP_REALM={0xa0, 0xfa, "88c088cb25efced78f428511d03c4270123c66b9063a62fee7a066371916ef1e937227d47411d5c7982f61820775635502c0d8934a02a815bea9973527f88a660d6da8788efa70ff19fe311b780e662404dd716c23d091960e8c18b0ffa6757f8ae099e0e6b469dfe9f79d0de075a4174eae41f0405659cb5fbf493d3b47a4753c0b7cb4f16defe19d2e08886036aefceef2185084b5913356f8d514"}, @NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "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"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "d97817d8d5"}, @NL80211_ATTR_FILS_ERP_REALM={0xfc, 0xfa, "04d39d5d64477f37d23fcf21fb20e541de08b57bbb505322123fcbd9c22695aba6a712abcbe8a9c6426930cab5cdd44c0020a69cb3f26c85c92f1503cb2229ba126286bcc78381b22ccc88f3bf02af52e85444b2cf79eb908afd0da0d7b5b830e29d1bfef92506f53f1f54af342502f0e419110d962295bbda41f29f1916cf54e35ef4d117c43408dc4302501eb4a7940ccf86e41ef31c0cf84c60bbe2fb32aa8e4d61132c5399bd00a260b9bf5920bad1265056fe25561875cacf4c87075a4e1b6abd4df306f1e620aa952c9f82f7fb7f23dffea3a1ad9590ccd8a55bd44ed54c721a4078569438b7b3dd74b6440d20c80e4a9b80a434ce"}, @NL80211_ATTR_FILS_ERP_REALM={0x4d, 0xfa, "61faac6edbd18ee0bba653e4454377ca91773ecaf5cbd8a53b1b98f4a358db0d18e3bbb12d54f84ca9a395847139bd2b968d79d8c4db2d89f14a87b71aa4becdaf26660b7aafbbb39a"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "87130bca2bf52df7e72bf9a9"}, @NL80211_ATTR_FILS_ERP_RRK={0xe7, 0xfc, "1de2c779febb5698498431d047e91d26392e4f2faca0315e9c001f8112a16b85fd7181e0ff11f096c920cc772614068126cd554510537414b5216bfb5451ed4f6b8808e9fe57039391b47094b275011bfe1e1ab3a2d49880993553bff4e229bad47ed6dfa689aee593c42172e5f3849f634292690db24773a4d6b4b95bfaaa08fe428877e9a8173d6277ec2e4f6370688fde7703c3c4953ff66261a6fd3901f1f21373b41c250265fe05911acd929e85dfd54dc60808676c12f9570ce30656579f870367d85735576352df378f3268a32ebf5cf732aebdffded6ae6ace2c0d5c5bf5cb"}]]}, 0x2ae8}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$SIOCRSGL2CALL(r9, 0x89e5, &(0x7f00000059c0)=@null) 2m32.51653923s ago: executing program 2 (id=1516): mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000002940)={0x12d0, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10, 0x56}}}}, [@NL80211_ATTR_IE={0xa, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x4, 0xd, 0x6}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xa5, 0xfa, "bf12610e4509356b75342c50b1ec536702ab20c35c5eb9976b9c39032a14e9c05f0cd866d3b180c5bfce810263d76e6e6d6605b3a0f641209fe2ecd18bdc9429187d5e9a7ac6c9cb42230949f6d527ef280813a0adf0a2fcb01a6acc33a8bf686dd318b4024521fe323045bba65a24cf9a17deb1603501476589d76039e5ed61df6196c5c1fe97b03255dc455de561ce2918f4e192fddc2ff63f514ebf958df6ef"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xd21e}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8}, @NL80211_ATTR_FILS_ERP_REALM={0x46, 0xfa, "49b7d1743b93164f98da5291f4008b2b27e510b415b83fdb5575fe11b480ad9de44e0896589396a1b3e3206e7c6ea3e6e6131a67ed43aa237bd0fda23ba43cf3d15a"}], @NL80211_ATTR_IE={0x1030, 0x2a, [@dsss={0x3, 0x1, 0x78}, @gcr_ga={0xbd, 0x6, @broadcast}, @ht={0x2d, 0x1a, {0x20, 0x0, 0x7, 0x0, {0x9, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x2, 0x8}}, @measure_req={0x26, 0x1003, {0xb, 0xfa, 0x7, "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"}}]}, @NL80211_ATTR_IE={0x104, 0x2a, [@mesh_chsw={0x76, 0x6, {0x8, 0x5, 0x11, 0x7}}, @random_vendor={0xdd, 0xf0, "55af78dfff201a770a318c9a963f94f27aadc02e188a36f3300d5f4c9d8f1e95801953d321ac1e8f5f58f8cf5c7d05cd34e6904398b5fca20f7531ea8d9c1973c14ac47c4c939d8eaeea9e4394de7a92451b2f78d9d1d6663f0f3f11d322ff7e218155cacd86ebe6786dcdc1505df6038a18e11fcdbdc41c613435975d8f25d192fd19a4496c0e9953e302cbff350623fd79be14f69e80a1cac15b01063aec2e7b96be0d16f377f433e757aafd7a4f47c3ef48d69d017b69aa07568bb784c588f2a0c1c19dbbc387f4e700cdba3d7b9dfb8f4269d331804fcda924e5c6bbc39b379f637b991dcc59a31c8f37520e4e1c"}, @peer_mgmt={0x75, 0x4, {0xffff, 0x7, @void, @void, @void}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "992e416656db3141"}, @NL80211_ATTR_FILS_ERP_RRK={0x42, 0xfc, "272968344bfda18a480aa3e74db0da8b9e8db30cce5b0d57b2bad274323d11a2ceb0a397d1442cbcec2be6073bdbdf6645556564b5ae3cf1669a557104da"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "a17b260ef1c0b6b0c9d08f"}]]}, 0x12d0}, 0x1, 0x0, 0x0, 0x40}, 0x20048052) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000071120800000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$netlink(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_macvtap\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000280)={@empty, 0x19, r2}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x30, r3, 0x615, 0x70bd25, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x30}, 0x5, 0x0, 0x0, 0x20008082}, 0x0) 2m32.418405913s ago: executing program 2 (id=1518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6a}, [@ldst={0x0, 0x0, 0x0, 0x0, 0x8}]}, 0x0}, 0x94) (rerun: 64) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) (async, rerun: 32) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, 0x0, 0x0) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r4, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x240400c0}, 0x20008880) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async, rerun: 32) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (rerun: 32) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000f5ff02fec20007000000000000002140c0d287d2915cf1207e05"]) close(r7) (async) socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @local}) (rerun: 64) 2m32.175098359s ago: executing program 2 (id=1524): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) recvmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/171, 0xab}, {&(0x7f0000000280)=""/41, 0x29}, {&(0x7f00000002c0)=""/31, 0x1f}, {&(0x7f0000000300)=""/164, 0xa4}], 0x4, &(0x7f0000000400)=""/166, 0xa6}, 0x3ad}, {{&(0x7f00000004c0)=@tipc, 0x80, &(0x7f0000000980)=[{&(0x7f0000000540)=""/115, 0x73}, {&(0x7f00000005c0)=""/3, 0x3}, {&(0x7f0000000600)=""/213, 0xd5}, {&(0x7f0000000700)=""/185, 0xb9}, {&(0x7f00000007c0)=""/56, 0x38}, {&(0x7f0000000800)=""/127, 0x7f}, {&(0x7f0000000880)=""/4, 0x4}, {&(0x7f00000008c0)=""/100, 0x64}, {&(0x7f0000000940)=""/57, 0x39}], 0x9, &(0x7f0000000a40)=""/164, 0xa4}, 0x7fffffff}, {{&(0x7f0000000b00)=@isdn, 0x80, &(0x7f0000001d00)=[{&(0x7f0000000b80)=""/254, 0xfe}, {&(0x7f0000000c80)=""/31, 0x1f}, {&(0x7f0000000cc0)=""/19, 0x13}, {&(0x7f0000000d00)=""/4096, 0x1000}], 0x4}, 0x5}, {{&(0x7f0000001d40)=@nfc, 0x80, &(0x7f0000003000)=[{&(0x7f0000001dc0)=""/111, 0x6f}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/30, 0x1e}, {&(0x7f0000002e80)=""/37, 0x25}, {&(0x7f0000002ec0)=""/193, 0xc1}, {&(0x7f0000002fc0)=""/13, 0xd}], 0x6, &(0x7f0000003080)=""/4096, 0x1000}, 0x2}, {{0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000004080)=""/35, 0x23}, {&(0x7f00000040c0)=""/94, 0x5e}, {&(0x7f0000004140)=""/251, 0xfb}, {&(0x7f0000004240)=""/101, 0x65}, {&(0x7f00000042c0)=""/9, 0x9}], 0x5, &(0x7f0000004380)=""/94, 0x5e}, 0x4}], 0x5, 0x40002122, &(0x7f0000004540)={0x77359400}) r2 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000004580), &(0x7f00000045c0)=0x10) write(r2, &(0x7f0000004600)="975a726cc64ea3ad1ddb422c882f84df75aa4c30a39caf43589e1905835fe06793a699c9006e626e4aba8b9a5432c47b1ae6c2b84adb06ef43e5019970da44dde4cd32f4c9fa375dbc7d2e424c0e423dda7e7e728badb47b485ca5d0862da4bb68d98c0b380d0abb187d5be47f5be2818f8da6b7ae02faa9120c33c029c0083b7221ac2ff084c8db6e736219042d2d0d87ac49aaa9ce0206536394be3b89119ebcbcdcf0fcaa6b44efacb8555025efa0d7d0c2755d6020f73e9fe90bfe0905cff409f72522c32bb989c0930ba4d257458322270cdcc36b6fe8404c8adbea2825550e7c9d91f3c8d294e2dd90c53f191966ab1627bc49d9", 0xf7) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004880)={0x6, 0x5, &(0x7f0000004700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000004740)='GPL\x00', 0xa, 0xc, &(0x7f0000004780)=""/12, 0x40f00, 0x61, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000047c0)=[0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000004800)=[{0x5, 0x3, 0xd}, {0x2, 0x2, 0x2}, {0x2, 0x3, 0x10}, {0x3, 0x3, 0xd, 0x7}, {0x4, 0x1, 0x4, 0x7}, {0x5, 0x4, 0xe, 0x2}, {0x2, 0x1, 0xa, 0x7}], 0x10, 0x9}, 0x94) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004940)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000004980)={r3, r4, 0x1, 0x0, @void}, 0x10) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000049c0)={r5}, 0x8) ioctl$SIOCGIFMTU(r6, 0x8921, &(0x7f0000004a00)) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000004a40), &(0x7f0000004a80)=0x4) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000004ac0)=0xffffffffffffffff, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000004b00)={r7, r6, 0x4, r3}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f000000a840)={&(0x7f0000004b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000a800)={&(0x7f0000004b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x5bec, 0xc, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2f74, 0x3, 0x0, 0x1, [{0x11c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_KEY_END={0xfc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf6, 0x1, "79d204fb5cff29586effe4396f1dcd9bbebc7126b199259b7be40472b71d880cea965790804fdc75b4441d7deb7827733af219c4f4d27d9fc438bf41a6020dfe095ce98a04f7cb86f3ef21447556cd0d0da6c103d993886c33ba9acaaecdc7a41fafce3a40ddbe9e7eb6dde549075c2b5652d43a268f33daa8521ac84366810f35237e7c9fbe21f74f88dce7820b1edec057afc601d1342aeebf3e6cedab5f2f9ceff05aa769b040cbdb2239e6f651a4685a2281db6001c1850112c76703c4ac4267b13867cd525aeb357f4d6e3ae802593ee978c28789cec63ce186fc8b836727ecdad21fac91e983c9039700fe5cd3d24d"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, {0x5cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xb6, 0x6, 0x1, 0x0, "6ff7fd4e40d7c43c7569726fef3a65e63e73ba86eea35eda96f352145af2673159c3f1662e5149b460c12182652c61dfe5da7d72079283673546bf82a6addb67d0a0728fa29fe386305942bee3b495430e0f361c9f991f9f6270b0b4c981bca94f736e4ff6dacdf1c6f12bec392cf8ab9c4a10a5323aa8adc0837790f2d3fa1316b754382c1dd174ce6d8df76cf157f124a8dc5f77a6676445df98b73ccf7a40c9f87a1cfaa008da2dcd00719afd6c4c388f"}, @NFTA_SET_ELEM_DATA={0x17c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x6c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xca, 0x1, "0c02fd0624723dcef0bb3422b5f51ebdcc5342d9e4e77d08f217ca7ff674863450e812c31945939efce2af88c742a21d24b310aacdf38dc54bb8c4fdeb95b83c39d9325b5e04a6865b1dce3ba57009b71771d2108402bef72e7b2a6048af50337afc2014c0b121b621c94054617d19b067aebe31b583207b80faecb2135252077e48076d1729eb35e1e598cc4cb74f804773a963e652258f767464f2483358170cfcc43b0e561519ef55f07aa5f9f872fcf31cc26a6b415177c0d4e93aa602490b7b7ac6b52e"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80}, @NFTA_SET_ELEM_KEY={0x388, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbf, 0x1, "45e251b2028e7bd9f8b5cb7df6a0f8a65a59964d768beb74f5a8ea30caa0e30863a4a3d2ec00c60b5ed0d97187fbfd6e4549afb6cd88eb46ecd263fac6445fb331ca5dbba32c57c0df0f11591d57da714c21f8b77c08046226cb31bc96ec9fe2ab171246881f6d929c23c18c56ef3bbbdeefbe0a9d6a96fc4b50828c94425e64c2eae2ee5d2b9b4a9c93a36351043c512283124531aff376bdf44e541d3f1ae36a9d66ddd40eb1cdbb75bc0e04b926a7d6c4b985e3472ce4bdb908"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xc2, 0x1, "d8d630380095875a28e3b85e6922ad13ad0eb5d837014de7ecdaeac5b562566204208be8dc1968f7dfe056331f190de8e328197963955fd6f5e37c34c23dfab9fff442bbc70fbb496897408cd26e814f4b3774ca95f195b1ce1124fb8bc152ff2252517c425d92a2a370b3bff37ff3c490438a1ecee4b0ab38c30949ca673787539aa7801f92aba1cbab8d0e470cf3690c9f80d33652d59efd87b5aff75029dea921ec7689a86ba515a02de61ebd76c1214842623119193f12b6d56cd124"}, @NFTA_DATA_VALUE={0xd3, 0x1, "3ec0d970ef9f3582e5f3bffc55523db283a8a56e7dca6c604f2d431a34c1fe9c13da87e281bed8aa2d8991da70ed0f9b84a065fa21ffa586ec7bd3a1813b72321dfb59b4f0b98c4ab265b3b0aaab3a2afe45f43b8bf2417401957a6ef3bd1f0ff58edcbe330dd3a141bd66b989cf51487ec8b94ba3f6f39dbb3f86a08507eaa6d053d01bb5e5a287d22dd4f7055077cf50096d1f0b527a2ee9fe0accebdedbd71b9a2ee7d35124692d3bb5c8bc17a1a5998278750d40d690940230c18006ff9822870b5882fc7c8f2c11941b450ca3"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}, {0x4bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x24, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x494, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x11c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x10c, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_FROM_DATA={0x100, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xee, 0x1, "0216fe40f849ca7f4f3cebaccd35887764d7649503c4b0e3519712b8daa1b712d969821ac2be16d9cc839ebae848ff7dbf027a57566374f6aaa1eb14ea9980632d815d013bff313ecc27cb931088c86acec937387ada33003697e9814d91f0a9acddcfaea486768588ed47d69dcb1f862c1ad40299f94235235060d78fbe34f9d6e2a3f1d305edfc25936d21b8c2ba8a93b10cf23d41dad5365dbc48c3eda4aac86d6bb33934e3c09ab71963c58ab692fefb9e31df03a9fa088c34515ca907937d051434c95a08fa91576d640ff03b6fbf4359e0e679d6ad6e9112c7cf8d79014cec20faa6c29b900e80"}]}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x2d4, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x2c8, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CMP_DATA={0x298, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x48, 0x1, "38b179cb050575fab1aca1b528b528965f5896333c27893a917e45784e1d4d490030353141701bd44050b6fe9c12e6de86036ca01ed0e3875718743ce9438af4081cff41"}, @NFTA_DATA_VALUE={0x10, 0x1, "44dac5a3ffc8f0a3c03db504"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xde, 0x1, "6ed7a8ebc9a900cd2f33fa7e084e02940509593ec45d25e3b321a705954fd86867879b398a371610d8fb1765e06075889e7bf240dae6d60eab74a34000aab58099420411cd029e9f2e6f0c29cbc823fb4650f63ee55064eafbdb2452658cece84cfb517be41341f0443d614df6431be44e5eabe4a3d6a20f42c1006592567f3c5dd5aba6383935692ac92474f44b51a7174f544fde57f72846ed68a7ffcedf1b1c148c5aefcc8d9c7443b9aa8197227ab7b8bf4266b43e955cb05dd640574dec056cffbbf0d8d1ec073bd85ab312f93f77173a4275c6f5876115"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x16, 0x1, "2fa6e1e42be985fce2f43a838243eda4d52c"}, @NFTA_DATA_VALUE={0x57, 0x1, "8ecf81f8470a4a4c37f2a464a82bd589ce6b28fdb68988196e6ef7a51d4fcad6d6f7935933db2bc55932f552519847c63c8975f290f70082dfc48080757909ab237e895c74a1905226a328747950273173a49e"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CMP_DATA={0x4}, @NFTA_CMP_OP={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x38, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x12}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x10}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x10}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}]}}}, {0x34, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_SOCKET_KEY={0x8}]}}}]}]}, {0x23cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x9e, 0x6, 0x1, 0x0, "dc8bd324d544506c69c2745a270791cb4cb8def19f1ce74359c7afd215177a4141e6f91c55c0975a694b7b9f0c2bf54a6df32355b5e29c77602fbe8e77a233eec6c20b86686d05cf7fa29565385bce37a6168ee9f1683488334b3c8ffe145cc20b4d79b18264534f4caf9c464fff135f68fb61dce39d7d7b2ca5652416e08b25169e6d0d0172d8b9bfa0009c029a1c28cfc059979c43b3886452"}, @NFTA_SET_ELEM_DATA={0x20d0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7e, 0x1, "38c80c21df42683da6501fb32e84960e3feb9afe1334d202bfd16cf24fcd235b8cc451fc871a84d95782649540b11f452bbd600062a22029e1509ea9462f811ee5fe9eab66d54838a0ac4dbb912a125ce74805f82b0c2593f47e9b66deb00acd737aded0092602d295cb323fa55c1dca2fa951b4de2eb5fb1602"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_DATA={0x58, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x52, 0x1, "fb571d48128ac6b84623efe92fff9ce7ffdc4a17643c8c0ad67383617700960beacf9ef8fc0b74583806fa682d15bb4dd7650c54f0129c12c60cb04163359e2ac0229267288cf257dc2aa8b1cbf4"}]}, @NFTA_SET_ELEM_USERDATA={0xf6, 0x6, 0x1, 0x0, "71db03582f40c038b93102e7cf75fbb351a32bacc79d8ce115bf1a253a45f82317debc5221fb6059bd997cb7928eb451e428d20f4f427dcc9ad3c3c5dcc29f0b473bb5bae74b89d1d1f640d7bb76beafd5c48836370b2122e501ddeaea0e7c8b39e27ac86c03a3888e83e23c1be803d7b875b4d48da4585fc85028990716cf9f4f1cb2345f618715b66a1b803c45498bf8914c262065d3d6e655048c43e3aef7df58a3c8bd49e14992b728e2a1ee886c62450576da19ed372358649dab13cb4d96a2f2840f8fe4550e986659fbd3c8b1a9c95b2f31383e872917e8ab1bf75bd6072337bedc96fbe847fa2f269b681412a7f8"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0xe0, 0x7, 0x0, 0x1, @range={{0xa}, @val={0xd0, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0xc4, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x59, 0x1, "e538d2ecd2438414cc54067df1bbbf0527ecc975d43e8942f05fe567969c1132d1d29d263b487d19b4592379720edbfab80d96cd63534ca16be63c584b3668e0d154d39e7051ffdd23bc0de45c94dd901070152955"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @xfrm={{0x9}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c38, 0x3, 0x0, 0x1, [{0x2784, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x18}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x2568, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x50, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x24d4, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24c0, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10a0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x3c, 0x1, "449405c6931e7c7f31e39d8f3ffeba44b8bb2d3d612e422eec6d59c538cb693eb7a0c627fdde59193590a7e2894d90c88c467bd4d440d380"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_IMMEDIATE_DATA={0x140, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x88, 0x1, "1a7ce10f889cf1fca0a516247aacaa944a0c29a4499dc8cb208c6b6b9170b1ac2f340928d5b617fcc343d9f73524ea0247abc9118f6ce2171a274a9f31345e3ea6546efb0c9a74167f3258f3d0aa415308cb96eea3da2403e98f58aa28c429fcbe4e5701704090739433f4ec924ab1df86365239e9655174ffb38425e8c2b9d716d24ccd"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_IMMEDIATE_DATA={0x12c4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x26, 0x1, "bf4f70f064f934d17ed131446b3ae7a8a2dddda533004f8c7478c0164549dd00e253"}, @NFTA_DATA_VALUE={0x59, 0x1, "61902e7664ef7a420041adaf903be7c5d9d504505dd57eb0a61b127704ec99c3e94d1d2d6f770f7bd6adbbe2c5790ce0829c5a31c7436ca3b88d8125f9477be8e7a31cc3a73a3e1d7718a3f29ec7197eb772f0fc67"}, @NFTA_DATA_VALUE={0x78, 0x1, "2a035e92bba7bdb629570b56690fe0dc0b26bdb1f588ce5880bb7280b5cbb61f8a28401a78d827daef16a6020ed0468fd305880b438a9d130f7837a6d80892acfd637fc1c6699c80ca3c4fa45c66c2121328bb2c0bfbaa4cb3e555c17552af5d0964f7593f5a7cd0a6b7e6894873ff89c0d13cba"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x78, 0x1, "39cc817f5803381bcd22e8da6f459b4e39556f33661dae88557dc1c015ce0079537b9615e2afe7795efbed1216ac9482f2e864bd963056fa48e9c873ecb206fe7be5eaef000e60afa3587baa9f1e2e4948fc5285b010c905823d7c296bdbf469a26d756c93857c75293568f66d21b5be4b2c8e15"}, @NFTA_DATA_VALUE={0xd4, 0x1, "e10726c6d320f474680c263701d01c915bf0e76036f195ab001fc5d314c0ebd1ca7126b6f6b195178ad46808c6d10be797406f5e129497319693061ea31e5788c523bd70ac560fd4a49121d05de7aa92f071a91139740341d12500994333e8b030da4fbf8b8bf77082b1cf4669392399f5a892f3f2b32794d84dac31b6730cab97ddd486f14502b915adf52fa3db3d0f702e19f313a83400fb0f9f26159d301557c5f4ae3bfc3a547a2c8e3b91de2572408a43ea25a6096f612c79f670aa05bb39bfaf396be4f2e34d5ef267ae282b8c"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}}}]}, @NFTA_SET_ELEM_USERDATA={0x74, 0x6, 0x1, 0x0, "1f025f676cc87a7575b57d7b19a586afbcfbe39f620957570dfb5ef0adb057704cf5828dbefe7daa9844601fbd3a1f352d5980e786d2e26ce617fbd110807b2b47155ae5c47b4cbfdc71107b2125237640ff3a4f8f847cf49ef7c539a04d469472021c82cbef8d3ebb85fb4228aaf570"}, @NFTA_SET_ELEM_KEY={0x144, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xf1, 0x1, "14390932900cd72ff6ea2eb2f6dca168a3e9e4c67d8ff27157159a0591595dd251fe75266beedec592a1d0433ccc291020a03b7816652ec76d5d9c12e8074c72eb917203ba4c34354b23243349ac7fd08ff9b4d02ac892db64b276f9408739fa16a9c9f317a08aed0ee0e904ecc0d5113d6a86f34041bcd71784e819221f5b1b59566553ffc245c6b8287dcb9a693dce16fb82929096a03ef544cb9879aa74507f59a9291b6c61e4ec7d906fca33cfb067017d517e166ab74de0214dad623c1b3255c3bcf7b24e0496318a42cef6f5c6d2cba48a89e0b895a1843d2420884a0fd166e6ca9b89cd151592dbce36"}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_USERDATA={0xf, 0x6, 0x1, 0x0, "164cc0d3470a967435f282"}]}, {0x214, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x58, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x53, 0x1, "6ffdca946796a0e9757b8a61b4793a435f1e7040bf88b0e7def10fcc4173b5dfe427b466f8a8f1d69673c8cec169d5a8de1371054a915627a30101d5d3bbf6fe4657dc3a68a914bb07a90d615858c5"}]}, @NFTA_SET_ELEM_KEY={0x1b8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x46, 0x1, "58db17aaf3398cd3da09854ed23011e2875122b7976e2e2da3a8edd467d41992c0d33adccd17753c85cce7be4233585e62b65ca5ab1e6fb7731898e4cce41a209a6f"}, @NFTA_DATA_VALUE={0xc3, 0x1, "3b352228801f9858b847de37bc1c3015d7775b963fe80b0b3977dc5f00a80ef5c70054674f7c6950004d96b7a7d10ca305a9e2dc58c8c9ed31f5ea1a49ec317959271e3b27a65339ddf42857e8c974453da1fdcb169e81d0f29f96708119a3bbf669a4cab11c4a5618c598cfa724dcda0ee076f2546350947101fac20256f3aba45632da2ee694e7e6ff318395e754a1264c287ad4438eb14fbb6c46dc9ff8d64e372b557a91fe31eccb62dd28b1a197f94d008594c42bd142522798e67ddd"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}, {0x29c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xe9}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6fc}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @log={{0x8}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0x214, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x3b, 0x1, "894080e6fca305706fa3e72acf8d8b15a17680ae9833a91b819556d77b17b68c19f3d158761ec16c0e2bdab841589a327755592796e829"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x800000000000000c}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x7a, 0x1, "8ba9e4b63ec96715da1af2541b6623c038e62eed695ce283ce8da74564a7bd7d60e36ea3fc42918c501f74276fc9b1d448b6511d631b58fcfdd8b0ae4c50ee354620a28d14e84028f4f26a05c5d6f364941f8dd8ac581d51bb3c3852fe5ded1fa16949ac77343dbd8aef78e98b4953800c7a358f5ace"}, @NFTA_DATA_VALUE={0xcf, 0x1, "71ad59c542fb1269b1695141f141a3c3d472aed37723083d2e57cf8873aa84b5050e66ce71ec7c6633eaf3210843860191004317b6a8d4639378e12bbad4d0a3788279f5cd2632e27e163f75e298f2de776aa0b1a016976c577e0b5d03d657d37c478e4f81a001e68fd91b24e07a41ae083217460901d3e9fece65a0d553847e88b1fe2ab5b907d6323f8aa0057c80664a77bb150e613357d87d3c65b792266f17c8f731991ace715b5ca412df6364a4a70c5df048469f91dfce0da422f7146eaa460f76846df820af6aec"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x2b, 0x6, 0x1, 0x0, "07fb4397a3b1f3d4a9d6bd4aac9cf67b3c191a40f9b119e2ff192a3a9b00fcd2cde07bbee76d2e"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0xcf0fca0307b1b710, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5c5c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) connect$netlink(r0, &(0x7f000000a880)=@unspec, 0xc) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f000000aac0)=@bpf_lsm={0x1d, 0x10, &(0x7f000000a8c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0xc7}, [@generic={0x7, 0xb, 0x8, 0x8000, 0x25}, @call={0x85, 0x0, 0x0, 0xcf}, @map_idx={0x18, 0x8}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x10}, @map_fd={0x18, 0x8, 0x1, 0x0, r6}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f000000a940)='GPL\x00', 0x0, 0x5a, &(0x7f000000a980)=""/90, 0x41000, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f000000aa00)={0x4, 0x6, 0x6c34, 0x2a0}, 0x10, 0xffffffffffffffff, 0x0, 0x3, &(0x7f000000aa40)=[0xffffffffffffffff, r6, r6, r6, r6, r6], &(0x7f000000aa80)=[{0x2, 0x2, 0x4, 0x4}, {0x1, 0x4, 0x0, 0x6}, {0x3, 0x2, 0xc}], 0x10, 0x5}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f000000ab80)={r6, r6, 