last executing test programs: 3m35.461975705s ago: executing program 4 (id=4201): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x891b, &(0x7f0000000000)={'bond0\x00', @ifru_mtu=0x1}) ioctl$sock_netdev_private(r2, 0x89f3, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e24, 0x6, @empty, 0x80000000}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000140)=0x220, 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x10) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000003840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003800)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0x1c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x98, 0x5, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x619960bf}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4d71e326}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4bf6e29a}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1f43b46c}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x1f0, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3c}, @NFTA_SET_EXPRESSIONS={0x1bc, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x174, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x160, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_IMMEDIATE_DATA={0xe0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd9, 0x1, "bd4f87e0eeb63be868896fb8c6c2ca3d333481c72cdc678ecdf2d3325ee4563a8e5d42a5154ed654b91b3fd0afc61ca32d9694a7c1b69a1027761c64971016d5a796cb9605ede1c206557bcc6b033a3aa91ae94113aa85e8e42d9d4bdbb3968680857a9dd5ea5dec12548a78f9cfacf2a41f857521d23a364c7b4fbe4c83cf8ddfdb0b2062a292166865dd30bb796a216306e50fe593069b2a47c92285dc024d5a76523431166d004e13eec5ee3cd681831bc99b8a82f8e8aa646401b5e7ec2d9b3efee1ad1adeb8090ad3a7e901e822eae6dbeb2d"}]}, @NFTA_IMMEDIATE_DATA={0x6c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x67, 0x1, "7e2de4ae14353388606192290b6de1eedefd56b939ef65800b268ddab5ecef91ecd11284208efc3d7b6ac64c9b65ca1e7b0df6698c62aed0b7735bbbec552f8a250c7dead5cd987cdfd5be458f423a5a56e86945e9e9838279f766acbc6766ec99a83a"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELFLOWTABLE={0x144, 0x18, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x10c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'syz_tun\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'xfrm0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSETELEM={0x13fc, 0xc, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x284, 0x3, 0x0, 0x1, [{0x280, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xc0, 0x6, 0x1, 0x0, "5fa7d653b96e7f5f92366269b17e8825b6b5a90eb2ea99e700767afa96ad24fae48ff7af0f2ad9890ecfd6002628ba7fcc6813437c32719fa28628a1d597405062271d101e2e3aab5109e09e999ab8b572968145e5de6722b4724ca82b0b461c5f40b7f0b16756bc892ba9da5d2663c62ed3c3dfb6374d7ae387ca1529d2dbe5cb47244a982a191be3dc003a385248005520b8ff161c30151967bfaeb5ff6fbae5317d40de200e1788fa27093942b716613d38c9b17442ee0c570c5d"}, @NFTA_SET_ELEM_KEY_END={0x1b0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdd, 0x1, "0f5e7dc56285ea21005568ca397e5e0441d1e7895b32471a15f8e48b83c315a5a731a70864df6941651bff6e3a182c2ebb53842101499922edaf2f3ce233058e589efdde0f7eb4c8cae31132144e0d565fe0fc5a157e25f35683900d4645b1e78a1db0e58266409875a4a38d87473ec7678386947564ff612532a6a55499008f2251f1b62fe4c182f8bd0086394baba0891595e668b970cd3742d51aaf3a3c1b5e1d11b5bad94ba94545011fd826e7585982af63c84c1d9d1315c6ef72e381037d247bef4d4acd0413d41fb42d87ac374573cb5ce0dd48045f"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x8d, 0x1, "19aa191ee58c8ab6480248ffe5999eca797d086b7eaf7c7376ad39d1d68efe27c54bb5a5126c97a8a0689f58a787d9ff2b11b3c3c1fbb785bdbbf44f1c581247f1affbef68f9910c9830e679d9e78647b501f8dfd80059394533e3d9baec978e66a1e175bdf8b1db907b61184f8e2319e833d281acb201a4775a913dfbd655028909d0a63d7198602d"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1128, 0x3, 0x0, 0x1, [{0x2e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x100}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x4c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x258, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xda, 0x1, "d68eb3257432aab1fc842ee01168b2c85141db5c419030e0eaa05e10a6d554157ece16221fd6f770351ab6eaf4b7a9aa6bf1c5fe4c4f20e9446428ffbadeae08ae1e449774567469b4224c3556a8faa51c6d55f9c4b1fa75818409e730192cb0d120d7ad45aad652f61bab3248ff988257912f85f9024689e570fdb7f623371fe6f9b588cf870ccdd3f61ac1ea8cea5e81689abd5431028b362caf180989bb472375f5b327650754931551a545d3db36164517bbe961aca0cdcc0541ef3fa6137c2c3a941b5b3cdd95b440e6cc52198c9e239679ff16"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x5d, 0x1, "e08a4139d588438f06e7cc9e23b0b4f4b4ac247811eb45bd961120a52a2efdd3de3556fafd076e6decfa2b56248451faf8da748dff0203faeb8a27e62293e79c3398459c273f00b7e224911b6408f361c294e5b8b22e7e9733"}, @NFTA_DATA_VALUE={0x22, 0x1, "970e8e1923ce2b6b810fcaa91ed7446f8591bd5d93eb17dd397721ff2d45"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xa0, 0x1, "853481bdca785a9a726d705e7f8521895104376ae315ae5e0dcf3213306fa2be238a3fd38927b6d6f7794e1d93be91aba99c115cbf35214be086e5e13a1a2b2a12a68ea8caf9da535835d27b9f5f640c82e478710c58e6e63312be000157adcc16a8acfb5305dd136eba3f665cb59fb3140ba07047a825c945ecad72bb7cc386320ab5e588135cea682ea7730ad509ab6bcf6e6884faa7ad42d46c32"}, @NFTA_DATA_VALUE={0x12, 0x1, "739db7423bd18443cdf740056d9a"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}]}, {0x280, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x84, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x84, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x34, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x13}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xff9e}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_SET_ELEM_KEY={0x60, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_DATA={0x104, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x9a, 0x1, "c0f820d78f23cf3f5c5a3205842d6135d37b66be8535dde66c9d0f25e62589f8ef972e70659b5757b07a50ddcc636a37d25e2887541252ac57efb86579989c81998127589d44cd9890982350ae907bb302505ca00c1ca002f666a060393149403c3e43040b078e6ad2c1c2bf2fae170863b229da754168250d0a8410d5c6513bcc5247a67dcdb70d78421096a7e94f4973753d69ce39"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf}]}, {0xbc0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @quota={{0xa}, @void}}, @NFTA_SET_ELEM_EXPR={0x7d0, 0x7, 0x0, 0x1, @cmp={{0x8}, @val={0x7c4, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CMP_DATA={0x228, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf3, 0x1, "6b4477985d9bbaaf2662f2e072b572ebc014f3ff360f2b9fecaca477ede917796f0cd58bd7f4cdf3c5757d7e372a8c18715f1afef4f41a1f86762e8f946d3bd3a70e0a9ebb842b29180e118c0fc65ef929a46161fca343bc4ba57292d3cb9aa1c885dee0de49777c817c461ebcd641cf338f539b47f4a6f737703bf08513ea252514da7d57f5bbea7bfda2b41eb480dfcc86eb5f1b46a1558fdf9040b12a4c950f8baeea92142f3175d4aa0c4757a4aca9b692836527721d5ff493a63128108ab09b8648855c569b4fa8cbc416a7e4f06c3c4ef69b313a07e7a7c73fa5f4621e071d95189316ef6bf0c500d8554d4a"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xb, 0x1, "a8654f315926fe"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x6e, 0x1, "f1041f5b44430186eda22c2bb0e1f8b4906ba61deb49859ba9b8b144fc5627e9324d0e0b9b09e451ebfff103ac5690e1677115f9079068ee8b6d39f45c6edd42d1afd1f710b31a32cced409e71d07e396d01bf37c578220a85978b287fe469894e6b18b6f703fc787765"}]}, @NFTA_CMP_DATA={0x15c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x81, 0x1, "396e3c5a98d8adf11f79c2e5336106601d491cce1b229ee278847101e3da9461a59e071befa5c3275954d476c3af44e85ddf525f88e45918772d3d7954671289a19d8541b34e1fabb0786929c101338d5cbff3a74a7c4cabb0e8f6c2f5e4f0f4917dc8a165fc8a39b91a6f1e12e1243d699a6c761250cddb9f66e0caf9"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x72, 0x1, "5ba1127a5c6414ca17bb1147ba11589810a30f33d1b03f12a83affb041589b2b3185ffb0af41accb7f1d1dcfb43b290e8ea65786e842febee81f14872913ebfc2202bfa58da952bb4a241e5ea897e7ce48235981aa8dfaa0ab55806723ebb13b31f968ef62c7e3b2eaaff0da4e03"}, @NFTA_DATA_VALUE={0x20, 0x1, "9ad7689b88907f086d213939f885c21bd2b94c742977f7c20aa5cdab"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CMP_DATA={0x1f0, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc0, 0x1, "c43b4baece7d0a02676ae71e856fa468edcd53de47b2085240478cb40a83a32cefe08f85321305b56d8f6ace9993dd0d5f7e18491cedb1d1e22252f27e2ea7fd7db12e9e1e177d4137c94ed446598553f5d9db12f1d22dc73c8b9c1fb6984d347fe1bc7dfbc275ea6682ae676044a24e33de6ffe3818b698eac4ca64dc88c50e0137f00b8455a9c1ed536e844c0c2a3a8f1b555f971405b8c78765802564b59089d3f74e9ac7cc7000861a169753b2e32617a3a2594cb313a9cbe28c"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x99, 0x1, "46e29dc5d80eff74f57107ba004f5a6c993d4fdb6afa55fe2eff79d3e7ecdbc02dcee607848a6b46121463530fa723c5509d68a13cb504bc36c498aea23a94334c105fd47a8e46659f709ccd1939599e5a870093b10c1661d4b12b5cf7df49bbd5e70061897239662c3f8b2c6dba155dfacdba247b9de74c5a37db708d2d455376c9a5f08fbca80b60e2179dec7ec748dc6db19be8"}]}, @NFTA_CMP_DATA={0x234, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb8, 0x1, "0c3209591edfe262a7516df58439edcdf65cea41b19be32450a71134c986089af4b99a562e7538fd59b6848bc7c9bf64f561210ee359eb02e113b619182057249ac8d30264de5344ccb35f90bccc86cb73969cef89deb3e8110e0a737c8f505935751d89bc8382ebdcd90b21649c9db3fcb1cabb4b48b26862c2c5e602b257adace0c903e5ee9e81ee0f8efe05fbf1912ebc38b4a0186878a6912dac70fd58f5a872f05b206b5c023ae7f236ccbab7d56a155e34"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x87, 0x1, "35f2d679d9673b4d449c72187468c64478b7a6601b08e990e207e016096f7d4e5a6a643a1dcd79eeaf53acb06c4b37e525961ce608da6861c851ecd6a984efea31d8b7afd153c17401290d2b47133f5dada744b15e750cafd1679e7e273357310dd9ac7c874f9ac22dea23afaec7117983e9aafd6dd5128efa4f83f9c2ad7d12c97d50"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}}}, @NFTA_SET_ELEM_DATA={0x104, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x5e, 0x1, "96070f2a8a9277fc587e80006c2e3111a0a33096d7014e468d2e0fb7b4f03cad11f261a5ceed2cee3ffd2c587e05ccde7a3278708d24ac6b3287c413fd93a41f13233e23a0e1d235beb93a8e08d443e0728b5fce127c3b5fd3cd"}, @NFTA_DATA_VALUE={0x51, 0x1, "af83c3267ff582acccd04835fe55c605e1272ea77cb8203797d9588e5087c5a83e3bbc00315ba5bab8c9aacfbc897ef4343b0d81403108fb80ab1d0d85d95f803976d5ba87cc1c5bfe9ee5073d"}]}, @NFTA_SET_ELEM_DATA={0x2b0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x94, 0x1, "fa8d6d28bf379f17706b1db6a3a7b271cab59e50e93b1377a66651e7bd766189aea912e7939a8bb18d92b67549c703df0285611ec6857c4917babcc571788e44843d2d1070fce72046df465479028cf2475d87b3d37549af1cd47e94194cdcc77d7b14c01db8be195abec9a9d0fd6c219165b245a98b6a15154c40a6414005a1570541a4102466e7e763c25b776d3bb5"}, @NFTA_DATA_VALUE={0x66, 0x1, "cdc2ec8c12ed774c913f81f69f602425ba4cbadaed281fff53e4e3c2b8ffba661601a070f7c5508c21c9bf0b2df6dd4206257bedd6000e1b37486aef0a6668fc044cf8d8fde9ea550b5481ca422eb86787ecca46ca07d1c32bcaa8febee68ad6d718"}, @NFTA_DATA_VALUE={0xd5, 0x1, "d527bd32eae22096160da785b948e017206dea83e3035c39b9a21fcf8511e3b7ce4f6e2875cfd935fd5e28073b26ed7e0e1a6fef743470a9bda3512c456ef84a4d55164cd611ad666383580f3ffb9c20bdad0a5443107a6514bdd53ab5d97f51c1920733bf5118025d17e1028d910154695df36f2bd7458e7b18a5936baacb1484ba0b792ab441e43e52a0197048c7ec5235cb463cfb9c7cd7f90d496b3320e1f6a32c3fb15e66b6bc64c9fcb69d80ef48eabd01f70b8e56375af0eb71c4296d45e113f3796cf0f61427f40216c6b27c7b"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x20, 0x1, "177037fc9ecabd8bca0dbb584b02fc47f9772914dc840c23fe9776e0"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x60, 0x1, "e227ad87500e93bfb1b73a777c02481a7c8429f3f1598032c38b48a584a88d2b79047e32ea4b0862dd18060656bf71d13f08aa5c09b572cef4873f6d98f039be2d550d5ddee2c15631d773f956acf8839c1dd9539ee535acd43d00b3"}]}, @NFTA_SET_ELEM_KEY_END={0x28, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x54, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14}}, 0x18a8}, 0x1, 0x0, 0x0, 0x800}, 0x841) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000007c0)={r1, 0xffffffffffffffff, 0x3, 0x0, @val=@iter={&(0x7f0000000780)=@task={0xffffffffffffffff, 0xffffffffffffffff}, 0x10}}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r6}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r7, r5, 0x25, 0x0, @val=@tcx}, 0x1c) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r8, 0x4058587a, &(0x7f0000000540)={{r0, &(0x7f00000001c0)='}%,**/(]/$\'^&\x85[)\x00', 0x4100, &(0x7f0000000240)={@_ha_fsid={[0x8, 0x1]}, {0x7ff, 0x2, 0x8, 0xf}}, 0x1, &(0x7f00000002c0), &(0x7f0000000380)=0x4}, {[0x0, 0x1, 0x332d, 0x1000]}, 0x991, 0x4c, &(0x7f00000004c0)=""/76}) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x18}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x4000018) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004500003000000000000190780a010102ac1414aa04029078e0000002451000a4aa0000000000000600000000ac141415"], 0x0) 3m35.364498704s ago: executing program 4 (id=4202): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a"], 0x68}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 3m34.821530515s ago: executing program 4 (id=4204): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0xa, 0x300) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r1, &(0x7f0000004400), 0x400000000000203, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000000), &(0x7f00000000c0)=0x4) socket$kcm(0x10, 0x3, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000140)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @broadcast, @val={@val, {0x8100, 0x0, 0x1, 0x3}}, {@ipv6={0x86dd, @dccp_packet={0x3, 0x6, "cec919", 0x38, 0x21, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, {[@hopopts={0x2}, @dstopts={0xff}, @srh={0x3c, 0x2, 0x4, 0x1, 0x8c, 0x78, 0xfffa, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}], {{0x4e21, 0x4e24, 0x4, 0x1, 0xd, 0x0, 0x0, 0x8, 0x1, "6c83ef", 0x2, '3bE'}}}}}}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x106, 0xb}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000040420f00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe, 0x0, &(0x7f0000001780)="000000000000000002b2138373ef", 0x0, 0x10003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(r0, 0x0, 0x800) 3m33.673328645s ago: executing program 4 (id=4212): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="34d375f4641489e04fafbd000000", @ANYRES16=r2, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r1, @ANYBLOB="08009f000600000008002600b4090000050018011f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) 3m33.389192649s ago: executing program 4 (id=4213): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000004c0)={0x0, 0x6, 0x8, 0x858, 0x8, 0x4, 0x3, 0x1000, {0x0, @in6={{0xa, 0x4e23, 0x200, @mcast1, 0x77d}}, 0x1ff, 0xe, 0x7, 0x3ff, 0x10000}}, &(0x7f00000005c0)=0xb0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x83, &(0x7f0000000040)={r1, 0x0, 0x10, 0x7, 0xffffffffffffffff}, &(0x7f0000000080)=0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="277efb00aa3de6f80459af2900"], 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000580), 0x3) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000021000100010200000000000002002000000000000d7e7792d3f78acd3852ba151bf59353e22c9d131d51d247160bd2efe6d7d21237360e0200000200000000f7af0512d3c6219aaabd80871444856a2a32cd15a1f54b4ed96849ffbe"], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r8, @ANYBLOB='\bM`'], 0x24}}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 3m32.236341332s ago: executing program 4 (id=4223): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f00005d4000/0x4000)=nil, 0x4000, 0xf, 0x12, r1, 0xfffff000) r2 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x44060600) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800814}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@gettaction={0x3c, 0x32, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xbbd2}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) mmap(&(0x7f00005d4000/0x4000)=nil, 0x4000, 0xf, 0x12, r1, 0xfffff000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x44060600) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800814}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@gettaction={0x3c, 0x32, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xbbd2}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) 3m16.560829062s ago: executing program 32 (id=4223): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f00005d4000/0x4000)=nil, 0x4000, 0xf, 0x12, r1, 0xfffff000) r2 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x44060600) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800814}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@gettaction={0x3c, 0x32, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xbbd2}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) mmap(&(0x7f00005d4000/0x4000)=nil, 0x4000, 0xf, 0x12, r1, 0xfffff000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x44060600) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800814}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@gettaction={0x3c, 0x32, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xbbd2}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) 1m10.692173433s ago: executing program 5 (id=4938): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000c80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) listen(r3, 0x7d4165c9) listen(r2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r6) 1m10.273053394s ago: executing program 5 (id=4943): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x2}]}, {0x0, [0x0, 0x5f, 0x5f, 0x61]}}, 0x0, 0x2a, 0x0, 0x1, 0xe2}, 0x28) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="5753fcfffffffddbdf256b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900317400004e000000"], 0x28}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x12c, r3, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0xfc, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x10000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x53}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffffff}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffa}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3ff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xb}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x93}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5de}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xbc}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xe}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4}, 0x800) r5 = socket(0x11, 0x3, 0x10001) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0xae9, 0x8}, {0xfffffff6, 0x2}]}}) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa019600ba9380d440", 0x21) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061108e0000000000170100000000000095000000000000004daf78c4ef08dc0978bcf94787784b785a279a31cc9fba0fe98042125ff1466a15fcd5d6e3ab177cd4c803000000000000008a7e0243b2"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1m9.643018351s ago: executing program 5 (id=4947): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000180)={r1, &(0x7f0000000000)='\x00', 0x108000, &(0x7f0000000040)={@_ha_fsid={[0x2bb, 0x8]}, {0x8, 0x6, 0x5, 0xfffffffffffff414}}, 0x0, &(0x7f0000000080), &(0x7f0000000100)=0x762}) write$cgroup_type(r2, &(0x7f00000001c0), 0x9) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x5) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xbe, @mcast1, 0xbfd}}, {{0xa, 0x4e22, 0x7, @empty, 0x1}}}, 0x108) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r6, r6, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r6, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, &(0x7f0000003680)}, 0x40) r7 = accept4$unix(r3, 0x0, 0x0, 0x0) sendto$packet(r4, &(0x7f0000000300)="5f0efc3e1792a50972d2eb21bdff9ca4ac80442847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a37b15f4b2c6f5027dcea15b6658d16c033be337f80934f4ccfb7b6", 0x4a, 0x24048050, 0x0, 0x0) recvmsg(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/74, 0x4a}], 0x1}, 0x10012) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f00000000c0)=0x4c) 1m9.073343261s ago: executing program 5 (id=4953): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x1}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, @in={0x2, 0x4e21, @remote}], 0x2c) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x84}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000140)={'wlan1\x00', {0x2, 0x4e22, @multicast2}}) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x0, 0x0, 0x66, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x4, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, '\x00\x00\x00\x00\x00\x00\x00 \x00'}]}}]}, 0x170}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600884700000c0003000800110004"]}, 0x58}}, 0x0) 1m8.648321758s ago: executing program 5 (id=4956): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1411, 0x300, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x48081}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r2, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xa000000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0xd0}, 0x20004000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r3, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x18}}}}, [@NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0xe}, @device_b}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x10c, r3, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x4c}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "42086897f7f71cd69fd61003e1"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "b3500840ee29de6a23cbf22c4e"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x70, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "9fb157df35"}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "72218e9760ee96ce6a2a0e1b9c"}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "2024261e3390c29c5a9a40db68"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "0231828e7e"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40010}, 0xc0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0x1412, 0x401, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x6}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x400}, 0x24040040) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0x140f, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4854}, 0x20000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000007c0)={{0x0, 0x8, 0x1, 0x9, 0x4, 0x10, 0x7, 0x8, 0x0, 0xffffffff, 0x16a5, 0x5, 0xc, 0xa50b, 0xb02a}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000880)={{r4, 0x1, 0x4, 0x8, 0x0, 0x7a, 0xfff, 0x5, 0x6751, 0x80000000, 0x3ffd5685, 0x3, 0xffff, 0x80000000, 0x6}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socket$igmp6(0xa, 0x3, 0x2) r5 = socket$netlink(0x10, 0x3, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x810200}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0xf, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004808}, 0x11) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000a80)={0x3, 'macvlan0\x00', 0x2}, 0x18) openat$ppp(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r5) sendmsg$NL80211_CMD_START_P2P_DEVICE(r6, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, r7, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x4004800) socket$nl_route(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000c40)=0x10, 0x5) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000c80)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d40)={0x140, r9, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x12c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "895f69255a5556097c666f5b32fefcc84806c59ae3e685b6d7d5517070937326"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xbc}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "1231264f34f458b0ae2003276a9d7f0c8f182e341635ef13b57d9cb42735ddb1"}}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "1150905f7c6a22af752f5f13065637904bead2d0a3a4b93e52462dec"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8000}, @TIPC_NLA_NODE_ID={0x3f, 0x3, "0da3acab114bbb1bef0bc05e7788343887a33049f786300ce1937e6314b2f42c8c90d34cc4363d122b1bc3951e164cad466acfee8158a57abc1215"}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r10, 0x84, 0x7, &(0x7f0000000f00)={0x80000001}, 0x4) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f40), 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x3c, r3, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 1m6.574897846s ago: executing program 5 (id=4957): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) recvmmsg(r0, &(0x7f000000b400)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001bc0)=""/4101, 0xff9}], 0x1}, 0x5dd7}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000002c80)=""/174, 0xae}, {&(0x7f0000000680)=""/175, 0xaf}, {&(0x7f0000000040)=""/212, 0xd4}, {&(0x7f0000002fc0)=""/189, 0xbd}, {&(0x7f0000003080)=""/4083, 0xff3}, {&(0x7f00000005c0)=""/46, 0x2e}], 0x6}, 0x3}, {{0x0, 0x2, 0x0}, 0x5}], 0x3, 0x40, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0xffffffffffffff72, r2, 0x1, 0x70bd2d, 0x25dfdb7e}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20008004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x24040040) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9689f2cdbe63959901f5afb841befbb8787b77bc6855e836e2c277f600c31ff7ea5acf0a9525fa1", 0x44}], 0x1}}], 0x1, 0x20008000) write$nci(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="400109"], 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="05"], 0x10) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) 51.213139886s ago: executing program 33 (id=4957): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) recvmmsg(r0, &(0x7f000000b400)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001bc0)=""/4101, 0xff9}], 0x1}, 0x5dd7}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000002c80)=""/174, 0xae}, {&(0x7f0000000680)=""/175, 0xaf}, {&(0x7f0000000040)=""/212, 0xd4}, {&(0x7f0000002fc0)=""/189, 0xbd}, {&(0x7f0000003080)=""/4083, 0xff3}, {&(0x7f00000005c0)=""/46, 0x2e}], 0x6}, 