last executing test programs: 3m5.072775155s ago: executing program 1 (id=4318): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x1c, 0x7, 0x6, 0x801, 0x0, 0xffffff7f, {0x5, 0x0, 0xec0}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001080)={0xffffffffffffffff, 0xe0, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000dc0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x78, &(0x7f0000000e80)=[{}, {}], 0x10, 0x10, &(0x7f0000000ec0), &(0x7f0000000f00), 0x8, 0x67, 0x8, 0x8, &(0x7f0000000f40)}}, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b904021d08040000000000000aa1180015000600142603600e1208000f0000810401a8001600200001400300fffc07600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a08400e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000) 3m4.859728092s ago: executing program 1 (id=4324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x1c, 0x7, 0x6, 0x801, 0x0, 0xffffff7f, {0x5, 0x0, 0xec0}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmsg(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000480)=""/211, 0xd3}, {&(0x7f0000000580)=""/208, 0xd0}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/7, 0x7}, {&(0x7f0000000740)=""/227, 0xe3}, {&(0x7f0000000840)=""/186, 0xba}], 0x6, &(0x7f0000000980)=""/115, 0x73}, 0x0) 3m4.696936268s ago: executing program 1 (id=4328): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c0000002600090123bd4ceaf2b27640626000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 3m4.538047163s ago: executing program 1 (id=4332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) 3m4.402477384s ago: executing program 1 (id=4335): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xff00, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000004) 3m4.064317959s ago: executing program 1 (id=4342): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x24000004) 2m48.66168795s ago: executing program 32 (id=4342): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x24000004) 2m30.205320016s ago: executing program 0 (id=4669): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) r2 = socket(0x1d, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x65, 0x64, 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) (async) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x48, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@deltclass={0x34, 0x29, 0x200, 0x70bd28, 0x80000001, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0x0, 0x4}, {0xe, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @tclass_kind_options=@c_red={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0x2}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 2m27.448447782s ago: executing program 0 (id=4674): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f0000000400000008000000080584"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r1, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000940)={{r1, &(0x7f0000000640)='\x00', 0x28203, &(0x7f0000000680)={@_ha_fsid={[0x8, 0xd05]}, {0x3ff, 0x4, 0x8, 0x9}}, 0x2, &(0x7f00000006c0), &(0x7f0000000700)=0x8d3}, 0x2, &(0x7f0000000900)=[{0x1, 0x5, &(0x7f0000000780)='#\x00', &(0x7f00000007c0)="88d0fc1c8ac31f9479f0", 0xa, 0x32}, {0x3, 0xffffffff, &(0x7f0000000800)='}(}\x00', &(0x7f0000000840)="c753d8396b17074751d1bc6cae2718fcc42d4c2c80795cc0a9300a5e6de30a657275565c247e538e2a1af525b62e5eb3f6feef25b6333638e300ac4699f0cd5bccf0e1c640b376d6132fc5b3b3f15aad110cbbd0be30b7e60500788d3be6a212e7f48545c4efb149d84d16cc236b6aa55fde4b3b607af881e7e7c588d415d6c8dd698a5ef47b36626e79", 0x8a, 0x20}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x9, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5}, [@alu={0x7, 0x0, 0x9, 0x6, 0x3, 0x10, 0xfffffffffffffff0}, @alu={0x4, 0x0, 0x8, 0x3, 0x9, 0x18, 0xfffffffffffffff0}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0xa0, &(0x7f00000004c0)=""/160, 0x41100, 0x10, '\x00', r5, @cgroup_sock=0xd, r6, 0x8, &(0x7f0000000a00)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x1, 0x9, 0x6, 0x1}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000a80)=[r2], 0x0, 0x10, 0x7}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000280), 0x3) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040)=0x1, 0x4) 2m27.195702363s ago: executing program 0 (id=4676): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 2m26.241059276s ago: executing program 0 (id=4681): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x14, 0x7, 0x0, 0x14, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_lifetime={0x4, 0x2, 0xf, 0x3800000, 0x8000, 0x617}, @sadb_ident={0x2, 0xa, 0x4, 0x0, 0x5}, @sadb_x_sec_ctx={0xa, 0x18, 0x3, 0x9, 0x42, "21d26c3e7a87a2a186c37f19d259e11e091ff05ae42ce5bec403ea2558bc5e2e59625c5fff14c23043fb0f1c4967614437d630b238b8e274849eec964efa2b9cb72a"}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd2c}]}, 0xa0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x20, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000008000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf09000000000000550901000000008097000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff85000000060000003500fcffffffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080010008500000006000000bf91000000000000b702000003000000850000002a000000b70000000005000095"], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 2m26.123363316s ago: executing program 0 (id=4682): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x1000, @loopback, 0x7}, @in6={0xa, 0x4e24, 0x5f, @local, 0xffff7fff}, @in6={0xa, 0x4e24, 0x2273ded8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3cbf}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @multicast1}], 0x74) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003a00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4d, 0x8f, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x4, [0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800050064000000050006"], 0x44}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) (async) listen(r0, 0x100) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000084000000070000007f000001"], 0x18, 0x48d5}, 0x20008050) 2m25.883198351s ago: executing program 0 (id=4684): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380100001a000100feffffff00010000ac1e01010000000000000000000000007f000001000000000000000000000000000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d46c000000fc010000000000000000000000000001fe0000000000000092010000000000100800000000000000fcffffffffffffff1a2508000000007f2b01680000000000fcfffffffffffffff74ce4b300000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffff9030000000000007e00000000000000020001006600000000020000480003006465666c6174650000000003a1353a1f37b9000000000000000000000000000000000000000000000000000000000000000000008000"/240], 0x138}}, 0x20000844) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r3}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r9, &(0x7f0000000280)=[{&(0x7f0000000200)="2e9b3d0007e03dd65193dfb6c575963f4305f067", 0x14}, {&(0x7f0000000800)="d26319afcf07e69edb08042c2c6b13b6e0a40a00000053c60aee816e03878e0705663531f46289bff274c79bcea0d8fe0a1f3b6b3b6fe49e1c629daff19099641baf165025b095ef3dafa2dbcc65df420b6c6cdc50676d9189c59ca0238ebc113df742aa9d058ed7fd271b95ab265121801e297d460a19b93a2ec1ea5e62ef6196a8db7cd7fd8bfdaa459c6108054e14a0de2b00000000000000", 0xa}, {&(0x7f0000000300)="d9a0f0481ae7", 0xfffffe82}], 0x3) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x1c, r8, 0x101, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="100927bd7000fcdbdf25620000000c009900080000004a0000000600b4001f1300000600b300000000000600b300000000000600b400dc0a00000600b300000000000600b300010000000600005edc1d8b49553843055c2ed2be5db400c60500000600b300010000000600b400771200000600b4007c080000"], 0x70}}, 0x64044080) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0x36, 0x0, &(0x7f0000000140)="c1188e99b95d02ff4284860186dd8a2cd3818eeedc37a2c4c1480c309b3db488eb304bafbae18b852d7840ee363e02c019d905b4f1d7", 0x0, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd}, 0x50) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000180)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000a00)="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", 0x155}, {&(0x7f0000000400)="69c062fed47198c46a924a48fd507c263ec0ccccf0f745a3780bb6", 0x1b}], 0x3, &(0x7f00000008c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x40, 0x0, 0x7, {[@cipso={0x86, 0x21, 0xffffffffffffffff, [{0x5, 0x6, "59d29d00"}, {0x7, 0xb, "e3e14ed0d572e409d3"}, {0x6, 0xa, "a0604f4e279a4b8d"}]}, @lsrr={0x83, 0xb, 0x37, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @end]}}}, @ip_retopts={{0xbc, 0x0, 0x7, {[@end, @ra={0x94, 0x4}, @noop, @ssrr={0x89, 0x7, 0xd4, [@multicast1]}, @timestamp_addr={0x44, 0x24, 0x2a, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x2d}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@broadcast, 0x7}]}, @timestamp_addr={0x44, 0x2c, 0x86, 0x1, 0x9, [{@multicast1, 0x7}, {@private=0xa010101, 0xc00000}, {@loopback, 0x2}, {@local, 0x6}, {@local, 0xc}]}, @timestamp_prespec={0x44, 0x2c, 0xb2, 0x3, 0x4, [{@local, 0x2}, {@private=0xa010101, 0x7}, {@multicast2, 0x101}, {@empty, 0x1}, {@loopback}]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_addr={0x44, 0x1c, 0xae, 0x1, 0x1, [{@rand_addr=0x64010102, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@local, 0x1}]}]}}}], 0x118}, 0x200400d5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl0\x00', r11, 0x4, 0xfd, 0x6, 0x5, 0x39, @local, @mcast2={0xff, 0x3}, 0x2000, 0xba08, 0x0, 0xe}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x3c}}, 0x44811) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0xc020680) socket$inet6_mptcp(0xa, 0x1, 0x106) 2m10.780873927s ago: executing program 33 (id=4684): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380100001a000100feffffff00010000ac1e01010000000000000000000000007f000001000000000000000000000000000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d46c000000fc010000000000000000000000000001fe0000000000000092010000000000100800000000000000fcffffffffffffff1a2508000000007f2b01680000000000fcfffffffffffffff74ce4b300000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffff9030000000000007e00000000000000020001006600000000020000480003006465666c6174650000000003a1353a1f37b9000000000000000000000000000000000000000000000000000000000000000000008000"/240], 0x138}}, 0x20000844) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r3}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r9, &(0x7f0000000280)=[{&(0x7f0000000200)="2e9b3d0007e03dd65193dfb6c575963f4305f067", 0x14}, {&(0x7f0000000800)="d26319afcf07e69edb08042c2c6b13b6e0a40a00000053c60aee816e03878e0705663531f46289bff274c79bcea0d8fe0a1f3b6b3b6fe49e1c629daff19099641baf165025b095ef3dafa2dbcc65df420b6c6cdc50676d9189c59ca0238ebc113df742aa9d058ed7fd271b95ab265121801e297d460a19b93a2ec1ea5e62ef6196a8db7cd7fd8bfdaa459c6108054e14a0de2b00000000000000", 0xa}, {&(0x7f0000000300)="d9a0f0481ae7", 0xfffffe82}], 0x3) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x1c, r8, 0x101, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="100927bd7000fcdbdf25620000000c009900080000004a0000000600b4001f1300000600b300000000000600b300000000000600b400dc0a00000600b300000000000600b300010000000600005edc1d8b49553843055c2ed2be5db400c60500000600b300010000000600b400771200000600b4007c080000"], 0x70}}, 0x64044080) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0x36, 0x0, &(0x7f0000000140)="c1188e99b95d02ff4284860186dd8a2cd3818eeedc37a2c4c1480c309b3db488eb304bafbae18b852d7840ee363e02c019d905b4f1d7", 0x0, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd}, 0x50) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000180)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000a00)="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", 0x155}, {&(0x7f0000000400)="69c062fed47198c46a924a48fd507c263ec0ccccf0f745a3780bb6", 0x1b}], 0x3, &(0x7f00000008c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x40, 0x0, 0x7, {[@cipso={0x86, 0x21, 0xffffffffffffffff, [{0x5, 0x6, "59d29d00"}, {0x7, 0xb, "e3e14ed0d572e409d3"}, {0x6, 0xa, "a0604f4e279a4b8d"}]}, @lsrr={0x83, 0xb, 0x37, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @end]}}}, @ip_retopts={{0xbc, 0x0, 0x7, {[@end, @ra={0x94, 0x4}, @noop, @ssrr={0x89, 0x7, 0xd4, [@multicast1]}, @timestamp_addr={0x44, 0x24, 0x2a, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x2d}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@broadcast, 0x7}]}, @timestamp_addr={0x44, 0x2c, 0x86, 0x1, 0x9, [{@multicast1, 0x7}, {@private=0xa010101, 0xc00000}, {@loopback, 0x2}, {@local, 0x6}, {@local, 0xc}]}, @timestamp_prespec={0x44, 0x2c, 0xb2, 0x3, 0x4, [{@local, 0x2}, {@private=0xa010101, 0x7}, {@multicast2, 0x101}, {@empty, 0x1}, {@loopback}]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_addr={0x44, 0x1c, 0xae, 0x1, 0x1, [{@rand_addr=0x64010102, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@local, 0x1}]}]}}}], 0x118}, 0x200400d5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl0\x00', r11, 0x4, 0xfd, 0x6, 0x5, 0x39, @local, @mcast2={0xff, 0x3}, 0x2000, 0xba08, 0x0, 0xe}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x3c}}, 0x44811) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0xc020680) socket$inet6_mptcp(0xa, 0x1, 0x106) 1m51.871214405s ago: executing program 3 (id=4918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x2000}, 0x84000) 1m51.821745357s ago: executing program 3 (id=4919): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) r0 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2) 1m51.193957516s ago: executing program 3 (id=4929): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x20000000}, 0x84000) 1m51.055911211s ago: executing program 3 (id=4931): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000140), 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f00000000c0)=0x5, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32, @ANYBLOB="110001"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8, 0x50000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK_NETNSID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 1m50.876641453s ago: executing program 3 (id=4934): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x8040480) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r3, 0x83, &(0x7f00000010c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/194, 0xc2}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="b40200000000000061174c0000000000850000002700000095000000000000004322207f5b9d680874e8dc8c5c9265ced41417862555b50684ce84a7fce1574510ed6540e18e2e0084f0c2c73e11a3e87bb9ee8ed3b5d1657d812d72020d79845c5c0989466b84d54188a25ddd3061579031a74f2018f54e4f66ee29f734df89a483d1561d7c86c1a95fd83fe4395615f4eda249c5702d03208822b1f508fb3ea04aeb85b4d61df6786b"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000041ea00000004be200000001200fc000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r9) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)={0x48, r10, 0x1, 0x0, 0x1, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0xffffffff, 0x400, {0x0, 0x0, 0x0, r8, {0xffe4, 0x6}, {0xd, 