0x0, r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) write(r8, &(0x7f000000abc0)="e7d0d47801f15e4b35f3577426f4f9f5d0d94df2f24299af608bafce2152f152313e1f09f26e4d57b1600d59d208eec16762e3c9a0d650fccb33ecf5bac686a8acf0b35c08ea6f5cf505923b7833b84995d2cd7bd73206a7ffbe0b6fb6f50c0d22192b7947ad93ded4c3a923e452ce4ab7d96658a8086313ca540a8a7ccb00a44b5fdac7692d9a014c6ea6125834bcc1a622bbd6208dbf5d5b5589e5e18f81d3b5ccb6ba51414455db6a72f2503da148add1676e989cbed36377af686820b4bbb78ef67098de4c87401beb6ed8742fcc0cb702b8c8dd4b870a028b48765df9db599b356a312938dfecfccd1fc67dbe92318a0fd458a1cd2205b6d03bbf11b71bc8485f8b2a362bda8d40741752fe14026029bfa388a657ca53a753674e8a7f8b9c60904e40595f5593be3188ae0ec70d71f883176e3e1c8c3814b99c81fa427493a9dceddc9038aeb462d4df884049b3d61993b4720c7fd0d49b1ee21275ef23ec40b6998f199a71a863f38da74fceb98e3d4a946d753b64c41c47937c29931d472dc3c078daa651efae56dc8b3d70f51410c41343f079c9d63c3a3dd5268d7474e1003cc3e68d643d90707ef51ce4bb846f2cf71fd6e26c56cdff76dba543674749ddf170a82d682a3eee12adf0a50d4a2210422571b124d44d30b6eacf6abc59771e0a09d45e54580244a2b666c914ab74a8d29af0c3779e38ea469dd263f51d708a3ef11358253eb20a151ca263d12c5278577dcb9d1deea12a354092316440e09dc5b9a24c912059e91816fd418f9dcda14579427984e9a95b62019477bc8fdb378524e1edfd22f0f44f905fb4a26a7cb44c28899a697dc8561ae4fb293184aa9194a6d058b5c42c1044d60b6bc0fc3a33a9db28c8fbfc583215e098a2fff7ad463c03bbcdedc5d2761a9c6beafb802af66497c8d67285dba410a311e51de6c86dccfdb24d6ecf6978b2718d702247425cd86fca8d8c2349002674012a06d5afe973a5b3b5b72ffff0e4c8a9f0fa41aea286f9d3bcf7bc34c86adead95f16c24ea7970c073fd937b6088eaa69011de154e3f97c831baaae1e72532383a7ee0622ff914de469ee2102a3a833f1b10c785df22daafe7bb9ded1b7236d05e1b5f22c31036c952dd39da1002a96f5e3d1b439966a3042a5793aca160750fd99a2ad237d36eb1216680b6c822e0bf26a8469faf9026f104f2b4f22cb361477a7ceaca07de83546328a9f2e0a818f8fe8a5a434e1a3afd9bab5d17935ece559707208c8973023b7e5cb92ee0e123a7a614f87bc5b47b1f4705027f6ef714dedf7ea55c18d3f4cf778bd559ba2c50edc4bc367a7ddfd97d832209ee4b8a2761b05c62fddbecf10a3b36f016d7a77643bbb8431f4456e9e0187ad377936d0d5cc73728046f1a60a025aba6131154a84fa3aa0130372d6ae98a493acdb935af771b05f2df511125242d6f4a1a60dd4216f3beee0d594fd0f74b9c6ce28606e0c7a7635aa4764fcb081811fa8c00c863dcdda83e7065e982e8ee272a6990fad2142bb8b53a4da33a01598259d74e57c63f23840fd3a5d1c43229c09e6afc66f543b54419d0dda1a47f1742a5be084856c518a7cf632284a9207252c9d428203b495c3f6bf70807bc878fbc044630a95c10e434d4c2d103b67cbf68051591e2759a6435ef3000e995691d69f5f6cefe56c8804afa59a9415d8e38f5532b749f277a1e4966c80f23b03132484e1a3321959321ac9796a6b715ba05388e222bb7401842b3668a5c4811b6cede4c49912fd8f85848621e6806e33613aa874a24b5668d6d8a726efd35e0b8585ab2b37f2bc31f9963474eb7c1dcb3b150b84b40d5df6d1cc96dd881fe0386ae7b9c5cc64fafd0c1e811fc2a702387ffd546c3f6de76f8cd4acd29e9d5aaf5e682a38bf27ba163250acd0379e56b6cbb036441fd808f00be04e73fcdb9b00ad00cd1c9a580a510537cc9f8f3b8508c3bb42fc0303e19b4e078c99273594efcfdab2cd9d6d28f9a877882055dac0be7df2268a6a6a6b936aa0f070c9640b5d8e3401ece3771a19c43abd59fc027da995cd15c22aa2f45d1456b1502372c95c0b6e2e734d48c972505788cb5e24a214bdd8f60e27902772d9a4238210aa9f29316be676f044f5fe62d3b2e2b3ed76759bcd05dbb40a60eb877fda47af25dd65ac1e804417775a22b4aa304ef4ed6b264da6248fe3da78c737cfc61233ba9cb17e9a2678ff2b7189a2560e9b22e6ade1b0081f22fcad4ac7708e9ed80178a114833a6e858179f2d19a2ce7b055754bf343f214f5cc0a1f3bc6818e91f159f0999db061dc41f409683bead11408e9eb0fba63cef57cf86474d73ae204048bec0689e35402f88941af75d1fe82f7cf6423d242814bdd4a9e7bb533cb2cfa898ad656939fab7fe6de5ddbabae2acde5a72de9881ab1b342db457e15c7bb34065a7f1dc0190646a00f55e7814ce3787e14d071380b610550fd6f465707095bc9fd1b007e1d6908cd5125c626f040a24c025b2fb1cd3f85179e9c31c1c6b2f14d44085c3b2c72cb9976e8e0372564ebc4feb0f50151378e09eefc174b16c1313ff08e5ac297c7c1fd33aad20139308db5063d05078c5924633cf5a4d8beb45fa4021adf94dca845fa3cd05bf6a085586fac124f3baf10c0d7d2c9aa3153d783a370d188ef1d4cf8883c08c1fb067a1e0f152bbe994515e99feadb34d2c85933e92245e774299b5a77f56093585ab4bb06b45c03ee4f8370eff8ce7412a48d20426eb28bfc7b30739750c0cc5203f2cb514046968cd7af8388d6da4e2a1fab0668f6443eb694b519bda3e08d3ab546f6b91f1e2a60bc1c0a284b5d6d642a74291d6dd4ab3405a8de2e4aa5e6de776cd41c886b1d370887c36450bbd6b697c9a4bda9808f31aea0b69f3162c6ef2bc2b57ef6e9c571fd4715cff69b4fa19748e7a5210a2f1384ae70578c4f43a00664e5e354ae5750c0bf57e9600d5ef59359db1cee37a8fb7e8c9e2a619fc957cb7291c6299dd7d57080b2a6e5c440264e5fab35d55830cf7fb6881b0a8773ea8048c4fed9ce77ad7ef127614f73c8980d4a24aab093c5d50234415b198d21436deb3fd1dad25e06a72648a54f65ff32205c2d6c1b47866263d0fd63c182fb6bd309f26c45a2a4a0e2474a92c327525af4055cbbeaddf6f85929938cf112b51f4e2894e168b0a80dac11bd7e327b2b6f4eb9d2d2cfa8f17e73b4a55bd7b12f5be712338d3130172c8fd2f37c9a0fd9a1fb71e65ef2df0eace2786ea1c23c6774e165bf4beb8318a9e351f381d4bf789eaa5fd91fee04a9de7843f72515ee1c9c951fc70c8592323a8489ff7db6d2965aa9622ee30e552c64b9d97cb90f26245f4645a5dd780df9662af3a43cb69361900abccfe5de85d8f4483c1a299fc60b659b2a1499f6ca598206fdc0671721c28abbc188b57d34910f6530fe5b1c218501c89aff2ad7c59b522e36a77e50ce55eff7bd9f41ecaa772abeed2085759b5cafc788cbd97e6a73257334b8c03d6bc44f4356ad734dce91c1fdeacf869b952268c5020461e7a9673c1e42b97e5825e58d687201b7375024d1a90699a2eec5d37613f9c0873ec38740f1f4949e1a5bd3d3e91764924fcd2c926cf36a443d6661dda4b6c32695896be65c65f1457c0056872fe7dea5901a49bd6f0d1f976251ea3de59118e82e087565fa827c328273424700be2d24e120d637d362b84a139da11db78d8eb74e1b9c24ec8d4ddd74d5dccc18eaf34f6e074fa806e182d59f8d828d62c03bb6df93f7c63b6e0c10c4df7792be82df459415edee2087454cb66ac1d8ef91a4dd63c48561cecd2a5e587b17286ba3a7dd6270b109eebc51091e2a2621629983c8efb47ff7ab61940659c5c19aff62be9121af29e2ebfb5fb357a156449808558741b57c10c3154c0efa642d3fa2e9acc4f5bd7e79705fadd30b89795378a843ec898556cbf7e1bbe908de0803d23165ebcec535fb11ff58562115b7a6ddeb83ba44e46e1ed9a7863d7b9fc155e2f162bdf49c81b50fefe2e258312f94bfb4c937563827e5df1c7b42128dc138f7b873e8912f76e91aafde43f3a1df3959444b6e65085d561ac6df5249ed4f9c8f9dec71964cb87ead5b2f0009dc5ace31d836eed276b122f9fa636785182c2ced3be019cb8972701a329311fed17c0cb2758f54d7d650626810050c1f5cb57b4b1e74a33290393f3b3b7629848cca5d6e01711feb6bd6dc0d82e917ac8fca30ee228f524eb8b8c823c59b33dc552b5cc5140cb55b8b3130e0ac6276e51a2c021620cdc2bbd2c4e151b16068208f75f5ca9204848a811facb027ddfea16179710107fa308700a005b928672174657dcf9c9e1ad44631fab92fcabf95c1e5650b0d8b6ec188d6a65bf9a92e21c29df88667f7535a576bd89007c96e4b184dbe8806b16c00878b19c0fc68bf5a17f603d532c83fb2bc186078ddaf4df89fc775b840cdd68b2b819aba49851b1cc8bbcaf45342c4820af23304d49e909b1050637aa6007dc7091c3410300991d5c97f4601cdf6240e2230ef7d028675159531187ccadfaa6085ae0e23c5106a18a9c06a7cf8c9c5c2cecec525cc7908eb0f6148e3486140ef272b03edcd905888a52f0d2d0119d95ef6468ef4263fd6501343f7d9df9459a0cb396951b825e928d1a6f31ba3bafe2197413483ae7c1fc8d347a7d199627f66f54b9afe591120ec28c782dc0a94c0d9f506f84b675d2eb0f736007d324b3f3c837024d6b48f8e1747283a0d135302a076f4f7697145a82885efcdab6014bc5907c5e548ffa59c79d4919137305aadf585ee4711a2a841c8381ff9d61698a40e77e213826835f56f0e577e53a3c4782b7f89a06461dfb296ac8a11ade5c5f0c91e9cb732f4c780f8dc3ff5133f7f47d40f2102032cab5ba4638ab84dba31deb53d9929fa1cd0ca68c7647a71c1064e0f68d30428faa472a405e96cfa0ad54b5c1f774d6270eb8912c76a2f8abb7f402355d85e0de820f7ed90c14bea68e133a4d878b69926c941c5318f40aa5f6ef931771babd171bd32088597123e2a286e20b1c0807fcf24a594459da505d30a825ac2dc1798714238dd6bf308610e89f71f82addf2c010290fb161292c5914f008ac7b4a1058326f66321732a402dd125ce734be6492ad1bdd8b7fbd5984d649946da1762a560cda44ddb4e02a24f2a8b34f625e4003a19d9c63da5ef8664217cfa3072ab434d27dbc75463628bdf0295f10215e5aa1d9ff17524a500799549104824f72cbefc631299368ac80bd49b7fcf5f18f20e6bec05639a675feb05f9e48addae1207a95ad96a303d2ccb3f97916990f39d5dbe15b13b5fc0ddb03cdf67465e428c2201018699632ae4d58b3946594f89e88e077a06b16ce6d319e08cff55e5c7e5b91fabded7065a0c1b89f9cf7eef854f70f1dbd5dbd8f0041af7fffb2cff76e64cf8d80fb5059e80ed7723f9a985d6b9e528d9caedfc7910098ae7e8fd561192055be752a43f1dfc7269eaefcbc43116692b7c4fd81a248ede0b1bf2bd1fa7cf84b54aaa81205fdd7f0abcdb8e827515cbb691a9dd156e2a0d370004804bfe715b5d58dac10c3e1311d1936df07a65595fc2db3f12ef9e7075eee1a30cf5f98f56efb5c88764f250608e5192281e1a302c6498dce72ac7b1f856728105bda62aa4a6bda43d73943d7673ba086c7ce1207a3daec9d7c1be90c09fb7b300f331680f2d60ac6db5717ec3763d9885d3057570e9820a52d9684e1444c30d458a419d1539632e6a3c15249d4", 0x1000) close(r6) getpid() r10 = accept$phonet_pipe(r6, &(0x7f000000bbc0), &(0x7f000000bc00)=0x10) ioctl$FITHAW(r10, 0xc0045878) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f000000bc80), r6) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f000000bcc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f000000be40)={&(0x7f000000bc40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f000000be00)={&(0x7f000000bd00)={0xec, r11, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xff, 0x62}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x34}]}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x6}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff38}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x340}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x9}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x400}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}]}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x2}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x200}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x52}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x75}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x9df}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6c}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5d}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x6}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x6a}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40010}, 0x44000) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r13, &(0x7f000000bf40)={&(0x7f000000be80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f000000bf00)={&(0x7f000000bec0)={0x24, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 2m31.936858102s ago: executing program 2 (id=1528): r0 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000004140100000f000000000000080001"], 0x18}}, 0x4000) 2m16.908536294s ago: executing program 32 (id=1528): r0 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000004140100000f000000000000080001"], 0x18}}, 0x4000) 1m45.225234567s ago: executing program 1 (id=2209): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x4001, 0x3, 0x2e8, 0x250, 0x0, 0x148, 0x0, 0x148, 0x250, 0x240, 0x240, 0x250, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'bridge0\x00', 'macvlan0\x00', {}, {}, 0x21}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_macvtap\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}, {0x4, 0x0, [0x0, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e24], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x4}, {0x2, 0x1}, {0x4, 0x4, 0x4}, 0x3, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) listen(r1, 0x5) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r2, 0x0, 0x0) read(r2, 0x0, 0x0) write$ppp(r2, &(0x7f0000000200)="bc72", 0x2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) socket(0x10, 0x803, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="050b00000000fedbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r7, r7, 0x2f, 0x0, @void}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r3, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) close(0x3) 1m44.099516432s ago: executing program 1 (id=2228): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000840)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x4000080) 1m43.77153767s ago: executing program 1 (id=2235): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xd, 0x9, 0x0, 0xc, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe00, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m43.487154093s ago: executing program 1 (id=2238): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) pread64(r1, &(0x7f0000000200)=""/108, 0x6c, 0xff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="5000000010000d04040000005c000000", @ANYRES32=0x0, @ANYBLOB="00000000195000001c0012800c0001006d6163766c616e000c0002800600020001"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000004c0)=@delchain={0xd3c, 0x65, 0x4, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0x9}, {0x6, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x1}}, @filter_kind_options=@f_flow={{0x9}, {0xe8, 0x2, [@TCA_FLOW_EMATCHES={0xe4, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x90, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x18, 0x3, 0x0, 0x0, {{0x1, 0x0, 0xb}, "1c0312edcb30a44dd2"}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x5e, 0x2, 0x100}, {0x1, 0x6, 0x1, "24a6c1e2b874"}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x574, 0x8, 0x800}, {0x0, 0x2, 0x1}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x100, 0x8, 0x5d}, {0x0, 0x6}}}, @TCF_EM_CONTAINER={0x3c, 0x2, 0x0, 0x0, {{0x9, 0x0, 0x4}, "1874c91328db744531121160cb6cfdf1c08b8dc969d6042f67b8b7ed2b727b7a67b06970cac416fee2d267f97c"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1ff}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xae, 0x1, 0x7}, {0xfffffffc, 0x1, 0xdc, 0x5, 0x4, 0x0, 0x1}}}, @TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x2, 0x9, 0x66}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xc5, 0x8, 0x2}, {0x1, 0x1, 0x3}}}]}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xc14, 0x2, [@TCA_BPF_POLICE={0xc10, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x3, 0x4, 0xfaba, 0x2, 0x7, 0x9, 0xffffffff, 0x9, 0x6, 0xf, 0x2, 0xff, 0x7, 0x5, 0x9, 0x9, 0x8, 0x1, 0x14, 0xd, 0x2b, 0x1, 0x7, 0x5, 0xddf, 0x1, 0x2, 0xb, 0x4, 0xa, 0x9, 0xd, 0xfffff651, 0x81, 0x1, 0x5c, 0xfeaa, 0x6, 0x0, 0x1, 0x2, 0x1, 0x5, 0x2, 0x5, 0x4, 0x0, 0x400, 0x7, 0x5, 0x8, 0x6, 0x7, 0x10, 0x1000, 0x6, 0xfffffffc, 0x54, 0xc2, 0x5, 0xea, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100, 0x7, 0x4, 0x3, 0x2, 0x7, 0x7, 0x1, 0x4, 0x6, 0x10000, 0x1, 0x5, 0x7, 0x5, 0x6, 0x10000, 0x3, 0x80000000, 0xa84e, 0x0, 0x5, 0x6c9e, 0x4, 0x80, 0xd, 0x8, 0xe, 0x4, 0x0, 0x7, 0x0, 0x5, 0x3, 0xeb17, 0xfffffff1, 0x3, 0xffff, 0xa020, 0xbb, 0x1ff, 0x3, 0x10, 0x2, 0x7ee5, 0x3, 0x5fe4, 0x401, 0x2, 0x98b, 0x1, 0x7fffffff, 0x4, 0x6, 0xfffffffa, 0x7, 0x7fffffff, 0x3, 0x1, 0x198b400, 0xe7, 0x2, 0xe31, 0x8, 0x2f, 0x7, 0x3e3, 0x3, 0xc, 0x3, 0xffffffff, 0x0, 0x5, 0x8, 0xfffffffc, 0x2d1000, 0xa, 0xfffffffd, 0x8, 0x7, 0x4, 0x0, 0x80000000, 0x8, 0x7, 0x6, 0x6, 0x8, 0x5, 0x6, 0x1, 0x8d76, 0x80000000, 0xe, 0x5, 0x6, 0x7, 0x0, 0x8, 0x8000, 0x0, 0x7fffffff, 0x0, 0x2, 0x6, 0x81, 0x2, 0x0, 0xc0000, 0x3, 0x2d, 0xfffffff2, 0x5, 0x8, 0x7, 0xdb20, 0x27, 0x6, 0x0, 0x7, 0x0, 0x3, 0x3e, 0xa8b7, 0x6f0f2833, 0x80000000, 0x0, 0x10001, 0x244d, 0x227b, 0x56497fb0, 0x400, 0x8, 0x3, 0x1000, 0x6, 0x2, 0x40000, 0x0, 0x7, 0x3ff, 0x3, 0x6, 0x3, 0x60b, 0x100, 0xffff, 0x1, 0x4, 0x8, 0x8000, 0x8, 0x0, 0x80, 0x1, 0xff, 0xa, 0xf5d0, 0x3, 0x8000, 0x2, 0x406, 0x401, 0x8, 0xda79, 0x7fffffff, 0x1, 0x7, 0x4, 0x4c3, 0x4, 0x10000, 0x9, 0x1, 0x6, 0x4, 0xd708a80, 0xff, 0x4, 0x37d, 0x400, 0x9, 0x7, 0x23894440, 0x9, 0xd75, 0x9, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xffffffb6, 0x1, 0x1, 0x5, 0x0, 0x2, 0x1000, 0x1000, 0x8, 0x9, 0x7, 0x8, 0xe, 0x698, 0x4, 0x2, 0x200, 0xfffffff3, 0x8, 0x9, 0x876, 0xbb97, 0x8000000, 0x81c, 0x64127ccb, 0x9, 0x3, 0x4, 0xd, 0x8, 0x8, 0xa, 0xfffffffa, 0x0, 0x2, 0x7, 0xce0, 0xceb1, 0x80, 0x1, 0xe, 0x10, 0x100, 0x9, 0x1, 0x3, 0x3ff, 0x80, 0x1, 0x1, 0x3, 0x7, 0xda96, 0x7, 0x9, 0x4, 0x5, 0x8, 0xfffffffb, 0x3, 0x1, 0xa, 0x6, 0x8246, 0xd2, 0xf9, 0x3, 0x3, 0x401, 0x2, 0x3, 0x8008, 0x8c3, 0x9, 0x55d, 0x8, 0x8001, 0x9, 0x5, 0x7, 0x5b4a, 0xfffffff2, 0x2, 0x6, 0xfffffffb, 0x8, 0x7, 0x1, 0x2, 0xe, 0x0, 0x0, 0x484c, 0x9, 0x800, 0x9, 0x157, 0x4, 0x4a05, 0x1000, 0xd93d, 0xc3, 0x3, 0x6, 0x3, 0x6, 0x80000001, 0x81, 0x2, 0xc, 0xff, 0x1, 0x7, 0x8, 0x8, 0xc, 0xaaed, 0x795, 0xc5, 0x10001, 0x4, 0x5, 0x1000, 0x9, 0x3, 0x3, 0x1, 0x10000, 0x6, 0x3b910aad, 0x200, 0x3a3, 0x91, 0x7, 0xfffffffd, 0x854, 0x4, 0x4, 0x7, 0x3, 0x5, 0x9, 0x2, 0x5, 0x8, 0x7, 0x8001, 0x100, 0x0, 0x5, 0x4, 0x7, 0x7fff, 0x8, 0x3, 0x4, 0x1, 0x1, 0xfff, 0xd8a, 0x6, 0x5, 0xc72f, 0x8a46, 0xcb, 0x7, 0xff6e, 0x8000, 0xce, 0x7fff, 0x5, 0x9, 0x1, 0x821a, 0x6, 0x7, 0x9, 0xfffffff7, 0x1, 0xfff, 0xe7, 0x887, 0x0, 0x3, 0x5, 0x9, 0x56e6, 0x49, 0x8ca, 0x0, 0x4, 0x3, 0x4, 0x9, 0x4, 0x8, 0x0, 0xffff4247, 0x0, 0x1, 0x422, 0x2, 0x2, 0x28, 0x100008, 0x8, 0x4fb, 0x8, 0x0, 0x6, 0x4, 0xc1, 0x7, 0x80000001, 0x9, 0x3, 0xf3, 0x2, 0x1, 0x3, 0x1, 0x8, 0x3, 0xf87, 0x3, 0x8000005, 0xfffffffd, 0x401, 0x4, 0x3, 0xfff, 0xffff8001, 0x2, 0xb0, 0x4, 0x4, 0x2, 0xb, 0x0, 0x0, 0x4, 0xe, 0x2, 0x100004, 0x8, 0x1, 0x100, 0x8001, 0xd, 0x4, 0x0, 0xda, 0xb, 0x5, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x8, 0xff, 0x81, 0x1, 0x1, 0x5, 0x8, 0xff, 0x0, 0x5, 0x9, 0x30, 0x6, 0x0, 0x7227, 0x4, 0x2020, 0xa39, 0x3, 0x6, 0x8, 0x5, 0x5, 0x7, 0x9, 0x2, 0x35, 0x81, 0x800, 0x4, 0x2, 0x16701ef0, 0x7, 0x5, 0x3, 0x3, 0x3, 0x9, 0x4, 0x7, 0x5, 0x7, 0x5, 0x40, 0xfe, 0x46, 0x2706, 0x9, 0x1, 0x10001, 0x2, 0x481, 0x4cdb, 0x6, 0x3, 0x101, 0x6, 0x3ff, 0x3, 0x8, 0x0, 0x6, 0x2, 0x1, 0xb, 0x10000, 0x8, 0x0, 0x3, 0x4, 0x86, 0x5, 0x9, 0x4c8, 0x1ff, 0x2e, 0x3, 0x8, 0x59a, 0x980, 0xb16, 0x3, 0x9, 0x9, 0x4, 0x8001, 0x5, 0x1, 0xfa, 0x3, 0x5, 0x0, 0x7, 0x6, 0x7, 0xf8, 0xffffffff, 0x8, 0x10001, 0x100, 0x1000, 0x2, 0x1000, 0x4, 0xc9ea, 0x8001, 0x4, 0x2, 0x7, 0xf, 0x5, 0x3ff, 0x0, 0x910e, 0x965d, 0x86e0, 0x8, 0x9, 0xff, 0x7, 0x8, 0x0, 0xfffffffa, 0x9, 0x8, 0x1e, 0x400, 0x2, 0x3, 0x3, 0x5, 0x252b, 0x80, 0x8, 0x8000, 0x3, 0x7, 0x1, 0xffff3736, 0xffffffff, 0x7fff, 0x8, 0x8, 0x10001, 0x80000000, 0x2, 0x8dc, 0x2, 0x80000000, 0x6, 0x763, 0x410, 0x6, 0x4000, 0x80000000, 0x3, 0x2, 0xad02, 0x1, 0x628aab26, 0x807, 0x8, 0x8, 0x9, 0x9, 0x3, 0x80000000, 0x929e, 0xc, 0xbf7, 0xffff1d13, 0x3, 0x9, 0x7, 0x4, 0x9, 0x80, 0xd584, 0x2f72, 0x5, 0x1, 0x7fffffff, 0x2, 0x2, 0x6e4300, 0x2, 0x3, 0x10001, 0x7fffffff, 0x4, 0x5, 0x3, 0x2, 0x1ff, 0x7, 0x1ef60d56, 0xf, 0x3, 0x3, 0x4, 0x4, 0x2, 0x5, 0x7, 0x0, 0x400, 0xb, 0x80000001, 0x7, 0x4a9, 0x9, 0xe, 0xf, 0x10000, 0xc528, 0xffff, 0x5, 0x8, 0x3, 0xc, 0xe8bb, 0x6, 0x3, 0x101, 0x9, 0x5, 0x5, 0x5a, 0x9, 0x6, 0xd, 0x2, 0xf2, 0x0, 0x9, 0x0, 0x1, 0x8, 0x1, 0x0, 0x28, 0x4, 0x4, 0x1, 0x10001, 0x4, 0x5, 0x5, 0x4, 0x1, 0x6, 0x80000001, 0x8, 0x7b4, 0x7]}]}]}}]}, 0xd3c}, 0x1, 0x0, 0x0, 0x40004}, 0x400c004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r7 = syz_open_procfs$namespace(r4, &(0x7f0000001780)='ns/ipc\x00') r8 = getpid() sendmmsg$unix(r3, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {r8, r5}}}, @rights={{0x18, 0x1, 0x1, [r7, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) (async) ioctl$SIOCAX25GETUID(r2, 0x89e0, &(0x7f0000000b00)={0x3, @default, r5}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x7fff, 0x1ff, 0xfffffff3, 0xc, 0x8000}}}}}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b90402", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r10, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r11, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x5, @mcast2, 0x800}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000040)="9cfa10b8c0ba405b26a084be997ce6250aea02cd0dbae6f1d5d6323eba4aeb6b654eab3b140de2e3f8ede84416a5c3e77504099df43b9faf6b", 0x39}, {&(0x7f0000000200)="38765166a03f27f3d5ac10501e0ec12ef3f48a299464c13723c40d40d4a2372786edf2c9533cc71cb59f312b3b34117042b6c17e31f9acb2dc5dd3d9b228ca220dad853bae243c474159a2240463317df26045989251ea9756714f54531f7e103eeda959cbe63d6bb6c565293833bbcdb8dbd86f14b90f142da1343dc6a167b9c8d1f2afd04534beb927f9853206d6f94f03be01b2d8619e1c61b20e4f3c1cea90f7dac89dbe56a11d515eadf711165ba074e35b1029f02643948071f38d509d71067852598cab763e1c42c4ecbdb98cb8b996d243dadea40a305a106c0503ef05cc0318ec47d1f6826fc0723beed4ecc4dd8d7e", 0xf4}, {&(0x7f0000000140)="175ea8eae60ddfd68be6e9fd9eff2822b3931359490d029aea3ad860108b4aa63ff58ee2cc1e6e2d0c827024aaa87f599203d8df12cb297e546b824ee7c207411d6fcc23c2d43280707e", 0x4a}, {&(0x7f0000000300)="d96f3b7b3bae0f7b115bedb10d1933a71ab189c92e963f4ca672ff27e38d878f6390788fa3d4a0fe3f76072034a8f08d085295877bbee7ded4b53e556581e30185350a08f37548684ab10b3026f5c324ea26ee13fdab029fa9ad7b81afb74817d68a267ec09c4972d13b28834024daca24641c49e5268589b94e21f55e50e46d298567357ee517548a2395a62380e1e3e312d7d7cb099e71f21a55f0f8215012d7bf9b03fb0f1ce79ed523d84bb4b0ef3402c8dd44f4d6fddbbcd03615842deac438d125", 0xc4}, {&(0x7f0000000880)="b55212cb21099de4fb9be7c62060fb144a2dbd5340dc7812fc0a9b0367f936e9096da32dc78868952f95ab4c674ce9c9b4e9fe67389f57eeb3356e42552b52af1bb0bc77971642549ec9e20d2fb7db5d7a3fe34f25285f80d4e641a45f753fe75e5a67a1f31c6eb71cf325c89c53b01474a1779d8d0e277144cacf6f4a27ade92313e625800c27ff14fb32e8e665c64efa9015d418ddac317248266d306ca0cf0702da2a6de1f450db68c1217cef10f09c914f4b6670e97ea5b061cfd30f4a", 0xbf}, {&(0x7f00000005c0)="751cd9d137bff927399a94d7b222ddf6f1dc5e77162fb12817d191fec58fd177c814a5f3b72303ea385db865ad1e6c24babfb4d0257c4dae8ba4e52fa3a1cd0ff21771aaf8e03e14b45f14b9daa2b343a2af3c2781ef3e87475e043da3bf0108e7490bf9734a55d7e8400d975446560f709232948c81827667a2cfd60c5c05a3bdea2b162cd640e18085a1fe1538bcfb87475e8014e153c6eb96a14311256a7dd9cd8afe886f0b1e8d8099ed580b05cc8873236341195f9c4db7cb74", 0xbc}, {&(0x7f0000000700)="9e1fcc090f5c0e344b0becde164b6fbd559456a4ee34ebd88337ad2395744160567dc7e13210534b23d2ef9cc7abec767902020efb6984b36be050c551900f30129870800e617786f845e94a91f7292473faca825ab439452e31418d091f1b6d8f012103543a3a19d8172acf3c0165387ef34ac45c3bcef98d11b71e54af1fefa74c3e00d8abefa0b1cad4890bb42c5b1c30e776c18f6609c37beaddfad02f2cd6d949d2bc0965d2505e1e2a0ddb14b21b5ed7412c4a85221473ec3c1db43ce42b3349dde6447bb6853f45e7c4ad0a37c274f4ffb043179a79b3a5dfd2bdcb8b", 0xe0}], 0x7, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/424], 0x1a8}}], 0x1, 0x40000) r12 = socket(0x10, 0x803, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f00000004c0)=ANY=[@ANYRES16=r12, @ANYBLOB="5e017b"], 0x4) sendto$inet6(r11, &(0x7f0000000400)="180a74df373e755e4aae73c20f61dc49e5eccc30dafd7fe5e49bbb636de7c6b7bf85eb19e0ab8a3e2740b78cfa240592a514f12c1e54d52c7fc5f56006c849db8211907f00092ac7acddebbfc5f30443f415b23028b7c1984a1150a62e5f9a45a63ab7c230e9a147e77651c1d937bdf4f5e1c49e25ae0f74c211b3095ea26f7bd0", 0x81, 0x40004, 0x0, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000001000010400000000ffdbdf0000000000", @ANYRES32=0x0, @ANYBLOB="00000000000005001c0012800b00010067656e65766500000c00028005000a00000000001400030067656e6576653100"], 0x50}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYBLOB="200000006a00010000000000000000000a00000000000000080001"], 0x20}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r13, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) 1m43.343292947s ago: executing program 1 (id=2243): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xfff) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r5, 0x9}, 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000000)={0x8}) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @multicast2}}, [0x7, 0x2, 0x925, 0xffffffff00000001, 0xc42, 0x200, 0x6e1, 0x2090c5d2, 0xffffffffffff77ae, 0x2, 0x4, 0x7, 0x100000001, 0x2, 0x9]}, &(0x7f00000000c0)=0x100) sendmsg$can_bcm(r0, &(0x7f0000000300)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="050000001e0500"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000004001000000000000400b313e000000000000000000d5557d394c84e35fb5c6649cc709329cd4056355ec4888b0ed318ede597fdddaf378419109ea50f1d12bab4e296957c834209e073b1086f977937a62d90e374b052f0aba2a7eba90c74a64ca010ee92c90e2dc71a775a84987ddc2bb7eb1ec"], 0x48}}, 0x2400c808) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000004c0)={'lo\x00', &(0x7f0000000480)=@ethtool_eee={0x44, 0x7, 0x2f97885b, 0xfff, 0xfffffffe, 0x8, 0x2, 0x3ff, [0x81, 0x4]}}) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x12}]}}}]}, 0x38}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r12, 0x50dc85624ea6cf59, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) connect$can_bcm(r6, &(0x7f0000000340)={0x1d, r10}, 0x10) ioctl$sock_SIOCADDDLCI(r8, 0x8980, &(0x7f0000000000)={'pimreg\x00', 0xae95}) 1m43.006756561s ago: executing program 1 (id=2252): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x2d}, 0x6, 0x0, 0x3, 0x6, 0x0, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000080)={{0x2, 0x4e24, @multicast1}, {0x1, @broadcast}, 0x18, {0x2, 0x4e20, @remote}, 'veth1_to_bond\x00'}) syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6708100000003aff00034000000000000000ffffac1414aaff020000000000000000000000000001"], 0x0) 1m42.547466794s ago: executing program 33 (id=2252): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x2d}, 0x6, 0x0, 0x3, 0x6, 0x0, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000080)={{0x2, 0x4e24, @multicast1}, {0x1, @broadcast}, 0x18, {0x2, 0x4e20, @remote}, 'veth1_to_bond\x00'}) syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6708100000003aff00034000000000000000ffffac1414aaff020000000000000000000000000001"], 0x0) 1m40.008201557s ago: executing program 3 (id=2275): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xb}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}]}, 0x60}}, 0x0) (async) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x124, 0xfffffffc, 0x1000}, 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r6, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x555c}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x48404}, 0x50) (async) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r4, 0xe28}, 0x8) 1m39.81515024s ago: executing program 3 (id=2279): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x124, 0x124, 0x4, [@union={0xc, 0x2, 0x0, 0x5, 0x0, 0x0, [{0x3, 0x5, 0xfffffd59}, {0xf, 0x4, 0xfffff001}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x1ff}}, @float={0xd, 0x0, 0x0, 0x10, 0x10}, @enum={0x3, 0x2, 0x0, 0x6, 0x4, [{}, {0xb, 0xffffffff}]}, @func={0xe, 0x0, 0x0, 0xc, 0x2}, @enum64={0x10, 0x6, 0x0, 0x13, 0x1, 0x6, [{0xe, 0x1df, 0x3}, {0x7, 0x7, 0xfff}, {0xa, 0x4, 0x2}, {0x8, 0x7da, 0x81}, {0x5, 0xf01, 0x6}, {0x9, 0x1, 0xa9b4}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x1000}}, @typedef={0xc, 0x0, 0x0, 0x8, 0x4}, @union={0x7, 0x4, 0x0, 0x5, 0x1, 0xf, [{0x9, 0x4, 0xf}, {0x3, 0x0, 0x81}, {0x8, 0x0, 0x7}, {0x7, 0x5, 0x1}]}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000180)=""/210, 0x140, 0xd2, 0x1, 0xfff, 0x10000}, 0x28) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, r0, 0x0, 0x4, 0x4}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x221f7c5d}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x5, 0xa, 0xf, 0x6, 0x81}, @generic={0x9, 0xd, 0x9, 0x9944, 0x4}]}, &(0x7f0000000380)='GPL\x00', 0xe86, 0xe0, &(0x7f00000003c0)=""/224, 0x41100, 0x16, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000004c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x7, 0x2, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000680)=[0xffffffffffffffff, r2], &(0x7f00000006c0)=[{0x3, 0x1, 0x9, 0xb}]}, 0x94) r4 = socket$nl_crypto(0x10, 0x3, 0x15) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000008c0)={r4, r5, 0x9, 0xc6, &(0x7f00000007c0)="7ea626836b7e870b07dcd115cff83be8d091cc1898c8810481110d1cd301d1a8c026661cb4e3a6a021c0aec6faec79583505ae55728369f310e73848a153540b3d2f7104859f471c832fa3264d9dcc02695bb2f0f064222fa5451f0d7a18abfabc7beb3d53b47804d451d4802944e1a52d2a5c05aba1585f03c2a32e29c0ef4469ed8a766371e4181de56f3f75db99b8bf215a9145e79503937ec89a152fee58604cd0da877eb5a470af16603f18f0f8a62ae980da771cdd2ee76f8842cc297cf1342add5baa", 0x1, 0x0, 0x6, 0x6, 0x6, 0x3, 0x45c982b0, 'syz0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x6e8, 0x0, r2, 0x1, '\x00', 0x0, r0, 0x1, 0x4, 0x3}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002200)=@bpf_ext={0x1c, 0x2d, &(0x7f0000000f40)=@raw=[@alu={0x7, 0x1, 0xf, 0x9, 0x5, 0xffffffffffffffc1, 0xffffffffffffffff}, @alu={0x4, 0x1, 0x7, 0x3, 0xa, 0x0, 0x8}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xc3e}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f00000010c0)='GPL\x00', 0xffffffff, 0x1000, &(0x7f0000001100)=""/4096, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002100)={0x0, 0xf, 0x7, 0x8000000}, 0x10, 0x1e127, r3, 0x9, 0x0, &(0x7f0000002140)=[{0x2, 0x1, 0x7, 0x19}, {0x5, 0x2, 0xc, 0x8}, {0x5, 0x1, 0x8, 0xb}, {0x5, 0x3, 0x9, 0x8}, {0x2, 0x5, 0xb, 0x9}, {0x2, 0x1, 0xd, 0x8}, {0x5, 0x1, 0x4, 0x7}, {0x2, 0x3, 0xe, 0xc}, {0x1, 0x4, 0x3, 0xa}], 0x10, 0x4}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000002500)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000024c0)={&(0x7f0000002440)={0x58, 