0x3}, {{0x0, 0x2, 0x0}, 0x5}], 0x3, 0x40, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0xffffffffffffff72, r2, 0x1, 0x70bd2d, 0x25dfdb7e}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20008004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x24040040) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9689f2cdbe63959901f5afb841befbb8787b77bc6855e836e2c277f600c31ff7ea5acf0a9525fa1", 0x44}], 0x1}}], 0x1, 0x20008000) write$nci(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="400109"], 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="05"], 0x10) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) 8.996195976s ago: executing program 1 (id=5189): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, 0x2}]}}, 0x0, 0x2a, 0x0, 0x1, 0xfffff354}, 0x28) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@ifindex, 0x2, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0}, 0x40) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800610001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r2, &(0x7f0000000000), 0x0, 0x1}, 0x20) r3 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x88, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x88}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff02000014000000000000000000000114000400200100000000000000000000000000010600034000010000080007400000000004000d"], 0xa0}}, 0x0) bind$packet(r3, 0x0, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x1, &(0x7f00000001c0)=@raw=[@ldst={0x3, 0x3, 0x3, 0x7, 0x4, 0x2, 0x8}], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xa, 0xe88, 0x1000}, 0x10, 0x39c8, 0xffffffffffffffff, 0x1, &(0x7f0000000340)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x3, 0x2, 0x9, 0xb}], 0x10, 0x5}, 0x94) r8 = socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r9, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000010) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r10, 0x89e3, &(0x7f0000004580)={0xa, 0x7fff, 0x5, 0x4, 0x0, 0x40}) (async) ioctl$SIOCX25SFACILITIES(r10, 0x89e3, &(0x7f0000004580)={0xa, 0x7fff, 0x5, 0x4, 0x0, 0x40}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xb0, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x4d}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3580}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1e7d}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x43}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x283}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x48}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]]}, 0xb0}, 0x1, 0x0, 0x0, 0x4090}, 0x80c0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xb0, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x4d}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3580}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1e7d}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x43}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x283}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x48}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]]}, 0xb0}, 0x1, 0x0, 0x0, 0x4090}, 0x80c0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@ifindex=r4, 0xffffffffffffffff, 0xa, 0x18, 0x0, @void, @value=r7, @void, @void, r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000100180100002020782500000000cb0000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000100b703000000000040850000000c00000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0xfe7, &(0x7f0000000a80)=""/4071, 0x41000, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000100180100002020782500000000cb0000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000100b703000000000040850000000c00000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0xfe7, &(0x7f0000000a80)=""/4071, 0x41000, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0xb, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0xb, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x44}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}]}, 0x5c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newtaction={0x1ec, 0x30, 0x301, 0x0, 0xfffffffc, {}, [{0x1d8, 0x1, [@m_ct={0x1d4, 0x1, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x1d}}]}, {0x1a4, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x80d0}, 0x1800) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r12, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x3, @loopback}, @in6={0xa, 0x4e22, 0xfffffff8, @dev={0xfe, 0x80, '\x00', 0x17}, 0x2}, @in6={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x7}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e23, 0x7db, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x8, @mcast1, 0x6}, @in={0x2, 0x4e24, @remote}], 0xb0) 8.395056812s ago: executing program 1 (id=5194): r0 = socket(0x10, 0x80002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@enum={0x3, 0x3, 0x0, 0xf, 0x4000000, [{0x7}, {0x1, 0x7}, {0xc, 0x7}]}]}, {0x0, [0x5f, 0x30, 0x2e]}}, 0x0, 0x41, 0x0, 0x0, 0x100000}, 0x28) socket$netlink(0x10, 0x3, 0x2) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8210020}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x30, 0x140a, 0x400, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2f, 0x9, 0x70bd24, 0x25dfdbfb, {0x4}, [@typed={0x7, 0xb, 0x0, 0x0, @str='\x05\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1a0008", 0x18, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, @loopback, {[], @mld={0x83, 0x0, 0x0, 0xb, 0xc033, @remote}}}}}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xd823b903dec6a9dd}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xdf}, @IPSET_ATTR_HASHSIZE={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8010) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) socket(0xa, 0x3, 0x3a) socket(0x10, 0x803, 0x4) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MFC_PROXY(r5, 0x29, 0xd3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYRES32=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="2690bae85300"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x400448dd, &(0x7f0000000700)) sendmsg$IPSET_CMD_PROTOCOL(r7, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0x1, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x4080) 7.011815906s ago: executing program 1 (id=5200): r0 = socket$inet6(0xa, 0x80002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r1, 0x0, 0xffe5, 0xe000, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvfrom(r1, 0x0, 0x0, 0x12041, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000100)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000030000000b000000000000090000000004002509000000000000000002000000002e00"], &(0x7f0000000200)=""/198, 0x37, 0xc6, 0x1, 0x59}, 0x28) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fed3df2502000000", @ANYRES32=r4, @ANYBLOB="1000a204080001000000000008000f0004"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x800000e}, 0x1c) 6.696235193s ago: executing program 1 (id=5203): r0 = socket(0x2, 0x80805, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9d76eebf2f17c"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f0000000080), 0x4) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xe}, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x1, 0x0) write$rfkill(r6, &(0x7f0000000040)={0x2, 0x5, 0x3, 0x1, 0x1}, 0x8) vmsplice(r6, &(0x7f0000000c40)=[{&(0x7f0000000400)="6f1e276ca370a2520de548d3e44ee1e85e15325cb34ade2d862ff0a312ca05c7fd37a1847ec78670d0de8dfb6908bdf0c8f569806db2ba255b09280e2f7cf506704a2fd48e9586aea6b4d6066d37135ceacc2d5f5e3147066eb124ddf07e88d563d5fe4e37545ad489116418c30c3856a3d4ffa06d51d46b2ede05547f5c6e97fd033800f8c362abf4dae255c66df7fa852ed4334c8a43432760b75e9ffb2d1fb218bdea7253bf61f6a2bdb345b038b8191bfd07a3a7d67093742e97a44b63f4b82e2e17d255f215d8b100", 0xcb}, {0x0}, {&(0x7f0000001100)="a6", 0x1}], 0x3, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) write(r4, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003d80)={0x30, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) shutdown(r2, 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000100039042cfd7000eaffffff1c0003e4", @ANYRES32=0x0, @ANYBLOB="03000000c31006001800128008000100736974000c00028008000300ac141400"], 0x38}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x7a, &(0x7f0000000340)={r11, @in6={{0xa, 0x4e21, 0xfffffffb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x40}], 0x1, 0x0) 5.758215671s ago: executing program 0 (id=5206): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="b8000000190001000000000010000000e0000002000000000000000000000000fc01000000000000000000000000000000000000000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) (async, rerun: 32) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async, rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000003, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) (async, rerun: 64) write$tun(r2, &(0x7f0000005880)=ANY=[@ANYBLOB="00c0b6040b6e2334a66600008606"], 0x40) (rerun: 64) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$BTRFS_IOC_DEV_REPLACE(r6, 0xca289435, &(0x7f0000001340)={0x2, 0x0, @status={[0x7, 0x8000, 0x0, 0xfffffffffffff000, 0x9, 0x9]}, [0x100000000, 0x1, 0x8, 0x8, 0x6108df0f, 0x80000001, 0x80000000, 0x0, 0xfff, 0x9, 0x5, 0xb4, 0x8, 0xbdce, 0x2, 0x0, 0x9, 0x2, 0x4, 0x8, 0x7, 0x8, 0x4, 0x3, 0x0, 0x5, 0x8, 0x100, 0x602, 0xd, 0x9000, 0x101, 0x6, 0x40, 0x2, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x3, 0xe86f, 0x10000, 0x0, 0x3, 0x4, 0xffffffffffffffff, 0x9, 0xeb0, 0x3, 0x80, 0x9, 0x91e8, 0x7, 0x45ee, 0x8, 0x8000000000000000, 0x5, 0x1ff, 0xffffffffffffffff, 0x10001, 0xf09, 0x1, 0x2]}) (async) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), 0xffffffffffffffff) (async, rerun: 32) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async, rerun: 32) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000080), &(0x7f00000000c0)=0x8) (async, rerun: 32) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan4\x00', 0x0}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r10, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7000fddbdf250100efff0c0006000000000000000000080001000000000008000300", @ANYRES32=r11, @ANYBLOB="0c000600020000000000000008000100030000000800010003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r12) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000380)=""/218, 0xda}, {&(0x7f0000000500)=""/92, 0x5c}], 0x2, 0x8, 0xd) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="290edfbd7000fbdbdf0527960000050031000e0000001400310053dde85290ceb080fb816d3cdadf198b08000200", @ANYRESDEC, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 5.633504943s ago: executing program 1 (id=5208): unshare(0x6a020400) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x16, 0x8, 0x1, 0x0, 0x8, 0x3, 0x4, 0x6, 0x0, 0x7, 0x80000003, 0x7fffffff, 0xfffb, 0xa, 0x5, 0x6, [0xe, 0xfd]}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000001000001b701000000000000850000087b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="000000001f7e4f038212550b9dc9", 0x0, 0xffffff1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=@getqdisc={0x4c, 0x26, 0x10, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xf, 0x1}, {0xfff2, 0xfff2}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x4c}}, 0x24000041) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f00000000c0), &(0x7f0000000140)=r1}, 0x20) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r5, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7f}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8507f38e4256cc93}, 0x40c80d0) 4.422755986s ago: executing program 3 (id=5211): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d1000000fbdbdf3a3300000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4008800) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0xffffffff, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xff59, 0x0, 0x0, &(0x7f0000000380)}, 0x80) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e26, 0x8, @mcast1, 0x5}, 0x1c) 3.950785872s ago: executing program 2 (id=5212): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'vlan1\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = gettid() socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @local}, 0x14) syz_open_procfs$namespace(r2, &(0x7f00000003c0)='ns/net\x00') sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newvlan={0x40, 0x70, 0x100, 0x70bd26, 0x25dfdbfd, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x4, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004854}, 0x8000002) 3.90618572s ago: executing program 0 (id=5213): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x16, &(0x7f0000000200)=ANY=[@ANYRES16], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c}, 0x94) 3.849470741s ago: executing program 3 (id=5214): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x10) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x1}, 0x10) (async) bind$tipc(r1, 0x0, 0x0) (async) close(r1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@bridge_getneigh={0x40, 0x1e, 0x8, 0x70fd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0xf1e5}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8001, 0x6}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r4, 0x0, r0, 0x0, 0xfffffffffffffffb, 0x1) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000002c0)={r6, 0xff, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000140)={0x8, 0x1000, 0x202, 0x4, 0x0, 0x8, 0x8d, 0x4, r6}, &(0x7f0000000180)=0x20) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0xffffffff}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800feffff02000000ff0000ff0000851000000600000018000000041c4604ddf652a84f965b75f1064555f2d41fcf60e4e22348c59616a5", @ANYRES32, @ANYRESOCT=r6], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8}, 0x94) 3.656222407s ago: executing program 0 (id=5215): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) preadv(r5, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/132, 0x84}, {&(0x7f00000005c0)=""/18, 0x12}, {&(0x7f0000000600)=""/47, 0x2f}, {&(0x7f0000000640)=""/87, 0x57}], 0x4, 0x1000, 0x8001) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008001}, 0x8000) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x4c}}, 0x884) 3.540921724s ago: executing program 2 (id=5216): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000001300)={&(0x7f0000ffa000/0x3000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/203, 0x87, 0x0, &(0x7f0000001200), 0xfffffff3}, &(0x7f0000001340)=0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000140)='syzkaller\x00', 0xa, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4d9, 0x0, 0x0, 0x10, 0x1}, 0x94) 3.165710879s ago: executing program 3 (id=5219): syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x18ffc0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1000}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wg0\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x80800) r5 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="3a48963a7ee161e7b60900c46cf0fced1c7e38e198ec66156da481b200ab8eb3c57d94aeaa00decea8e8b83a386607475b862d4fb4119de43eb9b1fa9a246dd0f8ceba441af97498a8dc0472d708ac8f8719614f0d37622189dd7e56f4971eb8239380f4130d035debd1150a959a876ef0eb0b6ea6958640968167b7dfbd18086b3a399d2977f455c2b148034233e97bca7ef1616bbda527af7b7d002763ab0c2307046aca088bef736e0d8685362fdd768e6b31bba88a955f", 0xb9}], 0x1, 0x0, 0x0, 0x20004010}], 0x1, 0x0) recvmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000600)=""/87, 0x57}, {&(0x7f0000000540)=""/95, 0x5f}, {&(0x7f0000000680)=""/209, 0xd1}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x4}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r9, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"/269], 0x20}, 0x1, 0x0, 0x0, 0x40c00}, 0x800) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="480000001400090528bd7080faffffff02186d00", @ANYRES32, @ANYBLOB="0800a9adf467da965f0100a21414280800040064010100120002007f00000104000000ffffff000000000001b6b861275b43b86e8a46b9a472d2f384ca4551e9573ab4938bdb2d67e7799f9e63df81d36a73175da04747cc1aa8f9688b12c0d7740000000000008eabfc5f96bba0759ac177c7fe6f555d8287186160f7aabd358c092c5a5c1aad1a23a8e4748865e1f038000000000000506000df39ec13faffffff0000000000000a25e7ee4383321345858b2dde56514071fafbdc5f0e73e54947e647890791a9780e0acee2a3cc96703ff9b0a3608c3248c65234d7f1b28b0cf82d298b6e820b84919449584787cf2cee698df0c8"], 0x48}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x40000) 3.035597315s ago: executing program 2 (id=5220): r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, &(0x7f0000000100)="ca2970fd61344fde", 0x8, 0x40, &(0x7f0000000040)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x24) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0x6, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff908500000071"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r5, @ANYBLOB="30012bbd7000fedbdf250200000008006a00080000004400258006000200030000000600030001010000060002000a000000050005000400000005000100000000a767d5650000000000060003008ddc0000050001000600000008000a0100000000080062000700001808000a010d000000080062000004000008002600b81500001400020065727370616e30000000000000000000"], 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x20000005) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x40, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x10, 0x80, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x10, 0x0, 0x0, @empty, @empty}}}}) 2.429591045s ago: executing program 0 (id=5221): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x46}, {0x0, 0xa00}], 0x2, 0xa, 0x6c8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x3951d, 0x4b7bc}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004854}, 0x8000002) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) r5 = socket$kcm(0x29, 0x5, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x6c296000) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r6, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/157, 0x9d}, {&(0x7f0000003800)=""/4136, 0x1028}, {&(0x7f0000000500)=""/219, 0xdb}, {&(0x7f0000000940)=""/121, 0x79}, {&(0x7f0000000a40)=""/4107, 0x100b}, {&(0x7f00000002c0)=""/76, 0x4c}], 0x6}, 0xe}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0}, 0x9}], 0x4, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x40) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x6c, 0x1, [0x1, 0x4, 0x8d, 0x405]}}) 2.376635292s ago: executing program 3 (id=5222): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0xa6, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x23, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x3c, r4, 0x7, 0x1000002, 0x1, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x3c}}, 0x40800) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) accept$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0xffffffffffffff46) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="400401000000000008000a00", @ANYRES32=r6, @ANYBLOB="829af37545d02716ae762d0ecb0da48511ce7c55bf0d98f49f0cf911e2e92d3d3ad06d69ae0073b09f84a7a327e02032c44d5a1a0240dad33a78d345200ccb8b4b44385bf75dc313c608ffc75f49fd24f920d502d12d68473e9e730f22b50864a2193a08c29728c26c8d1294ebb52cb35b6cc954032d71779fc751378516c7"], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) (async) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) (async) connect$inet6(r8, &(0x7f0000000440)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x5}, 0x1c) (async) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c0002001e0000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x60}}, 0x8000) 2.260600786s ago: executing program 6 (id=5223): ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)=0x2) r0 = socket(0x11, 0x808, 0x1c4c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0x5f5e0fa, 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x17, 0x0, 0x7}, 0xc) 2.197590973s ago: executing program 2 (id=5224): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x1}, 0x40000102) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001740)}, 0x20008011) 1.839788581s ago: executing program 6 (id=5225): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 1.502109255s ago: executing program 3 (id=5226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}}, 0x4008014) (async) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff3102}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x87f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcfd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa63}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40001}, 0x20008804) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x4c, r7, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xfd, 0x59}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x401}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20080008) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x2e74, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x2e44, 0x2, [@TCA_FLOW_ACT={0x2de8, 0x9, 0x0, 0x1, [@m_mirred={0x124, 0x11, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x0, 0x2, 0x80000001, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x1, 0x6, 0xff, 0x1ff}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0xb, 0x10000000, 0x2dc000, 0xfff}, 0x2, r5}}]}, {0x97, 0x6, "c355a9f5ee8404a5e9f3818361e988723476bddf686024bf33f936cc12f86a2d376f624f95563c33c76b25e7cdc3a291d976e7456a7525be821a36d0b222ade900f8a95147d32b3007498847390cf72a9daf56c2b8859da527af7875ebfc0b74e6ebf8947692622f9891317d8d7a8bd0ada847cb23eceb51a30318c6cbe1201a5e339a2643055a9ced990979890d34ee782600"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ctinfo={0xc4, 0x2, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xff7}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8f83, 0x2, 0xffffffffffffffff, 0x3d7, 0x178}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7ff}]}, {0x6e, 0x6, "e83e29729ff06f5015d177a0333b2d3fff92ba09a1521e1410192bb99cb981d6679b4b31dff695739e158b73b4d867ac51aeaf6e423ee5814bbc1caa4cb338a5ad5ce0b342b50ab03f1ba0693039ead338fbf956c376e66d99e880d27579b81c6361618ad9a6b3fdedce"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x2a34, 0x1a, 0x0, 0x0, {{0xb}, {0x2978, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x7}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff5, 0x9, 0x5, 0x0, 0x6, 0x10000, 0x0, 0xb96, 0x8, 0xc, 0xe, 0x5, 0x2, 0x5, 0x7ff, 0x5, 0x0, 0x4, 0x7, 0x5, 0x200, 0x90c, 0x3, 0x5, 0x4, 0x9, 0x2a3, 0x6, 0xfffffff7, 0xfffffc01, 0x8, 0x1000, 0x5, 0x401, 0x1c, 0xfff, 0xfffeffff, 0x1, 0xd4c9, 0x7f, 0x8, 0x5, 0xad2, 0x0, 0x292985f1, 0x7d, 0x8, 0x8, 0x9, 0x1, 0x9, 0x900000, 0xc745, 0x5, 0x5, 0x80, 0xe, 0x1, 0x8, 0x40, 0x7, 0x0, 0x4, 0xb, 0x6, 0xf6, 0x2, 0x1, 0x8000, 0x7f2a, 0x8, 0x58b, 0x5, 0x0, 0x4, 0x0, 0xfffffffb, 0xffffffff, 0x8001, 0x8, 0x101, 0x1c000, 0x7ff, 0x7fff, 0x3, 0x3, 0x7, 0x2d54bb03, 0x7f677b1f, 0x55cb, 0x12cad155, 0x5, 0xfffffbff, 0xfff, 0x9, 0x7, 0x40a, 0x6, 0x81, 0x4, 0xc, 0xe, 0xffff0000, 0x2, 0x0, 0x1, 0x6a4a, 0x5, 0x5, 0xecb, 0x9, 0x0, 0x1, 0x5, 0x7ff, 0x7fffffff, 0x1, 0xb09, 0x67, 0xfffffff7, 0x9a, 0x3, 0x0, 0x3, 0xb11a, 0xc, 0x9, 0x400, 0x5, 0x9, 0xfff, 0x3, 0x5, 0x4, 0xffff, 0xe, 0x400, 0x7332, 0x8, 0x0, 0x1, 0x6, 0x7, 0xec, 0x4, 0x9, 0x6, 0x8, 0x6, 0x2, 0x3, 0x401, 0xe8c, 0xcb, 0x1ff, 0x400, 0x7, 0x5, 0x3, 0xff, 0x7f5, 0x8754, 0x5, 0xa, 0xc, 0x2, 0x1, 0x7, 0x44, 0x7, 0x9, 0xcee, 0xa0000000, 0x7, 0x5, 0x1, 0x5, 0xa1, 0x7ff, 0x5, 0xcc0e, 0x9a, 0xc, 0x6, 0x451, 0x7c44, 0x6, 0x80, 0xf2, 0xfffff156, 0x9, 0x3, 0xd, 0x8, 0xf, 0x8001, 0x7, 0x3, 0x1, 0x0, 0xf2, 0xef, 0x8000, 0x9, 0xffffffff, 0x1b4c, 0x9, 0xc, 0x4, 0xffff, 0x9, 0x9, 0x81, 0x4, 0x3, 0x0, 0x8, 0xffc00000, 0x0, 0x9, 0x5, 0xfffffff7, 0x1, 0x5, 0xb224, 0xfffffffa, 0xba, 0x0, 0x2e91, 0x7ff, 0x2f, 0x9, 0x6, 0xb2, 0x10, 0x8, 0xeb, 0xffffffa0, 0xfffffffa, 0x7, 0x10, 0x3, 0x6, 0x6a, 0x6, 0xfffffff8, 0x9, 0x0, 0x8, 0x9, 0x7, 0x10, 0x9, 0x80000001, 0x200, 0x4]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x80, 0x6b3, 0x7, 0x4c20000, 0x800, 0x3, 0x401, 0x4, 0xd, 0x5, 0x1, 0x6, 0x3, 0x9, 0x6, 0xa, 0xc1d, 0x3, 0x800, 0x6, 0x7ba80520, 0xffff, 0x3, 0xe0000, 0x7, 0x848, 0x5b, 0x3, 0xff, 0x2, 0x1, 0x7, 0x1, 0x3, 0x2, 0x400, 0x80000, 0x4, 0x0, 0x8, 0x5, 0x101, 0x8, 0x1, 0x4, 0x3, 0xcce7, 0xffffffff, 0x1ff, 0x7, 0x0, 0xd, 0x4, 0x4, 0x0, 0xc, 0x6, 0x401, 0x0, 0x1000, 0x4, 0x8, 0x6, 0x8001, 0x3, 0x8, 0x3ff, 0x0, 0x9, 0x2, 0x16e7, 0x0, 0xffffffff, 0x5, 0x3, 0xfffffffd, 0x0, 0x1017, 0x9, 0x9, 0xfffffffe, 0x79, 0xd7, 0x1, 0x0, 0x10, 0xfffffff7, 0x81, 0x9, 0xfffffffa, 0x200, 0x3, 0x7, 0x130, 0xfffffffd, 0x0, 0x0, 0x260, 0xfffffff3, 0xfffffffc, 0x5, 0xc, 0x79f0, 0xf8, 0x8, 0x39, 0x8, 0x9, 0x6, 0xd6f, 0xfff, 0x6, 0x7, 0x800, 0x5, 0x2a, 0x8, 0x7f, 0x92, 0x2, 0x7, 0xffffffff, 0x6, 0x5, 0x188, 0x0, 0x2, 0x2, 0xc8d, 0x3, 0x81, 0xffffffff, 0x2, 0x4, 0x8, 0x101, 0xffffff80, 0x80000000, 0x8, 0xff, 0x4, 0x0, 0xfffffffb, 0xcea, 0xfffffffa, 0xffffff12, 0x0, 0x4, 0x5, 0x4, 0x1, 0x3, 0x1000, 0x1, 0x6, 0x2, 0xfffffffd, 0x2, 0x7ff, 0x2, 0x5, 0x0, 0xffff8000, 0x8, 0x6, 0x4, 0x8, 0x8, 0x4, 0x9, 0x3, 0x5, 0x5, 0x3ff, 0x1ff, 0x9, 0x6, 0x6, 0x8001, 0xfffffbff, 0x8000, 0x40, 0xfffff001, 0x1, 0x0, 0x3, 0x6, 0x7, 0x8, 0x7, 0x4000000, 0x7, 0x7, 0xd3f, 0x2, 0x5, 0x7, 0x9d8, 0x9, 0x9, 0xdc, 0x7, 0x7, 0x2, 0x2, 0x800, 0x9, 0x8, 0x7, 0xffffffc1, 0x80000000, 0x7, 0x0, 0x0, 0x1, 0x8, 0x9, 0x254, 0x1, 0x3ff, 0x1e0, 0xff, 0x0, 0x5, 0x8, 0x3fc, 0x7, 0x3, 0x1, 0x5, 0x1, 0x9fb, 0x6, 0x3, 0x8, 0xac, 0xa04, 0x3b, 0x2, 0x2, 0x7ff, 0xdf9000, 0x7, 0x5, 0x14, 0xa, 0x2, 0x8, 0x8, 0x10001, 0x9, 0x5, 0x6, 0x9, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xce, 0x1, 0x9, 0x4, 0x9, 0x9, 0x1000, 0x4, 0x6, 0xc61, 0x1, 0x0, 0x4, 0x8, 0x0, 0xb0a, 0x8, 0x1, 0x9ced, 0xb4be, 0xffffffff, 0x8, 0x1e, 0x6, 0x5, 0x80000001, 0x3, 0x0, 0x5, 0xa, 0xff, 0x1, 0x3, 0x6, 0x7, 0x2, 0x8, 0xc, 0x4, 0x4, 0x3ff, 0x9, 0x8000, 0x6, 0x0, 0x0, 0x4, 0x2d84, 0x8, 0xf8000000, 0x3, 0xfffffff9, 0x2, 0x1, 0x4, 0x9, 0x401, 0x7, 0xd6d5, 0xac93, 0x7, 0x3, 0x488, 0xffffffff, 0xbbd, 0x3, 0x4, 0x9f2a, 0x0, 0x6, 0x3ff, 0x2, 0x3, 0x1, 0x550d, 0x6, 0x6, 0x2, 