0xffff}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8040) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000000800)={{r3, &(0x7f00000006c0)='\x00', 0x0, &(0x7f0000000700)={@align=0x8, {0x800, 0x8, 0x8, 0xffffffffffffff39}}, 0x74c, &(0x7f0000000740), &(0x7f0000000780)=0x3}, {[0x2, 0x10, 0xfffffff8, 0x6]}, 0x668c, 0x24, &(0x7f00000007c0)=""/36}) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000008"], 0x50) poll(&(0x7f0000000000)=[{r12, 0x5000}], 0x1, 0x14) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xf, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, [@call={0x85, 0x0, 0x0, 0xd3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffff8}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @exit]}, &(0x7f0000000680)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @cgroup_sysctl=0x12, r11, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0xe, 0x9, 0xd5d}, 0x10, 0xffffffffffffffff, r2, 0x4, &(0x7f0000000900)=[r5, r5, r12, r1, r5], &(0x7f0000000940)=[{0x0, 0x3, 0x10, 0x8}, {0x5, 0x1, 0x8, 0x2}, {0x3, 0x1, 0xc, 0xa}, {0x3, 0x4, 0xd, 0x2}], 0x10, 0x200}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc8041, 0x0) socket$kcm(0x2, 0xa, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000180)=0x4) socket$nl_rdma(0x10, 0x3, 0x14) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYRES8=r13, @ANYRES64, @ANYBLOB="01000000370000001c0012000c000100626f6e64", @ANYRESOCT=0x0, @ANYRES32, @ANYRESDEC=r4], 0x3c}}, 0x0) 1m50.408003378s ago: executing program 3 (id=4941): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtclass={0x98, 0x28, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x6, 0x7}, {0xd, 0xfff1}, {0xfff1}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5}}}, @c_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x2e, 0x2, 0x1f, 0x9, 0x8000, 0x100, 0x5, 0xba}}]}}, @c_atm={{0x8}, {0x30, 0x2, [@TCA_ATM_HDR={0x29, 0x3, "b96867c2aa063948c09c71bd7366600a644f4b05f8db1febe7ac7a4bb3788884680f285b5d"}]}}]}, 0x98}}, 0x4008000) recvmmsg$unix(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006a80)={0x0, 0x0, &(0x7f0000006a40)={&(0x7f00000025c0)=@deltfilter={0x9ac, 0x2d, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x2}, {0xffe0}, {0xa, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffa}, @TCA_CHAIN={0x8, 0xb, 0x180a}, @filter_kind_options=@f_cgroup={{0xb}, {0x96c, 0x2, [@TCA_CGROUP_ACT={0x150, 0x1, [@m_simple={0xe0, 0x1a, 0x0, 0x0, {{0xb}, {0xa8, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xe, 0x3, '[^-@-#]\'&\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x40, 0xb, 0x2, 0x28, 0xfff}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x3, 0xffffffffffffffff, 0x6, 0x5}}, @TCA_DEF_DATA={0xd, 0x3, 'skcipher\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xd74, 0x216a, 0x1, 0x3, 0x66}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0xfff, 0x1, 0x10001, 0x903}}, @TCA_DEF_DATA={0xa, 0x3, '\x01\x01\x01\x01\x01\x01'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0xffffffff, 0x1000000d, 0x8, 0xc84}}]}, {0xd, 0x6, "0c7783d54c9db29507"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_sample={0x6c, 0x5, 0x0, 0x0, {{0xb}, {0x4}, {0x3d, 0x6, "b996f477c08340b36e4f007f77baf3c3e40b23179df9a95a0d1c9ca7bfc01530cbe35992146651e5089ee682d68d54944ad8afb31caf28e129"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_CGROUP_POLICE={0x818, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0xfffffffb, 0x1, 0xdd8, 0x5, 0x800, 0x0, 0x79, 0x3, 0x40, 0x100, 0x4, 0x3, 0xffffba23, 0x3, 0x6, 0x4, 0x7ce, 0x40, 0x7c, 0xff, 0x6, 0x9, 0x5, 0xfffffffb, 0x6, 0x9, 0x3, 0x4, 0x6, 0x3, 0xffffffff, 0x18, 0x2, 0x8, 0x8000, 0x0, 0x0, 0xe, 0x7f, 0x1, 0xffffb93c, 0x9, 0x94e4, 0x3, 0x5, 0x200, 0x8, 0x9, 0x7f, 0x5, 0x1, 0x80000001, 0x64af103f, 0x0, 0x6f8, 0x4, 0xff, 0x6, 0x10000, 0x7, 0x0, 0x5231, 0x1, 0x8, 0x66df, 0x80, 0x10000, 0x6, 0x48, 0x59, 0x7, 0x2, 0x4e2, 0x616, 0x3, 0xfffffffe, 0x2, 0x8d, 0x5, 0x8, 0x8, 0xffff8001, 0x3, 0x3, 0xfba8, 0x465, 0x370, 0x200, 0x4, 0xb68a, 0xfffffff9, 0x9, 0x1, 0x6, 0x9, 0x200, 0x1, 0x4, 0x3e, 0x4, 0x800, 0xf, 0x81, 0x7, 0x8, 0x3, 0x4, 0x21a5, 0x81, 0x7, 0x6, 0x1b, 0x8, 0xb, 0x3, 0xd8488af, 0x4, 0xe09, 0x1, 0x7, 0x8, 0x1, 0x5, 0xff, 0xc, 0x8, 0x4, 0x7, 0x0, 0x5, 0x6, 0x6, 0x38000000, 0x1, 0xffffffff, 0x10001, 0xdff, 0x7fff, 0xb128, 0x7, 0x5f, 0x5, 0x5, 0x8, 0x8, 0x9, 0x5, 0xffffffff, 0xa, 0x85b, 0x0, 0x0, 0x1, 0x2, 0x6, 0x47, 0x68, 0x0, 0x5fe, 0x0, 0x80000001, 0x401, 0x84, 0x7, 0x7, 0xdcc0, 0x8000, 0x2, 0x4, 0x81, 0xee, 0x6, 0x3, 0x6, 0x2, 0x2, 0x800, 0x0, 0xec5, 0x2f2, 0x1, 0x6, 0xc, 0x3, 0x4, 0x401, 0x3, 0x10001, 0x9, 0x100, 0x9, 0xf970, 0x2, 0x3, 0xfff, 0xb55, 0x6, 0x7f, 0x100, 0x7, 0x100, 0xabe, 0x3, 0x8, 0x7f, 0x8000, 0x3, 0x401, 0x525b, 0x5, 0x8c8, 0x9, 0x4, 0x51a, 0x7f, 0x68, 0x6, 0xffff, 0x7ff, 0x2, 0xffff, 0xa, 0x8, 0x8, 0x3, 0xffffffff, 0x7, 0x2, 0x7, 0x1, 0x9, 0x8, 0xa53, 0x10, 0x687, 0x4948, 0x1, 0x7, 0x10001, 0x1ff, 0x800, 0x8001, 0x7fff, 0x9, 0x6, 0xf, 0x3, 0x10, 0x7, 0x4, 0x40, 0x568, 0x4, 0x40000000, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x0, 0x5, 0x101, 0x8, 0x6, 0x0, 0x9, 0x8, 0xfffffeff, 0x2, 0x2, 0x0, 0x5, 0x305, 0xd, 0xfff0000, 0x2, 0x9, 0x0, 0x10001, 0x7, 0x3, 0x4, 0x9, 0x48000, 0x3, 0x7, 0x1, 0x7, 0x7f, 0x20fd2f65, 0x6, 0x80, 0x7, 0xfffffff9, 0x0, 0x3ff, 0x7ff, 0x80000000, 0x8, 0x4, 0x10000, 0x8, 0x4, 0xfff, 0x3430, 0xfffffff7, 0x1, 0xc, 0x6, 0xfffffb4d, 0x5da, 0x6, 0x10, 0x4, 0x6, 0x2, 0xffffbed6, 0x7fff, 0x4, 0x9, 0xf8, 0xfffffffe, 0x1, 0x5, 0xfffffffe, 0x2, 0xd30e, 0x5, 0x5, 0x1000, 0x2, 0xd04, 0x269, 0x3, 0x6, 0x5, 0x9, 0x8000, 0x8, 0x4, 0x6, 0x6d0, 0x1e65, 0x6, 0x1, 0x1, 0xffffff19, 0x2, 0x3dd7, 0xffffffff, 0x3, 0x5, 0x10, 0x2, 0x9, 0xe, 0x9, 0xffffffff, 0xfc000000, 0xa5, 0x2, 0x247, 0x4, 0x10000, 0x4, 0x3ff, 0x7fffffff, 0x6, 0x0, 0x6, 0x9, 0x3, 0x7, 0x2, 0x1, 0x0, 0x8, 0x1525, 0x4, 0x6, 0x3, 0x9d, 0x7fffffff, 0x10, 0x6, 0x2, 0x4, 0xc7, 0x5, 0xd, 0x1, 0xfee5, 0x7, 0x7, 0x7, 0x74d2b63, 0xffff, 0x2145, 0x8, 0xfed, 0xbb07, 0x7, 0x3, 0x0, 0xe, 0xad34, 0x2, 0x100, 0x9, 0xa8d, 0x10000, 0x4, 0x3, 0x10, 0xc, 0x3, 0x3, 0x2fc, 0x8, 0x5, 0xec9, 0x18, 0xfffffffa, 0x24000000, 0x1, 0x8000, 0x9, 0x0, 0x8, 0x8, 0x5, 0x4, 0x0, 0x1000, 0x4, 0xbab2, 0x7, 0x3d92, 0x0, 0x3, 0x3, 0x5, 0x4, 0x401, 0x8001, 0x4, 0x1, 0x4a1, 0xd, 0x8, 0x8, 0x0, 0x2, 0x3, 0x3, 0x9, 0x8, 0x2eb3, 0x6, 0x2, 0x2, 0x4, 0x5, 0x5, 0x80, 0x101, 0x2, 0x7, 0x271831e1, 0x3, 0x648, 0x0, 0x7, 0x1, 0x5, 0x10, 0x7, 0x111c, 0x0, 0x5, 0x7, 0x6, 0xa483, 0x8, 0x6, 0x5, 0x5, 0x1, 0x6, 0x8081, 0x80000001, 0x3, 0x8, 0x7f, 0x928, 0x1, 0x8c7, 0x200, 0x8, 0xd, 0x5, 0x2, 0xfffff814, 0x4, 0x1, 0x7, 0x2, 0x7, 0xfffffff8, 0xc510, 0xc, 0x4, 0x9, 0x1]}]}]}}]}, 0x9ac}, 0x1, 0x0, 0x0, 0x4}, 0x50) getsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f00000005c0), &(0x7f0000000600)=0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c100000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fbdbdf25020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0xf) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b97163c1d6d0e196bf02f46c7e81eb72c00000000d0d26b5069f8a98f7dc8f76b74635fde9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f000000008b260000b2728a0481e9f0da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bf1339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8507bc7d202e0990e0"], &(0x7f0000000340)='GPL\x00'}, 0x48) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f00000002c0)={{r4, &(0x7f0000000000)='\x00', 0x348f436a27e0bc3f, &(0x7f0000000040)={@align=0x4, {0x3, 0x4, 0x4, 0x8}}, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x6}, {[0x1, 0x4, 0x1, 0xc5]}, 0xfffffff9, 0xc4, &(0x7f0000000100)=""/196}) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000340)={0x0, 0x78, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72dc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4840) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r5) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000400)=0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000002400)={0x14, r9, 0x301, 0x0, 0x0, {0x17}}, 0x14}, 0x1, 0x0, 0x0, 0x34000804}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xd0, r9, 0x100, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x80}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x2400c004}, 0x0) 1m35.533739071s ago: executing program 34 (id=4941): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtclass={0x98, 0x28, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x6, 0x7}, {0xd, 0xfff1}, {0xfff1}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5}}}, @c_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x2e, 0x2, 0x1f, 0x9, 0x8000, 0x100, 0x5, 0xba}}]}}, @c_atm={{0x8}, {0x30, 0x2, [@TCA_ATM_HDR={0x29, 0x3, "b96867c2aa063948c09c71bd7366600a644f4b05f8db1febe7ac7a4bb3788884680f285b5d"}]}}]}, 0x98}}, 0x4008000) recvmmsg$unix(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006a80)={0x0, 0x0, &(0x7f0000006a40)={&(0x7f00000025c0)=@deltfilter={0x9ac, 0x2d, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x2}, {0xffe0}, {0xa, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffa}, @TCA_CHAIN={0x8, 0xb, 0x180a}, @filter_kind_options=@f_cgroup={{0xb}, {0x96c, 0x2, [@TCA_CGROUP_ACT={0x150, 0x1, [@m_simple={0xe0, 0x1a, 0x0, 0x0, {{0xb}, {0xa8, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xe, 0x3, '[^-@-#]\'&\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x40, 0xb, 0x2, 0x28, 0xfff}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x3, 0xffffffffffffffff, 0x6, 0x5}}, @TCA_DEF_DATA={0xd, 0x3, 'skcipher\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xd74, 0x216a, 0x1, 0x3, 0x66}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0xfff, 0x1, 0x10001, 0x903}}, @TCA_DEF_DATA={0xa, 0x3, '\x01\x01\x01\x01\x01\x01'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0xffffffff, 0x1000000d, 0x8, 0xc84}}]}, {0xd, 0x6, "0c7783d54c9db29507"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_sample={0x6c, 0x5, 0x0, 0x0, {{0xb}, {0x4}, {0x3d, 0x6, "b996f477c08340b36e4f007f77baf3c3e40b23179df9a95a0d1c9ca7bfc01530cbe35992146651e5089ee682d68d54944ad8afb31caf28e129"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_CGROUP_POLICE={0x818, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0xfffffffb, 0x1, 0xdd8, 0x5, 0x800, 0x0, 0x79, 0x3, 0x40, 0x100, 0x4, 0x3, 0xffffba23, 0x3, 0x6, 0x4, 0x7ce, 0x40, 0x7c, 0xff, 0x6, 0x9, 0x5, 0xfffffffb, 0x6, 0x9, 0x3, 0x4, 0x6, 0x3, 0xffffffff, 0x18, 0x2, 0x8, 0x8000, 0x0, 0x0, 0xe, 0x7f, 0x1, 0xffffb93c, 0x9, 0x94e4, 0x3, 0x5, 0x200, 0x8, 0x9, 0x7f, 0x5, 0x1, 0x80000001, 0x64af103f, 0x0, 0x6f8, 0x4, 0xff, 0x6, 0x10000, 0x7, 0x0, 0x5231, 0x1, 0x8, 0x66df, 0x80, 0x10000, 0x6, 0x48, 0x59, 0x7, 0x2, 0x4e2, 0x616, 0x3, 0xfffffffe, 0x2, 0x8d, 0x5, 0x8, 0x8, 0xffff8001, 0x3, 0x3, 0xfba8, 0x465, 0x370, 0x200, 0x4, 0xb68a, 0xfffffff9, 0x9, 0x1, 0x6, 0x9, 0x200, 0x1, 0x4, 0x3e, 0x4, 0x800, 0xf, 0x81, 0x7, 0x8, 0x3, 0x4, 0x21a5, 0x81, 0x7, 0x6, 0x1b, 0x8, 0xb, 0x3, 0xd8488af, 0x4, 0xe09, 0x1, 0x7, 0x8, 0x1, 0x5, 0xff, 0xc, 0x8, 0x4, 0x7, 0x0, 0x5, 0x6, 0x6, 0x38000000, 0x1, 0xffffffff, 0x10001, 0xdff, 0x7fff, 0xb128, 0x7, 0x5f, 0x5, 0x5, 0x8, 0x8, 0x9, 0x5, 0xffffffff, 0xa, 0x85b, 0x0, 0x0, 0x1, 0x2, 0x6, 0x47, 0x68, 0x0, 0x5fe, 0x0, 0x80000001, 0x401, 0x84, 0x7, 0x7, 0xdcc0, 0x8000, 0x2, 0x4, 0x81, 0xee, 0x6, 0x3, 0x6, 0x2, 0x2, 0x800, 0x0, 0xec5, 0x2f2, 0x1, 0x6, 0xc, 0x3, 0x4, 0x401, 0x3, 0x10001, 0x9, 0x100, 0x9, 0xf970, 0x2, 0x3, 0xfff, 0xb55, 0x6, 0x7f, 0x100, 0x7, 0x100, 0xabe, 0x3, 0x8, 0x7f, 0x8000, 0x3, 0x401, 0x525b, 0x5, 0x8c8, 0x9, 0x4, 0x51a, 0x7f, 0x68, 0x6, 0xffff, 0x7ff, 0x2, 0xffff, 0xa, 0x8, 0x8, 0x3, 0xffffffff, 0x7, 0x2, 0x7, 0x1, 0x9, 0x8, 0xa53, 0x10, 0x687, 0x4948, 0x1, 0x7, 0x10001, 0x1ff, 0x800, 0x8001, 0x7fff, 0x9, 0x6, 0xf, 0x3, 0x10, 0x7, 0x4, 0x40, 0x568, 0x4, 0x40000000, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x0, 0x5, 0x101, 0x8, 0x6, 0x0, 0x9, 0x8, 0xfffffeff, 0x2, 0x2, 0x0, 0x5, 0x305, 0xd, 0xfff0000, 0x2, 0x9, 0x0, 0x10001, 0x7, 0x3, 0x4, 0x9, 0x48000, 0x3, 0x7, 0x1, 0x7, 0x7f, 0x20fd2f65, 0x6, 0x80, 0x7, 0xfffffff9, 0x0, 0x3ff, 0x7ff, 0x80000000, 0x8, 0x4, 0x10000, 0x8, 0x4, 0xfff, 0x3430, 0xfffffff7, 0x1, 0xc, 0x6, 0xfffffb4d, 0x5da, 0x6, 0x10, 0x4, 0x6, 0x2, 0xffffbed6, 0x7fff, 0x4, 0x9, 0xf8, 0xfffffffe, 0x1, 0x5, 0xfffffffe, 0x2, 0xd30e, 0x5, 0x5, 0x1000, 0x2, 0xd04, 0x269, 0x3, 0x6, 0x5, 0x9, 0x8000, 0x8, 0x4, 0x6, 0x6d0, 0x1e65, 0x6, 0x1, 0x1, 0xffffff19, 0x2, 0x3dd7, 0xffffffff, 0x3, 0x5, 0x10, 0x2, 0x9, 0xe, 0x9, 0xffffffff, 0xfc000000, 0xa5, 0x2, 0x247, 0x4, 0x10000, 0x4, 0x3ff, 0x7fffffff, 0x6, 0x0, 0x6, 0x9, 0x3, 0x7, 0x2, 0x1, 0x0, 0x8, 0x1525, 0x4, 0x6, 0x3, 0x9d, 0x7fffffff, 0x10, 0x6, 0x2, 0x4, 0xc7, 0x5, 0xd, 0x1, 0xfee5, 0x7, 0x7, 0x7, 0x74d2b63, 0xffff, 0x2145, 0x8, 0xfed, 0xbb07, 0x7, 0x3, 0x0, 0xe, 0xad34, 0x2, 0x100, 0x9, 0xa8d, 0x10000, 0x4, 0x3, 0x10, 0xc, 0x3, 0x3, 0x2fc, 0x8, 0x5, 0xec9, 0x18, 0xfffffffa, 0x24000000, 0x1, 0x8000, 0x9, 0x0, 0x8, 0x8, 0x5, 0x4, 0x0, 0x1000, 0x4, 0xbab2, 0x7, 0x3d92, 0x0, 0x3, 0x3, 0x5, 0x4, 0x401, 0x8001, 0x4, 0x1, 0x4a1, 0xd, 0x8, 0x8, 0x0, 0x2, 0x3, 0x3, 0x9, 0x8, 0x2eb3, 0x6, 0x2, 0x2, 0x4, 0x5, 0x5, 0x80, 0x101, 0x2, 0x7, 0x271831e1, 0x3, 0x648, 0x0, 0x7, 0x1, 0x5, 0x10, 0x7, 0x111c, 0x0, 0x5, 0x7, 0x6, 0xa483, 0x8, 0x6, 0x5, 0x5, 0x1, 0x6, 0x8081, 0x80000001, 0x3, 0x8, 0x7f, 0x928, 0x1, 0x8c7, 0x200, 0x8, 0xd, 0x5, 0x2, 0xfffff814, 0x4, 0x1, 0x7, 0x2, 0x7, 0xfffffff8, 0xc510, 0xc, 0x4, 0x9, 0x1]}]}]}}]}, 0x9ac}, 0x1, 0x0, 0x0, 0x4}, 0x50) getsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f00000005c0), &(0x7f0000000600)=0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c100000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fbdbdf25020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0xf) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f00000002c0)={{r4, &(0x7f0000000000)='\x00', 0x348f436a27e0bc3f, &(0x7f0000000040)={@align=0x4, {0x3, 0x4, 0x4, 0x8}}, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x6}, {[0x1, 0x4, 0x1, 0xc5]}, 0xfffffff9, 0xc4, &(0x7f0000000100)=""/196}) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000340)={0x0, 0x78, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72dc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4840) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r5) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000400)=0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000002400)={0x14, r9, 0x301, 0x0, 0x0, {0x17}}, 0x14}, 0x1, 0x0, 0x0, 0x34000804}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xd0, r9, 0x100, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x80}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x2400c004}, 0x0) 4.63329137s ago: executing program 2 (id=5885): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000008000000000000000000000000000000000000000fcffffff00000000000000000000225e8918df46bd19046046d5b700"/144]}, 0x108) 4.416269748s ago: executing program 6 (id=5886): r0 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) (async, rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) (rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000002c0)={r6, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x6c, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x3, 