0x7, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4bb}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x8045}, 0x20041814) 1m39.726785347s ago: executing program 3 (id=2281): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4004000) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r3], 0x38}}, 0x10) 1m39.655325718s ago: executing program 3 (id=2282): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_1\x00', 0x800}) writev(r3, &(0x7f0000000040)=[{&(0x7f00000012c0)="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", 0xfd1}], 0x1) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) close(r1) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f00000005c0)) 1m38.156895541s ago: executing program 3 (id=2286): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x2000000000903}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x0, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan0\x00'}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x14, r5, 0x8, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000084) bind$bt_hci(r3, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="07000000010000", 0x7) gettid() r6 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x0, @local}, 0x2}}, 0x26) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 1m37.706968452s ago: executing program 3 (id=2292): socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x5c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x120) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r2, 0x618e, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) 1m22.325227577s ago: executing program 34 (id=2292): socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x5c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x120) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r2, 0x618e, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) 23.119162237s ago: executing program 6 (id=3219): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4050000000000007110880000000000460000000000000095000000004a000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000001c0)=0x1c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000480)={0xffff1a47, 0x40000000, 0x10000, 0x9, 0x9}, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4050000000000007110880000000000460000000000000095000000004a000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) getsockname$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000001c0)=0x1c) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000480)={0xffff1a47, 0x40000000, 0x10000, 0x9, 0x9}, 0x14) (async) 22.989092693s ago: executing program 6 (id=3220): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x208, 0x2e0, 0x2e0, 0x208, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0xf0, 0x118, 0x0, {0x1000000}, [@common=@dst={{0x48}, {0x7fff, 0x3, 0x7de91c6f22c9938, [0x9, 0x1ff, 0x87e, 0x2a, 0xafd4, 0x9, 0xa, 0x7, 0x6, 0x1000, 0x6, 0x200, 0x9, 0x0, 0x7, 0x3], 0xa}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x1, 0x1, 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ipvlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ipvlan1\x00'}) 22.97596768s ago: executing program 6 (id=3221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000400)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x6, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8101, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20}}}}, 0x36) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000080)) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, 0x0, 0x804) 22.36903451s ago: executing program 6 (id=3230): getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000009fc4c47a999ce279c99c3efae94c772d3401b7ee8fc0df7d494d1f66e008b0cd784d92aee0e727da9e1fdd3cfe60ac441c5bb831e5a5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000690200000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x20}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000001050000850000001b000000b700000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000c09807850000000600000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x18) getsockopt$bt_hci(r2, 0x84, 0x7c, &(0x7f00000010c0)=""/4111, &(0x7f0000000200)=0x100f) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20) 21.623633194s ago: executing program 6 (id=3236): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_extract_tcp_res(0x0, 0x5, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0x1, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl1\x00', &(0x7f0000000600)={'erspan0\x00', r4, 0x8, 0x1, 0x5, 0x7, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x68, 0x0, 0x5, 0x2f, 0x0, @local, @multicast1, {[@noop]}}}}}) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r10) (async) getsockname$packet(r10, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r11, 0x50483}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private0}, @IFLA_GRE_OKEY={0x8, 0x5, 0x6}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r9, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @empty, @multicast1}}}], 0x20}}], 0x400000000000041, 0x4880) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10001000}, 0xc, &(0x7f0000001240)={&(0x7f00000007c0)={0xa64, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x280, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xe75}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x7ff, 0x9, 0x5, 0xa}, {0x4, 0x6, 0x2, 0xa}, {0x4, 0xfb, 0x9, 0xe0}, {0x5, 0x4, 0x2, 0x401}, {0x8, 0x1c, 0xe, 0xa8}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc3}}, {0x8}}}]}}, {{0x8}, {0x1fc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r8}, {0xd0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r11}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0xa64}, 0x1, 0x0, 0x0, 0x884}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) (async) bind$xdp(r10, &(0x7f0000000100)={0x2c, 0xb, r12, 0x2009, r10}, 0x10) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000003c0)=0x20, 0x4) (async) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r5}, 0x60) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070800000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021400000001e0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000140003801000008008000340000001"], 0xc4}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) 21.500078518s ago: executing program 6 (id=3239): r0 = socket(0x80000000000000a, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x2}]}, {0x0, [0x0, 0x61, 0x2e, 0x5f]}}, 0x0, 0x2a}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r2 = socket(0x8, 0x3, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x40880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x2f, &(0x7f0000000040), 0x3b) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000800)={'veth0\x00', &(0x7f00000007c0)=@ethtool_cmd={0x19, 0xc5f, 0xca, 0x876, 0x3, 0x2, 0x5, 0x2a, 0x9c, 0x0, 0x3, 0x7, 0x21a, 0x0, 0x4, 0x28, [0xb, 0x8]}}) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x20010, r3, 0x9aed7000) r6 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) socket$nl_netfilter(0x10, 0x3, 0xc) 6.194038201s ago: executing program 35 (id=3239): r0 = socket(0x80000000000000a, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x2}]}, {0x0, [0x0, 0x61, 0x2e, 0x5f]}}, 0x0, 0x2a}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r2 = socket(0x8, 0x3, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x40880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x2f, &(0x7f0000000040), 0x3b) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000800)={'veth0\x00', &(0x7f00000007c0)=@ethtool_cmd={0x19, 0xc5f, 0xca, 0x876, 0x3, 0x2, 0x5, 0x2a, 0x9c, 0x0, 0x3, 0x7, 0x21a, 0x0, 0x4, 0x28, [0xb, 0x8]}}) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x20010, r3, 0x9aed7000) r6 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) socket$nl_netfilter(0x10, 0x3, 0xc) 3.088552944s ago: executing program 0 (id=3502): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b0f, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x4004}, 0x810) bind(r0, &(0x7f00000000c0)=@can, 0x80) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x3, @mcast2}}, {{0xa, 0x4e25, 0x1, @private1, 0x200008}}}, 0x108) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xfd84, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES32, @ANYRESOCT=r2, @ANYRES32=r2, @ANYRESOCT, @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x40008000}, 0x4001) 2.519703644s ago: executing program 0 (id=3508): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='virtio_transport_alloc_pkt\x00', r3, 0x0, 0xfffe}, 0x18) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000940), 0x10) (async) listen(r5, 0x0) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r7 = socket(0x10, 0x803, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@delqdisc={0x54, 0x25, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x3, 0x7}, {0x0, 0xa}, {0xfff2, 0x6}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x5b, 0x8, 0x9, 0x2, 0xe2a, 0x4, 0x1}}, {0x6, 0x2, [0xc2]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x39dd}]}, 0x54}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="180000000e00010026bdf000fcdbdfd8dd25f2ffffff0300"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getqdisc={0x2c, 0x26, 0xcde882cef869946b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xffe3}, {0x7, 0xa}, {0xe, 0x9}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x58052) 2.123950816s ago: executing program 5 (id=3513): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0305dd0a3493e6d180b95b7b7abf", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={r3, 0xa7, "7cacaca778b1f5e44fda6f4d0354bf53569f7a9ec80eed9522fa5367a530395da64d42bc17d01dfc901e9e6cbaa6d5b4e0f1e19890dc09676d29783523b86ac6ed703b8b133e14cc3f17833afcdb00fbd4c9bd052c6fb24ec4d22a76d4e75dd9e2eeca6d8ade13bccc536ec695ae8ffa2401a951bc06be8717c09fc2a35da19d01ac2e4725a247dc27e35d7daa41f5eb7ae560e66713ef68112f3877b09af0ae1ca9e27ba86ba4"}, &(0x7f00000000c0)=0xaf) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0305dd0a3493e6d180b95b7b7abf", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000280)=@assoc_value, &(0x7f0000000080)=0x8) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000140)=0x20) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={r3, 0xa7, "7cacaca778b1f5e44fda6f4d0354bf53569f7a9ec80eed9522fa5367a530395da64d42bc17d01dfc901e9e6cbaa6d5b4e0f1e19890dc09676d29783523b86ac6ed703b8b133e14cc3f17833afcdb00fbd4c9bd052c6fb24ec4d22a76d4e75dd9e2eeca6d8ade13bccc536ec695ae8ffa2401a951bc06be8717c09fc2a35da19d01ac2e4725a247dc27e35d7daa41f5eb7ae560e66713ef68112f3877b09af0ae1ca9e27ba86ba4"}, &(0x7f00000000c0)=0xaf) (async) 2.123529204s ago: executing program 0 (id=3514): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0xffffffe4) 2.082594012s ago: executing program 5 (id=3516): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x3}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000000)={0x9, 0xfffd, 0x2, @random="c992fa040de8", 'veth0_to_bond\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x3}}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000000)={0x9, 0xfffd, 0x2, @random="c992fa040de8", 'veth0_to_bond\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 1.983830939s ago: executing program 0 (id=3517): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400), 0x0, 0x40006002, 0x0) shutdown(r0, 0x0) r1 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x22b}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4814) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x15, 0x3, 'dh\x00', 0x5, 0x8, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wrr\x00', 0x0, 0x81, 0x1039}, {@remote, 0x4e27, 0x3, 0xc4, 0xfffffff8, 0x12d5c}}, 0x44) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000600)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, &(0x7f0000000100)={0x77359400}) r6 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xffff, 0x9}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_EMATCHES={0x30, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x64}}, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.907595711s ago: executing program 5 (id=3519): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x108040, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'veth1_to_batadv\x00', 0x8000}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x5, 0x2}, {0x0, 0xe}}}, 0x24}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000240), &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x66) 1.296735782s ago: executing program 5 (id=3525): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x440, 0x220, 0x2f0, 0xfeffffff, 0x2f0, 0x220, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0x70, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f0000000180)) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) 1.166690537s ago: executing program 4 (id=3527): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', '\x00', '\x00', {'\x00', "000000000000000000000500"}}}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 1.105143773s ago: executing program 5 (id=3528): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0x8002}, {0x6}]}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r1, 0xffffffffffff7fff, 0x6, 0x1}) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0xe) sendmmsg$unix(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)="9cdfa98e", 0xdf9c}], 0x1}}], 0x1, 0x0) 1.102948907s ago: executing program 4 (id=3529): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$kcm(0x29, 0x5, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f0000000000)="a8bc7524", 0x4, 0x4044004, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000001040)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000001880)={r1}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r5 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000140)={0x4, 0x3, 0x29b, 0x4}, 0x8) (async) r8 = socket$kcm(0x2, 0xa, 0x2) socket$netlink(0x10, 0x3, 0x6) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x60}}, 0x0) r12 = openat$cgroup_ro(r10, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r12, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000280)={r7, 0x1, 0x6}, 0x10) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newtfilter={0x12c, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xffff, 0x8}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x100, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x7, 0x3}}, @TCA_U32_FLAGS={0x8, 0xb, 0x6}, @TCA_U32_ACT={0xec, 0x7, [@m_nat={0xe8, 0x3, 0x0, 0x0, {{0x3}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x8, 0x0, 0x8, 0x8}, @private=0xa010101, @rand_addr=0x64010103, 0x0, 0x1}}]}, {0x97, 0x6, "9a361d8821846253e63a5718ae1af8f23e64cacacca4597263426df75251b5f7c54626f9ffcbed3853543693480aafa62a573d5fe8ff399151bb81d8c00b479c7dce70c5b00d90a89e186e4b510a99cbcf34608c284c92534c8cfc160dea87b19e2588df8efc7814cb17f976457bb36a920e482f4f0cae61b664ae5c25e177ed6bb742d0bb40e1ff09d8288a5ca75c4e5b6419"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) 1.078826822s ago: executing program 7 (id=3530): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4004000) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000010000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r3], 0x38}}, 0x10) 981.109565ms ago: executing program 0 (id=3531): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000100)="ab", 0x34000, 0x4004815, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, 0x0}}], 0x1, 0x20004086) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x20008801, &(0x7f0000000200)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0x184, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@migrate={0x134, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0x1e}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in=@multicast2, 0xff, 0x0, 0x0, 0x3501, 0x2, 0xa}, {@in=@local, @in6=@local, @in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x2, 0x0, 0x3500, 0xa, 0x8}, {@in=@remote, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in=@rand_addr=0x64010100, @in=@private=0xa010103, @in=@local, 0x33, 0x4, 0x0, 0x3506, 0xa, 0x8}]}]}, 0x184}}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000780)="5b34307b5d5ab4d0da618c917d17d72617b51de3b058db3741c1ad288ab3d41b6393e90e9c35c278107469c5069f9af1b6cce3add48acf544e1ea61e9706b8311fde34712a361da44539559336541173354d63a7443c34bf3956a7d39dfde18f0ef3f45b4a695e6663524020e87c5f94e4bb4fd9243eb345fc806b6a763acb8b0debff7f96696466798cc6d40471c26cf1cd03a40d72ba67c831a1ab417eeedf86904ac662460a2ee7f9830f6ff1e15957580ae75bbcb393ed98850dd00a952a931584869bc3da8f9054dfc58d7309c1d5024afd7c862d21ce", 0xd9}, {&(0x7f0000000880)="90045127107781b2802972e8d927a800a56c62861f6a44957e17a30de6f8e1a6c1fe3056d3cf94594169a8284764158bdbec8292978798", 0x37}], 0x2}, 0x40000000) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 832.026696ms ago: executing program 7 (id=3532): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x83) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8924, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x2c, 0x3, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_netdev_private(r0, 0x89fc, &(0x7f0000000100)="17c44601976c966e929d487897b68600146384beed0456eadbc7d4482f0171e4f0d089e3e8d171a991804ddd1481d934b67302f9a30577d5d2c9e213de8823e2b783165bb4ad0197dc335ba0cfb557b8723d657d42b5efdb24ba7d40d42305cd012a2a35753bfc4da2ad1737f9c47e58ffad2a6e00adc19d5eaea51574eb456b8a7b0b49e62cb1fd7857deee") socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @private, @multicast2}, &(0x7f0000000080)=0xc) 831.368935ms ago: executing program 5 (id=3533): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r3, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xdc, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_LLC_SDP={0x20, 0x13, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [{0xc, 0x1, 'nl80211\x00'}, {0xa, 0x1, 'wlan1\x00'}]}]}, @NFC_ATTR_LLC_SDP={0x88, 0x13, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [{0xc, 0x1, 'nl80211\x00'}, {0x6, 0x1, '+%'}, {0xa, 0x1, 'wlan1\x00'}]}, {0x60, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wlan1\x00'}, {0xc, 0x1, 'nl80211\x00'}, {0x8, 0x1, '{\'(%'}, {0xc, 0x1, 'nl80211\x00'}, {0xc, 0x1, 'nl80211\x00'}, {0xa, 0x1, 'wlan1\x00'}, {0x4}, {0xc, 0x1, 'nl80211\x00'}, {0x5, 0x1, '#'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0xdc}}, 0x805) gettid() r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), r3) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, r9, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4004014) close(r0) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@map=r10, 0x20, 0x1, 0x2, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000840)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'ip_vti0\x00', &(0x7f0000000880)={'tunl0\x00', 0x0, 0x700, 0x7, 0xb, 0x7a7e, {{0xb, 0x4, 0x3, 0x1e, 0x2c, 0x65, 0x0, 0x80, 0x2f, 0x0, @local, @local, {[@timestamp={0x44, 0x18, 0xa0, 0x0, 0x3, [0x4, 0x36f, 0xc, 0x1, 0x9]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000940)={@rand_addr, 0x0}, &(0x7f0000000980)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x54, r11, 0x400, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r15 = openat$nci(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) read$nci(r15, &(0x7f0000000b00)=""/231, 0xe7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r16, &(0x7f0000000c40)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x0, 0x1}}, 0x10) bind$tipc(r17, &(0x7f0000000c80)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x2}}, 0x10) ioctl$INCFS_IOC_CREATE_FILE(r10, 0xc058671e, &(0x7f00000010c0)={{'\x00', 0x3}, {0x3}, 0x82, 0x0, 0x0, &(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)="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", 0x107, 0x0, &(0x7f0000000e80)={0x2, 0x19f, {0x0, 0xc, 0xa1, "741725ac520adeb4bd06921aab23b901dc2e24106117624ee42a040b33023a2804c89e2ea8035d2d87d6b61bbb4a29344d718fed0ce8f5edf94ecc25d8d50632e65bdee963d596439f7ea6b4d7580b4f8b64cf051f0b224912886843fd92cfa27e05af7959ba73f971c100deef2135bf02332d4a4aefab81183334e4f34c22bad4cdfe25a35186f9b683b47366afd99a4456390fce4a15a538f4e4232e6339917b", 0xf1, "bc424c8f28d2f9ea63d370e5af7c0996f20e21346ce841812058e51f2c15d3c207305882d4bad34a7fc4b227bacd136f706b3e631bc9d01389e4d05a9935279453e7b650ecd6cc59a45b84dad4e5ad174170cf58835de3df383c92ba4e0b819f42c5ec8814ec285675c174e061fa708776925a579ddd86c8763078b7f74f7846f630566f8b461553aecd17d37c26aca1ea8a44c5add9523e49570b62c7fc9896d64823b133bf6f95e60117af968afa7d4dc403df4c9e6f576bc7476c244e12d0bc98f3a96416e9b46951cb7f45e30b1a277184d15b6f0fe9968bccc696f2fb79e5326b4c7e238278cc2adcd50919e96460"}, 0x92, "9d3937a6a745abff9353b5f73ad95817a4e95f286a0463246e1706f2f5f2e7e0a0366e81ee03547a1c5abce324371f353e58acc8a6c7371debdbdad191075cb4262f889a0e82a6641e62628e8c3b9c3ce95802ade046b7101a2d6b11d16d54d688ac36813b9d7923f694889c745086c2cb57c1ce112d2e267c3598cdf6b9132edf5e9960c7b597d8475471cd8810dfbd354c"}, 0x23d}) ioctl$VFAT_IOCTL_READDIR_SHORT(r10, 0x82307202, &(0x7f0000001140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_genetlink_get_family_id$nfc(&(0x7f0000001380), r3) 764.729274ms ago: executing program 4 (id=3534): r0 = socket(0x11, 0x800000003, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000006c0001"], 0x18}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="2b0000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\n\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x28}}, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x478, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x40ff, 0x2, 0x3, 0x4, 0x0, {0x4, 0x1, 0x8, 0x8, 0x4, 0x5}, {0xe, 0x2, 0xfff, 0xff00, 0x10}, 0xb72, 0x8001, 0xdb}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x1, 0x2, 0x800, 0x40, 0xfffff801, 0x79, 0x8001, 0xf22, 0x0, 0x1, 0x0, 0x8, 0x4a7, 0x1, 0x2, 0x81, 0x4, 0x7, 0x2, 0xd5d, 0x5268, 0x7e, 0x3, 0x0, 0x6, 0x5, 0x8, 0x2, 0x4455, 0xffffffff, 0xfffeffff, 0x8, 0x45e, 0xff, 0x2, 0x0, 0x7f, 0x7fd, 0x2, 0x7, 0x8, 0xffffff45, 0x0, 0xc, 0x6, 0x6cff1733, 0xd39, 0x4, 0x7, 0x4ef, 0x8, 0x8001, 0x8, 0x3, 0x2, 0x1, 0x200, 0x12000000, 0x1, 0x9c, 0x7, 0x1, 0x2, 0xffff, 0x2, 0x5, 0x8009, 0x96, 0x37, 0xb6, 0x6, 0x1, 0x7, 0x7d, 0x2, 0xe2b, 0x10001, 0xfff, 0x3a, 0x100002, 0x10000, 0x81, 0x2, 0x7, 0x9, 0xd317, 0x9de, 0x6, 0x840, 0x1, 0x43, 0xff, 0x4, 0x0, 0x7fffffff, 0x8, 0x6, 0x8, 0x9, 0x5, 0x7, 0x9, 0x9e5, 0x0, 0x4, 0x76, 0x5, 0xffffffff, 0x7, 0x2, 0x6, 0x0, 0xa, 0x865feb0b, 0x400002, 0x0, 0x1fb, 0x7fffffff, 0x401, 0x400, 0x6, 0xa2, 0x2, 0x195, 0x7, 0x3, 0x5, 0x6, 0xffff8c56, 0xfffffffb, 0x8, 0x2, 0x5, 0x7fffffff, 0x7, 0x6, 0x2, 0x7, 0x2, 0x4, 0x7a0, 0x1, 0x48, 0x10001, 0x5, 0x1, 0x6, 0x5, 0x7, 0x7f, 0x36800, 0x0, 0x0, 0x3, 0xfffffffe, 0x6, 0xe000, 0xb1, 0x5, 0x8, 0x8001, 0xffffffff, 0x1000, 0x7ff, 0xb, 0x80, 0x1, 0x5, 0x80000000, 0x53, 0x6, 0x4, 0x0, 0x3ff, 0x838, 0x9, 0xfffffffc, 0x7, 0x9, 0x2, 0x2, 0x50001, 0x1, 0xfffffff8, 0x5, 0x80000001, 0xfffffffe, 0x4, 0x2, 0x400, 0x800, 0x4, 0xfffff4bb, 0x8, 0x6, 0xc, 0x6, 0x2001, 0x2006, 0x9, 0x0, 0x944, 0x70, 0x6, 0x5, 0x10000, 0x5, 0x3, 0xb52f, 0xfe, 0x0, 0xa0, 0x8, 0x203, 0x4, 0x6, 0x0, 0xff, 0x3, 0x0, 0x5c, 0x6, 0x8, 0x0, 0x15, 0xffff, 0xfffffffe, 0x9, 0x7f, 0x4, 0x6, 0x6, 0x7, 0x0, 0xa, 0x8, 0x5, 0x4, 0x1000009, 0xfffc, 0x9d1, 0x1, 0xf, 0x8, 0x40, 0x10000, 0xd3ae, 0x5f5a, 0x1, 0x6, 0xd00, 0x0, 0x24e00b6d, 0x8f3, 0x2]}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x4080055}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) r14 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0x2}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) r15 = socket$inet(0x2, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r15, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/144]}, 0x108) setsockopt$inet_tcp_TCP_CONGESTION(r15, 0x6, 0xd, &(0x7f0000000000)='scalable', 0x8) 486.711999ms ago: executing program 7 (id=3535): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=@newtaction={0x58, 0x30, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_skbedit={0x40, 0x1, 0x0, 0x0, {{0xc}, {0xfffffffffffffe8c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$kcm(0x11, 0x2, 0x300) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000300)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x3}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000000000010000000c0000003e"], 0x14}, 0x800) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x1, @bcast, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1ff, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 363.086615ms ago: executing program 4 (id=3536): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x118, 0x118, 0x4, [@union={0xc, 0x2, 0x0, 0x5, 0x0, 0x0, [{0x3, 0x5, 0xfffffd59}, {0xf, 0x4, 0xfffff001}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x1ff}}, @float={0xd, 0x0, 0x0, 0x10, 0x10}, @enum={0x3, 0x2, 0x0, 0x6, 0x4, [{}, {0xb, 0xffffffff}]}, @func={0xe, 0x0, 0x0, 0xc, 0x2}, @enum64={0x10, 0x5, 0x0, 0x13, 0x1, 0x6, [{0xe, 0x1df, 0x3}, {0xa, 0x4, 0x2}, {0x8, 0x7da, 0x81}, {0x5, 0xf01, 0x6}, {0x9, 0x1, 0xa9b4}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x1000}}, @typedef={0xc, 0x0, 0x0, 0x8, 0x4}, @union={0x7, 0x4, 0x0, 0x5, 0x1, 0xf, [{0x9, 0x4, 0xf}, {0x3, 0x0, 0x81}, {0x8, 0x0, 0x7}, {0x7, 0x5, 0x1}]}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000180)=""/210, 0x134, 0xd2, 0x1, 0xfff, 0x10000}, 0x28) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, r0, 0x0, 0x4, 0x4}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x221f7c5d}}, &(0x7f0000000380)='GPL\x00', 0xe86, 0xe0, &(0x7f00000003c0)=""/224, 0x41100, 0x16, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000004c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x7, 0x2, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000680)=[0xffffffffffffffff, r2], &(0x7f00000006c0)=[{0x3, 0x1, 0x9, 0xb}]}, 0x94) r4 = socket$nl_crypto(0x10, 0x3, 