0x0, 0x3, 0x8, 0x2, 0x1, 0x6, 0x80, 0x7ff, 0x0, 0x0, 0x1, 0x200, 0x6, 0xfffffffe, 0x1, 0x5, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7, 0x4, 0x47, 0x3ff, 0x9, 0x400, 0xf45, 0x2, 0x1, 0x100, 0xfff, 0x0, 0x857, 0xa, 0x9, 0x7f, 0x0, 0x0, 0x7, 0xcc, 0x58f01747, 0x0, 0x38000, 0x7ff, 0x7, 0x5, 0x4, 0x2, 0x1, 0x3, 0x3, 0x7, 0x8, 0xe531, 0xaf, 0x13, 0x7f, 0x6, 0x6, 0x4, 0x7, 0x34, 0xfffffffb, 0x5, 0x5d7, 0x3, 0x1ff, 0x2bfcd30b, 0x3, 0xe, 0x4, 0x8, 0xf5fa921, 0x5, 0x4, 0xfffffff7, 0xfffffffb, 0x2fc7, 0x14000000, 0x2, 0x8, 0x5, 0x8, 0x7, 0xfffff000, 0x73000000, 0x3, 0x7, 0x4, 0x40, 0x80000001, 0x8000, 0x3, 0x9, 0x5, 0x1, 0x5, 0x0, 0xb4ce, 0x200, 0x0, 0x5, 0x3ff, 0x5a, 0x8, 0xfffffff5, 0x7, 0x401, 0xffff, 0x8000, 0x2, 0xcf828b00, 0x80000001, 0x7, 0x5, 0x260b0a4e, 0x29d4, 0x7, 0x6, 0x3, 0xfffffff9, 0x1, 0x5, 0x5, 0x400, 0x4, 0xec, 0x1, 0x988, 0x4, 0x7, 0x3, 0x2, 0xfffffc01, 0x1, 0x8, 0x0, 0x4, 0x101, 0x7ff, 0x7, 0x1, 0x7fff, 0x8, 0x0, 0x5, 0x40, 0x5, 0x7, 0xe, 0x0, 0x1, 0x7fff, 0x8, 0x9, 0xe, 0x5, 0x6, 0x8, 0x3, 0xf2d, 0x0, 0xc, 0x9, 0x0, 0x5e7, 0x61, 0x4, 0x2, 0x0, 0x8001, 0x5, 0x9, 0x4, 0x6b, 0x10000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x3, 0xe1b9, 0x4, 0x4, 0x7, 0x2, 0x9, 0x8, 0x4, 0x8, 0xe, 0x82b, 0x7, 0x8, 0x882, 0x40, 0x0, 0x588a, 0x8, 0xfffffffb, 0x1, 0x6, 0x2, 0x9, 0x7fffffff, 0xc, 0x9, 0x3, 0xa77a, 0x5, 0x7ff, 0x8001, 0x4, 0x5, 0x5, 0x82c, 0xf9, 0x4d, 0x13, 0x9, 0x1, 0x80000001, 0xa6e, 0x6, 0x3, 0x200, 0x9, 0x7, 0x8000, 0xc0000, 0x7fffffff, 0x10, 0x4, 0x0, 0x5d, 0x8, 0x9, 0x5, 0x8, 0xed0, 0xa5d, 0x3, 0x8, 0x10001, 0x6, 0x140, 0x0, 0x5, 0x9, 0x7f, 0x0, 0xfffffff9, 0x63a, 0x5, 0x6, 0x8, 0x2, 0x0, 0x6, 0x3, 0x7, 0x4, 0x100d, 0xfffffff9, 0x1, 0x1, 0x8, 0x5, 0x80000000, 0xbe03e5d, 0xaf13, 0x8, 0xffff, 0x0, 0x1, 0x8, 0x9, 0x3, 0xfdd, 0x2, 0xffffffff, 0x7, 0x7, 0x5, 0x800, 0x8, 0x1, 0x1, 0x8, 0x4, 0x5, 0x1, 0x5, 0x1, 0x9, 0x1ff, 0x0, 0x2, 0xa, 0xe, 0x3, 0x7, 0x5, 0xffffffea, 0x9, 0x8, 0x4, 0xff, 0x10, 0x7, 0x4, 0x3, 0xd6, 0x0, 0x2, 0x2, 0x9, 0x7, 0x1000, 0x101, 0x0, 0x55, 0x4, 0x7fffffff, 0x1000, 0x9, 0x796, 0xd, 0x5, 0x6, 0x4, 0xfffffffd, 0x395d, 0x35, 0x2, 0x6, 0xb, 0xffffffff, 0x5, 0x0, 0x3, 0x5, 0x5, 0x2, 0x2, 0x5, 0x7, 0x3, 0x5, 0x6, 0x9, 0x2, 0x80000001, 0x2, 0x4, 0x3, 0x9, 0x1, 0x8, 0x5, 0x80000001, 0x400, 0x80000001, 0x0, 0x401, 0x3, 0x7fffffff, 0x2, 0x0, 0x7118, 0xffff57a1, 0x4, 0x5, 0xffff3411, 0xa5, 0x55e, 0x1000, 0x4, 0x3, 0x5, 0x7, 0xfffffff9, 0x0, 0x38, 0x692, 0x9, 0x4, 0x92, 0x8, 0x6, 0x9, 0x4, 0x10000, 0x3, 0x7, 0x2, 0x7, 0x3728db6b, 0x1, 0x6, 0x3, 0x2, 0x3589, 0x37a1fa59, 0x6, 0xdb8b, 0xe8d, 0xc, 0x0, 0x3, 0x81, 0x400, 0x0, 0xf, 0x6, 0x0, 0x80000001, 0xf, 0x200, 0x1, 0x4, 0x10, 0x7f, 0x7ff, 0x8, 0x3, 0x2, 0x7, 0x6, 0x1, 0xfff, 0x2e, 0x7, 0xc, 0x7fff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0x400, 0x90d, 0x5, 0x0, 0x5, 0x0, 0x2, 0x8, 0x3, 0xe9c0, 0xb, 0x5, 0x7, 0x1000, 0xfffffffb, 0x400, 0x100, 0x2, 0xd, 0x20000000, 0xffffff70, 0xa11, 0x1, 0x80, 0x9, 0x8, 0x8001, 0x7, 0x6, 0xfffeffff, 0xe, 0x6, 0x5, 0x2, 0x5, 0x4, 0x400, 0x7, 0x75fd1bc7, 0x1000, 0x7, 0x8, 0xb230, 0x100, 0x2, 0x5, 0x100, 0xe2da, 0x5, 0xfffffff4, 0x1c5, 0x5, 0x80000000, 0xfffffffd, 0x2, 0x5, 0x4, 0x8, 0x6, 0xca, 0x7, 0x1c, 0x1000, 0x7, 0x2d2, 0x2, 0x800, 0x3ec, 0xfffffffd, 0x9, 0x4, 0x3, 0x3f, 0x2, 0xe, 0x0, 0x0, 0xfffffffc, 0x696, 0x3, 0xffffffcf, 0x0, 0xf, 0x6, 0x400, 0xffffffff, 0xd8ba, 0x6, 0x3, 0x3, 0x6, 0x1, 0x40, 0xba7, 0x1ff, 0x5, 0x7f, 0x4, 0x800, 0x5, 0x5, 0x1, 0x6, 0x6397, 0x37b3, 0xfffffff5, 0x7, 0xfffffdfa, 0x3eb, 0x200, 0x6, 0x7, 0x7, 0x1, 0x7, 0xe82, 0x6, 0x6, 0x8686313c, 0x6, 0x0, 0xb414, 0x8, 0x3, 0x1, 0x7, 0x8001, 0x2, 0x7ff, 0x4, 0x80, 0x6, 0x2, 0x2368, 0xfff, 0x1, 0x0, 0x0, 0x7fff, 0x5, 0xffff, 0x5, 0xd, 0x1, 0x0, 0x6, 0xab4, 0x6, 0x4, 0x2, 0x18e4, 0xffffffff, 0x2, 0x8, 0xfffff1a6, 0x401, 0x1, 0x5, 0x5, 0x8, 0xbc4, 0x3, 0x10, 0x2, 0x1e98, 0x2, 0x25dd, 0x8, 0x1, 0x7ff, 0x42d, 0x4, 0x0, 0x3, 0x916d, 0x2, 0x5, 0x2, 0xe, 0xffff6b17, 0x0, 0xd, 0xa, 0x6, 0x7, 0x4, 0x82, 0x0, 0x2, 0x10, 0x40, 0x6e7b19ed, 0x5, 0x6, 0xc00, 0x4, 0x1, 0xa, 0x3ff, 0xffff03b4, 0x5, 0x7fffffff, 0x80000000, 0x8, 0x394, 0x1, 0x8, 0x6, 0x4, 0x5, 0x1, 0xfffffff7, 0x8, 0x9, 0x3, 0x2, 0x6, 0x5, 0x7, 0x4, 0x9, 0x7, 0x8, 0x780, 0xd5, 0x1, 0x6ad, 0xffffff32, 0x9, 0x3, 0x186, 0x5, 0x40, 0x3, 0x8, 0xfffffff8, 0x6, 0x0, 0x7, 0x0, 0x0, 0x3935, 0x4, 0x800, 0xf, 0x4, 0x8001, 0xc, 0x7, 0x1, 0x2, 0x2, 0x8, 0xf]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5ba4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x8, 0x0, 0x7ff, 0x2, {0x5, 0x0, 0x3, 0x200, 0x5, 0x7}, {0x2, 0x1, 0x9, 0x8000, 0xffff, 0x80000000}, 0x80000001, 0x9, 0x3}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x5, 0xfffffffc, 0x0, 0x2, {0x0, 0x1, 0x5, 0xfff7, 0x8001, 0x4746}, {0x9, 0x0, 0xa, 0xe64, 0xfffa, 0x1}, 0x100, 0x9, 0x5}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80, 0x7, 0xd12, 0xab2, 0x8, 0x2, 0x3, 0x1, 0x53946472, 0x69cc, 0x3, 0xb3, 0x8, 0x5, 0xffffffd2, 0x6e0, 0x225, 0x3, 0x40, 0x101, 0x7, 0xffff3164, 0x6, 0x7fffffff, 0xffffff80, 0x7fff, 0x0, 0x8, 0x7, 0xfff, 0xffffffff, 0x3, 0x100, 0xea4, 0x6, 0xff8, 0x101, 0xa4f0, 0xe, 0x1, 0xfffffffd, 0x9, 0x3, 0x5, 0x10, 0x7, 0x7, 0x8, 0x7fffffff, 0x2, 0x8, 0xb, 0x0, 0x8, 0xffff, 0xc, 0xfffffffb, 0x8, 0x7, 0x4, 0xa6, 0x7fffffff, 0xff, 0x0, 0x800, 0x4, 0x8, 0x1, 0xb3d, 0xb7eb, 0x800, 0x2, 0xdb57, 0xffffff01, 0x8773, 0xffffffff, 0x0, 0x3, 0xd, 0x0, 0x7, 0x6, 0x2, 0x0, 0x6, 0xb65, 0xafa7, 0x3, 0xfffffeff, 0x80000001, 0x6, 0x7f, 0xffffffff, 0x9, 0x516, 0x1000, 0x8, 0x6, 0xa, 0xffff, 0x200, 0x6, 0x4, 0x1000, 0x0, 0x3ff, 0x6, 0xb, 0x33d8, 0xa54, 0x819, 0x0, 0x85c, 0x4, 0x10, 0x5, 0x1899a437, 0x1, 0x4, 0x5, 0x3, 0x3b, 0x2, 0x1, 0x6, 0xfff, 0x8, 0xdf5, 0x6, 0x9, 0x98, 0x3d9, 0x80000000, 0x5, 0x7, 0x5, 0x0, 0x9, 0x9, 0x600, 0x0, 0x1, 0x6, 0x1, 0x6c, 0x6, 0x8, 0x9, 0xfffffffb, 0x2, 0x6, 0x400, 0x13c0000, 0x90c, 0xff, 0xa1, 0x9, 0x6, 0x6, 0x7, 0x7ff, 0x6, 0x7, 0x8, 0x0, 0x1, 0x4, 0x7f, 0x10, 0xffffffff, 0x857, 0xf, 0xfff, 0x0, 0x5, 0xfffffff7, 0x0, 0x6, 0x1010000, 0xe48, 0x8001, 0x48000, 0x1ccf, 0x4, 0x8, 0x8, 0x6f, 0x3, 0x9, 0x40, 0x63, 0x4, 0x3ff, 0x5, 0x8, 0x4, 0x80000001, 0x5, 0x6d58, 0x40, 0x0, 0x0, 0x1, 0x0, 0x2, 0x8, 0x0, 0x3, 0xf, 0x0, 0xffffffff, 0x9, 0x2, 0x653, 0xfffffc0c, 0x9, 0x4, 0x60, 0xa0000, 0x5, 0x8, 0x2, 0x4, 0x8, 0x4, 0xe1, 0x200, 0x1, 0x80000000, 0x9, 0xe, 0x80000001, 0x1ff, 0x660a, 0x4, 0x1, 0x0, 0x3, 0xfffffff8, 0xfff, 0x3, 0x4, 0x5, 0x424b, 0x9, 0x2, 0x5, 0x1, 0x7fff, 0x800, 0x4, 0x3, 0x2, 0x8, 0x7, 0x2316]}], [@TCA_POLICE_RATE={0x404, 0x2, [0xa, 0x81, 0x3, 0x2, 0x5, 0x3, 0x6, 0x4d, 0xd2, 0x38, 0x10, 0x79f, 0x9, 0x2, 0x3, 0xda, 0x1, 0x7, 0x0, 0x5, 0x8, 0x70f, 0x7, 0x4, 0x7fff, 0x0, 0x3, 0xd, 0x80000001, 0x0, 0xdc6, 0x40, 0x5, 0x5, 0x8, 0xa, 0x70, 0x3, 0x9, 0x0, 0xfffffff8, 0x100, 0x5, 0x53b, 0x4e1, 0x4, 0x7, 0x9, 0xdb, 0x8000, 0x6, 0x8, 0x3, 0x9a, 0x5, 0x145b, 0x1, 0x0, 0xfffffffa, 0x2, 0x5, 0xfffffffb, 0x63a, 0xfffffffe, 0x2, 0x1ff, 0x1, 0x1a85, 0x4, 0x5, 0x2, 0x3, 0x5, 0x5, 0x2, 0xecb4, 0x2, 0x8, 0x7, 0x7ee, 0x4, 0x2, 0x1000, 0x9, 0x75c69b7a, 0x6, 0x0, 0xf, 0x44, 0x2, 0x4, 0xf, 0x1000, 0x7, 0x6, 0x2, 0x8, 0x4, 0x4, 0xd7, 0x10000, 0xfffffffa, 0x2, 0x8000, 0xc1c, 0x8ee, 0x7fff, 0x8, 0x7842, 0x2, 0x400, 0xff, 0x71a, 0xb, 0x5, 0x3, 0x5, 0x5b, 0x1000, 0xfffffff9, 0x7, 0x8001, 0x6, 0x2, 0x81, 0x8, 0x7, 0x6, 0x8, 0x3, 0xa, 0x4, 0xeeb, 0x6ee, 0x7, 0x7fffffff, 0x2f2, 0x8, 0x0, 0x2, 0xff, 0x3, 0x2, 0x8, 0x0, 0x0, 0x6, 0xffffffff, 0x0, 0x6, 0x4, 0xfffffffb, 0x6, 0x3, 0x1659c050, 0x9, 0x3ff, 0x7b, 0x6e, 0x1ff, 0x8699, 0x0, 0x10001, 0xcd0, 0x0, 0xb903, 0x7e000, 0x5c, 0x0, 0x2, 0x7, 0x1, 0x4, 0x6, 0x0, 0xa, 0xfffffff8, 0x6, 0x3ff, 0xa, 0x7, 0x1, 0x8, 0xffff, 0x35, 0x4, 0x1, 0x7, 0x5, 0x8, 0x2, 0x8, 0x8, 0x0, 0x4, 0x1c00, 0x1, 0x2f36, 0x3, 0xf29, 0x6, 0x2, 0x7, 0x40, 0x101, 0x8, 0x80000000, 0xfffffff8, 0xfffffffb, 0x3d7, 0x7, 0x3, 0x1, 0x0, 0x3, 0xe, 0x10, 0x5, 0x8000, 0x2, 0x10001, 0x9, 0xc0, 0xa, 0x9, 0xdec, 0x7, 0x8, 0xff4, 0x10001, 0x5, 0xb, 0x7, 0x3, 0x0, 0x3, 0x8, 0x9, 0x689, 0x5, 0x2, 0x4, 0xffffffff, 0x80, 0x7, 0x9, 0x7, 0x7, 0x9, 0x5, 0x5, 0x9, 0x4, 0x2, 0x7e1, 0x80]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x22bd}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x803}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x1, 0xd, 0x3, 0x80000000, 0x10001, 0x4, 0x7, 0x9, 0x20, 0x200, 0xa276c90, 0x5, 0xea5a, 0x1, 0x2, 0x8, 0x8000, 0x1, 0x2, 0x10001, 0x7ff, 0x9, 0x7f, 0x1ba, 0xc, 0x200d, 0x4, 0x8, 0x1, 0x0, 0x9, 0x8001, 0x0, 0x4, 0x6, 0x8, 0x8, 0x4, 0xffff, 0x3, 0x4, 0x8, 0xbe, 0x2, 0x1, 0x1, 0x4, 0xfffeffff, 0x6, 0x4, 0x9, 0xd7c, 0xd, 0x5, 0x6, 0x41, 0x6891da6d, 0xf, 0x71, 0x3, 0x1, 0x3, 0x9, 0x1, 0x4, 0x3, 0x0, 0x6, 0x0, 0x8, 0xfffffffc, 0x9, 0x9, 0x1800, 0x2, 0x400, 0x5, 0x2, 0x3, 0xf038, 0x4, 0x3ff, 0xb6a4, 0xf, 0xe, 0x0, 0x80000000, 0x0, 0x6, 0x8000, 0x2, 0x8, 0xa65, 0xa6e9, 0x5, 0x2, 0x931, 0x5, 0x5, 0x7, 0x80000000, 0x9, 0x5, 0x9, 0x7, 0xffffffff, 0x4, 0x96, 0xf, 0x2, 0x5, 0x3ff, 0x9, 0x6, 0x80e, 0xf51, 0x9, 0xf518, 0x9c, 0x8001, 0x1000, 0x7, 0xb30, 0x7, 0xffffffff, 0x1, 0x1ff, 0x2, 0x7, 0xa84, 0xb, 0xe7, 0x49, 0x8, 0xd, 0x9c8, 0xfffffff9, 0x4, 0x1, 0x0, 0x7fffffff, 0x6, 0x1, 0xb, 0x6, 0x9, 0x10000, 0xb91, 0xe74, 0x17, 0x1000, 0xff, 0x6, 0x6, 0x3, 0xe69e, 0x7, 0x5, 0xdd4, 0x3, 0x200, 0x6, 0x5, 0x4, 0x2000000, 0x37, 0x4, 0x1, 0x644ccca0, 0xa, 0x4, 0x7, 0x3, 0x1, 0x9, 0x4, 0x7, 0xf, 0x2, 0x9, 0x93d4, 0x3, 0xde2c, 0x1ff, 0x8, 0x3324ab14, 0x3, 0x7, 0x7, 0x2, 0x10000, 0x36e9, 0x4cdf, 0x5, 0xd7d, 0x1, 0x5, 0x1, 0xf62, 0x83, 0x4, 0x4, 0x7, 0x90, 0xfffffff9, 0x5, 0x9, 0xffffffff, 0x7, 0x8, 0x40, 0x9, 0x2, 0x10d, 0x8, 0x9, 0x3, 0x1, 0x6, 0x10000, 0x100, 0x7, 0x9, 0x80000000, 0x3, 0x4, 0x800, 0x9, 0x9, 0x4, 0x6, 0x2, 0xfffffff3, 0x5, 0x5, 0x4, 0x80000000, 0x100, 0x2, 0x2, 0x4, 0xe, 0x5, 0xc36, 0x2, 0x5155, 0x7ff, 0x3ff, 0x46e4386a, 0x6, 0x15c, 0xbb6, 0x8, 0x3, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6286, 0x20000000, 0x7ff, 0x6, 0x5, {0x1, 0x2, 0xbab1, 0xe3, 0x4, 0x6}, {0x4, 0x2, 0x1000, 0xff1f, 0x100, 0x800}, 0xe7, 0x0, 0x10001}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0xa11, 0x4, 0x6, 0xe, 0x7, 0x7, 0x1, 0x81, 0x5, 0xff, 0x1, 0x6, 0x7, 0xa0, 0x6, 0x7fff, 0x4, 0xffff8000, 0x7, 0xe00000, 0xb, 0x6df7734b, 0x5, 0x9, 0x2, 0x1000, 0x3, 0x1000, 0x6f, 0x9, 0x1000, 0x3ff, 0x7, 0x5, 0x4b, 0x7, 0x80000001, 0x1, 0x1, 0x2, 0x7, 0x4, 0x3, 0xe5, 0x0, 0x400c, 0x8, 0x5, 0x2, 0x7ff, 0x3, 0x4, 0x2, 0x3b3, 0x70, 0xfffffff8, 0x6, 0x5, 0x0, 0xd77, 0x0, 0x3, 0xe, 0x4, 0x10, 0x8, 0xf, 0x6, 0x1, 0x5bb9, 0x2, 0x8, 0x80000000, 0x0, 0xffffffff, 0x5, 0x4, 0x9, 0x4c45, 0x3, 0x4, 0x2, 0x5, 0x3, 0x9, 0xffff, 0x5, 0x4, 0x125b, 0x2, 0x1, 0x5, 0x7, 0x200, 0x1, 0x2, 0x6, 0x9, 0x8aca, 0x7, 0x7, 0x0, 0x1, 0x5, 0x0, 0x5, 0x49, 0x9, 0x0, 0x2, 0xffffffff, 0x4, 0x3, 0x7fffffff, 0xfffffffb, 0x5a9a, 0x4, 0x100, 0xcf9, 0x5c, 0x9, 0x4, 0x3, 0x6, 0x0, 0x1, 0x4, 0xfffffffb, 0x1, 0xd188, 0x6, 0xfffffffe, 0x7ff, 0xf, 0x3, 0x0, 0x3, 0x41e, 0xd, 0x8, 0x9, 0x8, 0xfffffffb, 0xffffff81, 0x6a, 0x2, 0x4, 0x6, 0x8000, 0x4, 0x1, 0x9, 0x40, 0x4, 0x9, 0x0, 0xa, 0x53e, 0x5, 0x3, 0x2, 0x2, 0xc, 0x743, 0x5, 0x9, 0x0, 0x315, 0x5fc, 0x5, 0x1, 0x5acb, 0x34e, 0xfffffffe, 0x80000000, 0x4f5, 0x200, 0x5, 0xf, 0x6, 0x8, 0xd, 0x9, 0x1, 0x0, 0x10000, 0xfffffc00, 0x9, 0x0, 0x6, 0xfffffffe, 0x0, 0x200, 0x7f, 0x3b, 0x1ff, 0x0, 0x2, 0x86, 0x0, 0x5, 0x34, 0xfff, 0x9, 0x4, 0xacc8, 0x4, 0x2, 0x0, 0x5b, 0x5, 0x80000001, 0x3, 0x8001, 0x45, 0x2bb7, 0x1, 0x5, 0x8, 0x3, 0x2, 0xf7a2, 0x3, 0x8, 0xfb22, 0x0, 0x9f02, 0x1e, 0x80000001, 0x8, 0x2, 0x5c87ecb8, 0x8, 0x7, 0x9ef4, 0x9, 0x9, 0x0, 0x1, 0xc1, 0x8, 0x35, 0x0, 0x5, 0x10001, 0xfffffc00, 0x4, 0x6c6, 0x40, 0x10, 0x3ff, 0x3e74390d, 0x1, 0x80000001, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x1000, 0x0, 0x80000000, 0x5cb, 0xa, 0x7, 0x9b, 0x1, 0x200, 0x8, 0x1ff, 0xfff, 0x1, 0x4, 0x80000000, 0x7, 0x10001, 0x1000, 0x0, 0x3, 0xfff, 0x8, 0xfff, 0x0, 0x86, 0x40, 0x2, 0x6, 0x10, 0x100, 0xfffffbff, 0x2, 0x7ff, 0x5, 0x81, 0x2, 0x123e, 0x9, 0x0, 0x689f, 0x3, 0xfff, 0x9, 0x400, 0x1, 0x4, 0x4000, 0x40, 0xb, 0xb7, 0xf, 0x1, 0xaaeb, 0xffff, 0x0, 0x68, 0x77, 0x80, 0x5, 0x8, 0x401, 0x4, 0x5, 0x1, 0x1, 0x7, 0x3, 0x3, 0x6, 0x8, 0x3, 0x2, 0xa61, 0x8, 0x6, 0x1ea8, 0x8, 0x80, 0x8, 0x6, 0x9, 0x3, 0xb5, 0x6, 0x2, 0x9, 0x90b3, 0x7fffffff, 0x5, 0x38000000, 0x6, 0x8, 0xffffff55, 0x4, 0x80, 0x0, 0x9, 0x7, 0x6, 0x8, 0x837, 0x3, 0x3, 0xff, 0x8, 0x200, 0x0, 0x7fff, 0x8001, 0xc00, 0x5, 0x400, 0x6, 0x7f, 0x4, 0xfffffffa, 0x2, 0xac9e, 0x7, 0x0, 0x9, 0x7fffffff, 0x7, 0x9, 0x2, 0x6, 0x15, 0x6, 0x7f, 0x1, 0x0, 0x3, 0xc33, 0xffff25c2, 0x0, 0x4, 0x6, 0x6, 0x6, 0x10001, 0x1000, 0x0, 0x7260, 0x5, 0x80, 0x10000, 0xfa8, 0x3, 0x6, 0x3, 0xe799, 0x5, 0x1, 0x7, 0x8, 0xe5, 0xffffffff, 0x2a2, 0x42a9dd97, 0xa, 0x2, 0x2000, 0x38, 0x3ff, 0xfffffbff, 0x6, 0xfffffeff, 0x2, 0x8, 0x401, 0x4, 0x5, 0x1, 0x5, 0x292, 0x9, 0x9, 0xf, 0x9, 0x9, 0x3, 0x2, 0x81, 0x6, 0x6, 0x1, 0x2, 0x2, 0x1000, 0xf, 0x0, 0xf, 0x9, 0x0, 0xffffff01, 0xffffffff, 0x5ab, 0x3b, 0x4, 0x4, 0x80000000, 0x929, 0x7, 0x1ff, 0x9, 0x4, 0x7f, 0x8, 0xbe1, 0x3, 0x0, 0x50e, 0x9, 0xffffffff, 0x80000000, 0xfffffffb, 0x1, 0x61999b1d, 0x3, 0x5bb27e36, 0x9, 0x2f0, 0x0, 0x0, 0xffff, 0x4, 0x0, 0x6, 0x6, 0x3, 0x5d56, 0x9, 0xff, 0x6, 0x3ff, 0x7, 0xfffffffd, 0x0, 0x80000000, 0x5, 0x0, 0x6, 0x0, 0x1, 0x8, 0x1, 0xc0, 0x7, 0x2, 0x27aee940, 0x2, 0x0, 0x186, 0x8, 0x794a]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x8, 0x8, 0x6, 0x8400, {0x5, 0x0, 0x4, 0xbe, 0x40, 0x7}, {0xff, 0x1, 0x9b29, 0x0, 0x4, 0xffff}, 0xffffffff, 0x5, 0x7}}]]}, {0x93, 0x6, "9aa18d66e54b9112ba20603361716581fa81d69a4faf1b32734427c6ef5e3482a3f4809bdbaa20611aa04d7e17c37b698a55b7a9d6efbff7d8032fd1efad23df29dace0e84c243f85ddc0be1c26756ac11e5c660926070aff58a606884da4887e37ce508ed1c7febcd6ecda8b80afd389a6ee8b0425ca34d53f99f326114eb9be9b21b9e015d8267de1f614de538c6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x1c8, 0x1e, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1ff, 0x1, 0x8, 0x200, 0x3}, @dev={0xac, 0x14, 0x14, 0x2d}, @private=0xa010100, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fffffff, 0xfffffffd, 0x6, 0x3, 0x1}, @remote, @local, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x52d, 0x0, 0x3, 0x5, 0x7}, @multicast1, @multicast2, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x80000001, 0x4, 0x6, 0x5}, @broadcast, @multicast1, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x80, 0x8, 0x1, 0x200}, @broadcast, @remote}}]}, {0xd8, 0x6, "73c99c580a2f0710f2aa248f2ff51630f1f64c80aaf990fec9b5f7ca710c28bf49348140567be8ba1897a2d4d63fca284d3376c1f980b00a6e80679933f9a33c779dfe4c1b79e88a0485aa1231850f129b983e97a5d22709f7283baaaa70f6d41125ff70a802a509c78547510dc3dc0211851aa17b50ffd5dd4b64d5d3098e6ab7bd35e29380fa1e9f40201a7aa59d8ddc9d4b3cd5f5254addbaceeca5e4fa5613dbe999953b4a63b47b77410dd3712318a96f183c3d980f1bf7578035bf67ee642890685ce04b9dec4966b228a0de21c5fa3f40"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a5}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x8, 0x80000001, 0x7}, 0x24}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x2e74}, 0x1, 0x0, 0x0, 0x4894}, 0x2) 1.437924205s ago: executing program 0 (id=5227): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2c020400) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000340)={r0, &(0x7f0000000100)='syzkaller0\x00', 0x20800, &(0x7f0000000200)={@_ha_fsid={[0x10000, 0x9]}, {0x7, 0x5, 0x7706, 0xfffffffffffffff9}}, 0x1000, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x280}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) connect$netlink(r0, &(0x7f0000000880)=@kern={0x10, 0x0, 0x0, 0x800000}, 0xc) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="040001000000000000000000000300ff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x8d, &(0x7f0000000680)=""/141}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x33, &(0x7f00000009c0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r2, @ANYRES64=r2, @ANYRESDEC=r3, @ANYRESHEX=r4, @ANYRES32=r2, @ANYBLOB="00000000990000001811000098c5ec4459254b9b9324ef78e8a0c0573024a405a14d987cd6b55cf342f810af0b1e881f312e4355ac2a9cf8c5b3a48d2b81c00709b80eb6e8abccb9b378b2e694ac7e773d0d8808346178f9548df65c8459926982dc1d1207357d19c10f733108066d1a1f7e44ed5d663f474498de9bc89da3ab12e4", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000180000005e0700000000000001000000b7080000000000007b8ac10d58fbeae0a72e0000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000018220000", @ANYRES32=0x1, @ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x24}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x4}, 0x94) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@mcast1, @private2, @private1, 0x4, 0x100, 0x9, 0x400, 0x7fffffff, 0x400, r8}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$packet(0x11, 0x3, 0x300) socket(0x2, 0xa, 0x300) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000040000000000000000000020085000000ad00000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x30}, 0x94) r10 = accept4$inet(0xffffffffffffffff, &(0x7f00000008c0), &(0x7f0000000900)=0x10, 0x800) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000980)={0x0, r10, 0xd78, 0x8000000000000000, 0xfffffffffffffffa, 0x6}) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r9) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002800800020011000000060001"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) recvmmsg(r5, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 1.285099888s ago: executing program 6 (id=5228): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'dummy0\x00', 0x0}) 965.027706ms ago: executing program 2 (id=5229): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x1002, &(0x7f00000004c0)=""/4098}, 0x90) connect$l2tp(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast2, 0x1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000100001001fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYRES8=r0], 0x4c}}, 0x4048040) 898.791902ms ago: executing program 6 (id=5230): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000300000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r0}, 0x38) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x2) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010008105e9c51c0000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES16=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2c, r7, 0x9, 0xfffffffd, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004002}, 0x0) (async) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'gre0\x00'}}, 0x1e) (async) ioctl$PPPIOCGCHAN(r8, 0x80047437, &(0x7f0000000040)) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000080)=0x100002) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r10, 0x40047438, &(0x7f0000000040)) (async) ioctl$PPPIOCCONNECT(r10, 0x4004743a, &(0x7f00000000c0)) (async) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) r13 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r13, 0x6b, 0x4, &(0x7f00000005c0), 0x4) (async) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000040)) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x41145}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}}, 0x8000) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000790028000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x21, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) (async) socket$inet_mptcp(0x2, 0x1, 0x106) 494.301226ms ago: executing program 2 (id=5231): r0 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=@base={0x5, 0x12, 0xb3, 0x80000000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4000000}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4008010}, 0x840) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}}, 0x0) (async) r4 = socket$igmp(0x2, 0x3, 0x2) (async) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x4, 0x4, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) unshare(0x2c020400) (async, rerun: 64) r9 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 64) connect$pppl2tp(r9, 0x0, 0x0) (async) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000700)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x34}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 293.803087ms ago: executing program 6 (id=5232): syz_emit_ethernet(0x1ee, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x1b8, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '\t\x00', 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0x0, 0x2f, '\x00', [@generic={0xf, 0x25, "c9bd942c73856184f927b7e4e553c7f46b4f930d2f1c30ca13154ac498c3eaf13ab58393d7"}, @jumbo={0xc2, 0x4, 0x6}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @generic={0x0, 0xe, "8b168e4b48529453d91cea424030"}, @calipso={0x7, 0x8}]}]}}}}}}}, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01880000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c0001800800014000000004500000000c0a01010000000000000000020000030900020073797a31000000000900010073797a30000000002400038020000080100001800c000100fff50000000000000c0004"], 0xfc}}, 0x0) (async) unshare(0x22020400) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') read(r2, 0x0, 0x0) 171.581576ms ago: executing program 0 (id=5233): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="18"], 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000001040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x7, 0x40, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, r0, 0x3, 0x5, 0x2}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0x8001, 0x4) r5 = epoll_create(0xffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003180)={r2, 0x0, 0x1000, 0xed, &(0x7f0000001fc0)="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", &(0x7f0000002fc0)=""/237, 0x80, 0x0, 0x2b, 0x5e, &(0x7f00000030c0)="0f5f78e5cf490d361a26d370df318b0159d89dcf8e073c5ddd11d593d348ce650141079eb74ae8ec0136d5", &(0x7f0000003100)="ace3bbd1d0f6e4f35fc91b7fb8a6d1b8b809297acdce84b0d48af1801f3bed73a99befcf8ad8f7924246b5c410041dfc0626f10c6a33aee97d5e743b06d0f7e7825627ee12bc1a95984f69b529ad106c06bb1ad1775fd60375e4bc807d58", 0x1, 0x0, 0x90000000}, 0x50) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x9e2696008603fac1}) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000000000000000090200000000002e2e5f"], 0x0, 0x44}, 0x1f) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 145.353162ms ago: executing program 3 (id=5234): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) r2 = socket$inet(0x10, 0x3, 0x0) getsockopt$sock_int(r2, 0x1, 0xb, 0x0, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}], 0x1c) sendmsg$rds(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000140)=""/209, 0xd1}, {&(0x7f0000000240)=""/61, 0x3d}, {&(0x7f0000000300)=""/67, 0x43}, {&(0x7f0000000380)=""/40, 0x28}, {&(0x7f00000004c0)=""/211, 0xd3}], 0x6, &(0x7f0000000640), 0x0, 0x4044}, 0x90) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x81) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e00c681337", @ANYRES32=r0], 0x1000f) 90.796638ms ago: executing program 1 (id=5235): socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0xd, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x4040000) (async) r1 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0xffffffff, @local, 0x9}, 0x1c) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe8800bd347ebe37c4f0fe0000000001ac14142500000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000000a0010000100000000000000"], 0xc4}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x14c}}, 0x0) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f02000007683815b12e890300000a000000059afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000010007bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0000000", 0xb8) (async) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'dummy0\x00', 0x0}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x113982, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x2000cc0, r7}, 0x38) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r7}, 0x38) 0s ago: executing program 6 (id=5236): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="b3", 0x1}], 0x1, &(0x7f0000000080)=[@init={0x18, 0x84, 0x0, {0x6, 0x101, 0x2a, 0x6}}], 0x18, 0x200008c0}, 0x6008045) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) sendmmsg$sock(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)=@qipcrtr={0x2a, 0x2, 0x3fff}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[@txtime={{0x14, 0x1, 0x3d, 0x21}}], 0x14}}], 0x1, 0x200088d0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f00000000c0)='\xf7(:!),{\x00', 0x4002, &(0x7f0000000100)={@align=0x7, {0x1, 0x401, 0xd, 0xf}}, 0x0, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x31c1a0ea}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x29, 0x0, &(0x7f0000000300)) socketpair(0x1d, 0x5, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="468df5dea550801db97e0d79c72aa29fc577ebd57404f9053d7e8e7f0424b7608cd626af2ec22484f48c0111640c267feda82b1b9fc4ac64800c0a191e48423d3d045d6bcb6d090673510e0a006cbdc82f"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000280)=[{0x28, 0x8, 0x0, 0xbfffdffe}, {0x80000006, 0x9, 0x9, 0x5}]}, 0x10) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="09000300010000", 0x7) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0x0, @loopback, 0xfffffff9}}, 0xf, 0xfffb, 0x7, 0x91, 0x40, 0x4, 0x7}, &(0x7f0000000300)=0x9c) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) kernel console output (not intermixed with test programs): ription rejected, illegal request [ 640.464601][T23755] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4304'. [ 640.606269][T23758] netlink: 35 bytes leftover after parsing attributes in process `syz.0.4304'. [ 640.634118][T23634] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.634514][T23634] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.634937][T23634] bridge_slave_0: entered allmulticast mode [ 640.653134][T23634] bridge_slave_0: entered promiscuous mode [ 640.674394][T23634] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.675517][T23634] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.676241][T23634] bridge_slave_1: entered allmulticast mode [ 640.729573][T23634] bridge_slave_1: entered promiscuous mode [ 640.754665][T23766] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4306'. [ 641.003585][T23634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.026088][T23634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.126347][T23634] team0: Port device team_slave_0 added [ 641.142996][T23634] team0: Port device team_slave_1 added [ 641.196569][T23634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.196587][T23634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.196612][T23634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.250395][T23634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.250418][T23634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.250452][T23634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.363933][T23634] hsr_slave_0: entered promiscuous mode [ 641.365109][T23634] hsr_slave_1: entered promiscuous mode [ 641.365895][T23634] debugfs: 'hsr0' already exists in 'hsr' [ 641.365916][T23634] Cannot create hsr debugfs directory [ 641.698453][ T8845] dummy0: left promiscuous mode [ 641.751612][ T52] Bluetooth: hci0: command tx timeout [ 642.138904][T23795] netlink: 'syz.0.4313': attribute type 26 has an invalid length. [ 642.733630][T23634] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 642.771074][T23634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 642.775522][T23634] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 642.818157][T23634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 642.823027][T23634] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 642.855581][T23634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 642.877504][T23634] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 642.898184][T23634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 642.920852][T23816] pimreg: entered allmulticast mode [ 643.181551][T23832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4319'. [ 643.281190][T23828] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 643.316173][T23837] netlink: 'syz.2.4320': attribute type 2 has an invalid length. [ 643.469816][T23828] xt_CT: No such helper "netbios-ns" [ 643.675320][T23837] : entered promiscuous mode [ 643.827295][ T52] Bluetooth: hci0: command tx timeout [ 649.247210][T23858] lo speed is unknown, defaulting to 1000 [ 649.816089][T23634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.935393][T23882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4329'. [ 650.020502][T23634] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.049302][T10407] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.049424][T10407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.094490][T23885] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4330'. [ 650.128638][T23878] IPv6: NLM_F_CREATE should be specified when creating new route [ 650.128741][T23878] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 650.128753][T23878] IPv6: NLM_F_CREATE should be set when creating new route [ 650.128797][T23878] IPv6: NLM_F_CREATE should be set when creating new route [ 650.128823][T23878] IPv6: NLM_F_CREATE should be set when creating new route [ 650.131214][T23878] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4329'. [ 650.225104][ T1020] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.225226][ T1020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.313758][T23858] wg2 speed is unknown, defaulting to 1000 [ 650.562436][T23896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4332'. [ 650.673121][T23892] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4332'. [ 650.986329][T23905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4334'. [ 651.127335][T23905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4334'. [ 651.134270][T23905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4334'. [ 651.134820][T23905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4334'. [ 651.181126][T23905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4334'. [ 652.838548][T23634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 653.122622][T23974] netlink: 'syz.3.4345': attribute type 9 has an invalid length. [ 653.812402][T23634] veth0_vlan: entered promiscuous mode [ 653.846529][T23634] veth1_vlan: entered promiscuous mode [ 653.950650][T23634] veth0_macvtap: entered promiscuous mode [ 653.959273][T23634] veth1_macvtap: entered promiscuous mode [ 654.119099][T23634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.138752][T23634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.398452][ T1020] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.549958][ T1116] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.550395][ T1116] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.658308][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.998361][T24013] __nla_validate_parse: 66 callbacks suppressed [ 654.998387][T24013] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4352'. [ 655.032223][ T8840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.032247][ T8840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.375103][ T1377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.375130][ T1377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.771299][T24033] netlink: 'syz.1.4359': attribute type 1 has an invalid length. [ 655.782656][T24039] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4275'. [ 655.782687][T24039] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4275'. [ 655.783016][T24034] netlink: 'syz.1.4359': attribute type 1 has an invalid length. [ 655.855040][T24046] Bluetooth: MGMT ver 1.23 [ 655.884872][T24047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4275'. [ 655.884912][T24047] netlink: 'syz.5.4275': attribute type 10 has an invalid length. [ 655.884930][T24047] netlink: 'syz.5.4275': attribute type 5 has an invalid length. [ 655.884943][T24047] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4275'. [ 656.078618][T24033] 8021q: adding VLAN 0 to HW filter on device bond3 [ 656.133723][T24044] bond3: (slave geneve2): making interface the new active one [ 656.169342][T24056] netlink: 'syz.0.4362': attribute type 1 has an invalid length. [ 656.170256][T24044] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 656.297602][T24047] geneve2: entered promiscuous mode [ 656.297669][T24047] geneve2: entered allmulticast mode [ 656.618372][T24056] 8021q: adding VLAN 0 to HW filter on device bond4 [ 656.639971][T24059] erspan0: left allmulticast mode [ 656.640235][T24059] bridge0: port 1(erspan0) entered disabled state [ 656.713962][T24059] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 656.717138][ T8845] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 38235 - 0 [ 656.807946][ T8845] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 38235 - 0 [ 656.808044][ T8845] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 38235 - 0 [ 656.808168][ T8845] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 38235 - 0 [ 656.902759][T24073] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4365'. [ 657.336153][T24084] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4369'. [ 657.369459][T24084] siw: device registration error -23 [ 657.447656][T24088] netlink: 'syz.5.4370': attribute type 1 has an invalid length. [ 657.503678][T24081] pimreg: left allmulticast mode [ 658.285167][T24120] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 658.728735][T24138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4385'. [ 658.815932][T24136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4386'. [ 658.843633][T24136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4386'. [ 659.284163][T24151] TCP: TCP_TX_DELAY enabled [ 660.492017][T24180] __nla_validate_parse: 4 callbacks suppressed [ 660.492040][T24180] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4395'. [ 660.940236][T24188] mac80211_hwsim hwsim61 wlan0: entered promiscuous mode [ 660.940269][T24188] mac80211_hwsim hwsim61 wlan0: entered allmulticast mode [ 660.972846][T24188] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 661.450428][T24206] netlink: 'syz.5.4402': attribute type 30 has an invalid length. [ 661.701760][T24206] bond1: option arp_missed_max: invalid value (0) [ 661.701827][T24206] bond1: option arp_missed_max: allowed values 1 - 255 [ 661.743090][T24206] bond1 (unregistering): Released all slaves [ 661.825625][T24218] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 661.900482][T24222] ip_tables: iptables: counters copy to user failed while replacing table [ 662.101953][T24224] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4406'. [ 662.301382][T24236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4406'. [ 662.714114][T24228] lo: entered promiscuous mode [ 662.714140][T24228] lo: entered allmulticast mode [ 662.733887][T24228] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4409'. [ 662.733914][T24228] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 662.735172][T24230] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4409'. [ 662.735193][T24230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 662.876161][T24244] bridge_slave_0: left allmulticast mode [ 662.876199][T24244] bridge_slave_0: left promiscuous mode [ 662.876496][T24244] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.979463][T24244] bridge_slave_1: left allmulticast mode [ 662.979494][T24244] bridge_slave_1: left promiscuous mode [ 662.979731][T24244] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.062272][T24244] bond0: (slave bond_slave_0): Releasing backup interface [ 663.111549][T24244] bond0: (slave bond_slave_1): Releasing backup interface [ 663.127902][T24256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4413'. [ 663.156469][T24244] team0: Port device team_slave_0 removed [ 663.171247][T24244] team0: Port device team_slave_1 removed [ 663.172625][T24244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.172654][T24244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.175526][T24244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.175551][T24244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.217441][T24244] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 663.301081][T24246] team0: Mode changed to "broadcast" [ 663.330236][T24267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4416'. [ 663.940174][T24281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 664.031044][T24286] veth0_to_bridge: entered promiscuous mode [ 664.046046][T24286] macvtap1: entered allmulticast mode [ 664.046072][T24286] veth0_to_bridge: entered allmulticast mode [ 664.104719][T24286] veth0_to_bridge: left allmulticast mode [ 664.104855][T24286] veth0_to_bridge: left promiscuous mode [ 664.349040][T24295] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4424'. [ 665.035131][T24297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4425'. [ 665.175151][T24313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4428'. [ 665.629903][T24320] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4430'. [ 665.729101][T24326] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4433'. [ 666.320406][T24349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4436'. [ 666.683714][T24356] syzkaller1: entered promiscuous mode [ 666.683742][T24356] syzkaller1: entered allmulticast mode [ 666.936005][T24362] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4439'. [ 667.005153][T24372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4441'. [ 667.488044][T24374] openvswitch: netlink: IP tunnel dst address not specified [ 668.023561][T24385] bond8: option lp_interval: invalid value (0) [ 668.023588][T24385] bond8: option lp_interval: allowed values 1 - 2147483647 [ 668.055302][T24385] bond8 (unregistering): Released all slaves [ 668.609623][T24397] netlink: 'syz.3.4448': attribute type 4 has an invalid length. [ 668.711986][T24402] netlink: 'syz.2.4450': attribute type 4 has an invalid length. [ 668.712011][T24402] netlink: 'syz.2.4450': attribute type 3 has an invalid length. [ 668.736761][T24402] netlink: 'syz.2.4450': attribute type 4 has an invalid length. [ 668.736784][T24402] netlink: 'syz.2.4450': attribute type 3 has an invalid length. [ 668.869847][T24410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4449'. [ 669.079337][T24417] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4451'. [ 669.106618][T24414] 8021q: VLANs not supported on ip6gre0 [ 669.243303][T24420] tipc: Started in network mode [ 669.243339][T24420] tipc: Node identity ac14140f, cluster identity 4711 [ 669.243622][T24420] tipc: New replicast peer: 255.255.255.255 [ 669.244301][T24420] tipc: Enabled bearer , priority 10 [ 669.294975][T24420] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 669.643435][T24426] netlink: 'syz.5.4455': attribute type 21 has an invalid length. [ 669.643726][T24426] netlink: 'syz.5.4455': attribute type 1 has an invalid length. [ 669.643781][T24426] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4455'. [ 670.158885][T24444] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4461'. [ 670.359416][T22583] tipc: Node number set to 2886997007 [ 670.495452][T24453] openvswitch: netlink: Duplicate or invalid key (type 0). [ 670.518274][T24453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4464'. [ 670.760644][T24461] netlink: 'syz.1.4466': attribute type 1 has an invalid length. [ 671.049507][T24473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4467'. [ 672.453396][T24503] netlink: 'syz.5.4477': attribute type 1 has an invalid length. [ 672.455133][T24501] netlink: 'syz.5.4477': attribute type 1 has an invalid length. [ 672.880281][T24514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4480'. [ 673.680625][T24520] syzkaller1: entered promiscuous mode [ 673.680652][T24520] syzkaller1: entered allmulticast mode [ 675.334180][T24575] netlink: 'syz.3.4495': attribute type 1 has an invalid length. [ 675.334223][T24575] netlink: 'syz.3.4495': attribute type 2 has an invalid length. [ 675.334258][T24575] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4495'. [ 675.532468][T24566] geneve1: entered promiscuous mode [ 675.997738][T24582] vcan0: tx drop: invalid sa for name 0x0000004000000000 [ 676.496439][T24599] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4502'. [ 676.610545][T24602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 676.622763][T24602] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4505'. [ 676.659081][T24606] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4506'. [ 676.757612][T24594] netlink: 26 bytes leftover after parsing attributes in process `syz.5.4502'. [ 676.841977][T24610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4507'. [ 678.174795][T24653] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4518'. [ 678.174944][T24653] 0·: renamed from hsr0 [ 678.212278][T24653] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 678.212306][T24653] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 678.212389][T24653] 0·: entered allmulticast mode [ 678.212405][T24653] hsr_slave_0: entered allmulticast mode [ 678.212420][T24653] hsr_slave_1: entered allmulticast mode [ 678.239380][T24653] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 679.308106][T24686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4525'. [ 679.372502][T24687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4525'. [ 680.551258][ T5630] Bluetooth: hci0: command 0x0c3a tx timeout [ 680.551406][ T52] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 684.502862][T24707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4529'. [ 684.875529][T24712] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 685.527654][T24739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4537'. [ 685.527683][T24739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4537'. [ 685.714452][T24750] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4536'. [ 685.714522][T24750] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4536'. [ 685.714579][T24750] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4536'. [ 686.195395][T24759] syzkaller0: entered promiscuous mode [ 686.195473][T24759] syzkaller0: entered allmulticast mode [ 686.230504][T24760] bridge3: entered promiscuous mode [ 686.800522][T24787] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4546'. [ 687.840112][T24799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4548'. [ 692.361253][T24803] netlink: 'syz.2.4549': attribute type 16 has an invalid length. [ 692.361280][T24803] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4549'. [ 692.401025][T24790] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 692.462534][T24805] xt_HMARK: proto mask must be zero with L3 mode [ 694.006014][T24849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4562'. [ 694.006043][T24849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4562'. [ 694.038499][T24848] netlink: 'syz.0.4561': attribute type 1 has an invalid length. [ 694.201904][T24848] bond5: option mode: invalid value (7) [ 694.226428][T24848] bond5 (unregistering): Released all slaves [ 695.284465][T24882] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 695.318001][T24882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4569'. [ 695.680688][ T5282] veth0_macvtap: left promiscuous mode [ 695.999614][T24905] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4574'. [ 696.084978][T24907] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4575'. [ 697.083045][T24930] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4577'. [ 697.110585][T24930] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 697.222305][T24934] ip_tables: iptables: counters copy to user failed while replacing table [ 697.301860][T24934] ip_tables: iptables: counters copy to user failed while replacing table [ 697.499835][T24946] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4580'. [ 697.863160][T24956] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 698.250876][T24970] netlink: 'syz.1.4585': attribute type 1 has an invalid length. [ 698.451041][T24987] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4586'. [ 698.478785][T24970] 8021q: adding VLAN 0 to HW filter on device bond4 [ 698.512507][T24987] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4586'. [ 698.608142][T24981] bond4: (slave veth8): Enslaving as an active interface with a down link [ 698.722178][T24983] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 698.775576][T24983] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 698.882633][T24983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4585'. [ 698.903527][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.903680][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.079516][T24970] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 699.114210][T24970] bond4: (slave batadv1): making interface the new active one [ 699.125852][T24970] batadv1: entered promiscuous mode [ 699.126408][T24970] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 699.610747][T25012] openvswitch: netlink: Missing key (keys=50, expected=80) [ 699.964983][T25029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4596'. [ 700.621789][T25054] FAULT_INJECTION: forcing a failure. [ 700.621789][T25054] name failslab, interval 1, probability 0, space 0, times 0 [ 700.621850][T25054] CPU: 1 UID: 0 PID: 25054 Comm: syz.3.4599 Not tainted syzkaller #0 PREEMPT(full) [ 700.621878][T25054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 700.621892][T25054] Call Trace: [ 700.621902][T25054] [ 700.621912][T25054] dump_stack_lvl+0xe8/0x150 [ 700.621954][T25054] should_fail_ex+0x410/0x560 [ 700.621987][T25054] should_failslab+0xa8/0x100 [ 700.622046][T25054] ? sctp_get_port_local+0x6bd/0x1700 [ 700.622199][T25054] kmem_cache_alloc_noprof+0xa1/0x600 [ 700.622232][T25054] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 700.622268][T25054] ? sctp_get_port_local+0x6bd/0x1700 [ 700.622301][T25054] sctp_get_port_local+0x6bd/0x1700 [ 700.622327][T25054] ? lock_acquire+0x115/0x350 [ 700.622363][T25054] ? __pfx_sctp_get_port_local+0x10/0x10 [ 700.622391][T25054] ? sctp_bind_addr_match+0x30/0x2b0 [ 700.622456][T25054] ? sctp_bind_addr_match+0x28b/0x2b0 [ 700.622496][T25054] sctp_do_bind+0x4d9/0x9a0 [ 700.622535][T25054] sctp_connect_new_asoc+0x270/0x6b0 [ 700.622566][T25054] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 700.622595][T25054] ? __sanitizer_cov_trace_pc+0x8/0x80 [ 700.622651][T25054] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 700.622703][T25054] ? security_sctp_bind_connect+0x7e/0x2c0 [ 700.622768][T25054] sctp_sendmsg+0x159b/0x2d00 [ 700.622811][T25054] ? __pfx_sctp_sendmsg+0x10/0x10 [ 700.622843][T25054] ? irqentry_exit+0x218/0x910 [ 700.622875][T25054] ? irqentry_exit+0x218/0x910 [ 700.622912][T25054] ? aa_sock_msg_perm+0xf5/0x210 [ 700.622941][T25054] ? sock_rps_record_flow+0x19/0x350 [ 700.623033][T25054] ? inet_sendmsg+0x298/0x320 [ 700.623059][T25054] ? __pfx_inet_sendmsg+0x10/0x10 [ 700.623085][T25054] sock_sendmsg_nosec+0x10e/0x180 [ 700.623112][T25054] ____sys_sendmsg+0x54e/0x850 [ 700.623148][T25054] ? __pfx_____sys_sendmsg+0x10/0x10 [ 700.623188][T25054] ? import_iovec+0x73/0xa0 [ 700.623222][T25054] ___sys_sendmsg+0x2a5/0x360 [ 700.623251][T25054] ? __lock_acquire+0x747/0x2de0 [ 700.623280][T25054] ? __pfx____sys_sendmsg+0x10/0x10 [ 700.623350][T25054] ? __fget_files+0x2a/0x420 [ 700.623388][T25054] ? __fget_files+0x3a2/0x420 [ 700.623438][T25054] __x64_sys_sendmsg+0x1b1/0x290 [ 700.623472][T25054] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 700.623531][T25054] do_syscall_64+0x166/0x520 [ 700.623564][T25054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.623589][T25054] ? clear_bhb_loop+0x70/0xc0 [ 700.623618][T25054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.623640][T25054] RIP: 0033:0x7f4b0e99e159 [ 700.623663][T25054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.623682][T25054] RSP: 002b:00007f4b0f7b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 700.623707][T25054] RAX: ffffffffffffffda RBX: 00007f4b0ec25fa0 RCX: 00007f4b0e99e159 [ 700.623722][T25054] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 700.623737][T25054] RBP: 00007f4b0f7b8090 R08: 0000000000000000 R09: 0000000000000000 [ 700.623751][T25054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.623763][T25054] R13: 00007f4b0ec26038 R14: 00007f4b0ec25fa0 R15: 00007ffcc4582088 [ 700.623800][T25054] [ 701.033731][T25053] bond1: option miimon: invalid value (18446744073357230079) [ 701.033761][T25053] bond1: option miimon: allowed values 0 - 2147483647 [ 701.067592][T25053] bond1 (unregistering): Released all slaves [ 701.719449][T25079] tc_dump_action: action bad kind [ 701.888761][T25077] xt_CT: No such helper "syz1" [ 701.903700][T25089] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4605'. [ 703.416954][T25124] ipvlan2: entered promiscuous mode [ 703.424323][T25124] team0: Device ipvlan2 failed to register rx_handler [ 704.184786][T25142] netlink: 564 bytes leftover after parsing attributes in process `syz.0.4619'. [ 704.303375][T25144] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8 [ 704.591906][T25147] syzkaller0: entered promiscuous mode [ 704.591933][T25147] syzkaller0: entered allmulticast mode [ 704.618857][T25147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 706.180428][T25191] sctp: [Deprecated]: syz.5.4630 (pid 25191) Use of struct sctp_assoc_value in delayed_ack socket option. [ 706.180428][T25191] Use struct sctp_sack_info instead [ 706.219667][T25198] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4632'. [ 706.219693][T25198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4632'. [ 706.219712][T25198] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4632'. [ 706.219726][T25198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4632'. [ 706.219741][T25198] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4632'. [ 706.385244][T25203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4633'. [ 706.633712][T25205] veth10: entered promiscuous mode [ 706.633741][T25205] veth10: entered allmulticast mode [ 706.635472][T25208] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4634'. [ 706.645246][T25205] bridge4: port 1(veth10) entered blocking state [ 706.654449][T25205] bridge4: port 1(veth10) entered disabled state [ 706.694238][T25205] bridge4: port 1(veth10) entered blocking state [ 706.694367][T25205] bridge4: port 1(veth10) entered forwarding state [ 706.796027][T25208] syzkaller0: entered promiscuous mode [ 706.796060][T25208] syzkaller0: entered allmulticast mode [ 706.836105][T25208] tipc: Started in network mode [ 706.836154][T25208] tipc: Node identity aa79a7a96325, cluster identity 4711 [ 706.836402][T25208] tipc: Enabled bearer , priority 0 [ 706.864318][T25208] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4634'. [ 706.971606][T25219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4636'. [ 707.109433][T25223] netlink: 'syz.2.4637': attribute type 5 has an invalid length. [ 707.139751][ T8836] bridge4: port 1(veth10) entered disabled state [ 707.155640][T25207] tipc: Resetting bearer [ 707.233846][T25207] tipc: Disabling bearer [ 707.721703][T25238] netlink: 'syz.3.4641': attribute type 1 has an invalid length. [ 707.851079][T25243] tipc: Failed to remove unknown binding: 66,1,1/0:715372273/715372275 [ 708.147643][ T5630] Bluetooth: hci0: command 0x0c3a tx timeout [ 708.147715][ T52] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 708.771112][T25272] xt_hashlimit: size too large, truncated to 1048576 [ 709.654447][T25288] __nla_validate_parse: 3 callbacks suppressed [ 709.654473][T25288] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4657'. [ 710.051590][T25296] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4659'. [ 711.092561][ T8836] batadv1: left promiscuous mode [ 711.231557][T25298] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 