0xfff1}, {0x4, 0xd}, {0xc}}, [{0x8, 0xb, 0xf18}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xd}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x8001}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40480c0}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000840)={'syztnl1\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x0, 0xff, 0x54, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast2, 0x700, 0x1, 0x0, 0x2}}) sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000005c0)="b062def0087436dd4258ccfd18245d643e31963b01cffe2990f43468bc67aabf048e03d3e2996073a5a258cc6d41dc7f385d795eb2cb07d4068f4a89217f4a67efaeeabd87f3aeb9a8f5051bcf603fd369304fbc654809aec7ae244c217f4010a88916f2327f78c85c94ec06b8463a2c308f2f0b09f96ac18910ca9ecdb13c25e2203e7ce5352513bb5e89f2ed8d39d2219a15d6db5b7317f79f0289e5688278f0ec77df2c58862345fc5fa6fa6add467eb273b097ecb38f4ef84db7988bd97333855ea811768692427172925f0e2ee28bfe310c9753dd433051997c013fbbd291", 0xe1}], 0x1, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="e0000002e0000002000000007c000000000000000000000007000000014420be0000000008000000050000000100000ef100003670000001ff00000000832bbbffffffffac1414130a010102e0000001e0000001ac1414aa64010101640101017f000001ffffffff9404010086160000000301106864bfd30e26b6c928967fed6a6194040100000000000000"], 0x218}, 0x10) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) close(r8) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x8170b926, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0x8, 0xb}, {0x2, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x200}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x2000c080) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r11, &(0x7f00000002c0)="05", 0x1, 0x20000005, &(0x7f0000000140)={0x11, 0x7, r12, 0x1, 0x0, 0x6, @remote}, 0x14) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r1, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x20) (async) close(0x3) (async) sendto$inet(r0, 0x0, 0x0, 0x20000090, 0x0, 0x0) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x100000000000008f, 0x0, 0xffffffffffffffa3}, 0x0) (async, rerun: 32) r13 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r13, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 4.415391297s ago: executing program 2 (id=5887): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="540100001900010000000000000000001d01000008000500f880000015010400010000800202000031171e44b2b50e8f0400"], 0x154}}, 0x0) (async, rerun: 64) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000500014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x10) (rerun: 64) 4.108410357s ago: executing program 5 (id=5890): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000800630500000000000081000000b7080000000000e505aaf8ff00000000b5080000020000047b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b70500000800000085000000b3000000"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600ebfb}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000800)=ANY=[@ANYRESHEX, @ANYBLOB="cbfa8b6f41ba10863a905275a2232b949442584ede91a8231c56d99797d3823ccc73ed5f9e4502f76b4f3a3abf9ad38d4cf3aa819a9f2a39dcc25735ac65d50d444e7ca8b5584f148561c90780c5a527625e5b6dacd37394fa21cd728ae852043a6790ee378d1ae00ae308c60075c0de3a71c8339cd95a5b48b0010b1e72e8c37f3939a0704bcab4952b7cb3d4d4fb8d535125a9ea8fca9b37ff02862f389b9de6425d616a0e96d256df47e308cbe1cf8a4b96bb9fe2fcf43d6f593114702afdd6cd720273a9d751bae4e332d97897f16acf3b52"], 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000000000080000004"], 0x26}}, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff00000000850000001b3bdf0095"], &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$MRT6(r1, 0x29, 0xd0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x6, @private2, 0x2}]}, &(0x7f0000000180)=0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000900004000000000", @ANYRES32, @ANYBLOB="0000002000000000ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x14, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xffffeff8}, @call={0x85, 0x0, 0x0, 0x7}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80}, @alu={0x4, 0x1, 0x4, 0x4, 0x9, 0x8, 0x4}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6a}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x1}, @generic={0x7f, 0x6, 0xa, 0x8, 0x7fff}]}, &(0x7f0000000000)='GPL\x00', 0xdc, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r3}, 0xc) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) 4.076272872s ago: executing program 2 (id=5891): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) recvmmsg(r0, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0x88b1}], 0x1, 0x40000120, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001a40)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x9, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1, {0x7, 0x1, 0x0, 0x5, 0x0, 0x7}, {0x8, 0x0, 0x2, 0x2, 0x0, 0x7}, 0x1, 0x0, 0x3}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0x7ff, 0x3, 0x247ecded, 0x0, 0x80000400, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8000000, 0xfffffffe, 0x0, 0x4, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0xe80, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xb, 0x37, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0xffffff9d, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfffffffd, 0xffffffc3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x0, 0x19b90000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x6, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x9a0a, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x9, 0x0, 0x8c62, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffe, 0x0, 0x8, 0xffff, 0x0, 0x0, 0x0, 0x5, 0x5, 0xfffffffc, 0x0, 0x0, 0x9, 0x5, 0x2, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x91, 0x9fd, 0xfffffffe, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x9, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x13, 0x5, 0x200, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0x800e0b2, 0x1, 0x8fc, 0x8, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0xfd, 0xfffffffa, 0x8, 0x5a1e, 0xb5, 0x10001, 0x401, 0x1, 0x80007f, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x12, 0x4, 0x0, 0x1000004, 0x7, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x0, 0xffdffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x6, 0x1, 0x6, 0xe5a, 0x4, 0x6, 0x81, 0xd44, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x85, 0x8, 0x1, 0x2, 0xc9, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b6, 0xff, 0x20000001, 0x2, 0xf, 0x24b9, 0x39, 0xe01, 0x1, 0x6430, 0xb, 0x4, 0x4000, 0x3, 0x7eb6, 0x3, 0x0, 0x203, 0x4, 0x9, 0xff, 0xa, 0x6, 0xf9, 0x100, 0x1, 0x8001, 0x100, 0xbfff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x204, 0x80000004, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x65, 0x4, 0xfffffa0c, 0x4, 0x0, 0x1000002, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x1, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x1000009, 0x4, 0x6, 0x7, 0x200, 0x37, 0x7, 0x3, 0xc, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0xfffffffe, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x8, 0x8, 0xc2f, 0x772, 0x80a, 0xffe, 0x33, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3, 0x1}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f0000000000)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003640)='?', 0x1}], 0x1}}], 0x1, 0xc005) sendmmsg$inet(r4, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000240)='@', 0x1}], 0xef}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}], 0x1}}], 0x2, 0x4000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000002000010026bd7000fbdbdf250210100009000006"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1c8}}, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r1, 0x8100587e, &(0x7f0000000500)) write$bt_hci(r0, &(0x7f0000000200)=ANY=[], 0x6) 3.839701921s ago: executing program 6 (id=5893): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x28, r8, 0x1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x2b, 0x5, 0x1d}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e80)={r5, 0xe0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000007c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0], 0x0, 0x4b, &(0x7f00000009c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000a00), &(0x7f0000000c00), 0x8, 0x54, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1fffe0, '\x00', r4, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001040)={{0x1, 0xffffffffffffffff}, &(0x7f0000000fc0), &(0x7f0000001000)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r16 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001140)=@bpf_lsm={0x1d, 0xd, &(0x7f00000000c0)=@raw=[@map_idx={0x18, 0x8, 0x5, 0x0, 0xf}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x9}, @generic={0x0, 0x3, 0x5, 0x9, 0x404b}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0xd, 0x3, 0x8, 0xc, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7f}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000400)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x12, '\x00', r4, 0x1b, r2, 0x8, &(0x7f0000000740)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0xc, 0x401, 0x5}, 0x10, r11, 0x0, 0x4, &(0x7f00000010c0)=[0x1, r12, r5, r13, r14, r15], &(0x7f0000001100)=[{0x2, 0x3, 0x4, 0x2}, {0x0, 0x2, 0x8, 0x3}, {0x2, 0x4, 0xc, 0x8}, {0x4, 0x4, 0x2, 0xa}], 0x10, 0x20}, 0x94) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r17 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r17, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d00)={0x0}, 0x1, 0x0, 0x0, 0x4044010}, 0x4000000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r17, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f0000000080)=0xc) write$cgroup_int(r17, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b80)={r16, r17, 0x17}, 0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0300000004000000010000000a00fcff20000000", @ANYRES32=r0, @ANYBLOB="940c00"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="04000000050000000500"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000bc0), 0xfffffffffffffda2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000cc0)={@cgroup=r17, 0x2b, 0x1, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001200)={@fallback=r16, r5, 0x2c, 0x203b, r16, @void, @void, @value, @void, r18}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x15, 0x11, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='GPL\x00', 0x9, 0xd7, &(0x7f00000005c0)=""/215, 0x40f00, 0x30, '\x00', r10, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x7, 0xf, 0x9}, 0x10, 0x0, r5, 0x5, &(0x7f0000000a00), &(0x7f0000000a40)=[{0x3, 0x5, 0x5, 0xb}, {0x2, 0x2, 0x0, 0x9}, {0x5, 0x2, 0x6, 0xa}, {0x1, 0x5, 0x0, 0x6}, {0x1, 0x4, 0x5, 0xb}], 0x10, 0x4}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r3, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r5], 0x34}}, 0x4008000) 3.772367484s ago: executing program 2 (id=5895): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYRES32=0x0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r1, 0x0, 0x30, 0x84c284bdff765b60, @void}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0x65, 0x7, 0x8, 0x24, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x7, 0xffffff81, 0x9}}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe], 0x0, [0x1, 0x2, 0xfffe, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0x4], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40005}, 0x4040010) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x1, r7, 0x1000000}, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r9, @ANYBLOB="00000000000000001c001a8018000580140006"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) getpeername$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg0\x00', 0x0}) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r13, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r13, &(0x7f0000000000)="230003000100ef", 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'veth1_vlan\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fbdbdf251100000060000180080003000100000008000100", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00~', @ANYRES32=r4, @ANYBLOB="08000300000000000800030003000000080003000100000008000100", @ANYRES32=r7, @ANYBLOB="08000300030000001400020064766d7270310000000000000000000008000300020000004c0001801400020070696d3672656731000000000000000008000300010000001400020076657468305f746f5f626f6e6400000008000100", @ANYRES32=r9, @ANYBLOB="080003000200000008000100", @ANYRES32=r11, @ANYBLOB="1400018008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB], 0xd4}, 0x1, 0x0, 0x0, 0x4000}, 0x804) 3.630387192s ago: executing program 6 (id=5899): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB="2110000000000000180012800b00010067656e65766500"], 0x38}, 0x1, 0x0, 0x0, 0x20040040}, 0x814) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x1) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x600) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c000000fee94e", @ANYRES16=r4, @ANYBLOB="01000000000000000000300000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030001000000"], 0x3c}}, 0x48800) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), 0xffffffffffffffff) (async) unshare(0x6a040000) (async) recvmmsg$unix(r0, &(0x7f0000006780)=[{{&(0x7f0000000400), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000480)=""/28, 0x1c}], 0x1, &(0x7f0000000700)}}, {{&(0x7f0000000840), 0x6e, &(0x7f0000002040), 0x0, &(0x7f00000020c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}, {{&(0x7f00000021c0)=@abs, 0x6e, &(0x7f0000002580)=[{&(0x7f0000002240)=""/130, 0x82}, {&(0x7f0000002300)=""/110, 0x6e}, {&(0x7f0000002380)=""/85, 0x55}, {&(0x7f0000002400)=""/90, 0x5a}, {&(0x7f0000002480)=""/239, 0xef}], 0x5, &(0x7f0000002600)}}, {{&(0x7f0000002640), 0x6e, &(0x7f0000002740)=[{&(0x7f00000026c0)=""/126, 0x7e}], 0x1}}, {{&(0x7f0000002780), 0x6e, &(0x7f0000003b40)=[{&(0x7f00000005c0)=""/11}, {&(0x7f0000002840)=""/91, 0x5b}, {&(0x7f00000028c0)=""/44, 0x2c}, {&(0x7f0000002900)=""/208, 0xd0}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/126, 0xcddf90f0e0809efc}, {&(0x7f0000003a80)=""/132, 0x84}], 0x7}}, {{&(0x7f0000003bc0)=@abs, 0x6e, &(0x7f0000004e40)=[{&(0x7f0000003c40)=""/39, 0x27}, {&(0x7f0000003c80)=""/106, 0x6a}, {&(0x7f0000003d00)=""/4096, 0x1000}, {&(0x7f0000004d00)=""/237, 0xfa}, {&(0x7f0000004e00)=""/29, 0x1d}], 0x5, &(0x7f0000004ec0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000004f40), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000004fc0)=""/81, 0x51}, {&(0x7f0000005040)=""/236, 0xec}, {&(0x7f0000000640)=""/126, 0x7e}, {&(0x7f0000000940)=""/230, 0xe6}], 0x4}}, {{0x0, 0x0, &(0x7f0000005240)=[{&(0x7f0000005180)=""/152, 0x98}], 0x1, &(0x7f0000005280)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{&(0x7f00000053c0), 0x6e, &(0x7f00000066c0)=[{&(0x7f0000005440)=""/185, 0xb9}, {&(0x7f0000005500)=""/57, 0x39}, {&(0x7f0000005540)=""/4096, 0x1000}, {&(0x7f0000006540)=""/115, 