0x15) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000008c0)={r4, r5, 0x9, 0xc6, &(0x7f00000007c0)="7ea626836b7e870b07dcd115cff83be8d091cc1898c8810481110d1cd301d1a8c026661cb4e3a6a021c0aec6faec79583505ae55728369f310e73848a153540b3d2f7104859f471c832fa3264d9dcc02695bb2f0f064222fa5451f0d7a18abfabc7beb3d53b47804d451d4802944e1a52d2a5c05aba1585f03c2a32e29c0ef4469ed8a766371e4181de56f3f75db99b8bf215a9145e79503937ec89a152fee58604cd0da877eb5a470af16603f18f0f8a62ae980da771cdd2ee76f8842cc297cf1342add5baa", 0x1, 0x0, 0x6, 0x6, 0x6, 0x3, 0x45c982b0, 'syz0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x6e8, 0x0, r2, 0x1, '\x00', 0x0, r0, 0x1, 0x4, 0x3}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002200)=@bpf_ext={0x1c, 0x2d, &(0x7f0000000f40)=@raw=[@alu={0x7, 0x1, 0xf, 0x9, 0x5, 0xffffffffffffffc1, 0xffffffffffffffff}, @alu={0x4, 0x1, 0x7, 0x3, 0xa, 0x0, 0x8}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xc3e}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f00000010c0)='GPL\x00', 0xffffffff, 0x1000, &(0x7f0000001100)=""/4096, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002100)={0x0, 0xf, 0x7, 0x8000000}, 0x10, 0x1e127, r3, 0x9, 0x0, &(0x7f0000002140)=[{0x2, 0x1, 0x7, 0x19}, {0x5, 0x2, 0xc, 0x8}, {0x5, 0x1, 0x8, 0xb}, {0x5, 0x3, 0x9, 0x8}, {0x2, 0x5, 0xb, 0x9}, {0x2, 0x1, 0xd, 0x8}, {0x5, 0x1, 0x4, 0x7}, {0x2, 0x3, 0xe, 0xc}, {0x1, 0x4, 0x3, 0xa}], 0x10, 0x4}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000002500)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000024c0)={&(0x7f0000002440)={0x58, 0x7, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4bb}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x8045}, 0x20041814) 301.071064ms ago: executing program 4 (id=3537): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xcf}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r11, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10000004}, 0x24004000) close(0x3) r12 = socket(0x1, 0x2, 0x0) bind$unix(r12, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r12, 0x89e0, 0x0) 278.626584ms ago: executing program 7 (id=3538): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x440, 0x220, 0x2f0, 0xfeffffff, 0x2f0, 0x220, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0x90, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f0000000180)) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) 132.78896ms ago: executing program 7 (id=3539): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', '\x00', '\x00', {'\x00', "000000000000000000000600"}}}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 129.826962ms ago: executing program 4 (id=3540): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x300, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x1c}}, 0x24008000) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000000080)=0x1, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_SIZE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) 2.448382ms ago: executing program 7 (id=3541): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4004000) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000b00000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r3], 0x38}}, 0x10) 0s ago: executing program 0 (id=3542): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0xd7, '\x00', @remote}}}}}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffc}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1e, 0x400, 0xfffffffc, 0x3, {0x7, 0x0, 0x0, r5, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @NDA_MASTER={0x8, 0x9, 0x9}]}, 0x30}}, 0x60) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x24, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x6}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @generic={0x70, 0x0, 0x9, 0x7, 0xd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xc}, @alu={0x4, 0x1, 0x5, 0x9, 0x9, 0x1, 0xfffffffffffffff4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x68c}}]}, &(0x7f0000000100)='syzkaller\x00', 0x6, 0x25, &(0x7f00000001c0)=""/37, 0x0, 0x0, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x1, 0xfffffffd}, 0x10, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000400)=[0xffffffffffffffff], &(0x7f0000000440)=[{0x5, 0x3, 0xc, 0x1}, {0x0, 0x4, 0x10, 0x2}, {0x1, 0x1, 0xe, 0x6}, {0x4, 0x2, 0xf, 0x8}, {0x4, 0x1, 0x0, 0x5}], 0x10, 0x84}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r6, 0x0, 0x79, 0x13, &(0x7f0000000580)="22129dc685d04ed0dd3f7e0657a37605e94312c816d87f8072582fe0c7ec4facca3f857b7802556044f55654c24c8ff517cb6e87564af0e0f441965970f93330ae7d0b4695ccaa079c0ae5f4b214c91567ef060f38eff9ca5b42b69f665f01ef278a79e2ef4198ffcaf95c95523044e90780c7d4f1395ed06f", &(0x7f0000000600)=""/19, 0x6, 0x0, 0xb1, 0x79, &(0x7f0000000640)="f636b69f6dfddd6ca44281d32bd71787903f1809a44aec06c1ef3d47eb77706d83b2267e50a6cdb53f3fd8e1dac77dea17798bdf64dc6c9e220f9d0d8dd075ed3b6dfc1ce8850af067558d21690f38a8cdbd51e4cf7b10114e5f46b076580e72a87929792562e6afc85b37640906676794fc6f8b92018e6ae8e0e025000ec92f820194020fd1ed0953faa937e38c52c0f8ef8982915a167a9fdd9a3da808cc18abaf389762c5389ad6d2191adcbcdac471", &(0x7f0000000700)="b7d5f77b40145a8193c4ee4ed4ded47e47858e9056328f452bb62d43495727a91fb6d49387bf3c9d8af9980af9aa8122bb23aa5f2da887d792019e492f54749dbeeee04a6ced96bba339e5926215dbbc80ae39ad8a74055c13ebcb309a865ed12d891ab0fb54a4d6507264e6dca1c1fbfd42354fdea037db80", 0x4, 0x0, 0x4}, 0x50) kernel console output (not intermixed with test programs): ckup interface [ 389.543018][ T6177] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): left promiscuous mode [ 389.575562][ T6177] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.659560][T13357] bond8: (slave lo): Releasing backup interface [ 389.672317][T13357] bond8: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 389.727562][T13357] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 389.777731][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 389.798574][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 389.811411][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 389.813138][T13365] netlink: 'syz.3.2260': attribute type 1 has an invalid length. [ 389.830196][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 389.838855][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 389.847672][T13359] tipc: Enabled bearer , priority 0 [ 389.918129][T13359] syzkaller0: entered promiscuous mode [ 389.938015][T13359] syzkaller0: entered allmulticast mode [ 389.980537][T13367] bond6: (slave bridge0): making interface the new active one [ 389.996342][T13367] bond6: (slave bridge0): Enslaving as an active interface with an up link [ 390.008486][T13362] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 390.128791][T13359] tipc: Resetting bearer [ 390.135216][T13371] syzkaller0: entered promiscuous mode [ 390.144615][T13371] syzkaller0: entered allmulticast mode [ 390.164243][T13358] tipc: Resetting bearer [ 390.175823][T13375] IPv6: NLM_F_REPLACE set, but no existing node found! [ 390.219485][T13358] tipc: Disabling bearer [ 390.346286][T13385] __nla_validate_parse: 6 callbacks suppressed [ 390.346304][T13385] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2265'. [ 390.414739][ T6177] batadv1: left allmulticast mode [ 390.427649][ T6177] batadv1: left promiscuous mode [ 390.447841][ T6177] bridge0: port 1(batadv1) entered disabled state [ 390.559366][T13395] netlink: 'syz.3.2268': attribute type 3 has an invalid length. [ 390.598093][ T6177] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 390.617126][ T6177] ip6gretap1 (unregistering): left allmulticast mode [ 390.681121][T13399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2269'. [ 390.706674][T13402] netlink: 'syz.5.2266': attribute type 1 has an invalid length. [ 390.837245][T13411] xt_bpf: check failed: parse error [ 390.876074][ T6177] dvmrp0 (unregistering): left allmulticast mode [ 391.217781][ T6177] ` (unregistering): Released all slaves [ 391.315518][ T6177] bond1 (unregistering): Released all slaves [ 391.406871][ T6177] bond2 (unregistering): Released all slaves [ 391.501782][ T6177] bond3 (unregistering): Released all slaves [ 391.516458][ T6177] bond4 (unregistering): Released all slaves [ 391.614852][ T6177] bond5 (unregistering): Released all slaves [ 391.709570][ T6177] bond0 (unregistering): Released all slaves [ 391.803224][ T6177] bond6 (unregistering): Released all slaves [ 391.842337][T13402] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 391.938408][ T52] Bluetooth: hci1: command tx timeout [ 391.983124][ T6177] : left promiscuous mode [ 392.144909][T13421] Unsupported ieee802154 address type: 0 [ 392.151405][ T6177] 9: left promiscuous mode [ 392.347505][ T6177] tipc: Left network mode [ 392.547936][T13452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2283'. [ 394.019370][ T52] Bluetooth: hci1: command tx timeout [ 394.140726][T13361] chnl_net:caif_netlink_parms(): no params data found [ 394.855967][T13502] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2295'. [ 394.941051][T13507] netlink: 'syz.0.2296': attribute type 1 has an invalid length. [ 395.159339][T13507] 8021q: adding VLAN 0 to HW filter on device bond9 [ 395.431535][T13518] bond10: option arp_validate: invalid value (2304) [ 395.446970][T13518] bond10 (unregistering): Released all slaves [ 395.454155][T13524] netlink: 'syz.0.2299': attribute type 10 has an invalid length. [ 395.491944][T13361] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.501083][T13361] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.513896][T13361] bridge_slave_0: entered allmulticast mode [ 395.524169][T13361] bridge_slave_0: entered promiscuous mode [ 395.541711][T13524] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 395.570383][T13524] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 395.592847][T13361] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.607263][T13361] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.628436][T13361] bridge_slave_1: entered allmulticast mode [ 395.636834][T13361] bridge_slave_1: entered promiscuous mode [ 395.753812][T13361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.803329][T13361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.882943][T13542] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2305'. [ 395.924763][T13361] team0: Port device team_slave_0 added [ 395.940492][T13361] team0: Port device team_slave_1 added [ 396.089218][T13548] bridge_slave_0: left allmulticast mode [ 396.097500][T13548] bridge_slave_0: left promiscuous mode [ 396.104286][ T52] Bluetooth: hci1: command tx timeout [ 396.119801][T13548] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.142672][T13548] bridge_slave_1: left allmulticast mode [ 396.162544][T13548] bridge_slave_1: left promiscuous mode [ 396.169581][T13548] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.206767][T13560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2308'. [ 396.220477][T13548] bond0: (slave bond_slave_0): Releasing backup interface [ 396.240613][T13548] bond0: (slave bond_slave_1): Releasing backup interface [ 396.285300][T13548] team0: Port device team_slave_0 removed [ 396.300140][T13548] team0: Port device team_slave_1 removed [ 396.308863][T13548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.316478][T13548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.327248][T13548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.335484][T13548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.349351][T13548] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 396.385812][T13567] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2308'. [ 396.403342][T13361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.409676][T13567] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.2308'. [ 396.442020][T13361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.492302][T13361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.507996][T13361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.524268][T13361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.559131][T13361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.853877][T13588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.886929][T13361] hsr_slave_0: entered promiscuous mode [ 396.928436][T13361] hsr_slave_1: entered promiscuous mode [ 396.954995][T13361] debugfs: 'hsr0' already exists in 'hsr' [ 396.979218][T13361] Cannot create hsr debugfs directory [ 397.475006][T13612] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 397.630512][T13617] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2323'. [ 397.713092][T13361] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 397.759297][T13620] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 397.812783][T13361] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 397.843289][T13633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2326'. [ 397.869449][T13361] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 397.902793][T13361] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 398.180449][ T52] Bluetooth: hci1: command tx timeout [ 398.282731][T13361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.332482][T13664] FAULT_INJECTION: forcing a failure. [ 398.332482][T13664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.351454][T13361] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.375999][T13664] CPU: 1 UID: 0 PID: 13664 Comm: syz.4.2331 Not tainted syzkaller #0 PREEMPT(full) [ 398.376028][T13664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 398.376056][T13664] Call Trace: [ 398.376066][T13664] [ 398.376075][T13664] dump_stack_lvl+0x189/0x250 [ 398.376107][T13664] ? __pfx____ratelimit+0x10/0x10 [ 398.376128][T13664] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.376154][T13664] ? __pfx__printk+0x10/0x10 [ 398.376184][T13664] ? __might_fault+0xb0/0x130 [ 398.376228][T13664] should_fail_ex+0x414/0x560 [ 398.376266][T13664] _copy_from_user+0x2d/0xb0 [ 398.376292][T13664] ___sys_sendmsg+0x158/0x2a0 [ 398.376322][T13664] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.376354][T13664] ? rcu_read_lock_any_held+0xb3/0x120 [ 398.376412][T13664] ? __fget_files+0x2a/0x420 [ 398.376438][T13664] ? __fget_files+0x3a0/0x420 [ 398.376475][T13664] __x64_sys_sendmsg+0x19b/0x260 [ 398.376504][T13664] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 398.376540][T13664] ? __pfx_ksys_write+0x10/0x10 [ 398.376564][T13664] ? do_syscall_64+0xbe/0xf80 [ 398.376591][T13664] do_syscall_64+0xfa/0xf80 [ 398.376614][T13664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.376633][T13664] ? clear_bhb_loop+0x60/0xb0 [ 398.376659][T13664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.376679][T13664] RIP: 0033:0x7feb7af8f749 [ 398.376699][T13664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.376716][T13664] RSP: 002b:00007feb791f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.376739][T13664] RAX: ffffffffffffffda RBX: 00007feb7b1e5fa0 RCX: 00007feb7af8f749 [ 398.376755][T13664] RDX: 0000000004000080 RSI: 00002000000006c0 RDI: 0000000000000003 [ 398.376768][T13664] RBP: 00007feb791f6090 R08: 0000000000000000 R09: 0000000000000000 [ 398.376781][T13664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.376793][T13664] R13: 00007feb7b1e6038 R14: 00007feb7b1e5fa0 R15: 00007ffe24e90b98 [ 398.376827][T13664] [ 398.593701][T12766] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.600945][T12766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.615970][T12766] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.623223][T12766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.662790][T13361] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 398.673384][T13361] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 398.971141][T13682] syzkaller0: entered promiscuous mode [ 398.976770][T13682] syzkaller0: entered allmulticast mode [ 399.071184][T13686] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2338'. [ 399.349947][T13361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.372737][T13701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2341'. [ 399.467624][T13704] 8021q: adding VLAN 0 to HW filter on device bond4 [ 399.753090][T13723] FAULT_INJECTION: forcing a failure. [ 399.753090][T13723] name failslab, interval 1, probability 0, space 0, times 0 [ 399.788658][T13723] CPU: 0 UID: 0 PID: 13723 Comm: syz.0.2346 Not tainted syzkaller #0 PREEMPT(full) [ 399.788687][T13723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 399.788699][T13723] Call Trace: [ 399.788708][T13723] [ 399.788717][T13723] dump_stack_lvl+0x189/0x250 [ 399.788747][T13723] ? __pfx____ratelimit+0x10/0x10 [ 399.788767][T13723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.788792][T13723] ? __pfx__printk+0x10/0x10 [ 399.788826][T13723] ? __pfx___might_resched+0x10/0x10 [ 399.788850][T13723] ? fs_reclaim_acquire+0x7d/0x100 [ 399.788877][T13723] should_fail_ex+0x414/0x560 [ 399.788915][T13723] should_failslab+0xa8/0x100 [ 399.788943][T13723] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 399.788976][T13723] ? __alloc_skb+0x255/0x430 [ 399.788997][T13723] ? napi_skb_cache_get+0x4a5/0x780 [ 399.789017][T13723] ? napi_skb_cache_get+0x151/0x780 [ 399.789043][T13723] __alloc_skb+0x255/0x430 [ 399.789068][T13723] ? __pfx___alloc_skb+0x10/0x10 [ 399.789095][T13723] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 399.789121][T13723] netlink_sendmsg+0x5c6/0xb30 [ 399.789158][T13723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.789189][T13723] ? aa_sock_msg_perm+0xf1/0x1b0 [ 399.789218][T13723] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 399.789237][T13723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.789265][T13723] __sock_sendmsg+0x21c/0x270 [ 399.789300][T13723] ____sys_sendmsg+0x505/0x820 [ 399.789331][T13723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 399.789366][T13723] ? import_iovec+0x74/0xa0 [ 399.789394][T13723] ___sys_sendmsg+0x21f/0x2a0 [ 399.789422][T13723] ? __pfx____sys_sendmsg+0x10/0x10 [ 399.789455][T13723] ? rcu_read_lock_any_held+0xb3/0x120 [ 399.789512][T13723] ? __fget_files+0x2a/0x420 [ 399.789544][T13723] ? __fget_files+0x3a0/0x420 [ 399.789581][T13723] __x64_sys_sendmsg+0x19b/0x260 [ 399.789610][T13723] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 399.789646][T13723] ? __pfx_ksys_write+0x10/0x10 [ 399.789671][T13723] ? do_syscall_64+0xbe/0xf80 [ 399.789697][T13723] do_syscall_64+0xfa/0xf80 [ 399.789719][T13723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.789740][T13723] ? clear_bhb_loop+0x60/0xb0 [ 399.789765][T13723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.789785][T13723] RIP: 0033:0x7f102c78f749 [ 399.789804][T13723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.789822][T13723] RSP: 002b:00007f102a9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.789844][T13723] RAX: ffffffffffffffda RBX: 00007f102c9e5fa0 RCX: 00007f102c78f749 [ 399.789860][T13723] RDX: 0000000004000080 RSI: 00002000000006c0 RDI: 0000000000000003 [ 399.789873][T13723] RBP: 00007f102a9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 399.789887][T13723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.789899][T13723] R13: 00007f102c9e6038 R14: 00007f102c9e5fa0 R15: 00007ffd355b1f78 [ 399.789933][T13723] [ 400.413298][T13734] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2349'. [ 400.615554][T13361] veth0_vlan: entered promiscuous mode [ 400.657088][T13361] veth1_vlan: entered promiscuous mode [ 400.748412][T13361] veth0_macvtap: entered promiscuous mode [ 400.766339][T13361] veth1_macvtap: entered promiscuous mode [ 400.835925][T13361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.925252][T13751] 8021q: adding VLAN 0 to HW filter on device bond10 [ 400.956739][T13361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.063055][T12766] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.089330][T12766] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.106468][T13763] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 401.138991][T13763] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 401.169693][T13755] : renamed from hsr0 [ 401.185300][T12766] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.219639][T12766] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.407357][ T990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.428120][ T990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.526053][ T3579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.562563][ T3579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.734526][T13784] netlink: 'syz.4.2362': attribute type 3 has an invalid length. [ 401.963553][T13798] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2366'. [ 402.645388][T13839] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2381'. [ 402.739264][T13847] openvswitch: netlink: IP tunnel dst address not specified [ 402.875294][T13851] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2382'. [ 403.012565][T13853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2383'. [ 403.021769][T13855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2383'. [ 403.050927][T13855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2383'. [ 403.068689][T13855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2383'. [ 403.077887][T13855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2383'. [ 403.088785][T13855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2383'. [ 403.100311][T13855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2383'. [ 403.328559][T13869] IPv6: addrconf: prefix option has invalid lifetime [ 403.509233][T13878] : renamed from bond_slave_0 (while UP) [ 403.564777][T13880] netlink: 'syz.5.2394': attribute type 4 has an invalid length. [ 404.423979][T13928] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 404.559410][T13937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.654918][T13937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.673846][T13942] netlink: 'syz.5.2419': attribute type 12 has an invalid length. [ 405.113429][T13962] bridge_slave_0: left allmulticast mode [ 405.131516][T13962] bridge_slave_0: left promiscuous mode [ 405.145585][T13962] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.180827][T13962] bridge_slave_1: left allmulticast mode [ 405.186627][T13962] bridge_slave_1: left promiscuous mode [ 405.192648][T13962] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.213359][T13962] bond0: (slave 32): Releasing backup interface [ 405.235308][T13962] bond0: (slave bond_slave_1): Releasing backup interface [ 405.280675][T13962] team0: Port device team_slave_0 removed [ 405.293418][T13962] team0: Port device team_slave_1 removed [ 405.301779][T13962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.310113][T13962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.320975][T13962] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 405.531623][T13983] syzkaller0: entered promiscuous mode [ 405.537311][T13983] syzkaller0: entered allmulticast mode [ 405.576911][T13991] netlink: 'syz.6.2436': attribute type 3 has an invalid length. [ 406.225989][T14023] netlink: 'syz.5.2448': attribute type 3 has an invalid length. [ 406.878102][T14046] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 406.923454][T14048] bridge1: entered promiscuous mode [ 406.946169][T14048] bridge1: entered allmulticast mode [ 407.003995][T14055] __nla_validate_parse: 38 callbacks suppressed [ 407.004013][T14055] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2461'. [ 407.032798][T14055] netlink: 'syz.4.2461': attribute type 3 has an invalid length. [ 407.317967][T14076] bridge0: entered allmulticast mode [ 407.524612][T14092] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2471'. [ 407.536796][ T30] audit: type=1800 audit(1767077432.635:3): pid=14092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2471" name="memory.events" dev="tmpfs" ino=839 res=0 errno=0 [ 407.583014][ T30] audit: type=1804 audit(1767077432.665:4): pid=14092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2471" name="/newroot/162/memory.events" dev="tmpfs" ino=839 res=1 errno=0 [ 407.779190][T14102] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2475'. [ 407.795249][T14102] netlink: 'syz.0.2475': attribute type 3 has an invalid length. [ 407.897405][T14106] netlink: 'syz.5.2477': attribute type 13 has an invalid length. [ 408.093190][T14111] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2479'. [ 408.265606][T14123] dvmrp0: entered allmulticast mode [ 408.272016][T14123] dvmrp0: left allmulticast mode [ 408.352934][T14128] nbd: must specify at least one socket [ 408.491165][T14133] netlink: 'syz.6.2484': attribute type 1 has an invalid length. [ 408.578380][T14137] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2486'. [ 408.589543][T14137] netlink: 204 bytes leftover after parsing attributes in process `syz.6.2486'. [ 409.570912][ T5831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 409.580789][ T5831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 409.589985][ T5831] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 409.603521][ T5831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 409.620699][ T5831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 411.049215][T14200] syzkaller0: entered promiscuous mode [ 411.054832][T14200] syzkaller0: entered allmulticast mode [ 411.093637][T14176] chnl_net:caif_netlink_parms(): no params data found [ 411.304664][T14222] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2512'. [ 411.472546][T14232] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 411.569731][T14236] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2518'. [ 411.580663][T14176] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.587953][T14176] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.604005][T14176] bridge_slave_0: entered allmulticast mode [ 411.613263][T14176] bridge_slave_0: entered promiscuous mode [ 411.630960][T14176] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.640661][T14176] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.648771][T14176] bridge_slave_1: entered allmulticast mode [ 411.656780][T14239] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2519'. [ 411.662961][T14176] bridge_slave_1: entered promiscuous mode [ 411.682995][T14239] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2519'. [ 411.700600][ T5831] Bluetooth: hci6: command tx timeout [ 411.781405][T14244] FAULT_INJECTION: forcing a failure. [ 411.781405][T14244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.795169][T14244] CPU: 1 UID: 0 PID: 14244 Comm: syz.4.2521 Not tainted syzkaller #0 PREEMPT(full) [ 411.795197][T14244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 411.795210][T14244] Call Trace: [ 411.795218][T14244] [ 411.795226][T14244] dump_stack_lvl+0x189/0x250 [ 411.795257][T14244] ? __pfx____ratelimit+0x10/0x10 [ 411.795277][T14244] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.795302][T14244] ? __pfx__printk+0x10/0x10 [ 411.795333][T14244] ? __might_fault+0xb0/0x130 [ 411.795377][T14244] should_fail_ex+0x414/0x560 [ 411.795414][T14244] _copy_from_iter+0x1cd/0x1630 [ 411.795440][T14244] ? __build_skb_around+0x22d/0x3c0 [ 411.795470][T14244] ? __pfx__copy_from_iter+0x10/0x10 [ 411.795488][T14244] ? __alloc_skb+0x2f1/0x430 [ 411.795512][T14244] ? __pfx___alloc_skb+0x10/0x10 [ 411.795536][T14244] ? netlink_sendmsg+0x642/0xb30 [ 411.795561][T14244] ? skb_put+0x11b/0x210 [ 411.795588][T14244] netlink_sendmsg+0x6b2/0xb30 [ 411.795625][T14244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.795656][T14244] ? aa_sock_msg_perm+0xf1/0x1b0 [ 411.795684][T14244] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 411.795705][T14244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.795732][T14244] __sock_sendmsg+0x21c/0x270 [ 411.795765][T14244] ____sys_sendmsg+0x505/0x820 [ 411.795795][T14244] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.795839][T14244] ? import_iovec+0x74/0xa0 [ 411.795867][T14244] ___sys_sendmsg+0x21f/0x2a0 [ 411.795895][T14244] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.795927][T14244] ? rcu_read_lock_any_held+0xb3/0x120 [ 411.795972][T14244] ? __fget_files+0x2a/0x420 [ 411.795992][T14244] ? __fget_files+0x3a0/0x420 [ 411.796021][T14244] __x64_sys_sendmsg+0x19b/0x260 [ 411.796044][T14244] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 411.796077][T14244] ? __pfx_ksys_write+0x10/0x10 [ 411.796103][T14244] ? do_syscall_64+0xbe/0xf80 [ 411.796123][T14244] do_syscall_64+0xfa/0xf80 [ 411.796141][T14244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.796158][T14244] ? clear_bhb_loop+0x60/0xb0 [ 411.796177][T14244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.796193][T14244] RIP: 0033:0x7feb7af8f749 [ 411.796209][T14244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.796223][T14244] RSP: 002b:00007feb791f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.796241][T14244] RAX: ffffffffffffffda RBX: 00007feb7b1e5fa0 RCX: 00007feb7af8f749 [ 411.796253][T14244] RDX: 00000000000080c0 RSI: 0000200000000200 RDI: 0000000000000003 [ 411.796264][T14244] RBP: 00007feb791f6090 R08: 0000000000000000 R09: 0000000000000000 [ 411.796275][T14244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.796284][T14244] R13: 00007feb7b1e6038 R14: 00007feb7b1e5fa0 R15: 00007ffe24e90b98 [ 411.796310][T14244] [ 412.077209][T12766] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.086316][T12766] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.086536][T14239] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2519'. [ 412.102664][T12766] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.128288][T14239] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2519'. [ 412.139400][T12766] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.242652][T14176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.283431][T14176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.395696][T14250] bridge0: port 1(ipvlan2) entered blocking state [ 412.440246][T14250] bridge0: port 1(ipvlan2) entered disabled state [ 412.457637][T14250] ipvlan2: entered allmulticast mode [ 412.477316][T14250] bridge0: entered allmulticast mode [ 412.490843][T14250] ipvlan2: left allmulticast mode [ 412.495957][T14250] bridge0: left allmulticast mode [ 412.761142][T14176] team0: Port device team_slave_0 added [ 412.843453][T14176] team0: Port device team_slave_1 added [ 412.858700][T14276] syzkaller0: entered promiscuous mode [ 412.864861][T14276] syzkaller0: entered allmulticast mode [ 413.061604][T14293] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2532'. [ 413.114023][T14291] bond10: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 413.126836][T14291] bond10 (unregistering): Released all slaves [ 413.155996][T14176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.165891][T14176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.196106][T14176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.311251][T14176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.349516][T14176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.420211][T14306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2536'. [ 413.429332][T14176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.475954][T14306] block nbd2: Unsupported socket: should be TCP or UNIX. [ 413.523450][T14312] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2538'. [ 413.600085][T14176] hsr_slave_0: entered promiscuous mode [ 413.607023][T14176] hsr_slave_1: entered promiscuous mode [ 413.780460][ T5831] Bluetooth: hci6: command tx timeout [ 414.527389][T14352] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2548'. [ 414.623469][T14176] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 414.681517][T14176] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 414.706691][T14176] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 414.773839][T14176] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 414.789876][T14364] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2550'. [ 414.820291][T14364] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2550'. [ 414.941443][T14378] netlink: 'syz.6.2552': attribute type 1 has an invalid length. [ 415.017932][T14380] 8021q: adding VLAN 0 to HW filter on device bond11 [ 415.108069][T14176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.227186][T14176] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.267819][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.275192][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.326783][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.334042][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.723062][T14416] netlink: 'syz.6.2564': attribute type 21 has an invalid length. [ 415.744500][T14416] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2564'. [ 415.837071][T14416] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2564'. [ 415.859665][ T5831] Bluetooth: hci6: command tx timeout [ 416.224516][T14176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.373083][T14445] : entered promiscuous mode [ 416.649821][T14453] tipc: Started in network mode [ 416.670704][T14453] tipc: Node identity 424ba1dec32a, cluster identity 4711 [ 416.692516][T14453] tipc: Enabled bearer , priority 0 [ 416.748995][T14459] syzkaller0: entered promiscuous mode [ 416.754646][T14459] syzkaller0: entered allmulticast mode [ 417.127143][T14459] tipc: Resetting bearer [ 417.134367][T14462] team0: Caught tx_queue_len zero misconfig [ 417.233457][T14450] tipc: Resetting bearer [ 417.325513][T14450] tipc: Disabling bearer [ 417.509371][T14176] veth0_vlan: entered promiscuous mode [ 417.551858][T14176] veth1_vlan: entered promiscuous mode [ 417.670327][T14176] veth0_macvtap: entered promiscuous mode [ 417.721389][T14176] veth1_macvtap: entered promiscuous mode [ 417.783856][T14176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.845516][T14176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.882777][T12766] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.931379][T12766] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.939359][ T5831] Bluetooth: hci6: command tx timeout [ 417.972346][T14499] __nla_validate_parse: 1 callbacks suppressed [ 417.972368][T14499] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2580'. [ 418.004425][T12766] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.015596][T14506] FAULT_INJECTION: forcing a failure. [ 418.015596][T14506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.031264][T14499] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2580'. [ 418.040972][T14504] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2582'. [ 418.056486][T12766] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.066518][T14506] CPU: 0 UID: 0 PID: 14506 Comm: syz.6.2581 Not tainted syzkaller #0 PREEMPT(full) [ 418.066546][T14506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 418.066559][T14506] Call Trace: [ 418.066567][T14506] [ 418.066576][T14506] dump_stack_lvl+0x189/0x250 [ 418.066606][T14506] ? __pfx____ratelimit+0x10/0x10 [ 418.066627][T14506] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.066652][T14506] ? __pfx__printk+0x10/0x10 [ 418.066683][T14506] ? __might_fault+0xb0/0x130 [ 418.066727][T14506] should_fail_ex+0x414/0x560 [ 418.066766][T14506] _copy_from_user+0x2d/0xb0 [ 418.066792][T14506] kstrtouint_from_user+0xc4/0x170 [ 418.066816][T14506] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 418.066854][T14506] proc_fail_nth_write+0x88/0x200 [ 418.066876][T14506] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 418.066905][T14506] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 418.066930][T14506] vfs_write+0x27e/0xb30 [ 418.066959][T14506] ? __pfx_vfs_write+0x10/0x10 [ 418.066983][T14506] ? __fget_files+0x2a/0x420 [ 418.067014][T14506] ? __fget_files+0x3a0/0x420 [ 418.067038][T14506] ? __fget_files+0x2a/0x420 [ 418.067072][T14506] ksys_write+0x145/0x250 [ 418.067095][T14506] ? __pfx_ksys_write+0x10/0x10 [ 418.067120][T14506] ? do_syscall_64+0xbe/0xf80 [ 418.067147][T14506] do_syscall_64+0xfa/0xf80 [ 418.067171][T14506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.067191][T14506] ? clear_bhb_loop+0x60/0xb0 [ 418.067217][T14506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.067237][T14506] RIP: 0033:0x7f3c1eb8e1ff [ 418.067256][T14506] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 418.067275][T14506] RSP: 002b:00007f3c1f9bf030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 418.067297][T14506] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3c1eb8e1ff [ 418.067321][T14506] RDX: 0000000000000001 RSI: 00007f3c1f9bf0a0 RDI: 0000000000000003 [ 418.067334][T14506] RBP: 00007f3c1f9bf090 R08: 0000000000000000 R09: 0000000000000000 [ 418.067347][T14506] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 418.067360][T14506] R13: 00007f3c1ede6128 R14: 00007f3c1ede6090 R15: 00007fffd53c9508 [ 418.067395][T14506] [ 418.407210][T14509] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2582'. [ 418.432784][T14509] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2582'. [ 418.477542][T14509] lo: entered promiscuous mode [ 418.486173][T14509] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 418.726239][ T3503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.749862][ T3503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.843477][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.852407][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.972069][T14531] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2589'. [ 419.554976][T14563] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 419.775621][T14575] ip6tnl0: Caught tx_queue_len zero misconfig [ 419.846066][T14578] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2604'. [ 420.222763][T14598] FAULT_INJECTION: forcing a failure. [ 420.222763][T14598] name failslab, interval 1, probability 0, space 0, times 0 [ 420.276701][T14598] CPU: 1 UID: 0 PID: 14598 Comm: syz.6.2609 Not tainted syzkaller #0 PREEMPT(full) [ 420.276731][T14598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 420.276744][T14598] Call Trace: [ 420.276752][T14598] [ 420.276762][T14598] dump_stack_lvl+0x189/0x250 [ 420.276793][T14598] ? __pfx____ratelimit+0x10/0x10 [ 420.276815][T14598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.276841][T14598] ? __pfx__printk+0x10/0x10 [ 420.276885][T14598] should_fail_ex+0x414/0x560 [ 420.276924][T14598] should_failslab+0xa8/0x100 [ 420.276952][T14598] kmem_cache_alloc_noprof+0x88/0x710 [ 420.276986][T14598] ? skb_clone+0x212/0x3a0 [ 420.277018][T14598] skb_clone+0x212/0x3a0 [ 420.277049][T14598] __netlink_deliver_tap+0x404/0x850 [ 420.277091][T14598] ? netlink_deliver_tap+0x2e/0x1b0 [ 420.277128][T14598] netlink_deliver_tap+0x19c/0x1b0 [ 420.277157][T14598] netlink_sendskb+0x68/0x140 [ 420.277184][T14598] netlink_unicast+0x397/0x9e0 [ 420.277205][T14598] ? __asan_memcpy+0x40/0x70 [ 420.277233][T14598] ? __pfx_netlink_unicast+0x10/0x10 [ 420.277269][T14598] ip_set_dump_start+0x295/0x410 [ 420.277298][T14598] ? __pfx_ip_set_dump_start+0x10/0x10 [ 420.277335][T14598] ? netlink_lookup+0x30/0x200 [ 420.277359][T14598] ? netlink_lookup+0x30/0x200 [ 420.277381][T14598] ? netlink_lookup+0x30/0x200 [ 420.277411][T14598] __netlink_dump_start+0x469/0x7e0 [ 420.277446][T14598] ip_set_dump+0x13e/0x1c0 [ 420.277471][T14598] ? __pfx_ip_set_dump+0x10/0x10 [ 420.277493][T14598] ? __pfx_ip_set_dump_start+0x10/0x10 [ 420.277516][T14598] ? __pfx_ip_set_dump_do+0x10/0x10 [ 420.277540][T14598] ? __pfx_ip_set_dump_done+0x10/0x10 [ 420.277581][T14598] nfnetlink_rcv_msg+0xb4d/0x1130 [ 420.277604][T14598] ? unwind_get_return_address+0x4d/0x90 [ 420.277628][T14598] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 420.277659][T14598] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 420.277703][T14598] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 420.277807][T14598] netlink_rcv_skb+0x208/0x470 [ 420.277836][T14598] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 420.277862][T14598] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 420.277903][T14598] ? bpf_lsm_capable+0x9/0x20 [ 420.277927][T14598] ? security_capable+0x7e/0x2e0 [ 420.277960][T14598] nfnetlink_rcv+0x282/0x2590 [ 420.277984][T14598] ? __local_bh_enable_ip+0x12d/0x1c0 [ 420.278007][T14598] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 420.278036][T14598] ? __dev_queue_xmit+0x289/0x31c0 [ 420.278062][T14598] ? __dev_queue_xmit+0x289/0x31c0 [ 420.278091][T14598] ? __dev_queue_xmit+0x19cb/0x31c0 [ 420.278125][T14598] ? ___sys_sendmsg+0x21f/0x2a0 [ 420.278154][T14598] ? __dev_queue_xmit+0x289/0x31c0 [ 420.278187][T14598] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 420.278216][T14598] ? __pfx___dev_queue_xmit+0x10/0x10 [ 420.278252][T14598] ? ref_tracker_free+0x63a/0x7d0 [ 420.278273][T14598] ? __asan_memcpy+0x40/0x70 [ 420.278291][T14598] ? __pfx_ref_tracker_free+0x10/0x10 [ 420.278330][T14598] ? skb_clone+0x246/0x3a0 [ 420.278361][T14598] ? __netlink_deliver_tap+0x807/0x850 [ 420.278387][T14598] ? netlink_deliver_tap+0x2e/0x1b0 [ 420.278420][T14598] ? netlink_deliver_tap+0x2e/0x1b0 [ 420.278455][T14598] netlink_unicast+0x82f/0x9e0 [ 420.278487][T14598] ? __pfx_netlink_unicast+0x10/0x10 [ 420.278514][T14598] ? netlink_sendmsg+0x642/0xb30 [ 420.278537][T14598] ? skb_put+0x11b/0x210 [ 420.278563][T14598] netlink_sendmsg+0x805/0xb30 [ 420.278602][T14598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.278634][T14598] ? aa_sock_msg_perm+0xf1/0x1b0 [ 420.278664][T14598] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 420.278683][T14598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.278712][T14598] __sock_sendmsg+0x21c/0x270 [ 420.278747][T14598] ____sys_sendmsg+0x505/0x820 [ 420.278780][T14598] ? __pfx_____sys_sendmsg+0x10/0x10 [ 420.278823][T14598] ? import_iovec+0x74/0xa0 [ 420.278853][T14598] ___sys_sendmsg+0x21f/0x2a0 [ 420.278880][T14598] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.278914][T14598] ? rcu_read_lock_any_held+0xb3/0x120 [ 420.278973][T14598] ? __fget_files+0x2a/0x420 [ 420.278998][T14598] ? __fget_files+0x3a0/0x420 [ 420.279036][T14598] __x64_sys_sendmsg+0x19b/0x260 [ 420.279066][T14598] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 420.279103][T14598] ? __pfx_ksys_write+0x10/0x10 [ 420.279141][T14598] ? do_syscall_64+0xbe/0xf80 [ 420.279167][T14598] do_syscall_64+0xfa/0xf80 [ 420.279190][T14598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.279211][T14598] ? clear_bhb_loop+0x60/0xb0 [ 420.279237][T14598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.279257][T14598] RIP: 0033:0x7f3c1eb8f749 [ 420.279276][T14598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.279294][T14598] RSP: 002b:00007f3c1f9e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.279317][T14598] RAX: ffffffffffffffda RBX: 00007f3c1ede5fa0 RCX: 00007f3c1eb8f749 [ 420.279333][T14598] RDX: 0000000020041814 RSI: 0000200000002500 RDI: 0000000000000005 [ 420.279347][T14598] RBP: 00007f3c1f9e0090 R08: 0000000000000000 R09: 0000000000000000 [ 420.279360][T14598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.279373][T14598] R13: 00007f3c1ede6038 R14: 00007f3c1ede5fa0 R15: 00007fffd53c9508 [ 420.279409][T14598] [ 420.923040][T14611] bond0: entered promiscuous mode [ 420.934374][T14611] batadv0: entered promiscuous mode [ 420.942012][T14611] debugfs: 'hsr1' already exists in 'hsr' [ 420.947946][T14611] Cannot create hsr debugfs directory [ 420.954680][T14611] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 420.966220][T14611] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 421.442595][T14634] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2621'. [ 421.503278][T14639] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2621'. [ 421.530255][T14639] netlink: 'syz.6.2621': attribute type 10 has an invalid length. [ 421.542939][T14634] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2621'. [ 421.579377][T14643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.637055][T14639] mac80211_hwsim hwsim28 wlan1: entered promiscuous mode [ 421.649455][T14639] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 421.794195][T14632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.232226][T14678] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 423.102935][T14730] __nla_validate_parse: 23 callbacks suppressed [ 423.102962][T14730] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2652'. [ 423.360561][T14748] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 423.417131][T14748] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 423.446355][T14752] netlink: 'syz.5.2656': attribute type 10 has an invalid length. [ 423.533846][T14749] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.611041][T14751] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 423.631926][T14751] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 423.640299][T14751] gretap1: entered allmulticast mode [ 423.653985][T14752] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.681684][T14752] bond0: (slave team0): Enslaving as an active interface with an up link [ 423.714775][T14760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.754080][T14749] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.817485][T14768] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2664'. [ 423.927324][T14772] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2665'. [ 424.068493][T14749] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.193450][T14749] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.241853][T14784] syzkaller0: entered promiscuous mode [ 424.247399][T14784] syzkaller0: entered allmulticast mode [ 424.422097][T14792] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 424.454050][T14792] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 424.551914][ T61] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.636891][ T61] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.689601][ T990] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.763794][ T990] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.913184][T14818] sctp: [Deprecated]: syz.7.2676 (pid 14818) Use of int in max_burst socket option. [ 424.913184][T14818] Use struct sctp_assoc_value instead [ 425.092460][T14826] bond0: entered promiscuous mode [ 425.103900][T14826] team0: entered promiscuous mode [ 425.145482][T14826] batadv0: entered promiscuous mode [ 425.170836][T14826] debugfs: 'hsr1' already exists in 'hsr' [ 425.176867][T14826] Cannot create hsr debugfs directory [ 425.195986][T14826] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 425.401688][T14841] IPVS: length: 211 != 8 [ 425.413871][T14842] netlink: 'syz.0.2684': attribute type 3 has an invalid length. [ 425.452350][T14845] xt_socket: unknown flags 0xe4 [ 425.462787][T14845] veth1_to_bond: entered allmulticast mode [ 425.481326][T14845] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2687'. [ 425.502662][T14816] x_tables: unsorted underflow at hook 4 [ 425.577482][T14845] bond0: (slave bond_slave_1): Releasing backup interface [ 425.670600][T14845] veth1_to_bond (unregistering): left allmulticast mode [ 425.695630][T14859] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2692'. [ 425.724424][T14860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2692'. [ 425.747002][T14859] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2692'. [ 425.757174][T14864] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2693'. [ 425.844293][T14864] syzkaller1: entered promiscuous mode [ 425.850419][T14864] syzkaller1: entered allmulticast mode [ 426.072620][T14874] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 426.102131][T14871] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2695'. [ 426.113963][T14871] netlink: 'syz.5.2695': attribute type 3 has an invalid length. [ 426.122315][T14875] syzkaller0: entered promiscuous mode [ 426.122339][T14875] syzkaller0: entered allmulticast mode [ 426.464956][T14893] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2701'. [ 426.816619][T14913] netlink: 'syz.6.2707': attribute type 3 has an invalid length. [ 427.239530][T14929] ipvlan2: entered promiscuous mode [ 427.343214][T14935] netlink: 'syz.6.2715': attribute type 12 has an invalid length. [ 427.455065][T14935] bond1: option primary_reselect: invalid value (255) [ 427.477166][T14935] bond1 (unregistering): Released all slaves [ 427.569500][T14955] netlink: 'syz.7.2719': attribute type 1 has an invalid length. [ 427.750702][T14958] openvswitch: netlink: Missing valid actions attribute. [ 427.796251][T14958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.810109][T14955] 8021q: adding VLAN 0 to HW filter on device bond1 [ 427.818490][T14961] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 427.928784][T14959] bond1: (slave geneve2): making interface the new active one [ 427.940089][T14959] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 427.959630][ T6027] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 427.980711][T14961] chnl_net:caif_netlink_parms(): no params data found [ 428.024740][ T6027] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 428.074892][ T6027] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 428.148551][ T6027] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 428.266800][T14977] __nla_validate_parse: 7 callbacks suppressed [ 428.266819][T14977] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2726'. [ 428.421638][T14977] bridge0 (unregistering): left allmulticast mode [ 428.663978][T14995] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 428.784110][T14998] netlink: 'syz.6.2732': attribute type 10 has an invalid length. [ 429.482399][T15033] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2740'. [ 429.524751][T15033] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2740'. [ 429.585846][T15039] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2742'. [ 429.620216][T15043] netlink: 'syz.6.2741': attribute type 8 has an invalid length. [ 429.621859][T15039] netlink: 11 bytes leftover after parsing attributes in process `syz.5.2742'. [ 429.656063][T15039] netlink: 11 bytes leftover after parsing attributes in process `syz.5.2742'. [ 429.842528][T15043] 8021q: adding VLAN 0 to HW filter on device bond1 [ 429.854478][T15053] netlink: 'syz.0.2746': attribute type 10 has an invalid length. [ 429.964430][T15057] netlink: 272 bytes leftover after parsing attributes in process `syz.7.2748'. [ 429.991424][T15059] netlink: 'syz.0.2749': attribute type 1 has an invalid length. [ 430.000839][T15059] netlink: 'syz.0.2749': attribute type 3 has an invalid length. [ 430.008873][T15059] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2749'. [ 430.018980][T15059] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2749'. [ 430.209848][T15066] netlink: 'syz.0.2752': attribute type 142 has an invalid length. [ 430.384177][T15079] netlink: 'syz.0.2757': attribute type 3 has an invalid length. [ 430.862444][T15082] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2758'. [ 431.002945][T15089] mac80211_hwsim hwsim24 wlan1: entered promiscuous mode [ 431.051786][T15089] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 431.784011][T15141] Cannot find set identified by id 0 to match [ 431.829947][T15143] xt_hashlimit: max too large, truncated to 1048576 [ 432.025351][T15157] validate_nla: 4 callbacks suppressed [ 432.025372][T15157] netlink: 'syz.0.2785': attribute type 3 has an invalid length. [ 432.489593][T15184] netlink: 'syz.4.2794': attribute type 1 has an invalid length. [ 432.502287][T15184] nbd: error processing sock list [ 432.507559][T15184] block nbd2: shutting down sockets [ 432.973071][T15208] netlink: 'syz.5.2801': attribute type 8 has an invalid length. [ 433.174708][T15212] ipvlan2: entered allmulticast mode [ 433.183868][T15212] batadv_slave_1: entered allmulticast mode [ 433.194802][T15212] batman_adv: batadv0: Adding interface: ipvlan2 [ 