711.970912][T25350] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4669'. [ 712.257267][T10408] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.257309][T10408] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.257480][T10408] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.257510][T10408] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.257548][T10408] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.257576][T10408] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.257615][T10408] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.257642][T10408] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.467727][ T52] Bluetooth: hci0: command 0x0c3a tx timeout [ 712.498853][T25361] lo: entered promiscuous mode [ 712.498882][T25361] lo: entered allmulticast mode [ 712.501003][T25361] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4672'. [ 712.501027][T25361] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 712.504498][T25362] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4672'. [ 712.504519][T25362] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 712.884722][T25372] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4676'. [ 712.911556][T25376] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4674'. [ 712.956443][T25380] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4675'. [ 713.041775][T25371] veth3: entered promiscuous mode [ 713.041800][T25371] veth3: entered allmulticast mode [ 713.042853][T25371] bridge1: port 1(veth3) entered blocking state [ 713.042964][T25371] bridge1: port 1(veth3) entered disabled state [ 713.055997][T25371] bridge1: port 1(veth3) entered blocking state [ 713.056122][T25371] bridge1: port 1(veth3) entered forwarding state [ 713.163225][T25372] veth5: entered promiscuous mode [ 713.163253][T25372] veth5: entered allmulticast mode [ 713.165439][T25372] bridge1: port 2(veth5) entered blocking state [ 713.165662][T25372] bridge1: port 2(veth5) entered disabled state [ 713.189146][T25372] bridge1: port 2(veth5) entered blocking state [ 713.189479][T25372] bridge1: port 2(veth5) entered forwarding state [ 713.302670][ T8836] bridge1: port 1(veth3) entered disabled state [ 713.321420][ T8836] bridge1: port 2(veth5) entered disabled state [ 713.648413][T25393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4680'. [ 714.881826][T25414] tipc: Enabled bearer , priority 0 [ 714.884290][T25417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4688'. [ 714.909166][T25418] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4688'. [ 715.168891][T25414] syzkaller0: entered promiscuous mode [ 715.168921][T25414] syzkaller0: entered allmulticast mode [ 715.169701][T25414] tipc: Resetting bearer [ 715.172262][ T59] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.193386][T14779] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.193535][T14779] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.193647][T14779] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.579128][T25440] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4690'. [ 715.661911][T25433] syzkaller1: tun_chr_ioctl cmd 1074812117 [ 715.694071][T25413] tipc: Resetting bearer [ 720.935084][T25413] tipc: Disabling bearer [ 720.953014][T25440] kthread_run failed with err -4 [ 721.556234][T25479] netlink: 'syz.2.4699': attribute type 1 has an invalid length. [ 721.556263][T25479] netlink: 'syz.2.4699': attribute type 2 has an invalid length. [ 721.627615][T25482] netlink: 'syz.2.4699': attribute type 1 has an invalid length. [ 721.627658][T25482] netlink: 'syz.2.4699': attribute type 2 has an invalid length. [ 721.924764][T25479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4699'. [ 722.479338][T25507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4705'. [ 722.538939][T25508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4705'. [ 722.929465][T25518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4707'. [ 723.043257][T25515] pim6reg1: entered allmulticast mode [ 723.523949][T25524] syzkaller0: entered promiscuous mode [ 723.523977][T25524] syzkaller0: entered allmulticast mode [ 724.096829][T25544] syzkaller1: entered promiscuous mode [ 724.096857][T25544] syzkaller1: entered allmulticast mode [ 724.148708][T25550] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4717'. [ 725.072698][T25569] syzkaller1: entered promiscuous mode [ 725.072726][T25569] syzkaller1: entered allmulticast mode [ 725.639563][ T8843] nci: nci_rsp_packet: unknown rsp opcode 0x710 [ 726.058217][T25618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4729'. [ 726.058284][T25618] openvswitch: netlink: Message has 1 unknown bytes. [ 728.219345][T25596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 728.493050][T25635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 728.552263][T25635] netlink: 'syz.5.4732': attribute type 2 has an invalid length. [ 728.653880][T25635] : entered promiscuous mode [ 728.838025][T25638] gre4: entered promiscuous mode [ 728.931071][T25642] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.4735'. [ 729.049667][T25645] netlink: 'syz.2.4735': attribute type 11 has an invalid length. [ 729.049695][T25645] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4735'. [ 729.523836][T25662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 729.570353][T25662] netlink: 'syz.0.4740': attribute type 1 has an invalid length. [ 729.702041][T25662] 8021q: adding VLAN 0 to HW filter on device bond5 [ 729.728506][T25656] xt_hashlimit: size too large, truncated to 1048576 [ 729.883748][T25662] veth6: entered allmulticast mode [ 729.985012][T25662] veth7: entered allmulticast mode [ 730.080414][T25662] bond5: (slave veth7): Enslaving as an active interface with an up link [ 730.364990][T25688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4743'. [ 730.448527][T25676] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 730.725670][T25700] netlink: 'syz.3.4747': attribute type 1 has an invalid length. [ 730.847523][T25707] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4747'. [ 730.928176][T25700] bond8: entered promiscuous mode [ 730.930087][T25700] 8021q: adding VLAN 0 to HW filter on device bond8 [ 730.983001][T25710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4748'. [ 731.131636][T25686] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 731.273028][T25717] SET target dimension over the limit! [ 731.275925][T25718] netlink: 'syz.2.4752': attribute type 1 has an invalid length. [ 731.453204][T25724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4753'. [ 731.612938][T25730] netlink: 'syz.1.4755': attribute type 5 has an invalid length. [ 731.756108][T25744] netlink: 'syz.3.4757': attribute type 1 has an invalid length. [ 731.778098][T25741] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4756'. [ 731.778126][T25741] openvswitch: netlink: Flow actions attr not present in new flow. [ 731.816191][T25741] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4756'. [ 731.841892][T25746] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4756'. [ 731.863702][T25720] bond4: (slave bridge4): making interface the new active one [ 731.875381][T25746] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4756'. [ 731.912587][T25720] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 732.170758][T25751] tap0: tun_chr_ioctl cmd 1074025672 [ 732.170781][T25751] tap0: ignored: set checksum disabled [ 732.170971][T25751] tap0: tun_chr_ioctl cmd 2147767519 [ 732.171091][T25752] tap0: tun_chr_ioctl cmd 2147767519 [ 732.390253][ T52] Bluetooth: hci0: command 0x0c3a tx timeout [ 732.817936][T25773] xt_CT: You must specify a L4 protocol and not use inversions on it [ 733.546418][T25802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 733.928580][ T27] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.928644][ T27] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.928706][ T27] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 38235 - 0 [ 733.928806][ T27] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.928869][ T27] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.928931][ T27] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 38235 - 0 [ 733.929029][ T27] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.929095][ T27] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.929161][ T27] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 38235 - 0 [ 733.929257][ T27] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.929326][ T27] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.929393][ T27] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 38235 - 0 [ 734.090752][T25808] netlink: 'syz.3.4774': attribute type 21 has an invalid length. [ 734.090785][T25808] __nla_validate_parse: 67 callbacks suppressed [ 734.090808][T25808] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4774'. [ 734.090875][T25808] netlink: 'syz.3.4774': attribute type 5 has an invalid length. [ 734.090885][T25808] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4774'. [ 734.341923][T25812] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4777'. [ 734.341965][T25812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4777'. [ 734.665124][T25819] tbf_change: 23 callbacks suppressed [ 734.665233][T25819] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 734.684128][T25819] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 734.684977][T25819] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 734.685623][T25819] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 734.686136][T25819] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 734.724343][T25819] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 734.800855][T25827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 734.801546][T25819] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 734.828180][T25819] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 734.834535][T25819] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 734.885359][T25819] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 735.214402][T25846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 735.243853][T25834] netlink: 'syz.2.4780': attribute type 16 has an invalid length. [ 735.243921][T25834] netlink: 'syz.2.4780': attribute type 17 has an invalid length. [ 735.795975][T25834] lo: left promiscuous mode [ 735.917595][T25834] tunl0: left promiscuous mode [ 735.919840][T25834] gre0: left promiscuous mode [ 735.970577][T25834] gretap0: left promiscuous mode [ 736.051052][T25834] bridge2: port 1(erspan0) entered blocking state [ 736.051314][T25834] bridge2: port 1(erspan0) entered forwarding state [ 736.054334][T25834] ip_vti0: left promiscuous mode [ 736.085297][T25834] ip6_vti0: left promiscuous mode [ 736.087632][T25834] sit0: left promiscuous mode [ 736.108794][T25834] ip6tnl0: left promiscuous mode [ 736.112981][T25834] ip6gre0: left promiscuous mode [ 736.132177][T25834] ip6gretap0: left promiscuous mode [ 736.144775][T25834] bond0: left promiscuous mode [ 736.154759][T25834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 736.156078][T25834] team0: left promiscuous mode [ 736.157390][T25834] 8021q: adding VLAN 0 to HW filter on device team0 [ 736.199274][T25834] dummy0: left promiscuous mode [ 736.229369][T25834] nlmon0: left promiscuous mode [ 736.230701][T25834] batadv0: left promiscuous mode [ 736.253047][T25834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.255661][T25834] veth0: left promiscuous mode [ 736.271789][T25834] veth1: left promiscuous mode [ 736.313109][T25834] wg0: left promiscuous mode [ 736.329572][T25834] wg1: left promiscuous mode [ 736.341287][T25834] wg2: left promiscuous mode [ 736.344502][T25834] veth0_to_bridge: left promiscuous mode [ 736.384612][T25834] bond_slave_0: left promiscuous mode [ 736.385809][T25834] veth1_to_bond: left promiscuous mode [ 736.394084][T25834] bond_slave_1: left promiscuous mode [ 736.402477][T25834] veth0_to_team: left promiscuous mode [ 736.427161][T25834] team_slave_0: left promiscuous mode [ 736.428440][T25834] veth1_to_team: left promiscuous mode [ 736.447415][T25834] team_slave_1: left promiscuous mode [ 736.448701][T25834] veth1_to_batadv: left promiscuous mode [ 736.450041][T25834] batadv_slave_1: left promiscuous mode [ 736.454482][T25834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 736.455648][T25834] xfrm0: left promiscuous mode [ 736.487954][T25834] veth0_to_hsr: left promiscuous mode [ 736.503779][T25834] veth1_to_hsr: left promiscuous mode [ 736.505763][T25834] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 736.505790][T25834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 736.505847][T25834] hsr0: left promiscuous mode [ 736.507347][T25834] veth1_virt_wifi: left promiscuous mode [ 736.516966][T25834] veth0_virt_wifi: left promiscuous mode [ 736.555230][T25834] virt_wifi0: left promiscuous mode [ 736.556625][T25834] veth1_vlan: left promiscuous mode [ 736.578064][T25834] vlan0: left promiscuous mode [ 736.579761][T25834] vlan1: left promiscuous mode [ 736.581728][T25834] veth1_vlan: entered promiscuous mode [ 736.582007][T25834] macvlan0: left promiscuous mode [ 736.583550][T25834] macvlan1: left promiscuous mode [ 736.584914][T25834] ipvlan0: left promiscuous mode [ 736.625373][T25834] ipvlan1: left promiscuous mode [ 736.627528][T25834] veth1_macvtap: left promiscuous mode [ 736.630944][T25834] veth0_macvtap: left promiscuous mode [ 736.633339][T25834] veth0_macvtap: entered promiscuous mode [ 736.633932][T25834] macvtap0: left promiscuous mode [ 736.687225][T25867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4786'. [ 736.688051][T25834] veth1_macvtap: entered promiscuous mode [ 736.688336][T25834] macsec0: left promiscuous mode [ 736.692882][T25834] geneve0: left promiscuous mode [ 736.695738][T25834] geneve1: left promiscuous mode [ 736.733461][T25834] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 736.733872][T25834] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 736.735567][T25834] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 736.735944][T25834] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 736.737074][T25834] netdevsim netdevsim2 netdevsim2: left promiscuous mode [ 736.737906][T25834] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 736.739072][T25834] netdevsim netdevsim2 netdevsim3: left promiscuous mode [ 736.739451][T25834] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 736.749882][T25834] macsec1: left promiscuous mode [ 736.757384][T25834] bond1: left promiscuous mode [ 736.757748][T25834] 8021q: adding VLAN 0 to HW filter on device bond1 [ 736.760994][T25834] bridge1: left promiscuous mode [ 736.765047][T25834] veth2: left promiscuous mode [ 736.772715][T25834] veth3: left promiscuous mode [ 736.774811][T25834] bond2: left promiscuous mode [ 736.778157][T25834] 8021q: adding VLAN 0 to HW filter on device bond2 [ 736.784563][T25834] veth4: left promiscuous mode [ 736.786896][T25834] veth5: left promiscuous mode [ 736.799365][T25834] bareudp0: left promiscuous mode [ 736.800854][T25834] ip6gre1: left promiscuous mode [ 736.850805][T25834] bridge0.257: left promiscuous mode [ 736.861262][T25834] ip6tnl1: left promiscuous mode [ 736.865109][T25834] gtp0: left promiscuous mode [ 736.874815][T25834] : left promiscuous mode [ 736.880162][T25834] dummy1: left promiscuous mode [ 736.901513][T25874] digital: digital_start_poll: Unknown protocol [ 736.916377][T25834] vti0: left promiscuous mode [ 736.919977][T25834] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 737.054722][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.054840][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 737.401069][T10408] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.401139][T10408] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.533141][T25884] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 737.928021][ T59] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.928675][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.928727][ T59] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.928755][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.981634][ T1006] bond3: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 737.982003][ T1006] bond3: (slave veth0_to_bond): making interface the new active one [ 738.033293][ T1006] bond3: active interface up! [ 738.252823][T25905] netlink: 'syz.1.4793': attribute type 1 has an invalid length. [ 738.564316][T25905] 8021q: adding VLAN 0 to HW filter on device bond5 [ 738.660015][T25915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4795'. [ 738.675897][T25906] bond5: (slave veth0_to_bond): making interface the new active one [ 738.696191][T25906] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 738.707297][ T59] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.707335][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.105788][T10408] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 739.106392][T10408] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 739.129433][T25920] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4796'. [ 739.141942][ T7902] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 739.359987][T25936] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.4800'. [ 739.448803][T12648] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 739.589550][T12648] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 739.919800][T25958] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4804'. [ 740.909557][T25984] syzkaller1: entered promiscuous mode [ 740.909584][T25984] syzkaller1: entered allmulticast mode [ 740.913052][T25988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4811'. [ 741.386009][T25994] FAULT_INJECTION: forcing a failure. [ 741.386009][T25994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 741.386050][T25994] CPU: 1 UID: 0 PID: 25994 Comm: syz.0.4815 Not tainted syzkaller #0 PREEMPT(full) [ 741.386091][T25994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 741.386107][T25994] Call Trace: [ 741.386116][T25994] [ 741.386126][T25994] dump_stack_lvl+0xe8/0x150 [ 741.386167][T25994] should_fail_ex+0x410/0x560 [ 741.386198][T25994] _copy_from_user+0x2d/0xb0 [ 741.386229][T25994] ___sys_sendmsg+0x1c6/0x360 [ 741.386261][T25994] ? __lock_acquire+0x747/0x2de0 [ 741.386290][T25994] ? __pfx____sys_sendmsg+0x10/0x10 [ 741.386360][T25994] ? __fget_files+0x2a/0x420 [ 741.386391][T25994] ? __fget_files+0x3a2/0x420 [ 741.386434][T25994] __x64_sys_sendmsg+0x1b1/0x290 [ 741.386468][T25994] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 741.386523][T25994] do_syscall_64+0x166/0x520 [ 741.386551][T25994] ? trace_irq_disable+0x3b/0x140 [ 741.386574][T25994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.386605][T25994] ? clear_bhb_loop+0x70/0xc0 [ 741.386632][T25994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.386654][T25994] RIP: 0033:0x7f86b9d9e159 [ 741.386674][T25994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.386692][T25994] RSP: 002b:00007f86bad06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 741.386716][T25994] RAX: ffffffffffffffda RBX: 00007f86ba025fa0 RCX: 00007f86b9d9e159 [ 741.386733][T25994] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 741.386747][T25994] RBP: 00007f86bad06090 R08: 0000000000000000 R09: 0000000000000000 [ 741.386761][T25994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.386774][T25994] R13: 00007f86ba026038 R14: 00007f86ba025fa0 R15: 00007ffd62392f78 [ 741.386809][T25994] [ 741.391286][T25992] netlink: 'syz.2.4813': attribute type 1 has an invalid length. [ 741.895319][T25996] veth15: entered allmulticast mode [ 741.994887][T25997] bond3: (slave veth0_to_bond): Releasing active interface [ 742.047795][T25997] bond5: (slave veth0_to_bond): making interface the new active one [ 742.049081][T25997] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 742.241179][T26009] Bluetooth: MGMT ver 1.23 [ 742.389104][T25992] macvlan4: entered promiscuous mode [ 742.389166][T25992] macvlan4: entered allmulticast mode [ 742.393655][T25992] bond5: entered promiscuous mode [ 742.393722][T25992] veth0_to_bond: entered promiscuous mode [ 742.461953][T25992] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 742.462918][T25992] bond5: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 742.465244][T25992] bond5: left promiscuous mode [ 742.465269][T25992] veth0_to_bond: left promiscuous mode [ 743.380013][T26036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4822'. [ 743.380047][T26036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4822'. [ 743.427147][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 743.557615][T26036] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4822'. [ 743.675112][T26046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4824'. [ 744.781657][T26061] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4829'. [ 744.804056][T26061] netlink: 'syz.3.4829': attribute type 21 has an invalid length. [ 744.804081][T26061] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4829'. [ 744.804142][T26061] netlink: 'syz.3.4829': attribute type 5 has an invalid length. [ 744.804157][T26061] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4829'. [ 744.812723][T26061] x_tables: ip_tables: ah match: only valid for protocol 51 [ 745.069585][T26065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 745.108276][T26065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4830'. [ 745.498574][T26076] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4833'. [ 745.708011][T26082] veth1: entered promiscuous mode [ 745.708077][T26082] veth1: entered allmulticast mode [ 745.974889][T26099] veth1_macvtap: left promiscuous mode [ 746.957660][ T8845] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.957735][ T8845] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.957791][ T8845] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.957856][ T8845] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.236146][T26127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4846'. [ 747.403160][T26136] FAULT_INJECTION: forcing a failure. [ 747.403160][T26136] name failslab, interval 1, probability 0, space 0, times 0 [ 747.403198][T26136] CPU: 1 UID: 0 PID: 26136 Comm: syz.2.4848 Not tainted syzkaller #0 PREEMPT(full) [ 747.403224][T26136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 747.403238][T26136] Call Trace: [ 747.403247][T26136] [ 747.403256][T26136] dump_stack_lvl+0xe8/0x150 [ 747.403305][T26136] should_fail_ex+0x410/0x560 [ 747.403337][T26136] should_failslab+0xa8/0x100 [ 747.403367][T26136] ? skb_clone+0x212/0x3a0 [ 747.403474][T26136] kmem_cache_alloc_noprof+0xa1/0x600 [ 747.403514][T26136] ? skb_clone+0x212/0x3a0 [ 747.403553][T26136] skb_clone+0x212/0x3a0 [ 747.403589][T26136] __netlink_deliver_tap+0x413/0x860 [ 747.403695][T26136] ? netlink_deliver_tap+0x2e/0x1b0 [ 747.403732][T26136] netlink_deliver_tap+0x19c/0x1b0 [ 747.403769][T26136] netlink_unicast+0x781/0x940 [ 747.403825][T26136] netlink_sendmsg+0x813/0xb40 [ 747.403870][T26136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 747.403916][T26136] ? apparmor_socket_sendmsg+0x98/0x360 [ 747.403945][T26136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 747.403990][T26136] sock_sendmsg_nosec+0x13a/0x180 [ 747.404017][T26136] ____sys_sendmsg+0x54e/0x850 [ 747.404055][T26136] ? __pfx_____sys_sendmsg+0x10/0x10 [ 747.404098][T26136] ? import_iovec+0x73/0xa0 [ 747.404131][T26136] ___sys_sendmsg+0x2a5/0x360 [ 747.404160][T26136] ? __lock_acquire+0x747/0x2de0 [ 747.404195][T26136] ? __pfx____sys_sendmsg+0x10/0x10 [ 747.404267][T26136] ? __fget_files+0x2a/0x420 [ 747.404297][T26136] ? __fget_files+0x3a2/0x420 [ 747.404339][T26136] __x64_sys_sendmsg+0x1b1/0x290 [ 747.404372][T26136] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 747.404426][T26136] do_syscall_64+0x166/0x520 [ 747.404454][T26136] ? trace_irq_disable+0x3b/0x140 [ 747.404478][T26136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.404502][T26136] ? clear_bhb_loop+0x70/0xc0 [ 747.404529][T26136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.404552][T26136] RIP: 0033:0x7fc866d9e159 [ 747.404573][T26136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.404593][T26136] RSP: 002b:00007fc867d01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 747.404618][T26136] RAX: ffffffffffffffda RBX: 00007fc867025fa0 RCX: 00007fc866d9e159 [ 747.404635][T26136] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 747.404649][T26136] RBP: 00007fc867d01090 R08: 0000000000000000 R09: 0000000000000000 [ 747.404664][T26136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 747.404678][T26136] R13: 00007fc867026038 R14: 00007fc867025fa0 R15: 00007ffc44b56ce8 [ 747.404715][T26136] [ 747.749922][T26131] v: renamed from veth0_vlan [ 747.932033][T26145] netlink: 'syz.5.4853': attribute type 1 has an invalid length. [ 748.657691][T26175] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4856'. [ 748.696708][T26178] netlink: 'syz.5.4857': attribute type 4 has an invalid length. [ 748.696732][T26178] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4857'. [ 748.699981][T26178] .