0xffffffffffffffec}, {&(0x7f00000065c0)=""/249, 0xf9}], 0x5, &(0x7f0000006740)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}], 0x9, 0x20, &(0x7f0000006a00)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) unshare(0x22020600) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000001c40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0xe8, 0x0, 0xe8, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r11 = socket$inet(0x2, 0xa, 0x8) ioctl$sock_inet_SIOCADDRT(r11, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x2799, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @empty}, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x3000000000, 0x8005}) syz_emit_ethernet(0x5a, &(0x7f00000004c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "abb9bfe0c34c72d50c66fa8369f6e787"}, @md5sig={0x13, 0x12, "2a9c444be69caceb3fbd4ef8047b79a3"}]}}}}}}}, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00'/12, @ANYRES16=r9, @ANYBLOB="01002abd7000fddbdf25030000000c00040006000000000000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) ioctl$sock_netdev_private(r7, 0x89f7, &(0x7f0000000280)="bf02972bf20f8337aef0524cfad1c83a237230d3b7398c8592f0bc39414e20a004d81b9e3246f18005226b1f706943224b0e4d6cdb58aeb1f49eba4da8f4e417ee07d695b3157a5c") sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32=r6, @ANYBLOB="08000700ffffffff"], 0x2c}, 0x1, 0xffffff7f}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0xfffffffe, 0x0, 0xffffffffffffffff, 0x3}, 0x50) sendmsg$tipc(r2, &(0x7f0000000580)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x42, 0x3}, 0x2}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000340)="b5", 0x1}], 0x1, 0x0, 0x0, 0x4000880}, 0x4004089) setsockopt(r7, 0x80000000, 0x20000000, &(0x7f0000000380)="a42410cdfcd064360859b4d52608037275e39689004113abb8f160b27df8bee3bace221d71c39698eb649ef7ceb05993348b7e90dc7cdd2f22227e49583f6a9c5d8dda09d4d367ab752f32c574894eef47e0", 0x52) 3.519753956s ago: executing program 2 (id=5900): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071103d000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), r1) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xc8, r2, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff800}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9a8e}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x65}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8d5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x30}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8008}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x80, 0x40, 0xa, 0x7fff, {{0x9, 0x4, 0x0, 0x0, 0x24, 0x65, 0x0, 0xa, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0xf, 0x6d, [@multicast2, @private=0xa010102, @empty]}]}}}}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x2, 0x6, 0x788, 0x488, 0x398, 0x398, 0x398, 0x398, 0x6b8, 0x6b8, 0x6b8, 0x6b8, 0x6b8, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x39}, @private1, [0x0, 0x0, 0xffffffff, 0xffffff00], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x6, 0x0, 0x0, 0x40}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x2f, 0x0, 0xe, 0x0, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xffffff00, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0x0, 0xff000000, 0xff000000], [0x0, 0x0, 0xff000000, 0xff000000], 0x3, 0x101}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], 0xfd}}]}, @HL={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xff, 0x9}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0xff, 0x0, 0xff000000], 'dummy0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0x118, 0x48000000}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x1, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9cc6d7b009686f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x30, 0x0, [@empty, @private0, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @dev={0xfe, 0x80, '\x00', 0x62}, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newtfilter={0x24, 0x11, 0x1, 0x70bd22, 0x25dfdbff, {0x0, 0x0, 0x74, r8, {0x5, 0x10}, {0x1, 0xfff1}, {0x2, 0xe}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x3604c8a4}, 0x810) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x20, 0x8000, 0x2, 0x7fff, {{0x27, 0x4, 0x3, 0x3, 0x9c, 0x65, 0x0, 0x7, 0x29, 0x0, @remote, @remote, {[@rr={0x7, 0x23, 0x23, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x2e}]}, @ra={0x94, 0x4}, @noop, @timestamp_addr={0x44, 0xc, 0xf6, 0x1, 0x0, [{@multicast1, 0x621d}]}, @lsrr={0x83, 0xf, 0x8e, [@empty, @empty, @multicast2]}, @lsrr={0x83, 0x1f, 0xdb, [@local, @broadcast, @loopback, @remote, @private=0xa010102, @remote, @local]}, @cipso={0x86, 0xd, 0x0, [{0x6, 0x2}, {0x7, 0x5, 'xHO'}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0xd, [@empty, @multicast1, @loopback, @multicast1]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000005c0), &(0x7f0000000600)=0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x8000, 0x7800, 0x672772e0, 0x402a, {{0x9, 0x4, 0x1, 0x38, 0x24, 0x66, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x20}, @remote, {[@timestamp={0x44, 0x10, 0xd6, 0x0, 0x4, [0xa, 0x1, 0x7fff]}]}}}}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r12, 0x20, &(0x7f00000001c0)={&(0x7f0000002700)=""/4116, 0x1014, 0x0, &(0x7f0000000000)=""/89, 0x59}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x4, 0xff, 0x1, 0x6, 0x24, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, 0x8000, 0x10, 0x0, 0x3}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f0000001000)=ANY=[@ANYBLOB="40020000", @ANYRES16=r3, @ANYBLOB="080026bd7000fedbdf2501000000040003005400018008000100", @ANYRES32=r4, @ANYBLOB="080003000200000008000100", @ANYRES32=r8, @ANYBLOB="080003000000000008000100", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000300020000000800030002000000700002800c000180080001000300000014000180080001000500000008000100080000000c000180080001000800000014000180080001000000000008000100070000002c000180080001000500000008000100070000000800010006000000080001000b00000008000100010000001c010280140001800800010006000000080001001d0000001400018008000100050000000800010004000000240001800800010003000000080001000100000008000100060000000800010000000000540001800800010005000000080001000700000008000100000000000800010002000000080001000000000008000100030000000800010008000000080001000700000008000100040000000800010006000000240001800800010002000000080001000700000008000100020000000800010004000000540001800800010000000000080001000100000008000100080000000800010001000000080001000100000008000100010000000800010005000000080001000500000008000100060000000800010005000000440001800800030001000000140002007369743000000000000000000000000008000100", @ANYRES32=r13, @ANYBLOB="080003000300000014000200726f736530000000000000000000000004000300"], 0x240}, 0x1, 0x0, 0x0, 0x4044002}, 0x20004001) r14 = socket$kcm(0x23, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r15, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001340)=[{0x0, 0x18}, {&(0x7f0000001100)="b35ba3", 0x3}], 0x2}}], 0x4, 0x0) sendmsg$kcm(r14, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2, 0x0, 0x0, 0x100100}, 0x0) 3.234613134s ago: executing program 5 (id=5903): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 32) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x4000) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) r6 = socket$can_bcm(0x1d, 0x2, 0x2) (async) unshare(0x26020480) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c001700", @ANYRESDEC=r5, @ANYBLOB="0100ffffffff00000000370000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800730000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x400c001}, 0x0) (async) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r8, 0x11e, 0x1b, 0x0, &(0x7f0000000000)=0xfffffffffffffe8c) (async) connect$can_bcm(r6, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@sack_perm, @sack_perm, @mss={0x2, 0x4}, @timestamp, @timestamp, @sack_perm, @sack_perm], 0x7) (async) sendmsg$can_bcm(r6, 0x0, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r9, &(0x7f0000000100)={0x27, 0x0, 0xffffffff, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) (async) getsockname(r9, 0x0, &(0x7f0000000080)) close(r6) (async) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x1}, 0x1c) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000030428bd7800df280000000000020000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000200000008000500", @ANYRES32=r10, @ANYRESDEC=r8], 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x528, 0x0, 0x1a0, 0x2b8, 0x388, 0xd0, 0x458, 0x458, 0x458, 0x458, 0x458, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7e, 0x80}}}, {{@ipv6={@mcast1, @local, [0xffff00, 0x0, 0xffffff00], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x1, 0x40}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x5, 0x9, 0x0, [0xa80, 0x6108, 0x2, 0x9, 0x8001, 0x9, 0x6, 0x7, 0xfffe, 0x8000, 0x5, 0xfffb, 0x6d1, 0x1, 0x5, 0x8000], 0x6}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0x2b8}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xfd}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x588) 3.075119772s ago: executing program 5 (id=5904): pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001e80)=[{&(0x7f0000000080)="a6cc78fa049ea02b6ec26d9784f6945b6379a283cf4948bdb568b9d26befb7f12fb654ef5262d0bb0b96a70c66a24c55d3dd5a58da4b5b3eec666979e75e2172bafc2bb6c1f00657b93c35306f288a0201704aacf814ef16b30e5ddeae690e316d0bb73363966c6696eb42a9ea", 0x6d}, {&(0x7f0000000100)="c0505c3fc9100ea80055020d582bc88ece6b35ade4b1a4ec4bf44cdb43fa20ab5d448ba1758866bfda52e0", 0x2b}, {&(0x7f0000000180)="b6755c51785ebe3658c13db021526b4b8bc83fefae652f1a8aac8371c3bfe83efa72d532792fe713119c176be1576c3f9dd5eb60cdf702ac5beb7f7c9af2f1f0d61b9d527ce05f8c70c12c19084679ddb7b098de651a4531b9580cf45da968bf01bb36fcb46a9117673e0bf74004aa0766bf28bc37dbd567779b4f660dd9848510357dad571a774b30e50322f1647664b2ca3a478d04fe41965c669f4a68a91a9f8ea7", 0xa3}, {&(0x7f0000000280)="9b78d66248e42d069dc23e8ee577d7ac2eb24cbffa36647da5ba7da6c7d6feb0b50da8998961d5140afcbc65f36681a91567a7504ff96be22fc5c1887dbde023ca12e6ab69cb320e0887b0cc02be6136a6c74b8dd0d9d46468ea1a01405510011dd1e874a1af200fa2ab9b081229055ce4f4b2ac3c44451adb056f469f2f8e9217288e60465970bb241729fed07fdbd03413bc9eefbdc51f0e3fab3692d314fa7ef264bd73ca19ff76cb88553cadb96e8baff7a17520a68c762e455c1c0caa4e9151a1e2dbd0940b2d627774b704ddc6e26245170d8d66b5dbf43b7f24d8d033e437fd01b237441d6d72ceff7b27dd4e65c4a1", 0xf3}, {&(0x7f0000000e40)="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", 0x393}], 0x5, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) (async) splice(r0, 0x0, r2, 0x0, 0x2000000002ffff, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001800090400150000000000002d"], 0x1c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b703000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r10, 0x0, 0xe80, 0x0, &(0x7f0000000100)="c1dfb061cdee7a1f3fc89771a773", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000005c0)) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd700002dcdf254400000008000300", @ANYRES32=r11, @ANYBLOB="0c00238006001900e6"], 0x28}, 0x1, 0x0, 0x0, 0x2404c080}, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) (async) r13 = socket(0x29, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=@gettclass={0x24, 0x2a, 0x21, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r14, {0xfff3, 0x2}, {0x9, 0x2}, {0xc, 0x6}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x44000) (async) setsockopt$packet_tx_ring(r12, 0x107, 0xd, &(0x7f0000000000)=@req={0xd, 0x2, 0x340, 0x1b6b}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r16 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r16, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r15, @ANYBLOB="24005a8020000180140003000000000011000000800020000100000004000200040001"], 0x40}}, 0x0) 3.040954338s ago: executing program 2 (id=5905): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001740)=0xffffffffffffffff, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb080002"], 0x78}}, 0x0) 2.978565139s ago: executing program 7 (id=5906): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaef}, 0x7, 0x7}, [{0x8, 0xffbff000, 0x2, 0xffff, 0x1ff, 0xafe}, {0xe, 0x2, 0x1, 0x9, 0x4, 0xa}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x80000001, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x44, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x8009ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa004, 0x8, 0x5, 0x20000a17}, {0x7, 0x200, 0x0, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x6, 0xfff, 0xe4af, 0x0, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x5, 0x6, 0x2, 0x4, 0x3}, {0x84, 0x3, 0x8, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x80000000}, {0x2, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0xb904, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x1d00, 0x5, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x13, 0x40}, {0x0, 0xd, 0x9, 0x6, 0xffffffff, 0x1}, {0x3, 0x1000, 0x1ff, 0x9, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x0, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x3, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x1, 0xa4, 0x4, 0x7}, {0x5, 0xe4, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d6, 0xfffffffb}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x6, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0xb, 0xfffffffe, 0x800, 0x0, 0x1}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0x9d, 0x1, 0x80000000}, {0xbd, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x8, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0xffffffff, 0xc0, 0xfffff44c}, {0x4, 0x3, 0xfffffff5, 0x9, 0xbe, 0x7}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x5, 0x9, 0xbc, 0x11}, {0x1ff, 0xfffffffc, 0xf, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x0, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x200004, 0x0, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x7f, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0xa, 0x100006, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x381, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x2}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x9, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x200, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x0, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x1}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x8}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0xffffffff}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x3f, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x7, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0x40000fff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x400, 0x0, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x84, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x8, 0x405}, {0x7011, 0xfff, 0x9, 0x1, 0x40000009, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x0, 0x9, 0xc402, 0x2, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x3, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0x7, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x7f, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0xa, 