433.201842][T15212] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.256764][T15212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.267728][T15212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.278049][T15212] batman_adv: batadv0: Interface activated: ipvlan2 [ 433.334925][T15217] erspan0: entered promiscuous mode [ 433.408380][T15217] vlan2: entered promiscuous mode [ 433.812006][T15237] __nla_validate_parse: 16 callbacks suppressed [ 433.812036][T15237] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2805'. [ 433.837707][T15237] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2805'. [ 433.848433][T15237] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2805'. [ 433.888783][T15244] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2812'. [ 433.904371][T15244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2812'. [ 434.089197][T15252] netlink: 312 bytes leftover after parsing attributes in process `syz.7.2813'. [ 434.580823][T15268] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2820'. [ 434.717136][T15284] 8021q: adding VLAN 0 to HW filter on device ` [ 434.771018][T15284] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 434.831860][T15283] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 434.888996][T15276] ieee802154 phy0 wpan0: encryption failed: -22 [ 435.142075][T15309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2831'. [ 435.397715][T15326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.661761][T15341] Cannot find set identified by id 0 to match [ 435.691430][T15331] netlink: 'syz.0.2839': attribute type 13 has an invalid length. [ 435.982874][T15353] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2844'. [ 436.235740][T15369] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2850'. [ 436.494296][T15379] netlink: 'syz.6.2851': attribute type 21 has an invalid length. [ 437.521786][T15436] tipc: Started in network mode [ 437.526737][T15436] tipc: Node identity f6de5a42f555, cluster identity 4711 [ 437.539641][T15436] tipc: Enabled bearer , priority 0 [ 437.639831][T15436] tipc: Disabling bearer [ 437.787202][T15458] netlink: 'syz.5.2873': attribute type 12 has an invalid length. [ 438.378969][T15481] netlink: 'syz.0.2883': attribute type 2 has an invalid length. [ 439.134560][T15511] syzkaller1: entered promiscuous mode [ 439.145924][T15511] syzkaller1: entered allmulticast mode [ 439.174141][T15525] FAULT_INJECTION: forcing a failure. [ 439.174141][T15525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.242791][T15525] CPU: 1 UID: 0 PID: 15525 Comm: syz.0.2893 Not tainted syzkaller #0 PREEMPT(full) [ 439.242823][T15525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 439.242836][T15525] Call Trace: [ 439.242845][T15525] [ 439.242854][T15525] dump_stack_lvl+0x189/0x250 [ 439.242885][T15525] ? __pfx____ratelimit+0x10/0x10 [ 439.242907][T15525] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.242933][T15525] ? __pfx__printk+0x10/0x10 [ 439.242965][T15525] ? __might_fault+0xb0/0x130 [ 439.243009][T15525] should_fail_ex+0x414/0x560 [ 439.243047][T15525] _copy_from_user+0x2d/0xb0 [ 439.243074][T15525] ___sys_sendmsg+0x158/0x2a0 [ 439.243105][T15525] ? __pfx____sys_sendmsg+0x10/0x10 [ 439.243138][T15525] ? rcu_read_lock_any_held+0xb3/0x120 [ 439.243197][T15525] ? __fget_files+0x2a/0x420 [ 439.243224][T15525] ? __fget_files+0x3a0/0x420 [ 439.243263][T15525] __x64_sys_sendmsg+0x19b/0x260 [ 439.243292][T15525] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 439.243329][T15525] ? __pfx_ksys_write+0x10/0x10 [ 439.243355][T15525] ? do_syscall_64+0xbe/0xf80 [ 439.243382][T15525] do_syscall_64+0xfa/0xf80 [ 439.243412][T15525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.243433][T15525] ? clear_bhb_loop+0x60/0xb0 [ 439.243459][T15525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.243479][T15525] RIP: 0033:0x7f102c78f749 [ 439.243498][T15525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.243516][T15525] RSP: 002b:00007f102a9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.243538][T15525] RAX: ffffffffffffffda RBX: 00007f102c9e5fa0 RCX: 00007f102c78f749 [ 439.243554][T15525] RDX: 0000000004000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 439.243568][T15525] RBP: 00007f102a9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 439.243581][T15525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.243593][T15525] R13: 00007f102c9e6038 R14: 00007f102c9e5fa0 R15: 00007ffd355b1f78 [ 439.243629][T15525] [ 439.731299][T15534] netlink: 'syz.0.2897': attribute type 3 has an invalid length. [ 439.781893][T15539] __nla_validate_parse: 9 callbacks suppressed [ 439.781916][T15539] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2896'. [ 439.818875][T15539] netlink: Unknown conntrack attr (0) [ 440.029180][T15551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2901'. [ 440.470845][T15573] xt_hashlimit: overflow, try lower: 3/0 [ 440.490086][T15577] netlink: 'syz.7.2909': attribute type 3 has an invalid length. [ 440.516741][T15574] netlink: 'syz.7.2909': attribute type 3 has an invalid length. [ 440.615165][ T52] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 440.634156][ T52] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 440.643659][ T52] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 440.661687][ T52] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 440.669680][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 440.822848][T15589] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2912'. [ 440.864155][T15589] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2912'. [ 441.369230][T15582] chnl_net:caif_netlink_parms(): no params data found [ 441.580041][T15621] lo: left promiscuous mode [ 441.682986][T15627] netlink: 'syz.4.2920': attribute type 4 has an invalid length. [ 441.751582][T15634] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2922'. [ 441.792425][T15632] netlink: 'syz.5.2921': attribute type 2 has an invalid length. [ 442.016659][T15621] ipvlan2: left promiscuous mode [ 442.062775][T15632] 9: entered promiscuous mode [ 442.076646][ T3503] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.125849][ T3503] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.155929][ T3503] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.168421][ T3503] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.201984][T15582] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.210156][T15582] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.218012][T15582] bridge_slave_0: entered allmulticast mode [ 442.250499][T15582] bridge_slave_0: entered promiscuous mode [ 442.291374][T15582] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.318325][T15582] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.333846][T15582] bridge_slave_1: entered allmulticast mode [ 442.345472][T15582] bridge_slave_1: entered promiscuous mode [ 442.369692][T15646] tipc: Started in network mode [ 442.378604][T15646] tipc: Node identity ac14142f, cluster identity 4711 [ 442.387888][T15646] tipc: New replicast peer: 0.0.0.0 [ 442.395471][T15646] tipc: Enabled bearer , priority 10 [ 442.404962][T15646] tipc: New replicast peer: ff02:0000:0000:0000:0000:0000:0000:0001 [ 442.423471][T15646] dvmrp0: entered allmulticast mode [ 442.536275][T15582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.567421][T15582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.738537][ T5831] Bluetooth: hci7: command tx timeout [ 442.762704][T15582] team0: Port device team_slave_0 added [ 442.790410][T15582] team0: Port device team_slave_1 added [ 442.899719][T15674] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2937'. [ 442.930063][T15582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.947774][T15582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.004545][T15582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.033387][T15582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.068994][T15582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.107151][T15684] FAULT_INJECTION: forcing a failure. [ 443.107151][T15684] name failslab, interval 1, probability 0, space 0, times 0 [ 443.130875][T15684] CPU: 0 UID: 0 PID: 15684 Comm: syz.4.2939 Not tainted syzkaller #0 PREEMPT(full) [ 443.130906][T15684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 443.130920][T15684] Call Trace: [ 443.130928][T15684] [ 443.130937][T15684] dump_stack_lvl+0x189/0x250 [ 443.130968][T15684] ? __pfx____ratelimit+0x10/0x10 [ 443.130989][T15684] ? __pfx_dump_stack_lvl+0x10/0x10 [ 443.131014][T15684] ? __pfx__printk+0x10/0x10 [ 443.131052][T15684] ? __pfx___might_resched+0x10/0x10 [ 443.131081][T15684] ? fs_reclaim_acquire+0x7d/0x100 [ 443.131110][T15684] should_fail_ex+0x414/0x560 [ 443.131148][T15684] should_failslab+0xa8/0x100 [ 443.131175][T15684] __kmalloc_noprof+0xdf/0x800 [ 443.131195][T15684] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 443.131224][T15684] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 443.131254][T15684] genl_start+0x180/0x6c0 [ 443.131272][T15684] ? netlink_lookup+0x30/0x200 [ 443.131304][T15684] __netlink_dump_start+0x469/0x7e0 [ 443.131340][T15684] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 443.131366][T15684] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 443.131385][T15684] ? genl_get_cmd+0x496/0x910 [ 443.131422][T15684] ? __pfx_genl_start+0x10/0x10 [ 443.131438][T15684] ? __pfx_genl_dumpit+0x10/0x10 [ 443.131455][T15684] ? __pfx_genl_done+0x10/0x10 [ 443.131490][T15684] genl_rcv_msg+0x5da/0x790 [ 443.131518][T15684] ? __pfx_genl_rcv_msg+0x10/0x10 [ 443.131536][T15684] ? __pfx_netdev_nl_qstats_get_dumpit+0x10/0x10 [ 443.131581][T15684] netlink_rcv_skb+0x208/0x470 [ 443.131609][T15684] ? __pfx_genl_rcv_msg+0x10/0x10 [ 443.131630][T15684] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 443.131677][T15684] ? down_read+0x274/0x2e0 [ 443.131699][T15684] ? genl_rcv+0xd/0x40 [ 443.131719][T15684] genl_rcv+0x28/0x40 [ 443.131736][T15684] netlink_unicast+0x82f/0x9e0 [ 443.131769][T15684] ? __pfx_netlink_unicast+0x10/0x10 [ 443.131795][T15684] ? netlink_sendmsg+0x642/0xb30 [ 443.131824][T15684] ? skb_put+0x11b/0x210 [ 443.131852][T15684] netlink_sendmsg+0x805/0xb30 [ 443.131890][T15684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.131921][T15684] ? aa_sock_msg_perm+0xf1/0x1b0 [ 443.131951][T15684] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 443.131971][T15684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.131999][T15684] __sock_sendmsg+0x21c/0x270 [ 443.132033][T15684] ____sys_sendmsg+0x505/0x820 [ 443.132072][T15684] ? __pfx_____sys_sendmsg+0x10/0x10 [ 443.132108][T15684] ? import_iovec+0x74/0xa0 [ 443.132137][T15684] ___sys_sendmsg+0x21f/0x2a0 [ 443.132165][T15684] ? __pfx____sys_sendmsg+0x10/0x10 [ 443.132198][T15684] ? rcu_read_lock_any_held+0xb3/0x120 [ 443.132259][T15684] ? __fget_files+0x2a/0x420 [ 443.132286][T15684] ? __fget_files+0x3a0/0x420 [ 443.132324][T15684] __x64_sys_sendmsg+0x19b/0x260 [ 443.132353][T15684] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 443.132390][T15684] ? __pfx_ksys_write+0x10/0x10 [ 443.132415][T15684] ? do_syscall_64+0xbe/0xf80 [ 443.132441][T15684] do_syscall_64+0xfa/0xf80 [ 443.132463][T15684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.132483][T15684] ? clear_bhb_loop+0x60/0xb0 [ 443.132509][T15684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.132528][T15684] RIP: 0033:0x7feb7af8f749 [ 443.132547][T15684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.132561][T15684] RSP: 002b:00007feb791f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.132579][T15684] RAX: ffffffffffffffda RBX: 00007feb7b1e5fa0 RCX: 00007feb7af8f749 [ 443.132591][T15684] RDX: 0000000004000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 443.132601][T15684] RBP: 00007feb791f6090 R08: 0000000000000000 R09: 0000000000000000 [ 443.132611][T15684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.132621][T15684] R13: 00007feb7b1e6038 R14: 00007feb7b1e5fa0 R15: 00007ffe24e90b98 [ 443.132648][T15684] [ 443.139913][T15582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.543306][T15686] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 443.567019][ T57] tipc: Node number set to 2886997039 [ 443.586714][T15689] netlink: 'syz.5.2941': attribute type 3 has an invalid length. [ 443.596207][T15689] netlink: 666 bytes leftover after parsing attributes in process `syz.5.2941'. [ 443.682858][T15689] lo: Caught tx_queue_len zero misconfig [ 443.699493][T15689] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 443.781316][T15582] hsr_slave_0: entered promiscuous mode [ 443.829635][T15582] hsr_slave_1: entered promiscuous mode [ 443.846810][T15582] debugfs: 'hsr0' already exists in 'hsr' [ 443.874864][T15582] Cannot create hsr debugfs directory [ 444.263328][T15719] FAULT_INJECTION: forcing a failure. [ 444.263328][T15719] name failslab, interval 1, probability 0, space 0, times 0 [ 444.349862][T15719] CPU: 1 UID: 0 PID: 15719 Comm: syz.6.2951 Not tainted syzkaller #0 PREEMPT(full) [ 444.349892][T15719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 444.349905][T15719] Call Trace: [ 444.349914][T15719] [ 444.349923][T15719] dump_stack_lvl+0x189/0x250 [ 444.349954][T15719] ? __pfx____ratelimit+0x10/0x10 [ 444.349975][T15719] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.350000][T15719] ? __pfx__printk+0x10/0x10 [ 444.350038][T15719] ? __pfx___might_resched+0x10/0x10 [ 444.350059][T15719] ? fs_reclaim_acquire+0x7d/0x100 [ 444.350089][T15719] should_fail_ex+0x414/0x560 [ 444.350127][T15719] should_failslab+0xa8/0x100 [ 444.350155][T15719] __kmalloc_noprof+0xdf/0x800 [ 444.350176][T15719] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 444.350213][T15719] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 444.350243][T15719] genl_start+0x180/0x6c0 [ 444.350262][T15719] ? netlink_lookup+0x30/0x200 [ 444.350294][T15719] __netlink_dump_start+0x469/0x7e0 [ 444.350330][T15719] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 444.350355][T15719] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 444.350374][T15719] ? genl_get_cmd+0x496/0x910 [ 444.350411][T15719] ? __pfx_genl_start+0x10/0x10 [ 444.350428][T15719] ? __pfx_genl_dumpit+0x10/0x10 [ 444.350445][T15719] ? __pfx_genl_done+0x10/0x10 [ 444.350481][T15719] genl_rcv_msg+0x5da/0x790 [ 444.350509][T15719] ? __pfx_genl_rcv_msg+0x10/0x10 [ 444.350528][T15719] ? __pfx_netdev_nl_qstats_get_dumpit+0x10/0x10 [ 444.350573][T15719] netlink_rcv_skb+0x208/0x470 [ 444.350601][T15719] ? __pfx_genl_rcv_msg+0x10/0x10 [ 444.350623][T15719] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 444.350670][T15719] ? down_read+0x274/0x2e0 [ 444.350691][T15719] ? genl_rcv+0xd/0x40 [ 444.350712][T15719] genl_rcv+0x28/0x40 [ 444.350728][T15719] netlink_unicast+0x82f/0x9e0 [ 444.350763][T15719] ? __pfx_netlink_unicast+0x10/0x10 [ 444.350789][T15719] ? netlink_sendmsg+0x642/0xb30 [ 444.350814][T15719] ? skb_put+0x11b/0x210 [ 444.350841][T15719] netlink_sendmsg+0x805/0xb30 [ 444.350879][T15719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 444.350911][T15719] ? aa_sock_msg_perm+0xf1/0x1b0 [ 444.350940][T15719] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 444.350960][T15719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 444.350989][T15719] __sock_sendmsg+0x21c/0x270 [ 444.351024][T15719] ____sys_sendmsg+0x505/0x820 [ 444.351056][T15719] ? __pfx_____sys_sendmsg+0x10/0x10 [ 444.351092][T15719] ? import_iovec+0x74/0xa0 [ 444.351122][T15719] ___sys_sendmsg+0x21f/0x2a0 [ 444.351149][T15719] ? __pfx____sys_sendmsg+0x10/0x10 [ 444.351182][T15719] ? rcu_read_lock_any_held+0xb3/0x120 [ 444.351246][T15719] ? __fget_files+0x2a/0x420 [ 444.351272][T15719] ? __fget_files+0x3a0/0x420 [ 444.351310][T15719] __x64_sys_sendmsg+0x19b/0x260 [ 444.351338][T15719] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 444.351375][T15719] ? __pfx_ksys_write+0x10/0x10 [ 444.351401][T15719] ? do_syscall_64+0xbe/0xf80 [ 444.351427][T15719] do_syscall_64+0xfa/0xf80 [ 444.351450][T15719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.351470][T15719] ? clear_bhb_loop+0x60/0xb0 [ 444.351495][T15719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.351516][T15719] RIP: 0033:0x7f3c1eb8f749 [ 444.351535][T15719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.351552][T15719] RSP: 002b:00007f3c1f9e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 444.351575][T15719] RAX: ffffffffffffffda RBX: 00007f3c1ede5fa0 RCX: 00007f3c1eb8f749 [ 444.351590][T15719] RDX: 0000000004000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 444.351604][T15719] RBP: 00007f3c1f9e0090 R08: 0000000000000000 R09: 0000000000000000 [ 444.351617][T15719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.351629][T15719] R13: 00007f3c1ede6038 R14: 00007f3c1ede5fa0 R15: 00007fffd53c9508 [ 444.351665][T15719] [ 444.822224][ T5831] Bluetooth: hci7: command tx timeout [ 444.939921][T15734] xt_TPROXY: Can be used only with -p tcp or -p udp [ 445.358024][T15748] 8021q: adding VLAN 0 to HW filter on device bond2 [ 445.390165][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.479749][T15730] infiniband !yz!: set active [ 445.484728][T15730] infiniband !yz!: added team_slave_0 [ 445.551688][T15582] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 445.560761][T15730] RDS/IB: !yz!: added [ 445.566443][T15730] smc: adding ib device !yz! with port count 1 [ 445.573990][T15730] smc: ib device !yz! port 1 has no pnetid [ 445.590495][T15582] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 445.646922][T15582] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 445.676296][T15582] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 445.733738][T15766] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2964'. [ 445.851213][T15582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.885301][T15582] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.916408][T14742] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.923687][T14742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.955543][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.962807][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.081644][T15772] FAULT_INJECTION: forcing a failure. [ 446.081644][T15772] name failslab, interval 1, probability 0, space 0, times 0 [ 446.139541][T15772] CPU: 1 UID: 0 PID: 15772 Comm: syz.4.2965 Not tainted syzkaller #0 PREEMPT(full) [ 446.139571][T15772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 446.139584][T15772] Call Trace: [ 446.139592][T15772] [ 446.139601][T15772] dump_stack_lvl+0x189/0x250 [ 446.139630][T15772] ? __pfx____ratelimit+0x10/0x10 [ 446.139651][T15772] ? __pfx_dump_stack_lvl+0x10/0x10 [ 446.139676][T15772] ? __pfx__printk+0x10/0x10 [ 446.139709][T15772] ? __pfx___might_resched+0x10/0x10 [ 446.139732][T15772] ? fs_reclaim_acquire+0x7d/0x100 [ 446.139761][T15772] should_fail_ex+0x414/0x560 [ 446.139799][T15772] should_failslab+0xa8/0x100 [ 446.139827][T15772] __kmalloc_cache_noprof+0x84/0x700 [ 446.139849][T15772] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 446.139870][T15772] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 446.139890][T15772] ? genl_start+0x1c9/0x6c0 [ 446.139914][T15772] genl_start+0x1c9/0x6c0 [ 446.139933][T15772] ? netlink_lookup+0x30/0x200 [ 446.139966][T15772] __netlink_dump_start+0x469/0x7e0 [ 446.140002][T15772] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 446.140027][T15772] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 446.140046][T15772] ? genl_get_cmd+0x496/0x910 [ 446.140091][T15772] ? __pfx_genl_start+0x10/0x10 [ 446.140109][T15772] ? __pfx_genl_dumpit+0x10/0x10 [ 446.140125][T15772] ? __pfx_genl_done+0x10/0x10 [ 446.140161][T15772] genl_rcv_msg+0x5da/0x790 [ 446.140189][T15772] ? __pfx_genl_rcv_msg+0x10/0x10 [ 446.140208][T15772] ? __pfx_netdev_nl_qstats_get_dumpit+0x10/0x10 [ 446.140253][T15772] netlink_rcv_skb+0x208/0x470 [ 446.140281][T15772] ? __pfx_genl_rcv_msg+0x10/0x10 [ 446.140303][T15772] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 446.140351][T15772] ? down_read+0x274/0x2e0 [ 446.140373][T15772] ? genl_rcv+0xd/0x40 [ 446.140394][T15772] genl_rcv+0x28/0x40 [ 446.140411][T15772] netlink_unicast+0x82f/0x9e0 [ 446.140445][T15772] ? __pfx_netlink_unicast+0x10/0x10 [ 446.140470][T15772] ? netlink_sendmsg+0x642/0xb30 [ 446.140494][T15772] ? skb_put+0x11b/0x210 [ 446.140522][T15772] netlink_sendmsg+0x805/0xb30 [ 446.140563][T15772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.140595][T15772] ? aa_sock_msg_perm+0xf1/0x1b0 [ 446.140625][T15772] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 446.140645][T15772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.140674][T15772] __sock_sendmsg+0x21c/0x270 [ 446.140709][T15772] ____sys_sendmsg+0x505/0x820 [ 446.140741][T15772] ? __pfx_____sys_sendmsg+0x10/0x10 [ 446.140778][T15772] ? import_iovec+0x74/0xa0 [ 446.140807][T15772] ___sys_sendmsg+0x21f/0x2a0 [ 446.140836][T15772] ? __pfx____sys_sendmsg+0x10/0x10 [ 446.140869][T15772] ? rcu_read_lock_any_held+0xb3/0x120 [ 446.140928][T15772] ? __fget_files+0x2a/0x420 [ 446.140954][T15772] ? __fget_files+0x3a0/0x420 [ 446.140992][T15772] __x64_sys_sendmsg+0x19b/0x260 [ 446.141021][T15772] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 446.141057][T15772] ? __pfx_ksys_write+0x10/0x10 [ 446.141089][T15772] ? do_syscall_64+0xbe/0xf80 [ 446.141115][T15772] do_syscall_64+0xfa/0xf80 [ 446.141138][T15772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.141158][T15772] ? clear_bhb_loop+0x60/0xb0 [ 446.141184][T15772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.141204][T15772] RIP: 0033:0x7feb7af8f749 [ 446.141222][T15772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.141240][T15772] RSP: 002b:00007feb791f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.141262][T15772] RAX: ffffffffffffffda RBX: 00007feb7b1e5fa0 RCX: 00007feb7af8f749 [ 446.141278][T15772] RDX: 0000000004000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 446.141292][T15772] RBP: 00007feb791f6090 R08: 0000000000000000 R09: 0000000000000000 [ 446.141305][T15772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.141317][T15772] R13: 00007feb7b1e6038 R14: 00007feb7b1e5fa0 R15: 00007ffe24e90b98 [ 446.141353][T15772] [ 446.900856][ T5831] Bluetooth: hci7: command tx timeout [ 446.973945][T15582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.096874][T15800] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 447.196101][T15582] veth0_vlan: entered promiscuous mode [ 447.234369][T15582] veth1_vlan: entered promiscuous mode [ 447.322077][T15582] veth0_macvtap: entered promiscuous mode [ 447.363118][T15582] veth1_macvtap: entered promiscuous mode [ 447.412196][T15582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.450748][T15582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.485228][T14742] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.524550][ T1003] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.541652][ T1003] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.585754][T15816] netlink: 'syz.6.2980': attribute type 2 has an invalid length. [ 447.615961][ T1003] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.829690][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.845429][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.964961][ T6619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.987573][ T6619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.520966][T15846] netlink: 'syz.6.2990': attribute type 12 has an invalid length. [ 448.532182][T15846] netlink: 190972 bytes leftover after parsing attributes in process `syz.6.2990'. [ 448.590909][T15846] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2990'. [ 448.639972][T15846] netlink: 'syz.6.2990': attribute type 7 has an invalid length. [ 448.647913][T15846] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2990'. [ 448.978531][ T5831] Bluetooth: hci7: command tx timeout [ 449.102770][T15862] netlink: 'syz.6.2995': attribute type 3 has an invalid length. [ 449.184249][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 449.205113][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 449.214745][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 449.229785][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 449.237671][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 449.508085][T15873] netlink: 'syz.5.3000': attribute type 21 has an invalid length. [ 449.518949][T15874] FAULT_INJECTION: forcing a failure. [ 449.518949][T15874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.534525][T15873] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3000'. [ 449.544973][T15874] CPU: 1 UID: 0 PID: 15874 Comm: syz.0.2998 Not tainted syzkaller #0 PREEMPT(full) [ 449.545000][T15874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 449.545013][T15874] Call Trace: [ 449.545021][T15874] [ 449.545030][T15874] dump_stack_lvl+0x189/0x250 [ 449.545062][T15874] ? __pfx____ratelimit+0x10/0x10 [ 449.545082][T15874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 449.545106][T15874] ? __pfx__printk+0x10/0x10 [ 449.545136][T15874] ? __might_fault+0xb0/0x130 [ 449.545181][T15874] should_fail_ex+0x414/0x560 [ 449.545218][T15874] _copy_from_iter+0x1cd/0x1630 [ 449.545244][T15874] ? __build_skb_around+0x22d/0x3c0 [ 449.545273][T15874] ? __pfx__copy_from_iter+0x10/0x10 [ 449.545292][T15874] ? __alloc_skb+0x2f1/0x430 [ 449.545317][T15874] ? __pfx___alloc_skb+0x10/0x10 [ 449.545341][T15874] ? netlink_sendmsg+0x642/0xb30 [ 449.545367][T15874] ? skb_put+0x11b/0x210 [ 449.545393][T15874] netlink_sendmsg+0x6b2/0xb30 [ 449.545431][T15874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.545462][T15874] ? aa_sock_msg_perm+0xf1/0x1b0 [ 449.545491][T15874] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 449.545511][T15874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.545539][T15874] __sock_sendmsg+0x21c/0x270 [ 449.545581][T15874] ____sys_sendmsg+0x505/0x820 [ 449.545613][T15874] ? __pfx_____sys_sendmsg+0x10/0x10 [ 449.545648][T15874] ? import_iovec+0x74/0xa0 [ 