`: renamed from bond0 [ 749.169884][T26188] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 749.213550][T26193] veth1: left promiscuous mode [ 749.213576][T26193] veth1: left allmulticast mode [ 749.275300][T26193] mac80211_hwsim hwsim61 wlan0: left promiscuous mode [ 749.275401][T26193] mac80211_hwsim hwsim61 wlan0: left allmulticast mode [ 749.276218][T26193] geneve2: left promiscuous mode [ 749.276256][T26193] geneve2: left allmulticast mode [ 749.464290][T26209] FAULT_INJECTION: forcing a failure. [ 749.464290][T26209] name failslab, interval 1, probability 0, space 0, times 0 [ 749.464360][T26209] CPU: 1 UID: 0 PID: 26209 Comm: syz.0.4863 Not tainted syzkaller #0 PREEMPT(full) [ 749.464385][T26209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 749.464399][T26209] Call Trace: [ 749.464408][T26209] [ 749.464418][T26209] dump_stack_lvl+0xe8/0x150 [ 749.464458][T26209] should_fail_ex+0x410/0x560 [ 749.464491][T26209] should_failslab+0xa8/0x100 [ 749.464519][T26209] ? skb_clone+0x212/0x3a0 [ 749.464552][T26209] kmem_cache_alloc_noprof+0xa1/0x600 [ 749.464590][T26209] ? skb_clone+0x212/0x3a0 [ 749.464628][T26209] skb_clone+0x212/0x3a0 [ 749.464665][T26209] __netlink_deliver_tap+0x413/0x860 [ 749.464713][T26209] ? netlink_deliver_tap+0x2e/0x1b0 [ 749.464749][T26209] netlink_deliver_tap+0x19c/0x1b0 [ 749.464786][T26209] netlink_unicast+0x781/0x940 [ 749.464830][T26209] netlink_sendmsg+0x813/0xb40 [ 749.464876][T26209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 749.464920][T26209] ? apparmor_socket_sendmsg+0x98/0x360 [ 749.464949][T26209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 749.464982][T26209] sock_sendmsg_nosec+0x13a/0x180 [ 749.465008][T26209] ____sys_sendmsg+0x54e/0x850 [ 749.465046][T26209] ? __pfx_____sys_sendmsg+0x10/0x10 [ 749.465094][T26209] ? import_iovec+0x73/0xa0 [ 749.465127][T26209] ___sys_sendmsg+0x2a5/0x360 [ 749.465156][T26209] ? __lock_acquire+0x747/0x2de0 [ 749.465185][T26209] ? __pfx____sys_sendmsg+0x10/0x10 [ 749.465258][T26209] ? __fget_files+0x2a/0x420 [ 749.465287][T26209] ? __fget_files+0x3a2/0x420 [ 749.465331][T26209] __x64_sys_sendmsg+0x1b1/0x290 [ 749.465365][T26209] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 749.465418][T26209] do_syscall_64+0x166/0x520 [ 749.465445][T26209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.465467][T26209] ? clear_bhb_loop+0x70/0xc0 [ 749.465493][T26209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.465515][T26209] RIP: 0033:0x7f86b9d9e159 [ 749.465534][T26209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.465552][T26209] RSP: 002b:00007f86bad06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 749.465576][T26209] RAX: ffffffffffffffda RBX: 00007f86ba025fa0 RCX: 00007f86b9d9e159 [ 749.465592][T26209] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 749.465606][T26209] RBP: 00007f86bad06090 R08: 0000000000000000 R09: 0000000000000000 [ 749.465619][T26209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.465631][T26209] R13: 00007f86ba026038 R14: 00007f86ba025fa0 R15: 00007ffd62392f78 [ 749.465668][T26209] [ 749.688149][T26202] syzkaller0: entered promiscuous mode [ 749.688173][T26202] syzkaller0: entered allmulticast mode [ 749.814361][T26196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4861'. [ 750.437943][T26233] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4866'. [ 750.457060][T26233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4866'. [ 750.588797][T26237] netlink: 'syz.1.4869': attribute type 1 has an invalid length. [ 750.833307][T26237] 8021q: adding VLAN 0 to HW filter on device bond6 [ 750.835830][ T5282] v: left promiscuous mode [ 750.884812][ T6137] v: entered promiscuous mode [ 751.046542][T26257] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4871'. [ 751.320500][T26265] netlink: 'syz.1.4874': attribute type 1 has an invalid length. [ 751.539309][T26276] FAULT_INJECTION: forcing a failure. [ 751.539309][T26276] name failslab, interval 1, probability 0, space 0, times 0 [ 751.539347][T26276] CPU: 0 UID: 0 PID: 26276 Comm: syz.2.4875 Not tainted syzkaller #0 PREEMPT(full) [ 751.539374][T26276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 751.539389][T26276] Call Trace: [ 751.539398][T26276] [ 751.539410][T26276] dump_stack_lvl+0xe8/0x150 [ 751.539452][T26276] should_fail_ex+0x410/0x560 [ 751.539485][T26276] should_failslab+0xa8/0x100 [ 751.539516][T26276] ? skb_clone+0x212/0x3a0 [ 751.539549][T26276] kmem_cache_alloc_noprof+0xa1/0x600 [ 751.539598][T26276] ? skb_clone+0x212/0x3a0 [ 751.539638][T26276] skb_clone+0x212/0x3a0 [ 751.539669][T26276] ? nfnetlink_rcv+0x4b0/0x28c0 [ 751.539816][T26276] nfnetlink_rcv+0x4de/0x28c0 [ 751.539854][T26276] ? __dev_queue_xmit+0x29b/0x3820 [ 751.539926][T26276] ? __local_bh_enable_ip+0xd6/0x140 [ 751.539959][T26276] ? lockdep_hardirqs_on+0x7b/0x110 [ 751.539989][T26276] ? __dev_queue_xmit+0x29b/0x3820 [ 751.540021][T26276] ? __local_bh_enable_ip+0xd6/0x140 [ 751.540051][T26276] ? __dev_queue_xmit+0x29b/0x3820 [ 751.540087][T26276] ? __dev_queue_xmit+0x1edc/0x3820 [ 751.540120][T26276] ? do_syscall_64+0x166/0x520 [ 751.540147][T26276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.540185][T26276] ? __dev_queue_xmit+0x29b/0x3820 [ 751.540220][T26276] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 751.540271][T26276] ? ref_tracker_free+0x689/0x830 [ 751.540348][T26276] ? __pfx_ref_tracker_free+0x10/0x10 [ 751.540387][T26276] ? __skb_clone+0x449/0x6c0 [ 751.540427][T26276] ? skb_clone+0x246/0x3a0 [ 751.540462][T26276] ? __netlink_deliver_tap+0x811/0x860 [ 751.540498][T26276] ? netlink_deliver_tap+0x2e/0x1b0 [ 751.540540][T26276] ? netlink_deliver_tap+0x2e/0x1b0 [ 751.540584][T26276] ? netlink_deliver_tap+0x2e/0x1b0 [ 751.540626][T26276] netlink_unicast+0x7bd/0x940 [ 751.540671][T26276] netlink_sendmsg+0x813/0xb40 [ 751.540718][T26276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 751.540764][T26276] ? apparmor_socket_sendmsg+0x98/0x360 [ 751.540794][T26276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 751.540830][T26276] sock_sendmsg_nosec+0x13a/0x180 [ 751.540858][T26276] ____sys_sendmsg+0x54e/0x850 [ 751.540901][T26276] ? __pfx_____sys_sendmsg+0x10/0x10 [ 751.540961][T26276] ? import_iovec+0x73/0xa0 [ 751.540995][T26276] ___sys_sendmsg+0x2a5/0x360 [ 751.541025][T26276] ? __lock_acquire+0x747/0x2de0 [ 751.541055][T26276] ? __pfx____sys_sendmsg+0x10/0x10 [ 751.541127][T26276] ? __fget_files+0x2a/0x420 [ 751.541158][T26276] ? __fget_files+0x3a2/0x420 [ 751.541202][T26276] __x64_sys_sendmsg+0x1b1/0x290 [ 751.541237][T26276] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 751.541293][T26276] do_syscall_64+0x166/0x520 [ 751.541320][T26276] ? trace_irq_disable+0x3b/0x140 [ 751.541344][T26276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.541369][T26276] ? clear_bhb_loop+0x70/0xc0 [ 751.541404][T26276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.541428][T26276] RIP: 0033:0x7fc866d9e159 [ 751.541450][T26276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.541471][T26276] RSP: 002b:00007fc867d01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 751.541496][T26276] RAX: ffffffffffffffda RBX: 00007fc867025fa0 RCX: 00007fc866d9e159 [ 751.541514][T26276] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 751.541528][T26276] RBP: 00007fc867d01090 R08: 0000000000000000 R09: 0000000000000000 [ 751.541543][T26276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.541558][T26276] R13: 00007fc867026038 R14: 00007fc867025fa0 R15: 00007ffc44b56ce8 [ 751.541603][T26276] [ 751.829736][T26278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4876'. [ 751.829775][T26278] block nbd0: not configured, cannot reconfigure [ 752.399825][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 752.990813][T26301] netlink: 'syz.1.4883': attribute type 3 has an invalid length. [ 753.575862][T26326] FAULT_INJECTION: forcing a failure. [ 753.575862][T26326] name failslab, interval 1, probability 0, space 0, times 0 [ 753.575901][T26326] CPU: 0 UID: 0 PID: 26326 Comm: syz.0.4888 Not tainted syzkaller #0 PREEMPT(full) [ 753.575927][T26326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 753.575943][T26326] Call Trace: [ 753.575953][T26326] [ 753.575964][T26326] dump_stack_lvl+0xe8/0x150 [ 753.576006][T26326] should_fail_ex+0x410/0x560 [ 753.576039][T26326] should_failslab+0xa8/0x100 [ 753.576072][T26326] __kvmalloc_node_noprof+0x176/0x820 [ 753.576104][T26326] ? __pfx_nft_select_set_ops+0x10/0x10 [ 753.576211][T26326] ? nla_strcmp+0xf8/0x130 [ 753.576242][T26326] ? nf_tables_newset+0x134a/0x2570 [ 753.576300][T26326] ? nf_tables_newset+0x134a/0x2570 [ 753.576332][T26326] ? nft_set_lookup+0x128/0x150 [ 753.576399][T26326] nf_tables_newset+0x134a/0x2570 [ 753.576454][T26326] ? __pfx_nf_tables_newset+0x10/0x10 [ 753.576483][T26326] ? nft_pernet+0x23/0x240 [ 753.576520][T26326] ? lock_acquire+0x115/0x350 [ 753.576562][T26326] ? __nla_parse+0x40/0x60 [ 753.576596][T26326] nfnetlink_rcv+0x1288/0x28c0 [ 753.576665][T26326] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 753.576715][T26326] ? ref_tracker_free+0x689/0x830 [ 753.576770][T26326] ? skb_clone+0x246/0x3a0 [ 753.576807][T26326] ? __netlink_deliver_tap+0x811/0x860 [ 753.576859][T26326] ? netlink_deliver_tap+0x2e/0x1b0 [ 753.576895][T26326] ? netlink_deliver_tap+0x2e/0x1b0 [ 753.576937][T26326] netlink_unicast+0x7bd/0x940 [ 753.576983][T26326] netlink_sendmsg+0x813/0xb40 [ 753.577030][T26326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 753.577075][T26326] ? apparmor_socket_sendmsg+0x98/0x360 [ 753.577106][T26326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 753.577141][T26326] sock_sendmsg_nosec+0x13a/0x180 [ 753.577169][T26326] ____sys_sendmsg+0x54e/0x850 [ 753.577208][T26326] ? __pfx_____sys_sendmsg+0x10/0x10 [ 753.577250][T26326] ? import_iovec+0x73/0xa0 [ 753.577284][T26326] ___sys_sendmsg+0x2a5/0x360 [ 753.577315][T26326] ? __lock_acquire+0x747/0x2de0 [ 753.577345][T26326] ? __pfx____sys_sendmsg+0x10/0x10 [ 753.577416][T26326] ? __fget_files+0x2a/0x420 [ 753.577456][T26326] ? __fget_files+0x3a2/0x420 [ 753.577500][T26326] __x64_sys_sendmsg+0x1b1/0x290 [ 753.577537][T26326] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 753.577594][T26326] do_syscall_64+0x166/0x520 [ 753.577624][T26326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.577648][T26326] ? clear_bhb_loop+0x70/0xc0 [ 753.577678][T26326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.577702][T26326] RIP: 0033:0x7f86b9d9e159 [ 753.577724][T26326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 753.577744][T26326] RSP: 002b:00007f86bad06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 753.577771][T26326] RAX: ffffffffffffffda RBX: 00007f86ba025fa0 RCX: 00007f86b9d9e159 [ 753.577789][T26326] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 753.577805][T26326] RBP: 00007f86bad06090 R08: 0000000000000000 R09: 0000000000000000 [ 753.577820][T26326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.577835][T26326] R13: 00007f86ba026038 R14: 00007f86ba025fa0 R15: 00007ffd62392f78 [ 753.577873][T26326] [ 754.108686][T26329] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4890'. [ 754.354656][T26334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4891'. [ 754.591367][T26340] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 754.926282][T26343] bond0: entered allmulticast mode [ 754.945695][T26351] netlink: 'syz.3.4895': attribute type 1 has an invalid length. [ 755.081644][T26355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4895'. [ 755.164290][T26358] xt_IDLETIMER: timeout value is too big [ 755.250660][T26351] bond9: entered promiscuous mode [ 755.259473][T26351] 8021q: adding VLAN 0 to HW filter on device bond9 [ 755.363145][T26355] bond9 (unregistering): Released all slaves [ 755.972981][T26384] ipt_REJECT: TCP_RESET invalid for non-tcp [ 755.988481][T26382] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4903'. [ 756.653185][T26406] xt_cgroup: invalid path, errno=-2 [ 757.064480][ T116] IPVS: starting estimator thread 0... [ 757.148188][T26419] IPVS: using max 27 ests per chain, 64800 per kthread [ 757.178934][T26417] syzkaller1: entered promiscuous mode [ 757.178961][T26417] syzkaller1: entered allmulticast mode [ 757.252622][T26418] xt_hashlimit: size too large, truncated to 1048576 [ 757.326338][T26428] syzkaller0: entered promiscuous mode [ 757.326363][T26428] syzkaller0: entered allmulticast mode [ 757.388746][T26420] netlink: 'syz.1.4912': attribute type 10 has an invalid length. [ 757.851400][T26443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 757.856308][T26444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 757.917337][T26444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 757.961608][T26444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 757.965211][T26444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.013293][T26444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.038515][T26444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.091312][T26444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.121400][T26444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.123850][T26444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.125152][T26444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.126392][T26444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.139494][T26444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.244932][T26444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.279926][T26444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.328863][T26444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.374898][T26444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.405595][T26444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.439006][T26444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.503448][T26444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.565054][T26444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.603823][T26444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.660048][T26444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.661421][T26444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.662681][T26444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.736499][T26444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.805834][T26444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.860358][T26444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.903063][T26444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.904672][T26444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.906244][T26444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.907797][T26444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 759.579660][T26480] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4927'. [ 759.742609][T26484] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4927'. [ 759.879734][T26492] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4929'. [ 759.993656][T26498] netlink: 712 bytes leftover after parsing attributes in process `syz.5.4929'. [ 759.993684][T26498] netlink: 5504 bytes leftover after parsing attributes in process `syz.5.4929'. [ 759.993702][T26498] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4929'. [ 760.165123][T26500] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4931'. [ 760.165152][T26500] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4931'. [ 760.380257][T26503] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 760.380384][T26503] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 760.380685][T26503] veth0_virt_wifi: entered allmulticast mode [ 760.386024][T26503] veth0_virt_wifi: entered promiscuous mode [ 760.428476][T26508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 760.542206][T26511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 761.110751][T26526] ip_vti0: entered promiscuous mode [ 761.110958][T26526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4939'. [ 761.234407][T26530] Bluetooth: hci0: unsupported parameter 5135 [ 761.234479][T26530] Bluetooth: hci0: unsupported parameter 8192 [ 761.234573][T26530] Bluetooth: hci0: unsupported parameter 5135 [ 761.234607][T26530] Bluetooth: hci0: unsupported parameter 8192 [ 761.410949][T26542] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4942'. [ 761.411005][T26542] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4942'. [ 761.411425][T26542] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4942'. [ 761.411464][T26542] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4942'. [ 761.496494][T26542] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4942'. [ 761.496558][T26542] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4942'. [ 761.501375][T26542] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4942'. [ 761.971184][T26556] netlink: 'syz.0.4945': attribute type 3 has an invalid length. [ 762.060856][T26557] Bluetooth: hci0: unsupported parameter 1280 [ 762.060882][T26557] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 762.629762][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 762.649276][T26576] sch_tbf: burst 0 is lower than device lo mtu (1296) ! [ 762.744591][T26579] syzkaller0: entered promiscuous mode [ 762.744622][T26579] syzkaller0: entered allmulticast mode [ 764.886356][T26557] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 767.895171][T26609] lo speed is unknown, defaulting to 1000 [ 767.911352][T26624] netlink: 'syz.0.4960': attribute type 6 has an invalid length. [ 767.911417][T26624] netlink: 'syz.0.4960': attribute type 7 has an invalid length. [ 767.911453][T26624] netlink: 'syz.0.4960': attribute type 8 has an invalid length. [ 767.912408][T26609] lo speed is unknown, defaulting to 1000 [ 768.128037][T26609] lo speed is unknown, defaulting to 1000 [ 768.332524][T26611] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 768.451682][T26651] sctp: [Deprecated]: syz.2.4966 (pid 26651) Use of struct sctp_assoc_value in delayed_ack socket option. [ 768.451682][T26651] Use struct sctp_sack_info instead [ 768.452698][T26651] sctp: [Deprecated]: syz.2.4966 (pid 26651) Use of struct sctp_assoc_value in delayed_ack socket option. [ 768.452698][T26651] Use struct sctp_sack_info instead [ 768.906715][T26657] __nla_validate_parse: 127 callbacks suppressed [ 768.906740][T26657] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4968'. [ 768.907571][T26657] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4968'. [ 768.907596][T26657] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4968'. [ 769.000560][T26639] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 769.000624][T26639] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 769.051616][T26660] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4968'. [ 769.052185][T26660] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4968'. [ 769.052211][T26660] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4968'. [ 769.125118][T26639] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 769.125184][T26639] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 769.150295][T26609] infiniband syz0: set down [ 769.152527][T26609] infiniband syz0: added lo [ 769.155906][ T6131] lo speed is unknown, defaulting to 1000 [ 769.156323][T26609] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 769.182037][T26609] infiniband syz0: Couldn't open port 1 [ 769.182506][T26609] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 769.182546][T26609] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 769.182607][T26609] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 769.329869][T26609] RDS/IB: syz0: added [ 769.329932][T26609] smc: adding ib device syz0 with port count 1 [ 769.329956][T26609] smc: ib device syz0 port 1 has no pnetid [ 769.445210][ T6116] lo speed is unknown, defaulting to 1000 [ 769.445287][T26609] lo speed is unknown, defaulting to 1000 [ 769.445443][T26639] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 769.445464][T26639] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 769.510441][T26668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4970'. [ 769.669420][T26639] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 769.669447][T26639] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 770.010114][T26672] syzkaller0: entered promiscuous mode [ 770.010178][T26672] syzkaller0: entered allmulticast mode [ 770.317091][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 770.422449][T26684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4972'. [ 770.422542][T26684] netlink: 'syz.3.4972': attribute type 21 has an invalid length. [ 770.675421][T26609] lo speed is unknown, defaulting to 1000 [ 771.999691][T26609] lo speed is unknown, defaulting to 1000 [ 772.023216][T26728] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4983'. [ 772.163634][T26731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4983'. [ 772.279695][T26737] FAULT_INJECTION: forcing a failure. [ 772.279695][T26737] name failslab, interval 1, probability 0, space 0, times 0 [ 772.279735][T26737] CPU: 0 UID: 0 PID: 26737 Comm: syz.3.4985 Not tainted syzkaller #0 PREEMPT(full) [ 772.279761][T26737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 772.279776][T26737] Call Trace: [ 772.279786][T26737] [ 772.279797][T26737] dump_stack_lvl+0xe8/0x150 [ 772.279847][T26737] should_fail_ex+0x410/0x560 [ 772.279881][T26737] should_failslab+0xa8/0x100 [ 772.279912][T26737] __kmalloc_cache_noprof+0xa3/0x600 [ 772.279937][T26737] ? __kmalloc_cache_noprof+0x14d/0x600 [ 772.279959][T26737] ? sctp_add_bind_addr+0x8c/0x370 [ 772.279992][T26737] ? sctp_add_bind_addr+0x8c/0x370 [ 772.280034][T26737] sctp_add_bind_addr+0x8c/0x370 [ 772.280074][T26737] sctp_copy_local_addr_list+0x31a/0x4e0 [ 772.280221][T26737] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 772.280260][T26737] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 772.280298][T26737] ? sctp_v6_is_any+0x64/0x80 [ 772.280362][T26737] ? sctp_copy_one_addr+0x93/0x360 [ 772.280402][T26737] sctp_bind_addr_copy+0xb3/0x3c0 [ 772.280440][T26737] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 772.280476][T26737] sctp_connect_new_asoc+0x2ff/0x6b0 [ 772.280509][T26737] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 772.280545][T26737] ? __local_bh_enable_ip+0xd6/0x140 [ 772.280576][T26737] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 772.280616][T26737] ? security_sctp_bind_connect+0x7e/0x2c0 [ 772.280644][T26737] sctp_sendmsg+0x159b/0x2d00 [ 772.280688][T26737] ? __pfx_sctp_sendmsg+0x10/0x10 [ 772.280721][T26737] ? __lock_acquire+0x747/0x2de0 [ 772.280762][T26737] ? aa_sock_msg_perm+0xf5/0x210 [ 772.280791][T26737] ? sock_rps_record_flow+0x19/0x350 [ 772.280819][T26737] ? inet_sendmsg+0x298/0x320 [ 772.280845][T26737] ? __pfx_inet_sendmsg+0x10/0x10 [ 772.280867][T26737] sock_sendmsg_nosec+0x10e/0x180 [ 772.280895][T26737] ____sys_sendmsg+0x54e/0x850 [ 772.280933][T26737] ? __pfx_____sys_sendmsg+0x10/0x10 [ 772.280977][T26737] ? import_iovec+0x73/0xa0 [ 772.281013][T26737] ___sys_sendmsg+0x2a5/0x360 [ 772.281043][T26737] ? __lock_acquire+0x747/0x2de0 [ 772.281073][T26737] ? __pfx____sys_sendmsg+0x10/0x10 [ 772.281146][T26737] ? __fget_files+0x2a/0x420 [ 772.281179][T26737] ? __fget_files+0x3a2/0x420 [ 772.281222][T26737] __x64_sys_sendmsg+0x1b1/0x290 [ 772.281258][T26737] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 772.281315][T26737] do_syscall_64+0x166/0x520 [ 772.281345][T26737] ? trace_irq_disable+0x3b/0x140 [ 772.281369][T26737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.281394][T26737] ? clear_bhb_loop+0x70/0xc0 [ 772.281423][T26737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.281447][T26737] RIP: 0033:0x7f4b0e99e159 [ 772.281470][T26737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.281490][T26737] RSP: 002b:00007f4b0f7b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 772.281516][T26737] RAX: ffffffffffffffda RBX: 00007f4b0ec25fa0 RCX: 00007f4b0e99e159 [ 772.281532][T26737] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 772.281548][T26737] RBP: 00007f4b0f7b8090 R08: 0000000000000000 R09: 0000000000000000 [ 772.281563][T26737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 772.281578][T26737] R13: 00007f4b0ec26038 R14: 00007f4b0ec25fa0 R15: 00007ffcc4582088 [ 772.281631][T26737] [ 772.868260][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 773.709633][T10408] pim6reg99999999: left allmulticast mode [ 774.823095][T10408] bond10 (unregistering): (slave gretap1): Releasing active interface [ 774.857590][T26787] netlink: 'syz.2.4995': attribute type 9 has an invalid length. [ 775.065774][T10408] bond6 (unregistering): (slave geneve5): Releasing active interface [ 775.125399][T10408] bond5 (unregistering): (slave geneve4): Releasing active interface [ 775.182533][T26795] FAULT_INJECTION: forcing a failure. [ 775.182533][T26795] name failslab, interval 1, probability 0, space 0, times 0 [ 775.182597][T26795] CPU: 1 UID: 0 PID: 26795 Comm: syz.0.4997 Not tainted syzkaller #0 PREEMPT(full) [ 775.182626][T26795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 775.182641][T26795] Call Trace: [ 775.182651][T26795] [ 775.182662][T26795] dump_stack_lvl+0xe8/0x150 [ 775.182701][T26795] should_fail_ex+0x410/0x560 [ 775.182735][T26795] should_failslab+0xa8/0x100 [ 775.182768][T26795] __kmalloc_cache_noprof+0xa3/0x600 [ 775.182793][T26795] ? sctp_add_bind_addr+0x8c/0x370 [ 775.182829][T26795] ? sctp_add_bind_addr+0x8c/0x370 [ 775.182878][T26795] sctp_add_bind_addr+0x8c/0x370 [ 775.182919][T26795] sctp_copy_local_addr_list+0x31a/0x4e0 [ 775.182958][T26795] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 775.182995][T26795] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 775.183034][T26795] ? sctp_v6_is_any+0x64/0x80 [ 775.183059][T26795] ? sctp_copy_one_addr+0x93/0x360 [ 775.183098][T26795] sctp_bind_addr_copy+0xb3/0x3c0 [ 775.183134][T26795] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 775.183171][T26795] sctp_connect_new_asoc+0x2ff/0x6b0 [ 775.183203][T26795] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 775.183233][T26795] ? sctp_sendmsg+0x157d/0x2d00 [ 775.183258][T26795] sctp_sendmsg+0x159b/0x2d00 [ 775.183290][T26795] ? __pfx_sctp_sendmsg+0x10/0x10 [ 775.183314][T26795] ? irqentry_exit+0x218/0x910 [ 775.183339][T26795] ? irqentry_exit+0x218/0x910 [ 775.183369][T26795] ? aa_sock_msg_perm+0xf5/0x210 [ 775.183394][T26795] ? sock_rps_record_flow+0x19/0x350 [ 775.183415][T26795] ? inet_sendmsg+0x298/0x320 [ 775.183434][T26795] ? __pfx_inet_sendmsg+0x10/0x10 [ 775.183451][T26795] sock_sendmsg_nosec+0x10e/0x180 [ 775.183474][T26795] ____sys_sendmsg+0x54e/0x850 [ 775.183503][T26795] ? __pfx_____sys_sendmsg+0x10/0x10 [ 775.183535][T26795] ? import_iovec+0x73/0xa0 [ 775.183561][T26795] ___sys_sendmsg+0x2a5/0x360 [ 775.183584][T26795] ? __lock_acquire+0x747/0x2de0 [ 775.183607][T26795] ? __pfx____sys_sendmsg+0x10/0x10 [ 775.183667][T26795] ? __fget_files+0x2a/0x420 [ 775.183691][T26795] ? __fget_files+0x3a2/0x420 [ 775.183725][T26795] __x64_sys_sendmsg+0x1b1/0x290 [ 775.183752][T26795] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 775.183795][T26795] do_syscall_64+0x166/0x520 [ 775.183815][T26795] ? trace_irq_disable+0x3b/0x140 [ 775.183833][T26795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.183852][T26795] ? clear_bhb_loop+0x70/0xc0 [ 775.183880][T26795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.183899][T26795] RIP: 0033:0x7f86b9d9e159 [ 775.183916][T26795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.183932][T26795] RSP: 002b:00007f86bad06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 775.183952][T26795] RAX: ffffffffffffffda RBX: 00007f86ba025fa0 RCX: 00007f86b9d9e159 [ 775.183966][T26795] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 775.183982][T26795] RBP: 00007f86bad06090 R08: 0000000000000000 R09: 0000000000000000 [ 775.183995][T26795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 775.184005][T26795] R13: 00007f86ba026038 R14: 00007f86ba025fa0 R15: 00007ffd62392f78 [ 775.184033][T26795] [ 775.947287][T10408] bond0 (unregistering): Released all slaves [ 775.970988][T10408] bond1 (unregistering): Released all slaves [ 775.994949][T10408] bond2 (unregistering): Released all slaves [ 776.030732][T10408] bond3 (unregistering): Released all slaves [ 776.054201][T10408] bond4 (unregistering): Released all slaves [ 776.155679][T10408] bond5 (unregistering): Released all slaves [ 776.182421][T10408] bond6 (unregistering): Released all slaves [ 776.214077][T10408] bond7 (unregistering): Released all slaves [ 776.237789][T10408] bond8 (unregistering): Released all slaves [ 776.273846][T10408] bond9 (unregistering): Released all slaves [ 776.329912][T10408] bond10 (unregistering): Released all slaves [ 776.399992][T26609] lo speed is unknown, defaulting to 1000 [ 776.967863][T26822] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5002'. [ 777.048034][T26828] netlink: 'syz.1.5003': attribute type 2 has an invalid length. [ 777.151839][T26609] lo speed is unknown, defaulting to 1000 [ 777.264078][T10408] tipc: Disabling bearer [ 777.272726][T10408] tipc: Disabling bearer [ 777.298614][T10408] tipc: Left network mode [ 777.706273][T10408] IPVS: stopping backup sync thread 7727 ... [ 777.860185][T26848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5009'. [ 778.447579][T26858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5011'. [ 778.447687][T26858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5011'. [ 778.543515][T26609] lo speed is unknown, defaulting to 1000 [ 780.025346][T26609] lo speed is unknown, defaulting to 1000 [ 780.320661][T10408] batman_adv: batadv0: Removing interface: macvtap2 [ 780.817418][T26908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.976115][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 780.991845][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 781.012856][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 781.028084][ T5630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 781.035309][ T5630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 781.247803][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 781.249645][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 781.250124][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 781.256069][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 781.274034][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 781.726342][T26609] lo speed is unknown, defaulting to 1000 [ 782.616939][T26609] lo speed is unknown, defaulting to 1000 [ 783.346960][ T52] Bluetooth: hci4: command tx timeout [ 783.377447][T26609] lo speed is unknown, defaulting to 1000 [ 783.457947][T26970] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5036'. [ 784.069400][T26609] lo speed is unknown, defaulting to 1000 [ 784.169372][T26980] netlink: 71 bytes leftover after parsing attributes in process `syz.3.5039'. [ 784.174044][T26980] xt_socket: unknown flags 0x4 [ 784.493607][T26984] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5041'. [ 784.493645][T26984] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5041'. [ 784.816785][T26985] vlan3: entered promiscuous mode [ 784.834849][T26921] lo speed is unknown, defaulting to 1000 [ 785.431991][ T52] Bluetooth: hci4: command tx timeout [ 785.448859][T27001] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 786.744902][T27017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5049'. [ 786.838264][T27019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5050'. [ 787.518754][ T52] Bluetooth: hci4: command tx timeout [ 787.596867][T27028] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5052'. [ 787.805605][T26921] wg2 speed is unknown, defaulting to 1000 [ 788.198281][ T25] hid-generic 0005:0008:0009.0002: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 788.199362][T27043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5054'. [ 788.686346][T27049] fido_id[27049]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 788.851891][T27055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5057'. [ 788.880709][T10408] IPVS: stop unused estimator thread 0... [ 789.520380][T27072] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5062'. [ 789.591283][ T52] Bluetooth: hci4: command tx timeout [ 793.911692][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.912061][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.000362][T27135] netlink: 'syz.0.5071': attribute type 10 has an invalid length. [ 795.000388][T27135] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5071'. [ 795.047622][T26921] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.047752][T26921] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.047924][T26921] bridge_slave_0: entered allmulticast mode [ 795.052442][T26921] bridge_slave_0: entered promiscuous mode [ 795.165358][T26921] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.165649][T26921] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.166110][T26921] bridge_slave_1: entered allmulticast mode [ 795.214378][T26921] bridge_slave_1: entered promiscuous mode [ 795.351486][T26921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.354782][T26921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.380176][T27139] netlink: 'syz.0.5072': attribute type 4 has an invalid length. [ 795.438519][T27139] netlink: 'syz.0.5072': attribute type 4 has an invalid length. [ 795.487405][T26921] team0: Port device team_slave_0 added [ 795.490685][T26921] team0: Port device team_slave_1 added [ 795.533525][T26921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 795.533545][T26921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.533583][T26921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 795.535613][T26921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.535630][T26921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.535659][T26921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 795.643085][T27145] mac80211_hwsim hwsim49 ..ãc¤±: renamed from wlan1 [ 795.669157][T27139] ipvlan7: entered promiscuous mode [ 795.669220][T27139] ipvlan7: entered allmulticast mode [ 795.670776][T27139] 8021q: adding VLAN 0 to HW filter on device ipvlan7 [ 795.684995][T27146] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 796.082424][T26921] hsr_slave_0: entered promiscuous mode [ 796.085222][T26921] hsr_slave_1: entered promiscuous mode [ 796.103108][T26921] debugfs: 'hsr0' already exists in 'hsr' [ 796.103133][T26921] Cannot create hsr debugfs directory [ 796.252021][T27154] rdma_rxe: rxe_newlink: failed to add lo [ 796.274574][T27148] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5073'. [ 796.464528][T27145] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 796.611074][T10408] veth0_virt_wifi: left allmulticast mode [ 796.611106][T10408] veth0_virt_wifi: left promiscuous mode [ 796.616975][T10408] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 796.803670][T10408] veth5: left allmulticast mode [ 796.803701][T10408] veth5: left promiscuous mode [ 796.805980][T10408] bridge1: port 2(veth5) entered disabled state [ 797.073604][T10408] veth3: left allmulticast mode [ 797.073635][T10408] veth3: left promiscuous mode [ 797.073847][T10408] bridge1: port 1(veth3) entered disabled state [ 797.396393][T10408] .` (unregistering): Released all slaves [ 797.418335][T10408] bond1 (unregistering): Released all slaves [ 797.441096][T10408] bond2 (unregistering): Released all slaves [ 797.469187][T10408] bond0 (unregistering): Released all slaves [ 797.517706][T27172] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5078'. [ 797.517728][T27172] tc_dump_action: action bad kind [ 797.519090][T27173] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5078'. [ 797.519145][T27173] tc_dump_action: action bad kind [ 797.657404][ T27] netdevsim netdevsim5 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.657507][ T27] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.657595][ T27] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.657695][ T27] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.712755][T10408] : left promiscuous mode [ 798.152179][T10408] tipc: Left network mode [ 798.858725][T27206] bond7: Removing last arp target with arp_interval on [ 798.957872][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.958278][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.958656][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.959034][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.772799][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 800.817903][T26921] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 800.844068][T26921] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 800.857665][T26921] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 800.892777][T26921] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 800.895415][T26921] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 801.005750][T26921] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 801.006678][T26921] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 801.043579][T26921] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 801.375841][T27243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5094'. [ 801.583031][T27276] IPv6: Can't replace route, no match found [ 801.583348][T27276] IPv6: Can't replace route, no match found [ 801.784677][T10408] hsr_slave_0: left promiscuous mode [ 801.833634][T10408] hsr_slave_1: left promiscuous mode [ 802.755331][ T116] smc: removing ib device syz0 [ 802.822190][ T116] smbdirect: ib_dev[syz0] removed [ 802.869380][T27243] bond7: option lacp_active: invalid value (5) [ 802.873953][T27243] bond7 (unregistering): Released all slaves [ 803.021092][T27276] netlink: 'syz.3.5097': attribute type 3 has an invalid length. [ 803.135426][T27283] bond0: (slave macvlan2): Opening slave failed [ 803.169325][T27298] ip6t_srh: unknown srh invflags 4000 [ 803.256394][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 803.507045][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.880202][T26921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.883281][T27307] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5102'. [ 804.023605][T27314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5101'. [ 804.023643][T27314] netlink: 'syz.3.5101': attribute type 10 has an invalid length. [ 804.023662][T27314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5101'. [ 804.060302][T27307] bridge6: entered allmulticast mode [ 804.128557][T27314] geneve4: entered promiscuous mode [ 804.128584][T27314] geneve4: entered allmulticast mode [ 804.246272][T26921] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.351750][T10406] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.353605][T10406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.753658][T27334] FAULT_INJECTION: forcing a failure. [ 804.753658][T27334] name failslab, interval 1, probability 0, space 0, times 0 [ 804.753725][T27334] CPU: 1 UID: 0 PID: 27334 Comm: syz.3.5107 Not tainted syzkaller #0 PREEMPT(full) [ 804.753756][T27334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 804.753771][T27334] Call Trace: [ 804.753781][T27334] [ 804.753791][T27334] dump_stack_lvl+0xe8/0x150 [ 804.753835][T27334] should_fail_ex+0x410/0x560 [ 804.753878][T27334] should_failslab+0xa8/0x100 [ 804.753912][T27334] __kmalloc_cache_noprof+0xa3/0x600 [ 804.753938][T27334] ? sctp_add_bind_addr+0x8c/0x370 [ 804.753974][T27334] ? sctp_add_bind_addr+0x8c/0x370 [ 804.754017][T27334] sctp_add_bind_addr+0x8c/0x370 [ 804.754065][T27334] sctp_copy_local_addr_list+0x31a/0x4e0 [ 804.754104][T27334] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 804.754141][T27334] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 804.754195][T27334] ? sctp_v6_is_any+0x64/0x80 [ 804.754226][T27334] ? sctp_copy_one_addr+0x93/0x360 [ 804.754266][T27334] sctp_bind_addr_copy+0xb3/0x3c0 [ 804.754302][T27334] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 804.754337][T27334] sctp_connect_new_asoc+0x2ff/0x6b0 [ 804.754377][T27334] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 804.754426][T27334] ? __local_bh_enable_ip+0xd6/0x140 [ 804.754457][T27334] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 804.754491][T27334] ? security_sctp_bind_connect+0x7e/0x2c0 [ 804.754520][T27334] sctp_sendmsg+0x159b/0x2d00 [ 804.754563][T27334] ? __pfx_sctp_sendmsg+0x10/0x10 [ 804.754596][T27334] ? __lock_acquire+0x747/0x2de0 [ 804.754645][T27334] ? aa_sock_msg_perm+0xf5/0x210 [ 804.754674][T27334] ? sock_rps_record_flow+0x19/0x350 [ 804.754704][T27334] ? inet_sendmsg+0x298/0x320 [ 804.754730][T27334] ? __pfx_inet_sendmsg+0x10/0x10 [ 804.754750][T27334] sock_sendmsg_nosec+0x10e/0x180 [ 804.754779][T27334] ____sys_sendmsg+0x54e/0x850 [ 804.754816][T27334] ? __pfx_____sys_sendmsg+0x10/0x10 [ 804.754856][T27334] ? import_iovec+0x73/0xa0 [ 804.754890][T27334] ___sys_sendmsg+0x2a5/0x360 [ 804.754927][T27334] ? __lock_acquire+0x747/0x2de0 [ 804.754955][T27334] ? __pfx____sys_sendmsg+0x10/0x10 [ 804.755033][T27334] ? __fget_files+0x2a/0x420 [ 804.755066][T27334] ? __fget_files+0x3a2/0x420 [ 804.755109][T27334] __x64_sys_sendmsg+0x1b1/0x290 [ 804.755145][T27334] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 804.755210][T27334] do_syscall_64+0x166/0x520 [ 804.755241][T27334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.755267][T27334] ? clear_bhb_loop+0x70/0xc0 [ 804.755296][T27334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.755320][T27334] RIP: 0033:0x7f4b0e99e159 [ 804.755342][T27334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 804.755371][T27334] RSP: 002b:00007f4b0f7b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 804.755396][T27334] RAX: ffffffffffffffda RBX: 00007f4b0ec25fa0 RCX: 00007f4b0e99e159 [ 804.755414][T27334] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 804.755430][T27334] RBP: 00007f4b0f7b8090 R08: 0000000000000000 R09: 0000000000000000 [ 804.755444][T27334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 804.755459][T27334] R13: 00007f4b0ec26038 R14: 00007f4b0ec25fa0 R15: 00007ffcc4582088 [ 804.755497][T27334] [ 804.791938][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.792846][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.883341][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 805.060079][T27335] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5106'. [ 805.313781][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.313924][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.117543][T27361] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 807.027723][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 807.098601][T27374] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5115'. [ 807.516135][T27384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5114'. [ 808.217402][T27393] FAULT_INJECTION: forcing a failure. [ 808.217402][T27393] name failslab, interval 1, probability 0, space 0, times 0 [ 808.217474][T27393] CPU: 1 UID: 0 PID: 27393 Comm: syz.1.5117 Not tainted syzkaller #0 PREEMPT(full) [ 808.217504][T27393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 808.217518][T27393] Call Trace: [ 808.217527][T27393] [ 808.217538][T27393] dump_stack_lvl+0xe8/0x150 [ 808.217576][T27393] should_fail_ex+0x410/0x560 [ 808.217607][T27393] should_failslab+0xa8/0x100 [ 808.217638][T27393] __kmalloc_cache_noprof+0xa3/0x600 [ 808.217662][T27393] ? sctp_add_bind_addr+0x8c/0x370 [ 808.217694][T27393] ? sctp_add_bind_addr+0x8c/0x370 [ 808.217736][T27393] sctp_add_bind_addr+0x8c/0x370 [ 808.217774][T27393] sctp_copy_local_addr_list+0x31a/0x4e0 [ 808.217812][T27393] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 808.217847][T27393] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 808.217884][T27393] ? sctp_v6_is_any+0x64/0x80 [ 808.217909][T27393] ? sctp_copy_one_addr+0x93/0x360 [ 808.217948][T27393] sctp_bind_addr_copy+0xb3/0x3c0 [ 808.217983][T27393] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 808.218017][T27393] sctp_connect_new_asoc+0x2ff/0x6b0 [ 808.218048][T27393] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 808.218082][T27393] ? __local_bh_enable_ip+0xd6/0x140 [ 808.218111][T27393] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 808.218142][T27393] ? security_sctp_bind_connect+0x7e/0x2c0 [ 808.218176][T27393] sctp_sendmsg+0x159b/0x2d00 [ 808.218218][T27393] ? __pfx_sctp_sendmsg+0x10/0x10 [ 808.218243][T27393] ? irqentry_exit+0x218/0x910 [ 808.218270][T27393] ? lockdep_hardirqs_on+0x7b/0x110 [ 808.218298][T27393] ? irqentry_exit+0x218/0x910 [ 808.218322][T27393] ? trace_irq_disable+0x3b/0x140 [ 808.218364][T27393] ? sock_rps_record_flow+0x19/0x350 [ 808.218390][T27393] ? inet_sendmsg+0x298/0x320 [ 808.218415][T27393] ? __pfx_inet_sendmsg+0x10/0x10 [ 808.218436][T27393] sock_sendmsg_nosec+0x10e/0x180 [ 808.218463][T27393] ____sys_sendmsg+0x54e/0x850 [ 808.218499][T27393] ? __pfx_____sys_sendmsg+0x10/0x10 [ 808.218541][T27393] ? import_iovec+0x73/0xa0 [ 808.218574][T27393] ___sys_sendmsg+0x2a5/0x360 [ 808.218603][T27393] ? __lock_acquire+0x747/0x2de0 [ 808.218632][T27393] ? __pfx____sys_sendmsg+0x10/0x10 [ 808.218702][T27393] ? __fget_files+0x2a/0x420 [ 808.218733][T27393] ? __fget_files+0x3a2/0x420 [ 808.218775][T27393] __x64_sys_sendmsg+0x1b1/0x290 [ 808.218810][T27393] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 808.218880][T27393] do_syscall_64+0x166/0x520 [ 808.218909][T27393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.218932][T27393] ? clear_bhb_loop+0x70/0xc0 [ 808.218960][T27393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.218983][T27393] RIP: 0033:0x7f5e8159e159 [ 808.219005][T27393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 808.219025][T27393] RSP: 002b:00007f5e823b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 808.219062][T27393] RAX: ffffffffffffffda RBX: 00007f5e81825fa0 RCX: 00007f5e8159e159 [ 808.219078][T27393] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 808.219091][T27393] RBP: 00007f5e823b2090 R08: 0000000000000000 R09: 0000000000000000 [ 808.219105][T27393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 808.219118][T27393] R13: 00007f5e81826038 R14: 00007f5e81825fa0 R15: 00007fff1b8f93c8 [ 808.219162][T27393] [ 808.955570][T27402] netlink: 'syz.3.5119': attribute type 10 has an invalid length. [ 809.003421][T27402] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 809.032571][T27402] team0: Port device netdevsim1 added [ 809.080456][T27401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5120'. [ 809.113478][T27397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5119'. [ 809.243997][T27397] netlink: 'syz.3.5119': attribute type 10 has an invalid length. [ 809.411806][T27397] team0: Port device netdevsim1 removed [ 809.437077][T27397] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 809.569430][T27397] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 809.592623][T27397] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 809.615260][T27421] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 809.615298][T27421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 809.732955][T27425] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5122'. [ 809.873977][T27424] syzkaller0: entered promiscuous mode [ 809.874003][T27424] syzkaller0: entered allmulticast mode [ 809.904743][T27424] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5123'. [ 810.024054][T26921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 810.547127][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.547517][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.045952][T27452] FAULT_INJECTION: forcing a failure. [ 811.045952][T27452] name failslab, interval 1, probability 0, space 0, times 0 [ 811.045992][T27452] CPU: 0 UID: 0 PID: 27452 Comm: syz.0.5129 Not tainted syzkaller #0 PREEMPT(full) [ 811.046019][T27452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 811.046034][T27452] Call Trace: [ 811.046045][T27452] [ 811.046055][T27452] dump_stack_lvl+0xe8/0x150 [ 811.046104][T27452] should_fail_ex+0x410/0x560 [ 811.046138][T27452] should_failslab+0xa8/0x100 [ 811.046172][T27452] __kmalloc_cache_noprof+0xa3/0x600 [ 811.046198][T27452] ? __kmalloc_cache_noprof+0x14d/0x600 [ 811.046221][T27452] ? sctp_add_bind_addr+0x8c/0x370 [ 811.046257][T27452] ? sctp_add_bind_addr+0x8c/0x370 [ 811.046299][T27452] sctp_add_bind_addr+0x8c/0x370 [ 811.046340][T27452] sctp_copy_local_addr_list+0x31a/0x4e0 [ 811.046379][T27452] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 811.046417][T27452] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 811.046456][T27452] ? sctp_v6_is_any+0x64/0x80 [ 811.046482][T27452] ? sctp_copy_one_addr+0x93/0x360 [ 811.046522][T27452] sctp_bind_addr_copy+0xb3/0x3c0 [ 811.046563][T27452] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 811.046597][T27452] sctp_connect_new_asoc+0x2ff/0x6b0 [ 811.046628][T27452] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 811.046665][T27452] ? __local_bh_enable_ip+0xd6/0x140 [ 811.046695][T27452] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 811.046728][T27452] ? security_sctp_bind_connect+0x7e/0x2c0 [ 811.046757][T27452] sctp_sendmsg+0x159b/0x2d00 [ 811.046802][T27452] ? __pfx_sctp_sendmsg+0x10/0x10 [ 811.046835][T27452] ? __lock_acquire+0x747/0x2de0 [ 811.046876][T27452] ? aa_sock_msg_perm+0xf5/0x210 [ 811.046904][T27452] ? sock_rps_record_flow+0x19/0x350 [ 811.046933][T27452] ? inet_sendmsg+0x298/0x320 [ 811.046959][T27452] ? __pfx_inet_sendmsg+0x10/0x10 [ 811.046981][T27452] sock_sendmsg_nosec+0x10e/0x180 [ 811.047008][T27452] ____sys_sendmsg+0x54e/0x850 [ 811.047046][T27452] ? __pfx_____sys_sendmsg+0x10/0x10 [ 811.047095][T27452] ? import_iovec+0x73/0xa0 [ 811.047130][T27452] ___sys_sendmsg+0x2a5/0x360 [ 811.047161][T27452] ? __lock_acquire+0x747/0x2de0 [ 811.047190][T27452] ? __pfx____sys_sendmsg+0x10/0x10 [ 811.047262][T27452] ? __fget_files+0x2a/0x420 [ 811.047295][T27452] ? __fget_files+0x3a2/0x420 [ 811.047339][T27452] __x64_sys_sendmsg+0x1b1/0x290 [ 811.047374][T27452] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 811.047432][T27452] do_syscall_64+0x166/0x520 [ 811.047461][T27452] ? trace_irq_disable+0x3b/0x140 [ 811.047485][T27452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.047510][T27452] ? clear_bhb_loop+0x70/0xc0 [ 811.047539][T27452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.047564][T27452] RIP: 0033:0x7f86b9d9e159 [ 811.047586][T27452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.047606][T27452] RSP: 002b:00007f86bad06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 811.047632][T27452] RAX: ffffffffffffffda RBX: 00007f86ba025fa0 RCX: 00007f86b9d9e159 [ 811.047650][T27452] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 811.047666][T27452] RBP: 00007f86bad06090 R08: 0000000000000000 R09: 0000000000000000 [ 811.047681][T27452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 811.047696][T27452] R13: 00007f86ba026038 R14: 00007f86ba025fa0 R15: 00007ffd62392f78 [ 811.047733][T27452] [ 811.100790][T27451] netlink: 'syz.1.5128': attribute type 1 has an invalid length. [ 811.924291][T27455] bond7: entered promiscuous mode [ 811.924333][T27455] bond7: entered allmulticast mode [ 811.939957][T27455] 8021q: adding VLAN 0 to HW filter on device bond7 [ 812.063305][T27456] bridge6: entered promiscuous mode [ 812.063518][T27456] bridge6: entered allmulticast mode [ 812.064290][T27456] bond7: (slave bridge6): Enslaving as a backup interface with an up link [ 812.107708][ T8839] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 812.162073][T27466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5131'. [ 812.231740][T27466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5131'. [ 812.231992][T27466] openvswitch: netlink: Message has 4 unknown bytes. [ 812.259582][T27467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5131'. [ 812.259802][T27467] openvswitch: netlink: Message has 4 unknown bytes. [ 812.286783][ T8843] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 812.443134][T27460] bridge7: entered promiscuous mode [ 812.443360][T27460] bridge7: entered allmulticast mode [ 812.444163][T27460] bond7: (slave bridge7): Enslaving as a backup interface with a down link [ 812.471104][ T5282] 8021q: adding VLAN 0 to HW filter on device eth4 [ 812.603171][T27460] bridge8: entered promiscuous mode [ 812.603359][T27460] bridge8: entered allmulticast mode [ 812.623538][T27460] bond7: (slave bridge8): Enslaving as a backup interface with a down link [ 813.065405][T26921] veth0_vlan: entered promiscuous mode [ 813.139697][T26921] veth1_vlan: entered