0x7}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x8000, 0x8, 0xd, 0x700000, 0x5, 0x4}, {0xcab, 0xf, 0x4, 0xf, 0x8, 0x7}, {0x4, 0x8000, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x1ff, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x9, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x7ffc, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x4000b}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5}, {}, {0x5}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x6}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.91660782s ago: executing program 4 (id=5907): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xc8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x100, 0x19e, 0x0, 0x7ff, 0x200}}, {0x4}}]}]}, 0xc8}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x12, 0xff, 0x0, @empty}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000030000000000000000700000034000100ffffffff95"], &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) 2.876019215s ago: executing program 5 (id=5908): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a5f5fde31abc816a3c47e25a6d0cbe49ba8f9f869f35d1f710db6bfcbc49ec9533ac8127d4fda8164789e9e388271e9c36391f21fff45c1d1f7f6ce7ee817fc1c55153f68f7fc70c5f8a08ec61fefba9683096e59c0d4d7ccc0db823b9dc38069c2336e1630f16e835b390646094d13a13b8257228c34b6c665ca1b31f383239f4b6fe1ab766ca4c337128614dd8f3b5e70283111c2f17fa6a8e67b6453b8fc7f84f3ce1e943219521e80cf60612b3431725290910629c1614aa6e13b92374763bb2d2318166f12e1b0340defc05"], &(0x7f0000000500)='GPL\x00', 0x3d3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1, r1}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x1c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x84) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000780)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff0000006584ad3142"], 0x78) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="054a0050db7d08043f2accaf00", @ANYRES16=r8, @ANYBLOB="010026bd7000fedbdf250400000008000c00010000000800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="a183000000000000000005"], 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r2) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x4e21, @local}, 0x2, 0x0, 0x4}}, 0x2e) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) unshare(0x2a060400) 2.657286661s ago: executing program 4 (id=5910): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="010000000000ff7f1c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipmr_getroute={0x1c, 0x1a, 0x400, 0x70bd26, 0x25dfdbfd, {0x80, 0x80, 0x10, 0x80, 0x0, 0x1, 0x35, 0x5, 0xc00}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r9, @ANYRES16=0x0], 0x3c}}, 0x0) bind$packet(r6, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r6, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r10 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x1, @rand_addr=' \x01\x00', @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x4, '\x00', {0x2, 0x6, "5fc26a", 0x56, 0x32, 0x1, @empty, @private2, [], "987c9302617d3093"}}}}}}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x5, 0x200, 0x40, 0x7fffffff}}}}]}, 0x48}}, 0x4800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x80) 2.55922209s ago: executing program 7 (id=5911): socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce0", 0x55}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0x15}], 0x3}, 0xc854) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendfile(0xffffffffffffffff, r1, 0x0, 0xffffffff000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000000a01040000000000000000010080032c000000030a05000000000000000000010000000900010073797a30000000000900030073797a320000000078000000060a010400000000000000000100100008000b400000000050000480340001800b000100657874686472000024000280080001400000000e0800034000000000080004400000002205000200890000001800018011000100666c6f775f6f66666c6f6164000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xe0}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, 0x0, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@delchain={0x2240, 0x65, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0x5, 0x8}, {0x1f, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0xd76}, @filter_kind_options=@f_bpf={{0x8}, {0x220c, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x4, 0x4, 0xd9, 0x3ff}, {0x8, 0x98, 0x8, 0x3}, {0x4, 0x3, 0x9, 0xfffffff4}, {0x5, 0x1, 0x2, 0x6}]}}, @TCA_BPF_ACT={0x21b4, 0x1, [@m_csum={0x160, 0xb, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x9, 0x7, 0xc, 0x8000}, 0x36}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x6, 0x2, 0x2, 0xffffffff}, 0x66}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x7, 0x1, 0x7, 0x401}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x20000000, 0x4, 0x1}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x3ff, 0x20000000, 0x7ff, 0xfffffe5a}, 0x5f}}]}, {0xa6, 0x6, "7248d3ec12973d09fcd027791dae7e2f903439d3a94e9eb7adf72919ec4c43895d5713f19521b6324a537841f1ebc41db34c02bab7cd31fca7f71778c8a4c2b2b35c29cc299424d4bdb1f7005f8e0bcf48d1627fcf40755ab429e041fefbed1968b849aa35d510281cfa8dd35c3b334b628a8f94a14fae1c71694d35b1ee1e35c959b609e0f82b156b61bf6a460ac478758b430e9f29ada12c95a015637c0cc3394b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0x1cc0, 0x5, 0x0, 0x0, {{0xa}, {0x1c74, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x5, 0xfffffff8, 0x5, 0x8, 0x1}, 0xa, 0x2, [{0xfffffffd, 0x8, 0x5, 0x7023, 0x7ff, 0x3}]}, [{0x8, 0x2, 0x4, 0x9, 0x2, 0x5}, {0xffffffff, 0x1571, 0x7, 0x2, 0x1, 0x6}, {0x1, 0x7, 0x0, 0x2, 0x3, 0x8}, {0x80000001, 0x8, 0x8, 0x4, 0x1, 0x73}, {0x3, 0x6, 0xe, 0x7, 0x7918f95c, 0x4}, {0x1b, 0x9, 0x62b1dada, 0xfff, 0x7fff, 0x6b}, {0x6, 0x3, 0x1, 0x10001, 0x44, 0x3}, {0x4, 0x4, 0x1, 0xe31, 0x4, 0x68}, {0xffff7b7a, 0x5, 0xffffffff, 0x9, 0x10, 0x1}, {0x1126, 0x4, 0xffffffff, 0x0, 0x2}, {0x40, 0x7, 0xbcc, 0x7, 0x0, 0x3ff}, {0xa, 0x2, 0x4, 0x8001, 0x2, 0x6}, {0xe46, 0x4, 0x7, 0x2, 0x2, 0x57}, {0x7, 0x3d27, 0x4, 0x5, 0x2, 0x4}, {0x3, 0x3, 0x3, 0x3, 0x7, 0x5}, {0x5, 0x4d5, 0x7, 0x2, 0x5, 0x9}, {0x8, 0x2, 0xa5, 0x8, 0xfff, 0x7}, {0x3, 0x5, 0x8001, 0x8}, {0x200, 0x2, 0x1, 0x8, 0xff, 0x5c7b}, {0x28, 0x7, 0x6, 0x10, 0x2}, {0x2, 0x2, 0xffff8000, 0x6, 0x0, 0x3a}, {0x800, 0x2, 0x7, 0x5, 0x7fffffff, 0x8}, {0xc9, 0x3, 0xb, 0x3, 0x7fffffff, 0xff}, {0xfffffffe, 0x5c4, 0x9, 0x0, 0xfffffbff, 0xfffffff7}, {0x1fffc000, 0xffffbf54, 0xea, 0x6, 0x8d7, 0x1}, {0x8, 0x5, 0x6c2, 0x8, 0x7ff, 0x3}, {0x0, 0x3, 0x5, 0x40, 0x4, 0x6}, {0xffffffff, 0x730, 0x4, 0x8001, 0xe0, 0x1ff}, {0xfffffff7, 0x3, 0x8, 0x62f3, 0x4, 0x3}, {0x800, 0x1, 0x1ff, 0x35547e4, 0x6, 0x1000}, {0x1, 0x5, 0x0, 0x4, 0x81, 0x9}, {0x400, 0x101, 0x9, 0x0, 0x2, 0x3}, {0x4, 0x7, 0x401, 0xb, 0x1}, {0x1317, 0x1, 0x0, 0x80000001, 0x7, 0x94d}, {0x2, 0x40, 0x6, 0x19c, 0x9, 0x5}, {0x1, 0xc0fa, 0x2, 0x80, 0x0, 0xff}, {0x81, 0x0, 0x44c, 0x3, 0x1, 0x6}, {0x3, 0xff, 0x5eac1937, 0x100, 0x1}, {0xfffffffe, 0xfff, 0x4, 0x2, 0x28000, 0x7fffffff}, {0x5, 0x1, 0x8, 0x3, 0x1, 0x80}, {0x101, 0x889c, 0xb, 0x8000, 0x0, 0x5}, {0x8, 0x300, 0x1, 0x9, 0x5f80c74e, 0xa59}, {0x6, 0x4, 0x4, 0x4, 0x3, 0x2}, {0x8, 0x0, 0x1, 0x6, 0xade7, 0xfffffffc}, {0x574b, 0x7, 0x4, 0x8}, {0xc, 0x4, 0x8, 0xc1f, 0xf, 0x8000}, {0x5, 0x37f, 0x1000, 0x4, 0x1fc, 0x9}, {0xffff3ecd, 0xffffff45, 0x7f, 0xaee, 0xb, 0x7}, {0x3ff, 0x0, 0xc3, 0x7, 0x80}, {0xc9, 0x9, 0x1, 0x7b0a7f11, 0x200, 0x9}, {0x8, 0xf37, 0x80000001, 0xe, 0x2, 0x500}, {0x0, 0x3, 0x3, 0x8001, 0x2, 0x9}, {0x5, 0x6, 0x1000, 0xfffffff9, 0x8, 0x4}, {0x7, 0x1, 0x5, 0x9, 0xc34, 0x8001}, {0x4, 0x7, 0xcd89, 0x565f, 0x6, 0x1000}, {0x5, 0x3f29cd3c, 0x81, 0x6, 0x6, 0x1ef}, {0x6, 0x9, 0x2, 0x9, 0x1, 0x800}, {0x8ab, 0xd3a, 0x4, 0x3, 0xa, 0x3}, {0x80, 0x7fff, 0xc2c000, 0x1, 0x5f3c, 0x1}, {0x10000, 0x8, 0xffffffff, 0xcf, 0x2, 0x1}, {0x9, 0x86af, 0x7a, 0x3e, 0x1}, {0x2, 0x8000, 0x2, 0x7c, 0x80000001, 0xffffc3d8}, {0xa, 0xb, 0x4, 0x2, 0x4, 0x9}, {0x1, 0x7ff, 0x24, 0x1e, 0x7, 0x1}, {0xffffffff, 0x8, 0x0, 0x8001, 0x89, 0x3}, {0xc, 0x1, 0xfffff182, 0x400, 0x2, 0x7fff}, {0xcc, 0x8000, 0x9, 0xfffffff7, 0x4, 0xd08f}, {0xe, 0x9, 0x8, 0xb, 0x0, 0x8}, {0xdb15, 0x40, 0x46fe, 0x5, 0x4, 0x80}, {0x2, 0x200, 0x3, 0x7, 0xe0, 0xcbc1}, {0x7, 0x3, 0x0, 0xed0, 0x3, 0x8}, {0x3, 0x2, 0x8, 0x1, 0xffffffc0, 0x8}, {0x7, 0x3, 0x5, 0xffffffff, 0x400}, {0x14a, 0x7, 0x0, 0x4df6, 0x2, 0x7}, {0x10, 0x0, 0x4, 0xfffffffc, 0x2, 0x101}, {0x4, 0x6, 0x608d, 0x9427, 0x9, 0x1}, {0x40, 0x3, 0x11, 0x9, 0x80000000, 0x8000}, {0x4, 0x3, 0x32c8, 0xef, 0x9346, 0x800}, {0xf, 0x4, 0xfa6, 0x1, 0x7ff, 0x5}, {0x8, 0x5, 0xc, 0x6, 0x4, 0x7}, {0x0, 0x400, 0x1ff, 0x53, 0x10, 0x7f}, {0x4, 0x8, 0x2, 0x7, 0x40, 0x4}, {0x2, 0x6e, 0x4, 0x7, 0x2, 0xffff039d}, {0x6, 0x7, 0x80000000, 0x5, 0x6d, 0x8}, {0x9, 0x6, 0x7, 0xf1, 0x3, 0x1}, {0x10, 0x2, 0x745, 0xfffffff9, 0x7, 0x7}, {0x8, 0x9, 0x17e6, 0x8, 0x101, 0x9}, {0xd, 0x9, 0x61, 0x0, 0x916, 0xf8}, {0xfffff870, 0x2, 0x4, 0x89, 0x8, 0x8}, {0x1, 0x9, 0x0, 0x0, 0x6, 0x1}, {0x5a, 0xffff0000, 0x80000001, 0x81, 0x9, 0xfffffff4}, {0x1, 0x4, 0x3, 0x0, 0x4, 0xfffffffc}, {0x1, 0x2, 0xe, 0xcd33, 0x9, 0x8}, {0x5, 0x400, 0x1, 0xd, 0x80000001, 0xf}, {0xffff, 0x4, 0x3, 0x6b, 0x5, 0x3}, {0x2, 0x100000, 0x5, 0xcc, 0x88e, 0x2}, {0x7fffffff, 0x80, 0x5de1d231, 0x6, 0x3, 0x3}, {0x0, 0x6, 0x200, 0x2, 0x9, 0x9}, {0x400, 0xd, 0x5, 0x7, 0x0, 0xd9}, {0xf238, 0x4, 0x1, 0xffff, 0xf99, 0x8}, {0x3, 0x401, 0x1, 0xfffffffa, 0x8000}, {0x5, 0xfff, 0x8100000, 0x100, 0x3, 0x2}, {0x39, 0x5, 0x5, 0x9, 0xffffffff, 0x6}, {0x0, 0xb3df, 0x8, 0xffff, 0x2, 0xa1c7}, {0x800, 0x1, 0x2, 0xb8, 0x4, 0x7}, {0xc1, 0x6, 0x8, 0x6, 0x6}, {0x2, 0x8, 0xfffff001, 0x2, 0x10000, 0x53}, {0xd3, 0x10001, 0xf1, 0x9, 0xa9, 0x7b2f}, {0x76, 0x4, 0xb06e, 0x9, 0x70, 0x1}, {0xf, 0x1, 0x8, 0x9668, 0x1fcf, 0xb70}, {0x6, 0xffffffff, 0xfffffff5, 0x7, 0x80000001, 0x3}, {0x8, 0x8, 0x6ad, 0x1fa1, 0x29, 0x1ff}, {0x2e90, 0xffff, 0x58, 0xab, 0x3, 0x5}, {0x7, 0x5, 0x5, 0xffffffff, 0x1, 0x6}, {0xfbbb, 0x0, 0x7, 0x5, 0x8, 0x9}, {0x7, 0x5, 0x2, 0x1000, 0xc}, {0x401, 0xee1, 0xfffffe00, 0x0, 0x2, 0x4}, {0x0, 0x480000, 0x282, 0x6, 0xffff2d43, 0x8}, {0x7, 0x4, 0x9, 0xac6, 0x6, 0x9}, {0xfffffff7, 0x0, 0xd, 0x2, 0x4, 0x6}, {0x7fff, 0x10001, 0x1000, 0xffff, 0x4, 0x4}, {0xffff, 0xecb, 0x5, 0x81, 0xfffffe01, 0x10001}, {0x9, 0x8e01, 0xc5, 0xae06, 0x4000, 0x7f}, {0x2, 0x8, 0x5, 0x2, 0x0, 0x5}, {0x0, 0x3225, 0x41, 0x8, 0x1, 0x4}, {0x3, 0x8, 0xc, 0x1, 0x2c1d, 0x6}, {0xe, 0x1, 0xc, 0xffff, 0x8, 0xfffffe01}, {0x1d, 0x2, 0x7, 0x0, 0x159, 0x1}], [{0x4}, {0x4}, {0x0, 0x1}, {0x6, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x6f430f49ed6ac6bd}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x1, 0xf61cabe603c30892}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x1}, {0x3, 0x1}, {0x6}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x1}, {}, {0x4, 0xc6ccb7e81ed9de50}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x4}, {0x2}, {0x2}, {0x3}, {0x2}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x1}, {0xb28d00a83ffcc2c7}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x1}, {0x3, 0x2}, {}, {0x2}, {0x3, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x3}, {}, {0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x5}, {0x3, 0x119e686731f243b4}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x3}], 0x1}}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xf9, 0xc, 0x0, 0x0, 0x6}, 0xc5, 0x5, [{0x0, 0x67497ca5, 0x6ba6, 0x80000000, 0x4, 0x3001}]}, [{0x1, 0x8, 0x8, 0x7, 0x5, 0xfffffe74}, {0x1, 0x6, 0x9, 0xfffffffe, 0x7, 0x9}, {0x0, 0x21a, 0x9, 0x1, 0x800, 0x40}, {0x6, 0x24, 0x111, 0xf, 0x1}, {0x7, 0x6a0, 0x400, 0xc7f, 0x5, 0x71}, {0xb40, 0x8, 0xe, 0x9, 0x45a47ecd, 0x5}, {0x3, 0x6b, 0x880, 0x8, 0x1, 0x1000}, {0x9, 0x3, 0xd, 0xfffffff7, 0x4a77, 0x10001}, {0x9, 0x8b5f, 0x2, 0x9, 0xf1a, 0x7}, {0x200, 0xf0000000, 0x3, 0xa6f, 0xb49, 0x7}, {0x8790, 0xffffffb0, 0x7, 0x8, 0xfffff000, 0xffff8000}, {0x3, 0x7, 0x9, 0x7313f36f, 0x1, 0x7ff}, {0xcd9, 0x5c, 0x3ff, 0x7, 0xc0e3, 0xf93e}, {0x4, 0xffffffff, 0x9e, 0xd, 0x3, 0x4}, {0x5, 0xf6, 0x7, 0x1, 0x5, 0x5}, {0x1, 0x1, 0xe, 0x7, 0x2}, {0x82, 0x7c17, 0x770c, 0x4, 0x1, 0x7fff}, {0x5, 0x9, 0x522, 0x7, 0xd23, 0x4}, {0x1, 0x8b29, 0x1, 0x8, 0x2, 0x8}, {0x9, 0x9, 0x9, 0xffff, 0x669, 0xe}, {0x8000, 0x0, 0x6, 0xfb13, 0x291, 0x6}, {0x6, 0x0, 0xc, 0x9}, {0x5658747, 0x3, 0x0, 0x8, 0x6, 0x8}, {0x6, 0x89, 0x5, 0xea, 0x800, 0x7}, {0x4, 0xa, 0x6, 0x3, 0x76, 0x1ff}, {0x7e7, 0x1, 0xd, 0xb9, 0x8, 0x7ff}, {0x3, 0x2, 0x9, 0x7, 0xf72}, {0xe0f, 0x5, 0x800, 0x5, 0x44f5, 0x3}, {0x8, 0x9, 0x1, 0x2a, 0x4, 0x6}, {0x8, 0x9, 0x2, 0x7, 0x3, 0x3}, {0x5, 0x5, 0x1, 0x8, 0x9, 0xfffffffd}, {0x9, 0xe, 0x5, 0x5, 0xfffffe47}, {0x1, 0x8000, 0xf, 0x1, 0x8, 0x7ef}, {0x0, 0x5ae, 0x10, 0x4, 0xd8f, 0x6}, {0x9, 0xc, 0x6, 0xd, 0x8, 0x5}, {0x10000, 0x2, 0x4, 0x80, 0x4, 0x2}, {0x100, 0xc, 0x10000, 0x9, 0x6, 0x7fff}, {0x6, 0x3ff800, 0x0, 0xd, 0x8, 0x1d}, {0x80000000, 0x4, 0x8, 0x7819, 0x400, 0x10}, {0x596, 0x1, 0x1, 0x0, 0x4c81ae93, 0x5d4c}, {0x101, 0x0, 0xe, 0x1948, 0x111, 0x1ff}, {0x7, 0x3, 0x5f31, 0x8, 0x8, 0x8a6b}, {0xf1, 0xffffff80, 0x5, 0x6, 0x5, 0x10000}, {0x5, 0xfffff38e, 0x8, 0x0, 0x2, 0xda}, {0x7, 0x5, 0x95, 0x10f, 0xffffffff, 0x8001}, {0x1, 0x6, 0x0, 0x0, 0x1, 0xa}, {0x5, 0x1, 0x0, 0x0, 0x1000, 0x7}, {0x8, 0x2, 0x5, 0xf4, 0xf8, 0xe}, {0x80, 0x8f7, 0x5714, 0x6, 0x7fffffff, 0x7}, {0x8, 0x3, 0xb708, 0x80000001, 0x5, 0xff}, {0x6, 0x80000000, 0x354, 0x1ff, 0x3, 0x1}, {0x1, 0x10, 0x758, 0x1, 0xa, 0xfffffffa}, {0x9, 0x0, 0x5, 0xc15, 0x80000001, 0x9}, {0x3, 0x8, 0x4, 0x6, 0x9, 0x5}, {0x101, 0x9, 0x87, 0x1000, 0x8, 0x1}, {0x9, 0x0, 0xfffff000, 0x9, 0x10, 0x7}, {0x86a7, 0x1dbe, 0x6e41, 0xfffffff6, 0x7, 0x101}, {0x7, 0x2, 0x2, 0x7, 0x7, 0xdd9a}, {0x3, 0x4, 0x4, 0x5, 0x2, 0x7}, {0x2, 0x9, 0x2d, 0x2, 0x2, 0x8}, {0xded8, 0x6, 0x9a3, 0xffff, 0x67, 0xa}, {0x4, 0x7, 0x1, 0xffffffff, 0xb, 0x9a2}, {0x21641a49, 0x3, 0x1ff, 0x40, 0x5, 0x2}, {0x18e000, 0x6, 0x8001, 0xffffffff, 0x10001, 0x1}, {0x0, 0x7fff, 0x0, 0xffffffb0, 0x0, 0x140000}, {0x9, 0x101, 0x80000000, 0x2, 0xc39, 0x7}, {0x5, 0x1, 0x8000, 0x4, 0x2, 0x3f3}, {0x7, 0x8000, 0x1, 0x0, 0x1, 0x3}, {0xf, 0x9, 0xb, 0x0, 0xfffffffc, 0xc}, {0x1, 0x5, 0x7, 0x8001, 0x0, 0xb}, {0x6b9, 0x4, 0x7, 0x4, 0x9, 0x2}, {0x2, 0x3, 0x4d147f5d, 0x3, 0x7fc00, 0x2}, {0x4, 0x1, 0x9, 0x3ff, 0x3, 0x81}, {0x101, 0x7fff, 0x5, 0x7fff, 0x8, 0x6}, {0x6cc, 0xd, 0xe880, 0x1, 0x3, 0x4}, {0x74f2, 0x1c, 0x5, 0x1aa, 0x1000, 0x7f}, {0x9, 0x1, 0x7fffffff, 0x1, 0x3, 0x6}, {0x100, 0x8, 0x4, 0x7, 0x4, 0x8000000}, {0x4, 0x926, 0x1ff, 0xfffffffb, 0x1, 0x3}, {0x5, 0x6, 0xb, 0x3ff, 0xfffeffff, 0x5}, {0x8, 0x5, 0x6ad, 0x0, 0x5, 0x7}, {0x7, 0x6348, 0xc20, 0xffff7fff, 0xfffffffe, 0x800}, {0x6, 0xa655, 0x7, 0xf4, 0x7, 0x10}, {0x6, 0x5, 0xffff, 0x40, 0x60a45124, 0xd}, {0xec, 0xffffffff, 0x1128, 0x192c, 0xa, 0x800}, {0x5, 0x9, 0x100, 0x8, 0xfffffffa, 0x8}, {0xfff, 0xfff, 0x4, 0x8001, 0x5, 0xe289}, {0xe, 0x1ff, 0x4, 0x4, 0x0, 0x8}, {0x1, 0x9, 0x9, 0x0, 0x6, 0xbfb5}, {0x40000, 0x96, 0xbe5, 0x1ff, 0x8, 0x9}, {0x0, 0x67, 0xff, 0x5, 0x10, 0x8}, {0x20000000, 0x0, 0x7, 0x7, 0x0, 0x8000}, {0x9, 0x4, 0x1, 0x505, 0x3, 0x8000}, {0xb, 0x3, 0x0, 0x8, 0x8b4, 0x7}, {0x86f, 