449.545678][T15874] ___sys_sendmsg+0x21f/0x2a0 [ 449.545706][T15874] ? __pfx____sys_sendmsg+0x10/0x10 [ 449.545739][T15874] ? rcu_read_lock_any_held+0xb3/0x120 [ 449.545795][T15874] ? __fget_files+0x2a/0x420 [ 449.545821][T15874] ? __fget_files+0x3a0/0x420 [ 449.545853][T15874] __x64_sys_sendmsg+0x19b/0x260 [ 449.545881][T15874] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 449.545915][T15874] ? __pfx_ksys_write+0x10/0x10 [ 449.545940][T15874] ? do_syscall_64+0xbe/0xf80 [ 449.545965][T15874] do_syscall_64+0xfa/0xf80 [ 449.545989][T15874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.546008][T15874] ? clear_bhb_loop+0x60/0xb0 [ 449.546032][T15874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.546050][T15874] RIP: 0033:0x7fe3b338f749 [ 449.546068][T15874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.546087][T15874] RSP: 002b:00007fe3b15f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.546108][T15874] RAX: ffffffffffffffda RBX: 00007fe3b35e5fa0 RCX: 00007fe3b338f749 [ 449.546123][T15874] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 449.546136][T15874] RBP: 00007fe3b15f6090 R08: 0000000000000000 R09: 0000000000000000 [ 449.546149][T15874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.546161][T15874] R13: 00007fe3b35e6038 R14: 00007fe3b35e5fa0 R15: 00007ffca57b85f8 [ 449.546196][T15874] [ 449.625371][T15872] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2999'. [ 449.664195][T15875] netlink: 'syz.5.3000': attribute type 21 has an invalid length. [ 449.854420][T15875] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3000'. [ 449.874283][T15873] netlink: 'syz.5.3000': attribute type 4 has an invalid length. [ 449.883627][T15873] netlink: 'syz.5.3000': attribute type 5 has an invalid length. [ 449.900576][T15873] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3000'. [ 449.938924][T15875] netlink: 'syz.5.3000': attribute type 4 has an invalid length. [ 449.979636][T15875] netlink: 'syz.5.3000': attribute type 5 has an invalid length. [ 449.987442][T15875] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3000'. [ 450.160068][T15886] netlink: 'syz.5.3004': attribute type 1 has an invalid length. [ 450.264179][T15893] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3003'. [ 450.740610][T15910] tipc: Enabling of bearer rejected, failed to enable media [ 450.761122][T15909] __nla_validate_parse: 2 callbacks suppressed [ 450.761142][T15909] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3010'. [ 450.777006][T15909] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3010'. [ 450.876851][T15912] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3010'. [ 450.892521][T15911] netlink: 'syz.6.3010': attribute type 10 has an invalid length. [ 450.936842][T15907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.299751][ T5831] Bluetooth: hci0: command tx timeout [ 451.450901][T15929] netlink: 240 bytes leftover after parsing attributes in process `syz.5.3015'. [ 451.533300][T15863] chnl_net:caif_netlink_parms(): no params data found [ 451.806279][T15945] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3019'. [ 451.820305][T15946] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3019'. [ 451.871998][T15939] IPVS: persistence engine module ip_vs_pe_À not found [ 451.950780][T15951] FAULT_INJECTION: forcing a failure. [ 451.950780][T15951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.953104][T15863] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.988488][T15951] CPU: 0 UID: 0 PID: 15951 Comm: syz.5.3020 Not tainted syzkaller #0 PREEMPT(full) [ 451.988517][T15951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 451.988530][T15951] Call Trace: [ 451.988538][T15951] [ 451.988547][T15951] dump_stack_lvl+0x189/0x250 [ 451.988580][T15951] ? __pfx____ratelimit+0x10/0x10 [ 451.988601][T15951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.988626][T15951] ? __pfx__printk+0x10/0x10 [ 451.988656][T15951] ? __might_fault+0xb0/0x130 [ 451.988701][T15951] should_fail_ex+0x414/0x560 [ 451.988738][T15951] _copy_from_user+0x2d/0xb0 [ 451.988764][T15951] kstrtouint_from_user+0xc4/0x170 [ 451.988788][T15951] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 451.988828][T15951] proc_fail_nth_write+0x88/0x200 [ 451.988852][T15951] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 451.988880][T15951] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 451.988905][T15951] vfs_write+0x27e/0xb30 [ 451.988935][T15951] ? __pfx_vfs_write+0x10/0x10 [ 451.988958][T15951] ? __fget_files+0x2a/0x420 [ 451.988989][T15951] ? __fget_files+0x3a0/0x420 [ 451.989014][T15951] ? __fget_files+0x2a/0x420 [ 451.989050][T15951] ksys_write+0x145/0x250 [ 451.989073][T15951] ? __pfx_ksys_write+0x10/0x10 [ 451.989098][T15951] ? do_syscall_64+0xbe/0xf80 [ 451.989125][T15951] do_syscall_64+0xfa/0xf80 [ 451.989149][T15951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.989169][T15951] ? clear_bhb_loop+0x60/0xb0 [ 451.989195][T15951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.989215][T15951] RIP: 0033:0x7f7ddf98e1ff [ 451.989233][T15951] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 451.989251][T15951] RSP: 002b:00007f7de08f6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 451.989273][T15951] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7ddf98e1ff [ 451.989288][T15951] RDX: 0000000000000001 RSI: 00007f7de08f60a0 RDI: 0000000000000005 [ 451.989301][T15951] RBP: 00007f7de08f6090 R08: 0000000000000000 R09: 0000000000000000 [ 451.989313][T15951] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 451.989325][T15951] R13: 00007f7ddfbe6038 R14: 00007f7ddfbe5fa0 R15: 00007ffe201e0308 [ 451.989370][T15951] [ 452.008767][T15863] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.293199][T15863] bridge_slave_0: entered allmulticast mode [ 452.301337][T15863] bridge_slave_0: entered promiscuous mode [ 452.372585][T15863] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.388309][T15863] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.397684][T15959] netlink: 'syz.5.3024': attribute type 11 has an invalid length. [ 452.409766][T15959] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.3024'. [ 452.419106][T15863] bridge_slave_1: entered allmulticast mode [ 452.424344][T15863] bridge_slave_1: entered promiscuous mode [ 452.555986][T15965] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3025'. [ 452.566784][T15965] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3025'. [ 452.698914][T15969] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3025'. [ 452.736202][T15863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.781520][T15863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.781648][T15960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.933626][T15863] team0: Port device team_slave_0 added [ 452.942795][T15863] team0: Port device team_slave_1 added [ 453.024082][T15863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.033951][T15863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.063977][T15863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.105047][T15863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.112891][T15863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.139840][T15863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.276757][T15863] hsr_slave_0: entered promiscuous mode [ 453.284068][T15863] hsr_slave_1: entered promiscuous mode [ 453.292185][T15863] debugfs: 'hsr0' already exists in 'hsr' [ 453.298102][T15863] Cannot create hsr debugfs directory [ 453.380266][ T5831] Bluetooth: hci0: command tx timeout [ 453.483775][T15992] Cannot find set identified by id 0 to match [ 453.603618][T15997] syzkaller1: entered promiscuous mode [ 453.617560][T15997] syzkaller1: entered allmulticast mode [ 453.782906][T16011] xt_CT: You must specify a L4 protocol and not use inversions on it [ 453.804473][T16012] xt_CT: You must specify a L4 protocol and not use inversions on it [ 453.873410][T16016] validate_nla: 2 callbacks suppressed [ 453.873429][T16016] netlink: 'syz.6.3041': attribute type 3 has an invalid length. [ 453.975171][T15863] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.018740][T15863] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.032936][T15863] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 454.046553][T15863] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 454.157341][T16025] tipc: Enabled bearer , priority 10 [ 454.200600][T15863] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.219696][T15863] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.240584][T15863] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 454.244139][T16028] netlink: 'syz.6.3043': attribute type 10 has an invalid length. [ 454.262603][T15863] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 454.281341][T16030] netlink: 'syz.0.3046': attribute type 62 has an invalid length. [ 454.289808][T16020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.313810][T16032] netlink: 'syz.0.3046': attribute type 62 has an invalid length. [ 454.359314][T15863] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.390318][T15863] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.438367][T15863] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 454.462740][T15863] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 454.504720][T16041] netlink: 'syz.0.3048': attribute type 1 has an invalid length. [ 454.528316][T16041] netlink: 'syz.0.3048': attribute type 7 has an invalid length. [ 454.546620][T16041] netlink: 'syz.0.3048': attribute type 8 has an invalid length. [ 454.556001][T16041] NCSI netlink: No device for ifindex 65584 [ 454.606735][T15863] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.620084][T15863] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.635023][T15863] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 454.647295][T15863] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 454.730231][T16053] netlink: 'syz.0.3052': attribute type 3 has an invalid length. [ 454.860649][T16057] syzkaller0: entered promiscuous mode [ 454.866231][T16057] syzkaller0: entered allmulticast mode [ 455.072082][T15863] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 455.120861][T15863] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 455.167251][T15863] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 455.207536][T15863] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 455.459507][ T5831] Bluetooth: hci0: command tx timeout [ 455.474481][T16088] vlan2: entered promiscuous mode [ 455.481987][T16088] geneve1: entered promiscuous mode [ 455.487465][T16088] vlan2: entered allmulticast mode [ 455.493439][T16088] geneve1: entered allmulticast mode [ 455.504577][T15863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.527033][T15863] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.569033][ T3579] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.576491][ T3579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.606713][ T3579] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.613950][ T3579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.809875][T16101] __nla_validate_parse: 14 callbacks suppressed [ 455.809897][T16101] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3065'. [ 455.834366][T15863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 455.847928][T16101] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3065'. [ 455.955544][T16110] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3065'. [ 455.964969][T16111] netlink: 'syz.0.3068': attribute type 1 has an invalid length. [ 455.985133][T16111] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3068'. [ 456.017940][T16115] netlink: 'syz.6.3065': attribute type 10 has an invalid length. [ 456.126126][T16100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.430049][T15863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.499642][T16139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3076'. [ 456.630754][T16143] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3077'. [ 456.707591][T16149] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3078'. [ 456.901669][T16154] netlink: 'syz.5.3079': attribute type 11 has an invalid length. [ 456.952983][T16160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.956916][T16154] netlink: 199788 bytes leftover after parsing attributes in process `syz.5.3079'. [ 457.312097][T15863] veth0_vlan: entered promiscuous mode [ 457.346231][T15863] veth1_vlan: entered promiscuous mode [ 457.356114][T16178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3088'. [ 457.389687][T16178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3088'. [ 457.399565][T14742] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.419104][T14742] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.434731][T14742] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.467086][T14742] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.536558][T15863] veth0_macvtap: entered promiscuous mode [ 457.544468][ T5831] Bluetooth: hci0: command tx timeout [ 457.577036][T15863] veth1_macvtap: entered promiscuous mode [ 457.626827][T15863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.656337][T15863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.728680][ T3503] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.751902][ T3503] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.783091][ T3503] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.813405][ T3503] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.888753][T16187] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 457.930304][T16186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.112096][ T3503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.145100][ T3503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.244723][T12767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.277089][T12767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.503990][ T6027] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.528594][ T6027] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.561766][ T6027] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.602295][ T6027] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.677593][T16217] 8021q: adding VLAN 0 to HW filter on device bond7 [ 459.777216][T16272] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.061068][T16280] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20001 [ 460.070063][T16280] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20004 [ 460.082734][T16280] IPVS: set_ctl: invalid protocol: 103 0.0.0.0:20004 [ 460.109247][T16285] validate_nla: 4 callbacks suppressed [ 460.109262][T16285] netlink: 'syz.7.3116': attribute type 27 has an invalid length. [ 460.324118][T16290] netlink: 'syz.4.3120': attribute type 1 has an invalid length. [ 461.711678][T16291] bond1 (unregistering): Released all slaves [ 461.823393][T16292] ip6tnl1: entered promiscuous mode [ 461.838631][T16292] ip6tnl1: entered allmulticast mode [ 461.885639][T16301] __nla_validate_parse: 11 callbacks suppressed [ 461.885662][T16301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3124'. [ 461.994166][T16305] 8021q: adding VLAN 0 to HW filter on device bond3 [ 462.010388][T16301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3124'. [ 462.279032][T16315] syzkaller1: entered promiscuous mode [ 462.372113][T16315] syzkaller1: entered allmulticast mode [ 463.105851][T16352] bond0: entered promiscuous mode [ 463.111179][T16352] bond_slave_0: entered promiscuous mode [ 463.121717][T16352] batadv0: entered promiscuous mode [ 463.128869][T16352] debugfs: 'hsr1' already exists in 'hsr' [ 463.134938][T16352] Cannot create hsr debugfs directory [ 463.142911][T16352] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 463.160264][T16355] netlink: 'syz.5.3141': attribute type 19 has an invalid length. [ 463.612077][T16372] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3145'. [ 464.277053][T16402] bond0: entered promiscuous mode [ 464.282815][T16402] bond_slave_0: entered promiscuous mode [ 464.290821][T16402] bond_slave_1: entered promiscuous mode [ 464.296855][T16402] mac80211_hwsim hwsim37 wlan1: entered promiscuous mode [ 464.308063][T16402] batadv0: entered promiscuous mode [ 464.314793][T16402] debugfs: 'hsr1' already exists in 'hsr' [ 464.321711][T16402] Cannot create hsr debugfs directory [ 464.333807][T16402] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 464.533889][T16412] netlink: 'syz.0.3160': attribute type 1 has an invalid length. [ 464.603192][T16417] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3162'. [ 464.800409][T16420] v: renamed from vlan0 (while UP) [ 465.342641][T16442] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3169'. [ 465.606825][T16452] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3172'. [ 465.626213][T16454] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3174'. [ 465.730817][T16458] ieee802154 phy0 wpan0: encryption failed: -90 [ 466.082887][T16482] netlink: 'syz.5.3185': attribute type 1 has an invalid length. [ 466.229248][T16482] 8021q: adding VLAN 0 to HW filter on device bond8 [ 466.633155][T16515] netlink: 'syz.5.3196': attribute type 3 has an invalid length. [ 466.679463][T16519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3195'. [ 466.807180][T16525] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3200'. [ 466.821313][T16523] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3199'. [ 466.864603][T16525] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 466.880285][T16525] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 466.890817][T16525] gretap2: entered promiscuous mode [ 466.897471][T16525] gretap2: entered allmulticast mode [ 467.233373][T16552] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3209'. [ 467.244152][T16549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3208'. [ 467.265535][T16552] xt_policy: neither incoming nor outgoing policy selected [ 467.299965][T16549] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3208'. [ 467.393941][T16559] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3212'. [ 468.793829][T16580] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3218'. [ 469.279912][T16559] xfrm1: entered promiscuous mode [ 469.285114][T16559] xfrm1: entered allmulticast mode [ 469.312730][T16589] syzkaller1: entered promiscuous mode [ 469.322998][T16589] syzkaller1: entered allmulticast mode [ 469.623449][T16603] netlink: 'syz.4.3227': attribute type 13 has an invalid length. [ 469.705149][T16606] nbd5: detected capacity change from 0 to 63 [ 469.720743][T16615] block nbd5: NBD_DISCONNECT [ 469.740599][T16615] block nbd5: Disconnected due to user request. [ 469.749901][T16615] block nbd5: shutting down sockets [ 469.756569][T16620] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 469.800252][T16620] Buffer I/O error on dev nbd5, logical block 0, async page read [ 469.829098][ T11] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 469.840495][ T11] Buffer I/O error on dev nbd5, logical block 1, async page read [ 469.848624][ T11] Buffer I/O error on dev nbd5, logical block 2, async page read [ 469.856400][ T11] Buffer I/O error on dev nbd5, logical block 3, async page read [ 469.866159][T16620] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 469.880655][T16613] macsec1: entered promiscuous mode [ 469.890748][T16620] Buffer I/O error on dev nbd5, logical block 0, async page read [ 469.899070][T16620] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 469.908987][T16620] Buffer I/O error on dev nbd5, logical block 1, async page read [ 469.916855][T16620] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 469.927211][T16620] Buffer I/O error on dev nbd5, logical block 2, async page read [ 469.936032][T16620] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 469.945846][T16620] Buffer I/O error on dev nbd5, logical block 3, async page read [ 469.954424][T16620] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 469.964327][T16620] Buffer I/O error on dev nbd5, logical block 0, async page read [ 469.973127][T16620] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 469.983842][T16620] Buffer I/O error on dev nbd5, logical block 1, async page read [ 469.992460][T16620] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 470.002425][T16620] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 470.012957][T16620] ldm_validate_partition_table(): Disk read failed. [ 470.021142][T16620] Dev nbd5: unable to read RDB block 0 [ 470.027371][T16620] nbd5: unable to read partition table [ 470.050371][T16620] ldm_validate_partition_table(): Disk read failed. [ 470.057568][T16620] Dev nbd5: unable to read RDB block 0 [ 470.083020][T16620] nbd5: unable to read partition table [ 470.243668][T16631] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3234'. [ 470.265911][T16631] veth1: entered promiscuous mode [ 470.377897][T16633] netlink: 'syz.4.3235': attribute type 3 has an invalid length. [ 470.577721][T16653] netlink: 'syz.4.3240': attribute type 1 has an invalid length. [ 470.683721][T16653] bond1: entered promiscuous mode [ 470.689593][T16653] 8021q: adding VLAN 0 to HW filter on device bond1 [ 470.764560][T16663] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 470.800622][T16653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3240'. [ 470.845183][T16653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3240'. [ 470.951757][T16663] bond1: (slave bridge1): making interface the new active one [ 470.961331][T16663] bridge1: entered promiscuous mode [ 470.971639][T16663] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 471.172487][T16677] netlink: 'syz.5.3249': attribute type 26 has an invalid length. [ 471.470564][T16695] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3254'. [ 471.525105][T16695] : entered promiscuous mode [ 472.190520][T16712] vlan0: Caught tx_queue_len zero misconfig [ 472.378001][T16723] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3262'. [ 472.391567][T16723] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3262'. [ 472.403267][T16721] syzkaller0: entered promiscuous mode [ 472.408944][T16721] syzkaller0: entered allmulticast mode [ 472.445005][T16724] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3262'. [ 472.481532][T16724] netlink: 'syz.5.3262': attribute type 10 has an invalid length. [ 472.551398][T16722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.625860][T16727] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3263'. [ 473.015238][T16749] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3270'. [ 473.242091][T16759] netlink: 'syz.7.3271': attribute type 1 has an invalid length. [ 473.260607][T16759] netlink: 'syz.7.3271': attribute type 2 has an invalid length. [ 473.279359][T16761] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3272'. [ 473.304699][T16761] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3272'. [ 473.323226][T16761] netlink: 'syz.5.3272': attribute type 3 has an invalid length. [ 473.393238][T16770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.454844][T16773] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3275'. [ 473.490736][T16777] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3277'. [ 473.521115][T16776] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 473.729842][T16779] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.737621][T16779] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.851407][T16800] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20000 [ 474.001038][T16808] Cannot find set identified by id 0 to match [ 474.076421][T16812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.310940][T16823] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3292'. [ 474.732878][T16844] Cannot find set identified by id 0 to match [ 474.776657][T16850] º: renamed from veth1_vlan (while UP) [ 475.446296][T16891] veth0_vlan: left promiscuous mode [ 475.833506][T16909] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode [ 475.841660][T16909] mac80211_hwsim hwsim33 syzkaller0: entered allmulticast mode [ 476.127988][T16929] dvmrp0: entered allmulticast mode [ 476.370094][T16936] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 476.382321][T16936] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 476.397322][T16938] netlink: 'syz.7.3332': attribute type 1 has an invalid length. [ 476.502264][T16938] 8021q: adding VLAN 0 to HW filter on device bond4 [ 476.560427][T16942] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 476.594547][T16942] team0: Port device macvlan2 added [ 476.657956][T16936] bond2: (slave lo): Device is not bonding slave [ 476.698648][T16936] bond2: option active_slave: invalid value (lo) [ 476.717132][T16936] bond2 (unregistering): Released all slaves [ 476.817484][T16962] ipt_rpfilter: unknown options [ 477.419889][T16994] __nla_validate_parse: 9 callbacks suppressed [ 477.419912][T16994] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3351'. [ 477.443413][T16992] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 477.474128][T16995] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3351'. [ 478.435307][T17032] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.3361'. [ 478.671823][T17039] veth5: entered promiscuous mode [ 478.677142][T17039] veth5: entered allmulticast mode [ 478.707214][T17042] ip6erspan0: entered promiscuous mode [ 478.714990][T17042] ip6erspan0: entered allmulticast mode [ 479.107108][T17068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3371'. [ 479.210845][T17068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3371'. [ 479.229221][T17072] bridge0: port 1(macsec0) entered blocking state [ 479.236322][T17072] bridge0: port 1(macsec0) entered disabled state [ 479.246387][T17072] macsec0: entered allmulticast mode [ 479.306009][T17076] netlink: 'syz.4.3374': attribute type 3 has an invalid length. [ 479.328283][T17068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3371'. [ 