promiscuous mode [ 813.426453][T26921] veth0_macvtap: entered promiscuous mode [ 813.522107][T26921] veth1_macvtap: entered promiscuous mode [ 813.709205][T26921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 813.735755][T26921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 813.834465][ T8843] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.834824][ T8843] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.835410][ T8843] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.835759][ T8843] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.554195][T14779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.554221][T14779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.643621][T27491] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5135'. [ 814.809014][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.809040][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.312621][T27504] FAULT_INJECTION: forcing a failure. [ 815.312621][T27504] name failslab, interval 1, probability 0, space 0, times 0 [ 815.312659][T27504] CPU: 0 UID: 0 PID: 27504 Comm: syz.3.5139 Not tainted syzkaller #0 PREEMPT(full) [ 815.312685][T27504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 815.312700][T27504] Call Trace: [ 815.312710][T27504] [ 815.312719][T27504] dump_stack_lvl+0xe8/0x150 [ 815.312758][T27504] should_fail_ex+0x410/0x560 [ 815.312793][T27504] should_failslab+0xa8/0x100 [ 815.312822][T27504] __kmalloc_cache_noprof+0xa3/0x600 [ 815.312844][T27504] ? __kmalloc_cache_noprof+0x14d/0x600 [ 815.312866][T27504] ? sctp_add_bind_addr+0x8c/0x370 [ 815.312898][T27504] ? sctp_add_bind_addr+0x8c/0x370 [ 815.312936][T27504] sctp_add_bind_addr+0x8c/0x370 [ 815.312971][T27504] sctp_copy_local_addr_list+0x31a/0x4e0 [ 815.313006][T27504] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 815.313039][T27504] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 815.313073][T27504] ? sctp_v6_is_any+0x64/0x80 [ 815.313097][T27504] ? sctp_copy_one_addr+0x93/0x360 [ 815.313132][T27504] sctp_bind_addr_copy+0xb3/0x3c0 [ 815.313165][T27504] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 815.313198][T27504] sctp_connect_new_asoc+0x2ff/0x6b0 [ 815.313227][T27504] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 815.313267][T27504] ? __local_bh_enable_ip+0xd6/0x140 [ 815.313296][T27504] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 815.313326][T27504] ? security_sctp_bind_connect+0x7e/0x2c0 [ 815.313352][T27504] sctp_sendmsg+0x159b/0x2d00 [ 815.313392][T27504] ? __pfx_sctp_sendmsg+0x10/0x10 [ 815.313422][T27504] ? __lock_acquire+0x747/0x2de0 [ 815.313458][T27504] ? aa_sock_msg_perm+0xf5/0x210 [ 815.313484][T27504] ? sock_rps_record_flow+0x19/0x350 [ 815.313507][T27504] ? inet_sendmsg+0x298/0x320 [ 815.313530][T27504] ? __pfx_inet_sendmsg+0x10/0x10 [ 815.313550][T27504] sock_sendmsg_nosec+0x10e/0x180 [ 815.313574][T27504] ____sys_sendmsg+0x54e/0x850 [ 815.313608][T27504] ? __pfx_____sys_sendmsg+0x10/0x10 [ 815.313647][T27504] ? import_iovec+0x73/0xa0 [ 815.313678][T27504] ___sys_sendmsg+0x2a5/0x360 [ 815.313703][T27504] ? __lock_acquire+0x747/0x2de0 [ 815.313729][T27504] ? __pfx____sys_sendmsg+0x10/0x10 [ 815.313794][T27504] ? __fget_files+0x2a/0x420 [ 815.313823][T27504] ? __fget_files+0x3a2/0x420 [ 815.313861][T27504] __x64_sys_sendmsg+0x1b1/0x290 [ 815.313893][T27504] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 815.313945][T27504] do_syscall_64+0x166/0x520 [ 815.313969][T27504] ? trace_irq_disable+0x3b/0x140 [ 815.313990][T27504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.314013][T27504] ? clear_bhb_loop+0x70/0xc0 [ 815.314039][T27504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.314059][T27504] RIP: 0033:0x7f4b0e99e159 [ 815.314080][T27504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.314097][T27504] RSP: 002b:00007f4b0f7b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 815.314120][T27504] RAX: ffffffffffffffda RBX: 00007f4b0ec25fa0 RCX: 00007f4b0e99e159 [ 815.314136][T27504] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 815.314149][T27504] RBP: 00007f4b0f7b8090 R08: 0000000000000000 R09: 0000000000000000 [ 815.314162][T27504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 815.314176][T27504] R13: 00007f4b0ec26038 R14: 00007f4b0ec25fa0 R15: 00007ffcc4582088 [ 815.314209][T27504] [ 815.515560][T27502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5140'. [ 815.674761][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.675157][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.199911][T27517] netlink: 'syz.6.5144': attribute type 2 has an invalid length. [ 816.199936][T27517] netlink: 'syz.6.5144': attribute type 1 has an invalid length. [ 816.199951][T27517] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5144'. [ 816.322683][T27520] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 816.323763][T27520] IPv6: NLM_F_CREATE should be set when creating new route [ 816.323898][T27520] IPv6: NLM_F_CREATE should be set when creating new route [ 816.839478][T27532] netlink: 'syz.6.5147': attribute type 1 has an invalid length. [ 816.839505][T27532] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5147'. [ 817.670810][ T1006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.673313][ T6116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.681506][T13514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.685838][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.240096][T27564] netlink: 'syz.2.5157': attribute type 83 has an invalid length. [ 818.363010][T27573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 818.460963][T27575] netlink: 1371 bytes leftover after parsing attributes in process `syz.0.5156'. [ 819.240260][T27596] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5162'. [ 819.277926][T27603] ip6t_rt: too many addresses specified [ 819.302630][T27603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5164'. [ 820.503907][T27634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5170'. [ 820.527839][T27634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5170'. [ 820.709310][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.787919][T27645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5174'. [ 820.787958][T27645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5174'. [ 820.788823][T27642] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5173'. [ 820.853190][T27639] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 820.874970][T27639] bond1: (slave lo): Enslaving as an active interface with an up link [ 820.877976][T27639] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 821.530006][T27665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5180'. [ 821.585142][T27667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5180'. [ 821.828861][T27669] syzkaller0: entered promiscuous mode [ 821.828888][T27669] syzkaller0: entered allmulticast mode [ 822.742251][T27705] netlink: 'syz.3.5190': attribute type 9 has an invalid length. [ 822.794426][T27687] syzkaller1: entered promiscuous mode [ 822.794492][T27687] syzkaller1: entered allmulticast mode [ 823.390039][T27716] IPVS: set_ctl: invalid protocol: 50 172.30.0.4:20002 [ 823.748308][ T6137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.238862][T27742] __nla_validate_parse: 4 callbacks suppressed [ 824.238890][T27742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5197'. [ 824.238908][T27742] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5197'. [ 824.808334][T27757] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5202'. [ 825.155203][T27763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 826.178939][T27800] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 826.352773][T27803] netlink: 'syz.0.5206': attribute type 49 has an invalid length. [ 826.352798][T27803] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5206'. [ 826.523382][T27808] lo speed is unknown, defaulting to 1000 [ 826.724605][T27820] ip_tables: iptables: counters copy to user failed while replacing table [ 826.789189][ T6137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.153173][T27857] netlink: 'syz.0.5215': attribute type 1 has an invalid length. [ 828.533687][T27862] veth9: entered allmulticast mode [ 828.546086][T27862] bond8: (slave veth9): Enslaving as an active interface with a down link [ 828.594030][T27808] wg2 speed is unknown, defaulting to 1000 [ 828.649089][T27881] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5219'. [ 828.681927][T27857] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 828.755594][T27877] macvlan2: entered promiscuous mode [ 828.755666][T27877] macvlan2: entered allmulticast mode [ 828.772367][T27877] bond8: entered promiscuous mode [ 828.780658][T27877] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 828.782419][T27877] bond8: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 828.811094][T27877] bond8: left promiscuous mode [ 828.846234][T27880] batadv_slave_1: entered allmulticast mode [ 829.443256][T27896] netlink: 'syz.3.5222': attribute type 1 has an invalid length. [ 829.806528][T27899] ipvlan8: entered promiscuous mode [ 829.833837][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.090472][T27919] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5225'. [ 830.152741][ T52] block nbd0: Receive control failed (result -107) [ 830.805320][T27938] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5229'. [ 831.676195][T27939] [ 831.678591][T27939] ====================================================== [ 831.685679][T27939] WARNING: possible circular locking dependency detected [ 831.692796][T27939] syzkaller #0 Not tainted [ 831.697240][T27939] ------------------------------------------------------ [ 831.704359][T27939] poweroff/27939 is trying to acquire lock: [ 831.710379][T27939] ffffffff8ee90160 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x149/0x600 [ 831.719653][T27939] [ 831.719653][T27939] but task is already holding lock: [ 831.727143][T27939] ffff88802793f678 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 831.736732][T27939] [ 831.736732][T27939] which lock already depends on the new lock. [ 831.736732][T27939] [ 831.747165][T27939] [ 831.747165][T27939] the existing dependency chain (in reverse order) is: [ 831.756214][T27939] [ 831.756214][T27939] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 831.763931][T27939] __might_fault+0xcb/0x130 [ 831.769012][T27939] _copy_from_user+0x28/0xb0 [ 831.774168][T27939] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 831.780718][T27939] ip_generic_getfrag+0x149/0x2d0 [ 831.786396][T27939] __ip6_append_data+0x3b26/0x40c0 [ 831.792138][T27939] ip6_append_data+0x108/0x270 [ 831.797467][T27939] rawv6_sendmsg+0x1298/0x18c0 [ 831.802877][T27939] sock_sendmsg_nosec+0x10e/0x180 [ 831.808466][T27939] ____sys_sendmsg+0x54e/0x850 [ 831.813800][T27939] ___sys_sendmsg+0x2a5/0x360 [ 831.819050][T27939] __x64_sys_sendmsg+0x1b1/0x290 [ 831.824555][T27939] do_syscall_64+0x166/0x520 [ 831.829831][T27939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.836290][T27939] [ 831.836290][T27939] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 831.844070][T27939] lock_sock_nested+0x41/0x100 [ 831.849401][T27939] inet_shutdown+0x6a/0x390 [ 831.854471][T27939] nbd_mark_nsock_dead+0x2cb/0x550 [ 831.860258][T27939] recv_work+0x1cee/0x1e10 [ 831.865243][T27939] process_scheduled_works+0xc3d/0x1630 [ 831.871355][T27939] worker_thread+0xa47/0xfb0 [ 831.876516][T27939] kthread+0x38b/0x480 [ 831.881146][T27939] ret_from_fork+0x514/0xb70 [ 831.886328][T27939] ret_from_fork_asm+0x1a/0x30 [ 831.891662][T27939] [ 831.891662][T27939] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 831.899369][T27939] __mutex_lock+0x19d/0x1550 [ 831.904531][T27939] nbd_queue_rq+0x373/0xff0 [ 831.909596][T27939] blk_mq_dispatch_rq_list+0x499/0x1990 [ 831.915827][T27939] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 831.922795][T27939] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 831.929353][T27939] blk_mq_run_work_fn+0x16c/0x300 [ 831.934960][T27939] process_scheduled_works+0xc3d/0x1630 [ 831.941080][T27939] worker_thread+0xa47/0xfb0 [ 831.946338][T27939] kthread+0x38b/0x480 [ 831.950972][T27939] ret_from_fork+0x514/0xb70 [ 831.956128][T27939] ret_from_fork_asm+0x1a/0x30 [ 831.961464][T27939] [ 831.961464][T27939] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 831.968721][T27939] __mutex_lock+0x19d/0x1550 [ 831.973882][T27939] nbd_queue_rq+0xc1/0xff0 [ 831.978861][T27939] blk_mq_dispatch_rq_list+0x499/0x1990 [ 831.984971][T27939] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 831.991882][T27939] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 831.998437][T27939] blk_mq_run_work_fn+0x16c/0x300 [ 832.004035][T27939] process_scheduled_works+0xc3d/0x1630 [ 832.010165][T27939] worker_thread+0xa47/0xfb0 [ 832.015375][T27939] kthread+0x38b/0x480 [ 832.020004][T27939] ret_from_fork+0x514/0xb70 [ 832.025148][T27939] ret_from_fork_asm+0x1a/0x30 [ 832.030485][T27939] [ 832.030485][T27939] -> #3 (set->srcu){.+.+}-{0:0}: [ 832.037704][T27939] __synchronize_srcu+0xc9/0x2f0 [ 832.043256][T27939] elevator_switch+0x1e8/0x7b0 [ 832.048702][T27939] elevator_change+0x2fa/0x480 [ 832.054040][T27939] elevator_set_default+0x375/0x440 [ 832.059807][T27939] blk_register_queue+0x3f3/0x4e0 [ 832.065480][T27939] __add_disk+0x6b8/0xdb0 [ 832.070387][T27939] add_disk_fwnode+0x100/0x3a0 [ 832.075722][T27939] nbd_dev_add+0x733/0xb60 [ 832.080682][T27939] nbd_init+0x168/0x1f0 [ 832.085554][T27939] do_one_initcall+0x250/0x870 [ 832.090923][T27939] do_initcall_level+0x10a/0x1a0 [ 832.096480][T27939] do_initcalls+0x59/0xa0 [ 832.101380][T27939] kernel_init_freeable+0x29d/0x3e0 [ 832.107145][T27939] kernel_init+0x22/0x1d0 [ 832.112052][T27939] ret_from_fork+0x514/0xb70 [ 832.117212][T27939] ret_from_fork_asm+0x1a/0x30 [ 832.122548][T27939] [ 832.122548][T27939] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 832.130422][T27939] __mutex_lock+0x19d/0x1550 [ 832.135573][T27939] elevator_change+0x1af/0x480 [ 832.140905][T27939] elevator_set_none+0xb5/0x140 [ 832.146316][T27939] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 832.152689][T27939] nbd_start_device+0x189/0xb30 [ 832.158130][T27939] nbd_genl_connect+0x167d/0x1cd0 [ 832.163704][T27939] genl_family_rcv_msg_doit+0x233/0x340 [ 832.169877][T27939] genl_rcv_msg+0x614/0x7a0 [ 832.174932][T27939] netlink_rcv_skb+0x226/0x4a0 [ 832.180246][T27939] genl_rcv+0x28/0x40 [ 832.184772][T27939] netlink_unicast+0x7bd/0x940 [ 832.190111][T27939] netlink_sendmsg+0x813/0xb40 [ 832.195423][T27939] sock_sendmsg_nosec+0x13a/0x180 [ 832.201015][T27939] ____sys_sendmsg+0x54e/0x850 [ 832.206333][T27939] ___sys_sendmsg+0x2a5/0x360 [ 832.211560][T27939] __x64_sys_sendmsg+0x1b1/0x290 [ 832.217054][T27939] do_syscall_64+0x166/0x520 [ 832.222196][T27939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.228638][T27939] [ 832.228638][T27939] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 832.237298][T27939] blk_alloc_queue+0x544/0x690 [ 832.242607][T27939] __blk_mq_alloc_disk+0x194/0x390 [ 832.248273][T27939] nbd_dev_add+0x494/0xb60 [ 832.253265][T27939] nbd_init+0x168/0x1f0 [ 832.257960][T27939] do_one_initcall+0x250/0x870 [ 832.263313][T27939] do_initcall_level+0x10a/0x1a0 [ 832.268851][T27939] do_initcalls+0x59/0xa0 [ 832.273728][T27939] kernel_init_freeable+0x29d/0x3e0 [ 832.279472][T27939] kernel_init+0x22/0x1d0 [ 832.284351][T27939] ret_from_fork+0x514/0xb70 [ 832.289479][T27939] ret_from_fork_asm+0x1a/0x30 [ 832.294798][T27939] [ 832.294798][T27939] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 832.302034][T27939] __lock_acquire+0x164c/0x2de0 [ 832.307430][T27939] lock_acquire+0x115/0x350 [ 832.312495][T27939] fs_reclaim_acquire+0x71/0x100 [ 832.317984][T27939] prepare_alloc_pages+0x149/0x600 [ 832.323667][T27939] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 832.330034][T27939] alloc_pages_mpol+0x21e/0x390 [ 832.335456][T27939] folio_alloc_mpol_noprof+0x39/0x160 [ 832.341407][T27939] vma_alloc_folio_noprof+0xe1/0x1e0 [ 832.347249][T27939] do_pte_missing+0x173a/0x34b0 [ 832.352676][T27939] handle_mm_fault+0x1a53/0x3750 [ 832.358166][T27939] do_user_addr_fault+0x746/0x1340 [ 832.363833][T27939] exc_page_fault+0x6a/0xc0 [ 832.368887][T27939] asm_exc_page_fault+0x26/0x30 [ 832.374317][T27939] filldir64+0x2b1/0x620 [ 832.379108][T27939] proc_readdir_de+0x418/0x550 [ 832.384421][T27939] proc_root_readdir+0x65/0xd0 [ 832.389730][T27939] iterate_dir+0x2e2/0x4d0 [ 832.394705][T27939] __se_sys_getdents64+0xf1/0x280 [ 832.400306][T27939] do_syscall_64+0x166/0x520 [ 832.405468][T27939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.411917][T27939] [ 832.411917][T27939] other info that might help us debug this: [ 832.411917][T27939] [ 832.422168][T27939] Chain exists of: [ 832.422168][T27939] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 832.422168][T27939] [ 832.434830][T27939] Possible unsafe locking scenario: [ 832.434830][T27939] [ 832.442392][T27939] CPU0 CPU1 [ 832.447871][T27939] ---- ---- [ 832.453282][T27939] rlock(&mm->mmap_lock); [ 832.457740][T27939] lock(sk_lock-AF_INET6); [ 832.464810][T27939] lock(&mm->mmap_lock); [ 832.471693][T27939] lock(fs_reclaim); [ 832.475737][T27939] [ 832.475737][T27939] *** DEADLOCK *** [ 832.475737][T27939] [ 832.483924][T27939] locks held by poweroff/27939: 3, last CPU#0: [ 832.490195][T27939] #0: ffff88807ea200f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 832.499338][T27939] #1: ffff8880239b78e0 (&sb->s_type->i_mutex_key#12){++++}-{4:4}, at: iterate_dir+0x209/0x4d0 [ 832.509747][T27939] #2: ffff88802793f678 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 832.519974][T27939] [ 832.519974][T27939] stack backtrace: [ 832.525890][T27939] CPU: 0 UID: 0 PID: 27939 Comm: poweroff Not tainted syzkaller #0 PREEMPT(full) [ 832.535116][T27939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 832.545224][T27939] Call Trace: [ 832.548532][T27939] [ 832.551520][T27939] dump_stack_lvl+0xe8/0x150 [ 832.556155][T27939] print_circular_bug+0x2e2/0x300 [ 832.561214][T27939] check_noncircular+0x12f/0x150 [ 832.566197][T27939] __lock_acquire+0x164c/0x2de0 [ 832.571136][T27939] ? __lock_acquire+0x747/0x2de0 [ 832.576109][T27939] lock_acquire+0x115/0x350 [ 832.580648][T27939] ? prepare_alloc_pages+0x149/0x600 [ 832.585977][T27939] ? __lock_acquire+0x747/0x2de0 [ 832.590952][T27939] fs_reclaim_acquire+0x71/0x100 [ 832.595927][T27939] ? prepare_alloc_pages+0x149/0x600 [ 832.601239][T27939] prepare_alloc_pages+0x149/0x600 [ 832.606400][T27939] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 832.612242][T27939] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 832.618612][T27939] ? __pfx_policy_nodemask+0x10/0x10 [ 832.623944][T27939] ? __lock_acquire+0x747/0x2de0 [ 832.628929][T27939] alloc_pages_mpol+0x21e/0x390 [ 832.633920][T27939] folio_alloc_mpol_noprof+0x39/0x160 [ 832.639374][T27939] vma_alloc_folio_noprof+0xe1/0x1e0 [ 832.644714][T27939] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 832.650641][T27939] ? lock_acquire+0x115/0x350 [ 832.655347][T27939] do_pte_missing+0x173a/0x34b0 [ 832.660237][T27939] handle_mm_fault+0x1a53/0x3750 [ 832.665217][T27939] ? handle_mm_fault+0xf1/0x3750 [ 832.670186][T27939] ? __pfx_handle_mm_fault+0x10/0x10 [ 832.675517][T27939] ? lock_mm_and_find_vma+0xa7/0x340 [ 832.680868][T27939] do_user_addr_fault+0x746/0x1340 [ 832.686018][T27939] exc_page_fault+0x6a/0xc0 [ 832.690549][T27939] asm_exc_page_fault+0x26/0x30 [ 832.695423][T27939] RIP: 0010:filldir64+0x2b1/0x620 [ 832.700491][T27939] Code: 47 f8 bf 07 00 00 00 44 89 f6 e8 3a 3e 76 ff 0f 01 cb 48 8b 44 24 28 49 89 47 08 48 bd 00 00 00 00 00 fc ff df 48 8b 44 24 58 <48> 89 03 8b 4c 24 04 48 8d 43 10 66 89 08 8b 4c 24 14 80 e1 0f 48 [ 832.720118][T27939] RSP: 0018:ffffc90005fe7c58 EFLAGS: 00050293 [ 832.726207][T27939] RAX: 00000000f00000d0 RBX: 0000555d7c3d7000 RCX: ffff888088f89f40 [ 832.734196][T27939] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000007 [ 832.742191][T27939] RBP: dffffc0000000000 R08: ffff888088f89f47 R09: 1ffff110111f13e8 [ 832.750191][T27939] R10: dffffc0000000000 R11: ffffed10111f13e9 R12: ffff88801b1935dc [ 832.758195][T27939] R13: 000000000000000a R14: 000000000000000a R15: 0000555d7c3d6fe0 [ 832.766208][T27939] ? filldir64+0x296/0x620 [ 832.770662][T27939] ? __pfx_filldir64+0x10/0x10 [ 832.775450][T27939] proc_readdir_de+0x418/0x550 [ 832.780266][T27939] proc_root_readdir+0x65/0xd0 [ 832.785070][T27939] iterate_dir+0x2e2/0x4d0 [ 832.789517][T27939] __se_sys_getdents64+0xf1/0x280 [ 832.794576][T27939] ? __pfx___se_sys_getdents64+0x10/0x10 [ 832.800250][T27939] ? exc_page_fault+0x6a/0xc0 [ 832.804959][T27939] ? __pfx_filldir64+0x10/0x10 [ 832.809768][T27939] ? do_user_addr_fault+0xc4c/0x1340 [ 832.815096][T27939] do_syscall_64+0x166/0x520 [ 832.819730][T27939] ? trace_irq_disable+0x3b/0x140 [ 832.824782][T27939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.830885][T27939] ? clear_bhb_loop+0x70/0xc0 [ 832.835607][T27939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.841549][T27939] RIP: 0033:0x7f341ba6fd23 [ 832.846008][T27939] Code: 8b 05 d9 00 10 00 64 c7 00 16 00 00 00 31 c0 eb b0 66 0f 1f 44 00 00 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 8b 15 a1 00 10 00 f7 d8 [ 832.865633][T27939] RSP: 002b:00007fffb6e659a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 832.874069][T27939] RAX: ffffffffffffffda RBX: 0000555d7c3d69c0 RCX: 00007f341ba6fd23 [ 832.882064][T27939] RDX: 0000000000008000 RSI: 0000555d7c3d69f0 RDI: 0000000000000003 [ 832.890058][T27939] RBP: 0000555d7c3d69c4 R08: 00007f341bb70ac0 R09: 0000000000000000 [ 832.898055][T27939] R10: 0000000000000004 R11: 0000000000000293 R12: 0000555d7c3d69f0 [ 832.906047][T27939] R13: ffffffffffffff88 R14: 0000000000000002 R15: 0000555d63cadd98 [ 832.914051][T27939] [ 832.961277][ T6116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.298780][T27980] can: request_module (can-proto-3) failed. Stopping sshd: stopped /usr/sbin/sshd (pid 5375) OK Stopping crond: stopped /usr/sbin/crond (pid 5359) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5281) Stopping network: OK Stopping iptables: OK Stopping system message bus: [ 835.988137][ T6121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog done Stopping klogd: OK Stopping acpid: OK Stopping syslogd: stopped /sbin/syslogd (pid 4969) OK umount: can't remount debugfs read-only [ 839.043005][ T6121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.40 closed by remote host. [ 840.308954][T14779] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 840.375793][T14779] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 840.465565][T14779] bond0: (slave netdevsim1): Releasing backup interface [ 840.468185][T14779] netdevsim netdevsim3 netdevsim1 (unregistering): left allmulticast mode Sent SIGKILL to[ 840.470204][T14779] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 all processes Requesting system poweroff [ 840.531396][T14779] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 840.598323][T14779] bridge_slave_1: left allmulticast mode [ 840.598351][T14779] bridge_slave_1: left promiscuous mode [ 840.598508][T14779] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.606372][T14779] bridge_slave_0: left allmulticast mode [ 840.606441][T14779] bridge_slave_0: left promiscuous mode [ 840.610560][T14779] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.642919][T14779] batadv_slave_1: left allmulticast mode [ 840.737966][T14779] smc: removing net device xfrm0 with user defined pnetid SYZ2 [ 840.814880][T14779] bond1 (unregistering): (slave geneve2): Releasing active interface [ 840.851607][T14779] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 840.851637][T14779] bridge2 (unregistering): left promiscuous mode [ 840.933111][T14779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 840.933374][T14779] bond_slave_0: left allmulticast mode [ 840.934819][T14779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 840.935266][T14779] bond_slave_1: left allmulticast mode [ 840.935515][T14779] bond0 (unregistering): Released all slaves [ 840.939475][T14779] bond1 (unregistering): Released all slaves [ 840.994457][T14779] bond2 (unregistering): Released all slaves [ 841.010105][T14779] bond3 (unregistering): (slave veth3): Releasing active interface [ 841.012610][T14779] bond3 (unregistering): (slave veth5): Releasing active interface [ 841.013701][T14779] bond3 (unregistering): (slave veth7): Releasing active interface [ 841.014340][T14779] bond3 (unregistering): Released all slaves [ 841.029457][T14779] bond4 (unregistering): Released all slaves [ 841.045947][T14779] bond5 (unregistering): Released all slaves [ 841.064512][T14779] bond6 (unregistering): Released all slaves [ 841.076232][T14779] bond7 (unregistering): (slave veth11): Releasing active interface [ 841.076263][T14779] dummy0: entered promiscuous mode [ 841.095783][T14779] bond7 (unregistering): (slave dummy0): Releasing active interface [ 841.096281][T14779] dummy0: left promiscuous mode [ 841.100743][T14779] bond7 (unregistering): Released all slaves [ 841.112720][T14779] bond8 (unregistering): Released all slaves [ 841.146894][ T27] netdevsim netdevsim3 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.146963][ T27] netdevsim netdevsim3 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.147029][ T27] netdevsim netdevsim3 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.147088][ T27] netdevsim netdevsim3 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.210528][T14779] tipc: Left network mode [ 841.532997][T28070] smc: removing ib device sy [ 841.533239][T28070] smc: removing smcd device lo [ 841.547724][T28070] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 841.578921][T28070] ACPI: PM: Preparing to enter system sleep state S5 [ 841.580498][T28070] kvm: exiting hardware virtualization [ 841.604268][T28070] reboot: Power down