0x1, 0x1, 0x2, 0x3, 0x3}, {0x47, 0x6012, 0x8001, 0xfffffff8, 0x0, 0x5}, {0x0, 0x100, 0x9, 0x6, 0x5, 0x7}, {0xffffffff, 0x8, 0x5a6, 0x8000, 0x2, 0x2}, {0x2e, 0xc7c, 0x4, 0x8000, 0xd, 0xfff}, {0x9, 0x9, 0x0, 0x7, 0x3, 0x6}, {0x4, 0xb3, 0x1, 0x8, 0x7fffffff, 0x2}, {0x28a, 0x5, 0x8, 0x4, 0x7, 0x5}, {0x38, 0x4, 0x4, 0x6, 0x81, 0x3}, {0x80000000, 0x1000, 0x8, 0x5, 0x5, 0x2}, {0x400, 0xbb, 0x8, 0x5, 0x5, 0x2}, {0x8, 0x9, 0x1, 0xfff, 0x200, 0x471}, {0x2, 0x0, 0x0, 0x1, 0x0, 0xfffffffe}, {0x1, 0xa, 0x3a, 0x3ff, 0x7, 0x1137}, {0x0, 0x0, 0x8000, 0x5, 0x5, 0x9}, {0x8001, 0x8e2, 0x7, 0x8, 0x4, 0x1b43}, {0x400, 0x4, 0xc, 0x6, 0x698, 0x6}, {0x6314, 0x0, 0x10001, 0x3ff, 0x8000, 0x7fff}, {0x6, 0x1, 0x5, 0x8, 0x88}, {0x2, 0xf22a, 0xe475, 0xa, 0x4, 0x744b8102}, {0x7, 0x2a6, 0x8, 0x5, 0x1, 0xd}, {0x5, 0x2, 0x5, 0x9, 0xd9eb12d, 0x5}, {0xd8, 0x1, 0x7, 0x3d, 0x100}, {0xe, 0x0, 0x10000, 0x3, 0x800, 0x6}, {0x68000000, 0x1, 0xfff, 0x3, 0x67, 0x8}, {0x101, 0x4, 0x8, 0x4, 0x1000, 0xfffffffe}, {0xa28d, 0x4, 0xffffff7e, 0xcf, 0x7fffffff, 0x2}, {0x80b, 0x54, 0xe02, 0xd90a, 0xd, 0x3}, {0x7645, 0x2, 0x4c9, 0x800, 0x3, 0x1}, {0x8, 0x37, 0x3, 0x9, 0x2, 0x3}, {0x3, 0x3, 0xfffffff8, 0x3, 0x0, 0xfffffdbc}, {0xfffffffe, 0x1, 0xd89e, 0x1000, 0x3, 0xffff}, {0x9, 0xf574e1e, 0x3, 0x0, 0x8, 0xb}, {0xfffffff2, 0x8, 0x3, 0x6, 0x5, 0x7ff}], [{0x3}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x2}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0xaf8bba8d0517b9e0, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x1}, {0x2}, {}, {0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x46ad83950480526d}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x3}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}], 0x3}}]}, {0x23, 0x6, "ad708099198a0ec1c38872c6b6baebd4c106afa40a3f91a999ddfd290aff46"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_bpf={0x70, 0xb, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x0, 0xff, 0xfe, 0x8}]}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x0, 0x7, 0x2, 0x80}]}]}, {0x22, 0x6, "6d36347a1242181465b574a64f523ba2c253db69f9aaae8e13306c1ee24b"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0xc4, 0x5, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3f800000, 0x5, 0x20000000, 0x9, 0x5}, 0x8}}]}, {0x71, 0x6, "69deacbdb4d5354b30928698782d736f79e7c689cee4c3027b569f62a841f2be5fc5fa659f7c79d435fdb9eb4130bd9a6e3eb3200751586ff5ebdbe62df3b5244259af3f5ab21497e550eb025982bb3aa9d76283e85cc2b6f4eba308b31283715dd3781e328e5a49c8fc610eb9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x25c, 0x15, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0x72523fe1, 0x7, 0x0, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x9, 0x4, 0x5, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x3, 0x20000004, 0xb, 0x3}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4674, 0xa444, 0x2, 0x7d2b, 0xb}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x6, 0xffffffffffffffff, 0x2, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x6366, 0x5, 0xc, 0x4}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x2, 0x2, 0x4}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x20000003, 0x6, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa3c, 0x967, 0x5, 0x6, 0x80000001}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xd, 0x480, 0x3, 0x8001, 0x2d5}, 0x1}}]}, {0xee, 0x6, "d5ef8b5f42f53bb630ae6a50d648f8db0da6ec9de7b6ed4b891485781d2737a05144751ea216feb8fea7f028badf7d9963b01a1342cb62d463074d2b2a31fda8391398621e9540f33c7156ca45fda84d4f64296dcbd827f37628708490db199c49ad999ec23719dfa8575af2554fde2bc5a24ea7eca62ed49122be5e79147a6b087cda880c7b4cfd2a29f74807ee36fe5c6584c9e5aa2d114b4d0dbc2a672d21e1f20f6acee403ac8599a3095cd44241a7ca22609226f1108b4d2467c57efec0af77b76e2326fcb8b5c378501c0d2a914d28304beac051584d3f064e9f573a85b5b42c8dd95d94696b4d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x7}]}}]}, 0x2240}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.495040712s ago: executing program 4 (id=5912): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xe, 0x7f, 0x800, 0x5}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b826, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0c0}, 0x44840) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1, 0x0, 0x12}, 0x0) 1.445851616s ago: executing program 7 (id=5913): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@getchain={0x3c, 0x11, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb}, {0x7, 0xf}, {0x0, 0xe}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44060}, 0x98) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000340)={0x1, &(0x7f00000002c0)=[{0x4, 0x81, 0x0, 0xe7}]}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x5c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000000002000000240004802000018008000100666962001400028008000140000000000800024000000002090002007379"], 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="900000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000540018"], 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="af683b9deca8d718d231a6ce5e2127500da7ed2e64e543c1bdee3e"], 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000001020103000000000000000002000009240001800c000290050001002f000a0014000180080001"], 0x38}, 0x1, 0x0, 0x0, 0x4001000}, 0x804) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@getchain={0x3c, 0x11, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb}, {0x7, 0xf}, {0x0, 0xe}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44060}, 0x98) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$pppoe(0x18, 0x1, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000340)={0x1, &(0x7f00000002c0)=[{0x4, 0x81, 0x0, 0xe7}]}, 0x10) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x5c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000000002000000240004802000018008000100666962001400028008000140000000000800024000000002090002007379"], 0x6c}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="900000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000540018"], 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="af683b9deca8d718d231a6ce5e2127500da7ed2e64e543c1bdee3e"], 0x20) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000001020103000000000000000002000009240001800c000290050001002f000a0014000180080001"], 0x38}, 0x1, 0x0, 0x0, 0x4001000}, 0x804) (async) 1.18808591s ago: executing program 7 (id=5914): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'sit0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x40, 0x0, 0x8, 0x3, {{0xc, 0x4, 0x0, 0x13, 0x30, 0x65, 0x0, 0xfa, 0x4, 0x0, @remote, @loopback, {[@noop, @cipso={0x86, 0x1b, 0xffffffffffffffff, [{0x0, 0x5, "2b9757"}, {0x2, 0x10, "e18a5339c81f943b835c5d35e049"}]}]}}}}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a030000000000000000000300000308000240000000040900010073797a300000000028000000000a010400000000000000000300000a0900010073797a30000000000800024000000006"], 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000080) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)={0x30, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0xc, 0x7c}, [@nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x10, 0x0, 0x0, @u64=0xfffffffffffffff3}]}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @ipv4=@empty}]}]}, 0xfffffffffffffc85}}, 0x4008030) 1.177208187s ago: executing program 7 (id=5915): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000001c0)=0x9, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xcd87, 0x0, 0x0, 0x0, 0xf0000000}, [@call={0x85, 0x0, 0x0, 0xcd}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8}, 0x94) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x8, 0x4) 1.126910642s ago: executing program 5 (id=5916): sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000a00)=ANY=[@ANYBLOB="70000000020901030000000000000000000000010900010073797a3000000000080006400000000008000540000000140c0004800800014000000be90900010073797a30000000000800034000c08000080005400000001ee3c747a1a5680c00048008000140ffff"], 0x70}, 0x1, 0x0, 0x0, 0x4040040}, 0x2000c405) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.empty_time\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r3, 0x0) mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0xa020480) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) readv(r2, 0x0, 0x0) write$tun(r2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ec0)={r4, 0x0, 0xd7, 0x4d, &(0x7f0000000c00)="a7b4aa981cb6dd662a21228c8bc92773d7e38eba553f6daf513a8b4e74046d80ae228b683ad8a69cd39bbcf46debc7c21ea497df71acf6266228f3ed2b4192a4b88ba94af447f9797874d34bf4b354f26504fb7735c8b03260db90e25600ab7dd72f1895aa03a512caf5116c03729803aa738aba3e7cd388ff3b057f81b02850f966b6e83ccf15411d47f2ca4834a9c8a60113c4e3f31aa91048bd2f63e6e96424457d7aa93dd3a1615512cb279e86290a21d3c93de2b5c203af6d6c7584543235bac0986cdb86869798bc7536211793ee5573ce701b70", &(0x7f0000000d00)=""/77, 0x80000000, 0x0, 0x0, 0x14, &(0x7f0000000d80), &(0x7f0000000e80)="8184a126e01238e435e664c3adfa2fbf34167007", 0x5, 0x0, 0x6611}, 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000840)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x11, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0xfffdfffd}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000007b00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000690000027b8af8ff00000000bca2000000000000a6020000f8ffffffb703000002000000b704000000000000850000003300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x21, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@map_fd={0x18, 0xa, 0x1, 0x0, r1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x15}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @exit]}, &(0x7f0000000200)='GPL\x00', 0x9, 0xfc, &(0x7f0000000240)=""/252, 0x41000, 0x8, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000400)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x1, 0x32}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000500)=[r1, r1], &(0x7f0000000540)=[{0x4, 0x3, 0x3}, {0x5, 0x4, 0xf, 0x1}, {0x4, 0x3, 0xd}, {0x4, 0x3, 0xe}, {0x3, 0x2, 0x0, 0x2}, {0x0, 0x5, 0x6, 0xa}], 0x10, 0x72}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 952.181024ms ago: executing program 6 (id=5917): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r2, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) 801.626356ms ago: executing program 6 (id=5918): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x64}, 0x10) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0xa, &(0x7f0000000480), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r5, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@mpls_newroute={0x38, 0x18, 0x100, 0x70bd2d, 0x25dfdbfe, {0x1c, 0xa0, 0x0, 0x3, 0xfd, 0x4, 0xff, 0x7, 0xa00}, [@RTA_OIF={0x8, 0x4, r4}, @RTA_VIA={0x14, 0x12, {0xf, "2e96bc823d99551d0c99a7409471"}}]}, 0x38}}, 0x44000) 605.247149ms ago: executing program 5 (id=5919): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) (async) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) (async, rerun: 32) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) write(r1, &(0x7f0000000000)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb9", 0x29) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x24, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x8007, 0x4001, 0x41424344, r2, 0x0, 0x0, 0x9, 0x2, 0x100, 0x0, 0x0, {[@generic={0x8, 0x10, "9753d19222b83ecfdb6ebbe04c11"}]}}}}}}}}, 0x0) 351.772859ms ago: executing program 4 (id=5920): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaef}, 0x7, 0x7}, [{0x8, 0xffbff000, 0x2, 0xffff, 0x1ff, 0xafe}, {0xe, 0x2, 0x1, 0x9, 0x4, 0xa}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x80000001, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x44, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x8009ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa004, 0x8, 0x5, 0x20000a17}, {0x7, 0x200, 0x0, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x6, 0xfff, 0xe4af, 0x0, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x5, 0x6, 0x2, 0x4, 0x3}, {0x84, 0x3, 0x8, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x80000000}, {0x2, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0xb904, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x1d00, 0x5, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x13, 0x40}, {0x0, 0xd, 0x9, 0x6, 0xffffffff, 0x1}, {0x3, 0x1000, 0x1ff, 0x9, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x0, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x3, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x1, 0xa4, 0x4, 0x7}, {0x5, 0xe4, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d6, 0xfffffffb}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x6, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0xb, 0xfffffffe, 0x800, 0x0, 0x1}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0x9d, 0x1, 0x80000000}, {0xbd, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x8, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0xffffffff, 0xc0, 0xfffff44c}, {0x4, 0x3, 0xfffffff5, 0x9, 0xbe, 0x7}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x5, 0x9, 0xbc, 0x11}, {0x1ff, 0xfffffffc, 0xf, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x0, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x200004, 0x0, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x7f, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0xa, 0x100006, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x381, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x2}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x9, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x200, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x0, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x1}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x8}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0xffffffff}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x3f, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x7, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0x40000fff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x400, 0x0, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x84, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x8, 0x405}, {0x7011, 0xfff, 0x9, 0x1, 0x40000009, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x0, 0x9, 0xc402, 0x2, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x3, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0x7, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x7f, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0xa, 0x7}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x8000, 0x8, 0xd, 0x700000, 0x5, 0x4}, {0xcab, 0xf, 0x4, 0xf, 0x8, 0x7}, {0x4, 0x8000, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x1ff, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x9, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x7ffc, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x4000b}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5}, {}, {0x5}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x6}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 295.19557ms ago: executing