479.366785][T17068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3371'. [ 479.416409][T17068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3371'. [ 479.433910][T17079] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3375'. [ 479.508890][T17068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3371'. [ 479.605095][T17090] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 480.012797][T17106] netlink: 'syz.5.3382': attribute type 1 has an invalid length. [ 480.233082][T17118] netlink: 'syz.7.3387': attribute type 1 has an invalid length. [ 480.241100][T17118] netlink: 'syz.7.3387': attribute type 3 has an invalid length. [ 480.249442][T17118] NCSI netlink: No device for ifindex 813332851 [ 480.264171][T17118] netlink: 'syz.7.3387': attribute type 1 has an invalid length. [ 480.304523][T17118] 8021q: adding VLAN 0 to HW filter on device bond5 [ 480.357041][T17118] bond5: (slave veth3): Enslaving as an active interface with a down link [ 480.385503][T17118] bond5: (slave veth0_to_bond): making interface the new active one [ 480.395760][T17118] veth0_to_bond: entered promiscuous mode [ 480.404434][T17118] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 480.594356][T17131] bond0: Caught tx_queue_len zero misconfig [ 480.735066][T17135] veth1_to_bond: entered allmulticast mode [ 480.742099][T17131] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 480.759880][T17130] veth1_to_bond: left allmulticast mode [ 480.839301][T17141] netlink: 'syz.4.3395': attribute type 29 has an invalid length. [ 480.858686][T17141] netlink: 'syz.4.3395': attribute type 29 has an invalid length. [ 480.872844][T17141] netlink: 'syz.4.3395': attribute type 29 has an invalid length. [ 480.882210][T17141] netlink: 'syz.4.3395': attribute type 29 has an invalid length. [ 481.124180][T17149] bond2 (unregistering): Released all slaves [ 481.289950][ T4342] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.327342][ T4342] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.345055][ T4342] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.354319][ T4342] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.357860][T17214] bond0: Caught tx_queue_len zero misconfig [ 482.527087][T17217] syzkaller0: entered promiscuous mode [ 482.544455][T17217] syzkaller0: entered allmulticast mode [ 482.643312][T17222] __nla_validate_parse: 27 callbacks suppressed [ 482.643334][T17222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3423'. [ 482.852593][T17232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3427'. [ 482.913292][T17232] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3427'. [ 482.962405][T17236] veth0_to_bond: entered allmulticast mode [ 483.052420][T17244] validate_nla: 2 callbacks suppressed [ 483.052440][T17244] netlink: 'syz.7.3432': attribute type 3 has an invalid length. [ 483.636901][T17266] netlink: 'syz.0.3438': attribute type 1 has an invalid length. [ 483.704819][T17266] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 483.719010][T17266] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 483.735216][T17266] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 483.790748][T17268] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3440'. [ 483.820453][T17271] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 483.834100][T17271] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 483.996843][T17281] netlink: 'syz.5.3444': attribute type 1 has an invalid length. [ 484.046042][T17281] 8021q: adding VLAN 0 to HW filter on device bond9 [ 484.062726][T17284] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3445'. [ 484.112002][T17281] 8021q: adding VLAN 0 to HW filter on device bond9 [ 484.119855][T17281] bond9: (slave vxcan5): The slave device specified does not support setting the MAC address [ 484.133073][T17281] bond9: (slave vxcan5): Error -95 calling set_mac_address [ 484.168364][T17285] vlan2: entered allmulticast mode [ 484.173806][T17285] bond9: entered allmulticast mode [ 484.233421][T17287] bond3: invalid ARP target 0.0.0.0 specified for addition [ 484.240807][T17287] bond3: option arp_ip_target: invalid value (0) [ 484.250644][T17287] bond3 (unregistering): Released all slaves [ 484.798395][T17316] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3454'. [ 484.807748][T17315] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3454'. [ 484.873791][T17324] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3456'. [ 484.976306][T17331] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3459'. [ 485.167766][T17342] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3462'. [ 485.855823][T17348] lo: entered promiscuous mode [ 485.875085][T17348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 485.912818][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 485.922504][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 485.932108][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 485.947776][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 485.962730][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 486.036079][T17362] mac80211_hwsim hwsim33 syzkaller0: left promiscuous mode [ 486.058979][T17362] mac80211_hwsim hwsim33 syzkaller0: left allmulticast mode [ 486.143344][T17366] FAULT_INJECTION: forcing a failure. [ 486.143344][T17366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.158955][T17366] CPU: 1 UID: 0 PID: 17366 Comm: syz.0.3468 Not tainted syzkaller #0 PREEMPT(full) [ 486.158983][T17366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 486.158997][T17366] Call Trace: [ 486.159005][T17366] [ 486.159014][T17366] dump_stack_lvl+0x189/0x250 [ 486.159045][T17366] ? __pfx____ratelimit+0x10/0x10 [ 486.159066][T17366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.159092][T17366] ? __pfx__printk+0x10/0x10 [ 486.159123][T17366] ? __might_fault+0xb0/0x130 [ 486.159165][T17366] should_fail_ex+0x414/0x560 [ 486.159203][T17366] _copy_from_iter+0x1cd/0x1630 [ 486.159237][T17366] ? __pfx__copy_from_iter+0x10/0x10 [ 486.159267][T17366] ? __lock_acquire+0x6b6/0x2cf0 [ 486.159297][T17366] tun_get_user+0x219/0x3dc0 [ 486.159336][T17366] ? aa_file_perm+0x139/0x1530 [ 486.159371][T17366] ? aa_file_perm+0x44c/0x1530 [ 486.159398][T17366] ? __pfx_tun_get_user+0x10/0x10 [ 486.159425][T17366] ? __lock_acquire+0x6b6/0x2cf0 [ 486.159446][T17366] ? kstrtoull+0x12f/0x1d0 [ 486.159481][T17366] ? ref_tracker_alloc+0x318/0x460 [ 486.159503][T17366] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 486.159525][T17366] ? tun_get+0x1c/0x2f0 [ 486.159549][T17366] ? tun_get+0x1c/0x2f0 [ 486.159569][T17366] ? tun_get+0x1c/0x2f0 [ 486.159597][T17366] tun_chr_write_iter+0x113/0x200 [ 486.159626][T17366] vfs_write+0x5c9/0xb30 [ 486.159651][T17366] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 486.159804][T17366] ? __pfx_vfs_write+0x10/0x10 [ 486.159852][T17366] ? __fget_files+0x2a/0x420 [ 486.159887][T17366] ksys_write+0x145/0x250 [ 486.159917][T17366] ? __pfx_ksys_write+0x10/0x10 [ 486.159941][T17366] ? do_syscall_64+0xbe/0xf80 [ 486.159968][T17366] do_syscall_64+0xfa/0xf80 [ 486.159990][T17366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.160010][T17366] ? clear_bhb_loop+0x60/0xb0 [ 486.160034][T17366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.160054][T17366] RIP: 0033:0x7fe3b338f749 [ 486.160072][T17366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.160089][T17366] RSP: 002b:00007fe3b15f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 486.160111][T17366] RAX: ffffffffffffffda RBX: 00007fe3b35e5fa0 RCX: 00007fe3b338f749 [ 486.160127][T17366] RDX: 0000000000000fce RSI: 0000200000001240 RDI: 0000000000000003 [ 486.160141][T17366] RBP: 00007fe3b15f6090 R08: 0000000000000000 R09: 0000000000000000 [ 486.160153][T17366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.160166][T17366] R13: 00007fe3b35e6038 R14: 00007fe3b35e5fa0 R15: 00007ffca57b85f8 [ 486.160200][T17366] [ 487.230793][T17402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 487.334151][T17404] FAULT_INJECTION: forcing a failure. [ 487.334151][T17404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.356433][T17404] CPU: 0 UID: 0 PID: 17404 Comm: syz.7.3481 Not tainted syzkaller #0 PREEMPT(full) [ 487.356463][T17404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 487.356477][T17404] Call Trace: [ 487.356485][T17404] [ 487.356494][T17404] dump_stack_lvl+0x189/0x250 [ 487.356526][T17404] ? __pfx____ratelimit+0x10/0x10 [ 487.356547][T17404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.356572][T17404] ? __pfx__printk+0x10/0x10 [ 487.356603][T17404] ? __might_fault+0xb0/0x130 [ 487.356646][T17404] should_fail_ex+0x414/0x560 [ 487.356682][T17404] _copy_from_iter+0x1cd/0x1630 [ 487.356717][T17404] ? __pfx__copy_from_iter+0x10/0x10 [ 487.356746][T17404] ? __lock_acquire+0x6b6/0x2cf0 [ 487.356775][T17404] tun_get_user+0x48b/0x3dc0 [ 487.356830][T17404] ? aa_file_perm+0x44c/0x1530 [ 487.356859][T17404] ? __pfx_tun_get_user+0x10/0x10 [ 487.356886][T17404] ? __lock_acquire+0x6b6/0x2cf0 [ 487.356910][T17404] ? kstrtoull+0x12f/0x1d0 [ 487.356950][T17404] ? ref_tracker_alloc+0x318/0x460 [ 487.356973][T17404] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 487.357000][T17404] ? tun_get+0x1c/0x2f0 [ 487.357031][T17404] ? tun_get+0x1c/0x2f0 [ 487.357054][T17404] ? tun_get+0x1c/0x2f0 [ 487.357084][T17404] tun_chr_write_iter+0x113/0x200 [ 487.357112][T17404] vfs_write+0x5c9/0xb30 [ 487.357137][T17404] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 487.357163][T17404] ? __pfx_vfs_write+0x10/0x10 [ 487.357194][T17404] ? __fget_files+0x2a/0x420 [ 487.357230][T17404] ksys_write+0x145/0x250 [ 487.357253][T17404] ? __pfx_ksys_write+0x10/0x10 [ 487.357277][T17404] ? do_syscall_64+0xbe/0xf80 [ 487.357303][T17404] do_syscall_64+0xfa/0xf80 [ 487.357326][T17404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.357346][T17404] ? clear_bhb_loop+0x60/0xb0 [ 487.357371][T17404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.357391][T17404] RIP: 0033:0x7f4f1718f749 [ 487.357410][T17404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.357428][T17404] RSP: 002b:00007f4f18003038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 487.357451][T17404] RAX: ffffffffffffffda RBX: 00007f4f173e5fa0 RCX: 00007f4f1718f749 [ 487.357466][T17404] RDX: 0000000000000fce RSI: 0000200000001240 RDI: 0000000000000003 [ 487.357479][T17404] RBP: 00007f4f18003090 R08: 0000000000000000 R09: 0000000000000000 [ 487.357492][T17404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.357504][T17404] R13: 00007f4f173e6038 R14: 00007f4f173e5fa0 R15: 00007ffe3868d468 [ 487.357538][T17404] [ 487.620554][ T57] IPVS: starting estimator thread 0... [ 487.663602][T17413] IPVS: sh: FWM 3 0x00000003 - no destination available [ 487.709856][T17410] IPVS: using max 28 ests per chain, 67200 per kthread [ 487.719476][T17418] __nla_validate_parse: 2 callbacks suppressed [ 487.719493][T17418] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3484'. [ 487.796637][T17420] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3484'. [ 487.912243][T17418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 487.954173][T17426] bond0: Device is already in use. [ 487.994893][T17354] chnl_net:caif_netlink_parms(): no params data found [ 488.018515][ T52] Bluetooth: hci4: command tx timeout [ 488.369850][T17354] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.377134][T17354] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.385066][T17354] bridge_slave_0: entered allmulticast mode [ 488.395495][T17354] bridge_slave_0: entered promiscuous mode [ 488.465978][T17354] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.473953][T17354] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.490210][T17354] bridge_slave_1: entered allmulticast mode [ 488.522974][T17354] bridge_slave_1: entered promiscuous mode [ 488.666976][T17463] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3496'. [ 488.692172][T17354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.726774][T17354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.901585][T17354] team0: Port device team_slave_0 added [ 488.911656][T17354] team0: Port device team_slave_1 added [ 489.154990][T17354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.209265][T17354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.277816][T17354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.348934][T17354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.360839][T17354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.388380][T17504] ip6t_REJECT: ECHOREPLY is not supported [ 489.423552][T17354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.649267][T17354] hsr_slave_0: entered promiscuous mode [ 489.665802][T17354] hsr_slave_1: entered promiscuous mode [ 489.675497][T17354] debugfs: 'hsr0' already exists in 'hsr' [ 489.686569][T17354] Cannot create hsr debugfs directory [ 489.743346][T17521] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3511'. [ 489.756660][T17523] netlink: 'syz.4.3512': attribute type 1 has an invalid length. [ 490.077582][T17546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.098855][ T5831] Bluetooth: hci4: command tx timeout [ 490.361816][T17354] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 490.375702][T17354] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 490.389971][T17354] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 490.411110][T17354] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 490.499648][T17568] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3524'. [ 490.546424][T17557] netlink: 'syz.4.3523': attribute type 1 has an invalid length. [ 490.619959][T17557] bond2: entered promiscuous mode [ 490.625407][T17557] 8021q: adding VLAN 0 to HW filter on device bond2 [ 490.790767][T17577] netlink: 'syz.7.3526': attribute type 5 has an invalid length. [ 490.836457][T17583] netlink: 'syz.7.3526': attribute type 5 has an invalid length. [ 490.894848][T17354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.966655][T17354] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.072649][ T6063] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.079906][ T6063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.156553][ T6063] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.163834][ T6063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.350673][T17607] syzkaller0: entered promiscuous mode [ 491.356220][T17607] syzkaller0: entered allmulticast mode [ 491.593606][T17617] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3535'. [ 491.622443][T17617] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3535'. [ 491.674056][T17354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.764718][T17623] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3537'. [ 491.891252][ T36] veth0_to_bond: left promiscuous mode [ 492.099156][ T31] INFO: task syz.2.1528:10975 blocked for more than 143 seconds. [ 492.124588][ T31] Not tainted syzkaller #0 [ 492.134756][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 492.155185][ T31] task:syz.2.1528 state:D stack:21608 pid:10975 tgid:10973 ppid:5838 task_flags:0x400140 flags:0x00080002 [ 492.170077][ T31] Call Trace: [ 492.173438][ T31] [ 492.176412][ T31] __schedule+0x14bc/0x5000 [ 492.182797][ T31] ? lockdep_unlock+0x89/0x120 [ 492.187628][ T31] ? __pfx___schedule+0x10/0x10 [ 492.190112][ T5831] Bluetooth: hci4: command 0x040f tx timeout [ 492.225277][ T31] ? schedule+0x91/0x360 [ 492.231379][ T31] schedule+0x165/0x360 [ 492.235688][ T31] schedule_timeout+0x9a/0x270 [ 492.241191][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 492.246633][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 492.253235][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 492.259835][ T31] ? wait_for_completion+0x267/0x5d0 [ 492.265232][ T31] wait_for_completion+0x2bf/0x5d0 [ 492.270503][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 492.276182][ T31] ? disable_device+0x137/0x320 [ 492.281356][ T31] ? remove_client_context+0xc0/0x1e0 [ 492.286793][ T31] disable_device+0x1c6/0x320 [ 492.292102][ T31] ? __pfx_disable_device+0x10/0x10 [ 492.297420][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 492.304147][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 492.310512][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 492.316499][ T31] nldev_dellink+0x2d1/0x320 [ 492.321561][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 492.326796][ T31] ? apparmor_capable+0x137/0x1a0 [ 492.333040][ T31] ? bpf_lsm_capable+0x9/0x20 [ 492.337851][ T31] ? security_capable+0x7e/0x2e0 [ 492.345263][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 492.352169][ T31] rdma_nl_rcv+0x6ae/0x980 [ 492.356642][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 492.362534][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 492.367779][ T31] netlink_unicast+0x82f/0x9e0 [ 492.372922][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 492.378810][ T31] ? netlink_sendmsg+0x642/0xb30 [ 492.383797][ T31] ? skb_put+0x11b/0x210 [ 492.388072][ T31] netlink_sendmsg+0x805/0xb30 [ 492.393073][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.398498][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 492.404872][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 492.411417][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.416740][ T31] __sock_sendmsg+0x21c/0x270 [ 492.422812][ T31] ____sys_sendmsg+0x505/0x820 [ 492.427641][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 492.433058][ T31] ? import_iovec+0x74/0xa0 [ 492.437616][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 492.442845][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 492.448356][ T31] ? futex_wait+0x285/0x360 [ 492.452944][ T31] ? __fget_files+0x2a/0x420 [ 492.457588][ T31] ? __fget_files+0x3a0/0x420 [ 492.463177][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 492.468607][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 492.474152][ T31] ? do_syscall_64+0xbe/0xf80 [ 492.479197][ T31] do_syscall_64+0xfa/0xf80 [ 492.483763][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.490137][ T31] ? clear_bhb_loop+0x60/0xb0 [ 492.494900][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.501427][ T31] RIP: 0033:0x7fcad3b8f749 [ 492.507035][ T31] RSP: 002b:00007fcad4ada038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 492.516063][ T31] RAX: ffffffffffffffda RBX: 00007fcad3de5fa0 RCX: 00007fcad3b8f749 [ 492.524258][ T31] RDX: 0000000000004000 RSI: 0000200000000140 RDI: 0000000000000003 [ 492.532686][ T31] RBP: 00007fcad3c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 492.540909][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.549058][ T31] R13: 00007fcad3de6038 R14: 00007fcad3de5fa0 R15: 00007ffcdf0e6d68 [ 492.557112][ T31] [ 492.560723][ T31] [ 492.560723][ T31] Showing all locks held in the system: [ 492.569417][ T31] 1 lock held by pool_workqueue_/3: [ 492.574690][ T31] 1 lock held by khungtaskd/31: [ 492.590802][ T31] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 492.601052][ T31] 3 locks held by kworker/u8:12/3579: [ 492.607177][ T31] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 492.619780][ T31] #1: ffffc9000c847b80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 492.630902][ T31] #2: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 492.640083][ T31] 2 locks held by getty/5589: [ 492.644805][ T31] #0: ffff88814e2f30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 492.655000][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 492.665480][ T31] 4 locks held by kworker/u8:16/6177: [ 492.670997][ T31] #0: ffff88801aa9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 492.682310][ T31] #1: ffffc900053bfb80 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 492.694387][ T31] #2: ffffffff8f304bf0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0 [ 492.704219][ T31] #3: ffff8880342ec700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 492.716786][ T31] 3 locks held by kworker/u8:17/6619: [ 492.722310][ T31] #0: ffff88802f72a148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 492.734176][ T31] #1: ffffc9000f1c7b80 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 492.750784][ T31] #2: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 492.760671][ T31] 2 locks held by syz.2.1528/10975: [ 492.765905][ T31] #0: ffffffff99c6ce18 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 492.776346][ T31] #1: ffff8880342ec700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 492.788064][ T31] 2 locks held by syz.3.2292/13487: [ 492.793400][ T31] #0: ffffffff8f304bf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 492.803322][ T31] #1: ffff8880342ec700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 492.816039][ T31] 2 locks held by syz.6.3239/16656: [ 492.829751][ T31] #0: ffffffff8f304bf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 492.839360][ T31] #1: ffff8880342ec700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 492.851250][ T31] 1 lock held by syz-executor/17354: [ 492.856592][ T31] #0: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 492.866461][ T31] 2 locks held by syz.4.3540/17629: [ 492.872856][ T31] #0: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 492.882197][ T31] #1: ffffffff8df47578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 492.893504][ T31] [ 492.896828][ T31] ============================================= [ 492.896828][ T31] [ 492.916866][ T31] NMI backtrace for cpu 0 [ 492.916888][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 492.916913][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 492.916931][ T31] Call Trace: [ 492.916937][ T31] [ 492.916944][ T31] dump_stack_lvl+0x189/0x250 [ 492.916967][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 492.916985][ T31] ? __pfx__printk+0x10/0x10 [ 492.917014][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 492.917037][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 492.917065][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 492.917091][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 492.917115][ T31] sys_info+0x135/0x170 [ 492.917131][ T31] watchdog+0xf95/0xfe0 [ 492.917157][ T31] ? watchdog+0x20a/0xfe0 [ 492.917182][ T31] kthread+0x711/0x8a0 [ 492.917204][ T31] ? __pfx_watchdog+0x10/0x10 [ 492.917224][ T31] ? __pfx_kthread+0x10/0x10 [ 492.917245][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 492.917286][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 492.917307][ T31] ? __pfx_kthread+0x10/0x10 [ 492.917342][ T31] ret_from_fork+0x599/0xb30 [ 492.917372][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 492.917395][ T31] ? __switch_to_asm+0x39/0x70 [ 492.917413][ T31] ? __switch_to_asm+0x33/0x70 [ 492.917431][ T31] ? __pfx_kthread+0x10/0x10 [ 492.917451][ T31] ret_from_fork_asm+0x1a/0x30 [ 492.917483][ T31] [ 492.917490][ T31] Sending NMI from CPU 0 to CPUs 1: [ 493.067272][ C1] NMI backtrace for cpu 1 [ 493.067291][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 493.067311][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 493.067322][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 493.067345][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 90 0c 00 f3 0f 1e fa fb f4 c8 ed 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 493.067360][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 493.067377][ C1] RAX: 6cf1c0e7c9404600 RBX: ffffffff81978fda RCX: 6cf1c0e7c9404600 [ 493.067391][ C1] RDX: 0000000000000001 RSI: ffffffff8d7926cf RDI: ffffffff8bc08360 [ 493.067404][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 493.067417][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f822170 [ 493.067430][ C1] R13: 1ffff110038d5b70 R14: 0000000000000001 R15: 0000000000000001 [ 493.067442][ C1] FS: 0000000000000000(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000 [ 493.067457][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 493.067468][ C1] CR2: 00007f4f173b42f8 CR3: 0000000075dea000 CR4: 00000000003526f0 [ 493.067486][ C1] Call Trace: [ 493.067493][ C1] [ 493.067499][ C1] default_idle+0x13/0x20 [ 493.067520][ C1] default_idle_call+0x73/0xb0 [ 493.067542][ C1] do_idle+0x1ea/0x520 [ 493.067564][ C1] ? irqentry_exit+0x5ba/0x660 [ 493.067584][ C1] ? __pfx_do_idle+0x10/0x10 [ 493.067612][ C1] cpu_startup_entry+0x44/0x60 [ 493.067631][ C1] start_secondary+0x101/0x110 [ 493.067663][ C1] common_startup_64+0x13e/0x147 [ 493.067695][ C1] [ 493.070021][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 493.070074][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 493.070131][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 493.070172][ T31] Call Trace: [ 493.070196][ T31] [ 493.070219][ T31] dump_stack_lvl+0x99/0x250 [ 493.070303][ T31] ? __asan_memcpy+0x40/0x70 [ 493.070358][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.070442][ T31] ? __pfx__printk+0x10/0x10 [ 493.070561][ T31] vpanic+0x237/0x6d0 [ 493.070634][ T31] ? __pfx_vpanic+0x10/0x10 [ 493.070700][ T31] ? preempt_schedule_common+0x83/0xd0 [ 493.070785][ T31] panic+0xb9/0xc0 [ 493.070851][ T31] ? __pfx_panic+0x10/0x10 [ 493.070925][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 493.070992][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 493.071132][ T31] watchdog+0xfdf/0xfe0 [ 493.071226][ T31] ? watchdog+0x20a/0xfe0 [ 493.071346][ T31] kthread+0x711/0x8a0 [ 493.071442][ T31] ? __pfx_watchdog+0x10/0x10 [ 493.071520][ T31] ? __pfx_kthread+0x10/0x10 [ 493.071610][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 493.071710][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 493.071761][ T31] ? __pfx_kthread+0x10/0x10 [ 493.071837][ T31] ret_from_fork+0x599/0xb30 [ 493.071938][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 493.072026][ T31] ? __switch_to_asm+0x39/0x70 [ 493.072100][ T31] ? __switch_to_asm+0x33/0x70 [ 493.072168][ T31] ? __pfx_kthread+0x10/0x10 [ 493.072238][ T31] ret_from_fork_asm+0x1a/0x30 [ 493.072361][ T31] [ 493.388960][ T31] Kernel Offset: disabled [ 493.393291][ T31] Rebooting in 86400 seconds..