program 6 (id=5921): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="18020000740400000000000000000000850000004100000085000000a00000009500000000000000093d93a89b0d5300f7d8abf610696bba2613b94a178ba4ba6e41b102c66fe4a76227a014e6f0ff24dc1e41178d227acc91e37241ff36da6c2905141beb0aa7bbdfb87bacc5bbf58d96a92eb59372d01d30ea19917f18a29f33fd47f06db7ac166e5cd1e1132d84c3494febe5c752aa2a7481cc1671a211c9c4b8a7186bea83e1aa5a57ed85545ccc43bd9ed6fad98c9ba364c7e1ecd852339f2a866f419eb6e9165914f95d5d60e1e45538fec3f19d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000000c0)={0x4, 0x746, 0x3, 0x3, 0xfb, 0x8, 0xb}, 0xc) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r4 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in=@empty, 0x3, 0x8, 0x4e24, 0x10, 0x2, 0x180}, {0x0, 0x0, 0x2000000, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x1ff, 0x800000000000, 0x4, 0xbfffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffffffff, 0x2b}, 0xa, @in=@loopback, 0x3504, 0x4, 0x0, 0x0, 0x9, 0x6, 0x9}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) sendmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000180)="fbecb183a9cffc0ee5d1d434a494db587414a63ef7fed2175c894997b4760cede524e40ae9a937434e1756f7b60d81a7da87fa2614c509b671a7bf8557275e807e7af1c65c1860dcd7b32c", 0x4b}, {&(0x7f0000000340)="36da21ba0be270a73a76b0b2c1b08b0aa7b634bde7b42b05fff77a1bd375fa61812e0a3df2dc7fea643e6cf5ef23233fe2b752a206d9be7865e37ef0b528cde3720d51a67f20caab530191c4", 0x4c}, {&(0x7f00000006c0)="8b3e97e66c34520fa8e2a370f6233f47fa505952ceaf6714d4030cf71b06d9c227e92f4a323b6ebf087032d4498fdc03e86e62f25a610270568c2c7147975019b3fa481fe21ab4ed149068e364b45ddd86efa6b28b42f1977be3937c8b1edf121d5defd4180ca936d2169e6734570a3e713fb30c4e18c13d66b17b808cad9e8c9af357cb504fbec0bf4cb07af24b4d49049ad0b80472ce7e307a5b4892afbe4edb5ec566ae52aac0ea58afb19188f9161d0a12fba2e42b9cdbeec498cebe3698e1bdd29ebfbe8237fc0e", 0xca}, {&(0x7f0000000980)="19b0c89f691c48b1b18e0c606387d455a791e379a60024c5add4bb089e445a6ecdccffed6c3c64e67547529fc79e442c600c003da754803e8099ab0b3e4e00a01e01a32f21a6b8e00f00a5e114ccc7e507547b79f4debef2ea842f2be1044711eea62ce853748c6cd09eb1637a6d00"/123, 0x7b}, {&(0x7f0000000800)="f1f90ee8d3a476eafbc79faa69937cde26a691e03e6ceed21bf980b72b9f21463b3821266ad276f81429b7f50c09b18445106c2a77a8787e813e50cb0fdc2d4b67f07fed507e5fc76d", 0x49}, {&(0x7f0000000c00)="7f25cd96a5e8de01c3720eadae70abcf606a39a66c714306f2be45b395680cf663327f5b1f590a4b9273770c61e75a67b9211a387cd0646ff53d9b880502b50a83ee5ac90fe95bcd39f716f625b634d40ac1ab36169915060ba4fac920e64086d634feeec74c4568caa325b7bf381dff6805ffad258dfb99ead4956d0363cb743a31e744fdb58109136bb61ecdd9122bfa854bd64b9b374498b79f2b4c5d9f642180871eecc1f4c4edd399ae9d1b6db243415da8bd6188673025fc05818f2e544ae9", 0xc2}], 0x6}}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtfilter={0x84, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r8, {0xc}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x54, 0x5, {0x10, 0x9, 0x4, 0x10da, 0xa760, 0x0, 0x10, 0x102, [{0x1000, 0xe, 0x4, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x4}]}}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0xfff2}, 0x24040084) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000280)='GPL\x00', 0x2, 0xda, &(0x7f00000005c0)=""/218}, 0x94) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x18050}, 0x44014) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r5) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x28, r9, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008004}, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000", @ANYRES16=r11, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r12, @ANYBLOB="10002d800a000000020202020202000004002a0040002d800a"], 0x80}}, 0x0) recvmmsg(r0, &(0x7f0000004480), 0x40000c2, 0x12, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 257.852493ms ago: executing program 4 (id=5922): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000988b38bb2b35308984000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000002780)={0x0, 0xfffffffffffffe32, &(0x7f0000002740)={&(0x7f0000000180)={0x34, r2, 0x1, 0x70bd2b, 0x0, {0x4e}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4000040) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x80, r4, 0x4000}, 0x38) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050003000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000480)=ANY=[@ANYRES64=r0, @ANYBLOB="8ac3a8b027a4653222dd60be034163a25b6879423369cb8681ba1102d9bb1a9b31238b6f7c771f1956245993a0384c01db0e07479bf34605b1a0c3b47f992e846a91a730c10d69312ffcddc48b", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000200850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c1}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000640)={r3, &(0x7f0000000540)='syzkaller\x00', 0x400200, &(0x7f0000000580)={@align=0xfe69, {0x2, 0x5, 0x8, 0xfffffffffffffff9}}, 0x1, &(0x7f00000005c0), &(0x7f0000000600)=0x6}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$unix(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x8040) socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3e8, 0x0, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x318, 0xffffffff, 0xffffffff, 0x318, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast1, [0xff, 0xffffff00, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff000000, 0xff000000], 'veth1_to_team\x00', 'gretap0\x00', {}, {}, 0x29, 0x7, 0x4, 0x6}, 0x0, 0x1e0, 0x208, 0x60030000, {0x0, 0xff000000}, [@common=@rt={{0x138}, {0x6, [0x1, 0x9460], 0x40000203, 0x2, 0x4, [@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0xfd}, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, @empty, @local, @dev={0xfe, 0x80, '\x00', 0x13}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1], 0x3}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xfffb, 0xe31}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x0, 0x8, 0x2, 'snmp_trap\x00', 'syz0\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) 226.094914ms ago: executing program 7 (id=5923): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x138, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x108, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001800dd8d000000000000000002000000000000050000000006001500050000002800168020000100"], 0x4c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)=@ethtool_cmd={0x2f, 0x4, 0xfffffffb, 0x0, 0x0, 0x6, 0x2, 0xfe, 0xd, 0x0, 0x0, 0x201, 0x9, 0x0, 0x0, 0x45, [0xf3, 0x100089ff]}}) 0s ago: executing program 4 (id=5924): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b56b36e6c5be956e7791334289cd58966289930fe24f617b6c", 0x8d}, {&(0x7f0000000640)="146d7d1fe23f2a38218e567b79d540f9855f11c272611653b571eaa7f1ae51d8da60a58cf2d3edc698914eaa6fb32bf9bab8b33a", 0x34}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) ioctl$sock_ifreq(r2, 0x89b0, &(0x7f00000000c0)={'caif0\x00', @ifru_data=0x0}) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x1c, r3, 0x301, 0x70bd2c, 0x25dfdc00, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x404c880) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r7, 0x112, 0xb, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0xa000000, 0xe, 0x0, &(0x7f00000000c0)="b994bc444b9893b04bf30981fd1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x3d) ioctl$XFS_IOC_FSCOUNTS(r7, 0x80205871, &(0x7f0000000000)) kernel console output (not intermixed with test programs): ror: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 626.781220][T23916] x_tables: duplicate underflow at hook 1 [ 626.785336][T23912] CPU: 1 UID: 0 PID: 23912 Comm: syz.5.4710 Not tainted syzkaller #0 PREEMPT(full) [ 626.785360][T23912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 626.785371][T23912] Call Trace: [ 626.785379][T23912] [ 626.785387][T23912] dump_stack_lvl+0xe8/0x150 [ 626.785421][T23912] warn_alloc+0x24c/0x270 [ 626.785447][T23912] ? stack_depot_save_flags+0x33/0x800 [ 626.785474][T23912] ? __pfx_warn_alloc+0x10/0x10 [ 626.785498][T23912] ? kasan_save_track+0x3e/0x80 [ 626.785521][T23912] ? __kasan_kmalloc+0x93/0xb0 [ 626.785546][T23912] ? xsk_setsockopt+0x52a/0x960 [ 626.785572][T23912] ? do_sock_setsockopt+0x17c/0x1b0 [ 626.785590][T23912] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 626.785607][T23912] ? do_syscall_64+0x174/0x580 [ 626.785625][T23912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.785653][T23912] __vmalloc_node_range_noprof+0x12c/0x1730 [ 626.785704][T23912] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 626.785730][T23912] ? __kasan_kmalloc+0x93/0xb0 [ 626.785755][T23912] ? __kmalloc_cache_noprof+0x32d/0x660 [ 626.785778][T23912] ? __kmalloc_cache_noprof+0x150/0x660 [ 626.785805][T23912] vmalloc_user_noprof+0xad/0xe0 [ 626.785827][T23912] ? xskq_create+0xbf/0x170 [ 626.785845][T23912] xskq_create+0xbf/0x170 [ 626.785866][T23912] xsk_init_queue+0x8a/0xe0 [ 626.785896][T23912] xsk_setsockopt+0x52a/0x960 [ 626.785923][T23912] ? __fget_files+0x2a/0x420 [ 626.785947][T23912] ? __pfx_xsk_setsockopt+0x10/0x10 [ 626.785974][T23912] ? __pfx_aa_sk_perm+0x10/0x10 [ 626.786007][T23912] ? aa_sock_opt_perm+0xff/0x1a0 [ 626.786029][T23912] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 626.786047][T23912] ? __pfx_xsk_setsockopt+0x10/0x10 [ 626.786075][T23912] do_sock_setsockopt+0x17c/0x1b0 [ 626.786099][T23912] __x64_sys_setsockopt+0x13d/0x1b0 [ 626.786120][T23912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.786140][T23912] do_syscall_64+0x174/0x580 [ 626.786160][T23912] ? clear_bhb_loop+0x40/0x90 [ 626.786183][T23912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.786202][T23912] RIP: 0033:0x7f3b27d9de99 [ 626.786226][T23912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.786243][T23912] RSP: 002b:00007f3b25fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 626.786262][T23912] RAX: ffffffffffffffda RBX: 00007f3b28026090 RCX: 00007f3b27d9de99 [ 626.786276][T23912] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 626.786289][T23912] RBP: 00007f3b27e33eaf R08: 0000000000000004 R09: 0000000000000000 [ 626.786301][T23912] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 626.786313][T23912] R13: 00007f3b28026128 R14: 00007f3b28026090 R15: 00007ffe5fed0ac8 [ 626.786344][T23912] [ 626.786351][T23912] Mem-Info: [ 626.870405][T23928] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4713'. [ 626.880975][T23912] active_anon:6864 inactive_anon:1 isolated_anon:0 [ 626.880975][T23912] active_file:32 inactive_file:43831 isolated_file:0 [ 626.880975][T23912] unevictable:768 dirty:152 writeback:0 [ 626.880975][T23912] slab_reclaimable:12152 slab_unreclaimable:376180 [ 626.880975][T23912] mapped:36039 shmem:1293 pagetables:1582 [ 626.880975][T23912] sec_pagetables:0 bounce:0 [ 626.880975][T23912] kernel_misc_reclaimable:0 [ 626.880975][T23912] free:1032767 free_pcp:7288 free_cma:0 [ 627.049870][T23934] batadv0: entered promiscuous mode [ 627.057483][T23912] Node 0 active_anon:27856kB inactive_anon:4kB active_file:128kB inactive_file:175124kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:146956kB dirty:608kB writeback:0kB shmem:3636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17240kB pagetables:6420kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 627.095091][T23934] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 627.147928][T23912] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 627.147984][T23912] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 627.148042][T23912] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 627.148084][T23912] Node 0 DMA32 free:167468kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27756kB inactive_anon:4kB active_file:128kB inactive_file:175124kB unevictable:1536kB writepending:608kB zspages:0kB present:3129332kB managed:2548688kB mlocked:0kB bounce:0kB free_pcp:28664kB local_pcp:20060kB free_cma:0kB [ 627.148144][T23912] lowmem_reserve[]: 0 0 0 0 0 [ 627.148191][T23912] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 627.148247][T23912] lowmem_reserve[]: 0 0 0 0 0 [ 627.148287][T23912] Node 1 Normal free:3948012kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 627.148346][T23912] lowmem_reserve[]: 0 0 0 0 0 [ 627.148386][T23912] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB [ 627.421001][T23912] Node 0 DMA32: 833*4kB (UM) 758*8kB (UME) 436*16kB (M) 182*32kB (ME) 63*64kB (UM) 62*128kB (UM) 74*256kB (UM) 31*512kB (UM) 18*1024kB (UE) 11*2048kB (UME) 14*4096kB (U) = 167284kB [ 627.450006][T23912] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 627.461756][T23912] Node 1 Normal: 1*4kB (M) 1*8kB (M) 4*16kB (UM) 3*32kB (UM) 5*64kB (UM) 2*128kB (UM) 5*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 962*4096kB (UM) = 3948012kB [ 627.478784][T23912] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 627.488336][T23912] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 627.497624][T23912] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 627.507200][T23912] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 627.509081][T17648] Bluetooth: hci2: command tx timeout [ 627.516480][T23912] 45152 total pagecache pages [ 627.516491][T23912] 0 pages in swap cache [ 627.516500][T23912] Free swap = 124996kB [ 627.516508][T23912] Total swap = 124996kB [ 627.516518][T23912] 2097051 pages RAM [ 627.516526][T23912] 0 pages HighMem/MovableOnly [ 627.516533][T23912] 428198 pages reserved [ 627.516541][T23912] 0 pages cma reserved [ 627.783079][T23939] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4714'. [ 627.814361][T23941] syzkaller1: entered promiscuous mode [ 627.819853][T23941] syzkaller1: entered allmulticast mode [ 627.844704][T23949] syzkaller0: entered promiscuous mode [ 627.850959][T23949] syzkaller0: entered allmulticast mode [ 628.018678][T23952] tipc: Enabling of bearer rejected, failed to enable media [ 628.041581][T23951] tipc: Started in network mode [ 628.059090][T23951] tipc: Node identity , cluster identity 4711 [ 628.065189][T23951] tipc: Failed to obtain node identity [ 628.070682][T23951] tipc: Enabling of bearer rejected, failed to enable media [ 628.131064][T23951] syzkaller0: entered promiscuous mode [ 628.136995][T23951] syzkaller0: entered allmulticast mode [ 628.146317][T23951] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 628.400027][T23965] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4722'. [ 628.427385][T23967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4723'. [ 628.434265][T23965] geneve2: entered promiscuous mode [ 628.655779][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 628.716994][T23975] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 628.724989][T23962] sit0: entered promiscuous mode [ 628.734537][T23962] netlink: 'syz.4.4721': attribute type 1 has an invalid length. [ 628.747055][T23962] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4721'. [ 628.760301][T23975] syzkaller0: entered promiscuous mode [ 628.784836][T23975] syzkaller0: entered allmulticast mode [ 628.944626][T23979] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4727'. [ 632.219485][T24008] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4734'. [ 632.229497][T24008] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.236817][T24008] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.276634][T24008] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4734'. [ 632.293422][T24008] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.300628][T24008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.308214][T24008] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.315380][T24008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.351715][T24008] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4734'. [ 632.373855][T24008] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.381120][T24008] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.444465][T24017] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 632.627294][T24021] sctp: [Deprecated]: syz.3.4737 (pid 24021) Use of struct sctp_assoc_value in delayed_ack socket option. [ 632.627294][T24021] Use struct sctp_sack_info instead [ 632.878512][T24032] xfrm0 speed is unknown, defaulting to 1000 [ 633.424174][T24048] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 633.446119][T24048] bond1 (unregistering): Released all slaves [ 633.503704][T24050] syzkaller0: entered promiscuous mode [ 633.521292][T24050] syzkaller0: entered allmulticast mode [ 635.161638][T24015] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 635.469942][T24072] netlink: 'syz.3.4752': attribute type 4 has an invalid length. [ 635.499093][T24072] netlink: 'syz.3.4752': attribute type 8 has an invalid length. [ 635.524623][T24072] netlink: 212 bytes leftover after parsing attributes in process `syz.3.4752'. [ 635.602055][T24082] xt_hashlimit: size too large, truncated to 1048576 [ 635.626807][T24082] xt_hashlimit: max too large, truncated to 1048576 [ 636.078281][T24098] syzkaller0: entered promiscuous mode [ 636.090599][T24098] syzkaller0: entered allmulticast mode [ 636.121574][T24098] FAULT_INJECTION: forcing a failure. [ 636.121574][T24098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.134631][T24098] CPU: 1 UID: 0 PID: 24098 Comm: syz.4.4758 Not tainted syzkaller #0 PREEMPT(full) [ 636.134654][T24098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 636.134664][T24098] Call Trace: [ 636.134672][T24098] [ 636.134680][T24098] dump_stack_lvl+0xe8/0x150 [ 636.134714][T24098] should_fail_ex+0x40c/0x560 [ 636.134742][T24098] _copy_from_user+0x2d/0xb0 [ 636.134771][T24098] ___sys_sendmsg+0x1c6/0x360 [ 636.134800][T24098] ? __lock_acquire+0x683/0x2cf0 [ 636.134830][T24098] ? __pfx____sys_sendmsg+0x10/0x10 [ 636.134884][T24098] ? __fget_files+0x2a/0x420 [ 636.134908][T24098] ? __fget_files+0x3a2/0x420 [ 636.134942][T24098] __x64_sys_sendmsg+0x1b1/0x290 [ 636.134965][T24098] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 636.135002][T24098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.135024][T24098] do_syscall_64+0x174/0x580 [ 636.135044][T24098] ? trace_irq_disable+0x3b/0x140 [ 636.135068][T24098] ? clear_bhb_loop+0x40/0x90 [ 636.135092][T24098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.135111][T24098] RIP: 0033:0x7fb6e5f9de99 [ 636.135129][T24098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.135145][T24098] RSP: 002b:00007fb6e6f3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 636.135165][T24098] RAX: ffffffffffffffda RBX: 00007fb6e6225fa0 RCX: 00007fb6e5f9de99 [ 636.135179][T24098] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 636.135191][T24098] RBP: 00007fb6e6f3f090 R08: 0000000000000000 R09: 0000000000000000 [ 636.135203][T24098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.135215][T24098] R13: 00007fb6e6226038 R14: 00007fb6e6225fa0 R15: 00007ffe924c0b28 [ 636.135244][T24098] [ 636.620033][T24114] syzkaller0: entered promiscuous mode [ 636.625707][T24114] syzkaller0: entered allmulticast mode [ 636.689692][T24116] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4765'. [ 636.864666][T24123] tipc: Started in network mode [ 636.870874][T24123] tipc: Node identity e2aa21785ecc, cluster identity 4711 [ 636.879179][T24123] tipc: Enabled bearer , priority 0 [ 636.888910][T24123] syzkaller0: entered promiscuous mode [ 636.894504][T24123] syzkaller0: entered allmulticast mode [ 636.923878][T24117] tipc: Resetting bearer [ 636.957717][T24117] tipc: Disabling bearer [ 637.124945][T24141] IPVS: set_ctl: invalid protocol: 22 172.20.20.187:20000 [ 637.134185][T24141] x_tables: duplicate underflow at hook 1 [ 637.185852][T24144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4774'. [ 637.200326][T24144] netlink: 452 bytes leftover after parsing attributes in process `syz.3.4774'. [ 637.223778][T24141] x_tables: duplicate underflow at hook 2 [ 637.266257][T24147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4775'. [ 637.565161][T24158] syzkaller0: entered promiscuous mode [ 637.570714][T24158] syzkaller0: entered allmulticast mode [ 637.803701][T24162] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4782'. [ 637.813736][T24162] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4782'. [ 638.848610][T16594] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 638.872646][T16594] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 638.899066][T16594] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 638.931133][T16594] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 638.950420][T16594] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 640.366035][T24172] syzkaller0: entered promiscuous mode [ 640.371537][T24172] syzkaller0: entered allmulticast mode [ 640.501056][T24193] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4790'. [ 640.740226][T24186] xfrm0 speed is unknown, defaulting to 1000 [ 641.032851][T24214] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4796'. [ 641.043105][T24214] netlink: 'syz.3.4796': attribute type 11 has an invalid length. [ 641.054106][T24214] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4796'. [ 641.115091][T17648] Bluetooth: hci6: command tx timeout [ 641.254854][T24224] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4800'. [ 641.267428][T24224] syzkaller0: entered promiscuous mode [ 641.275729][T24224] syzkaller0: entered allmulticast mode [ 641.411872][T24230] FAULT_INJECTION: forcing a failure. [ 641.411872][T24230] name failslab, interval 1, probability 0, space 0, times 0 [ 641.449653][T24230] CPU: 0 UID: 0 PID: 24230 Comm: syz.3.4801 Not tainted syzkaller #0 PREEMPT(full) [ 641.449679][T24230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 641.449690][T24230] Call Trace: [ 641.449698][T24230] [ 641.449706][T24230] dump_stack_lvl+0xe8/0x150 [ 641.449737][T24230] should_fail_ex+0x40c/0x560 [ 641.449761][T24230] should_failslab+0xa8/0x100 [ 641.449797][T24230] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 641.449821][T24230] ? skb_clone+0x212/0x3a0 [ 641.449839][T24230] ? skb_clone+0x212/0x3a0 [ 641.449863][T24230] skb_clone+0x212/0x3a0 [ 641.449886][T24230] __netlink_deliver_tap+0x413/0x860 [ 641.449916][T24230] ? netlink_deliver_tap+0x2e/0x1b0 [ 641.449936][T24230] netlink_deliver_tap+0x19c/0x1b0 [ 641.449956][T24230] netlink_unicast+0x77f/0x940 [ 641.449993][T24230] netlink_sendmsg+0x813/0xb40 [ 641.450022][T24230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 641.450046][T24230] ? aa_sock_msg_perm+0xf1/0x1b0 [ 641.450070][T24230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 641.450089][T24230] sock_sendmsg_nosec+0x13a/0x180 [ 641.450117][T24230] ____sys_sendmsg+0x54e/0x850 [ 641.450142][T24230] ? __pfx_____sys_sendmsg+0x10/0x10 [ 641.450171][T24230] ? import_iovec+0x73/0xa0 [ 641.450202][T24230] ___sys_sendmsg+0x2a5/0x360 [ 641.450221][T24230] ? __lock_acquire+0x683/0x2cf0 [ 641.450251][T24230] ? __pfx____sys_sendmsg+0x10/0x10 [ 641.450305][T24230] ? __fget_files+0x2a/0x420 [ 641.450329][T24230] ? __fget_files+0x3a2/0x420 [ 641.450363][T24230] __x64_sys_sendmsg+0x1b1/0x290 [ 641.450386][T24230] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 641.450425][T24230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.450446][T24230] do_syscall_64+0x174/0x580 [ 641.450467][T24230] ? trace_irq_disable+0x3b/0x140 [ 641.450490][T24230] ? clear_bhb_loop+0x40/0x90 [ 641.450514][T24230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.450533][T24230] RIP: 0033:0x7f57a579de99 [ 641.450551][T24230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.450568][T24230] RSP: 002b:00007f57a6718028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 641.450589][T24230] RAX: ffffffffffffffda RBX: 00007f57a5a25fa0 RCX: 00007f57a579de99 [ 641.450603][T24230] RDX: 0000000000084000 RSI: 0000200000000000 RDI: 0000000000000003 [ 641.450615][T24230] RBP: 00007f57a6718090 R08: 0000000000000000 R09: 0000000000000000 [ 641.450627][T24230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.450639][T24230] R13: 00007f57a5a26038 R14: 00007f57a5a25fa0 R15: 00007ffde1c11d58 [ 641.450670][T24230] [ 641.798235][T24219] tipc: Resetting bearer [ 642.254839][T24241] FAULT_INJECTION: forcing a failure. [ 642.254839][T24241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 642.267915][T24241] CPU: 1 UID: 0 PID: 24241 Comm: syz.3.4805 Not tainted syzkaller #0 PREEMPT(full) [ 642.267939][T24241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 642.267950][T24241] Call Trace: [ 642.267958][T24241] [ 642.267965][T24241] dump_stack_lvl+0xe8/0x150 [ 642.267999][T24241] should_fail_ex+0x40c/0x560 [ 642.268026][T24241] _copy_to_user+0x31/0xb0 [ 642.268056][T24241] csum_and_copy_to_iter+0x27b/0x1c60 [ 642.268083][T24241] ? __skb_wait_for_more_packets+0x2b0/0x590 [ 642.268115][T24241] ? __pfx_csum_and_copy_to_iter+0x10/0x10 [ 642.268136][T24241] ? __skb_recv_udp+0x497/0x930 [ 642.268248][T24241] ? __skb_recv_udp+0x497/0x930 [ 642.268267][T24241] ? __local_bh_enable_ip+0xd0/0x130 [ 642.268301][T24241] ? lockdep_hardirqs_on+0x7a/0x110 [ 642.268319][T24241] ? __skb_recv_udp+0x497/0x930 [ 642.268339][T24241] ? __skb_recv_udp+0x846/0x930 [ 642.268361][T24241] __skb_datagram_iter+0x89a/0x980 [ 642.268383][T24241] ? __pfx_csum_and_copy_to_iter+0x10/0x10 [ 642.268408][T24241] ? csum_partial+0x239/0x2c0 [ 642.268438][T24241] skb_copy_and_csum_datagram_msg+0x1d7/0x440 [ 642.268466][T24241] ? __pfx_skb_copy_and_csum_datagram_msg+0x10/0x10 [ 642.268491][T24241] ? sk_psock_get+0x7a/0x440 [ 642.268557][T24241] udp_recvmsg+0x2d2/0xd10 [ 642.268590][T24241] ? __pfx_udp_recvmsg+0x10/0x10 [ 642.268608][T24241] ? sk_psock_get+0x7a/0x440 [ 642.268634][T24241] ? process_measurement+0x14fb/0x1c10 [ 642.268695][T24241] ? kasan_quarantine_put+0xbb/0x1f0 [ 642.268722][T24241] udp_bpf_recvmsg+0x9ac/0xad0 [ 642.268762][T24241] ? aa_sk_perm+0x6d5/0x900 [ 642.268797][T24241] ? __pfx_udp_bpf_recvmsg+0x10/0x10 [ 642.268828][T24241] ? __lock_acquire+0x683/0x2cf0 [ 642.268853][T24241] ? sock_rps_record_flow+0x19/0x350 [ 642.268909][T24241] ? inet_recvmsg+0x101/0x120 [ 642.268934][T24241] ? __pfx_inet_recvmsg+0x10/0x10 [ 642.268961][T24241] sock_recvmsg+0x166/0x1e0 [ 642.269014][T24241] ____sys_recvmsg+0x1e6/0x4a0 [ 642.269044][T24241] ? __pfx_____sys_recvmsg+0x10/0x10 [ 642.269078][T24241] ? import_iovec+0x73/0xa0 [ 642.269108][T24241] ___sys_recvmsg+0x213/0x5a0 [ 642.269134][T24241] ? __pfx____sys_recvmsg+0x10/0x10 [ 642.269159][T24241] ? __fget_files+0x2a/0x420 [ 642.269210][T24241] ? __fget_files+0x3a2/0x420 [ 642.269244][T24241] do_recvmmsg+0x31a/0x7f0 [ 642.269271][T24241] ? __pfx_do_recvmmsg+0x10/0x10 [ 642.269303][T24241] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 642.269327][T24241] ? __fget_files+0x3a2/0x420 [ 642.269359][T24241] __x64_sys_recvmmsg+0x198/0x250 [ 642.269384][T24241] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 642.269413][T24241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.269434][T24241] do_syscall_64+0x174/0x580 [ 642.269453][T24241] ? trace_irq_disable+0x3b/0x140 [ 642.269477][T24241] ? clear_bhb_loop+0x40/0x90 [ 642.269501][T24241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.269518][T24241] RIP: 0033:0x7f57a579de99 [ 642.269537][T24241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.269553][T24241] RSP: 002b:00007f57a66f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 642.269573][T24241] RAX: ffffffffffffffda RBX: 00007f57a5a26090 RCX: 00007f57a579de99 [ 642.269588][T24241] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000003 [ 642.269599][T24241] RBP: 00007f57a66f7090 R08: 0000000000000000 R09: 0000000000000000 [ 642.269611][T24241] R10: 0000000040000021 R11: 0000000000000246 R12: 0000000000000001 [ 642.269623][T24241] R13: 00007f57a5a26128 R14: 00007f57a5a26090 R15: 00007ffde1c11d58 [ 642.269653][T24241] [ 642.292200][ T29] audit: type=1804 audit(1784713090.391:16): pid=24249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4806" name="/newroot/373/cgroup.controllers" dev="tmpfs" ino=1937 res=1 errno=0 [ 642.666379][ T29] audit: type=1800 audit(1784713090.391:17): pid=24249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4806" name="cgroup.controllers" dev="tmpfs" ino=1937 res=0 errno=0 [ 642.688310][ T29] audit: type=1800 audit(1784713090.391:18): pid=24249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4806" name="cgroup.controllers" dev="tmpfs" ino=1937 res=0 errno=0 [ 642.798855][T24256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4809'. [ 642.883684][T24186] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.891266][T24186] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.898470][T24186] bridge_slave_0: entered allmulticast mode [ 642.906647][T24186] bridge_slave_0: entered promiscuous mode [ 642.916597][T24186] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.923800][T24186] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.931042][T24186] bridge_slave_1: entered allmulticast mode [ 642.939187][T24186] bridge_slave_1: entered promiscuous mode [ 642.977589][T24186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.990057][T24186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.105981][T24186] team0: Port device team_slave_0 added [ 643.136936][T24186] team0: Port device team_slave_1 added [ 643.223052][T17648] Bluetooth: hci6: command tx timeout [ 643.280348][T24186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.287319][T24186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.294054][T24274] FAULT_INJECTION: forcing a failure. [ 643.294054][T24274] name failslab, interval 1, probability 0, space 0, times 0 [ 643.313450][T24186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.343566][T24186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.350526][T24186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.372603][T24274] CPU: 0 UID: 0 PID: 24274 Comm: syz.5.4813 Not tainted syzkaller #0 PREEMPT(full) [ 643.372626][T24274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 643.372637][T24274] Call Trace: [ 643.372644][T24274] [ 643.372652][T24274] dump_stack_lvl+0xe8/0x150 [ 643.372685][T24274] should_fail_ex+0x40c/0x560 [ 643.372713][T24274] should_failslab+0xa8/0x100 [ 643.372741][T24274] __kmalloc_noprof+0xfe/0x720 [ 643.372762][T24274] ? __pfx___nla_validate_parse+0x10/0x10 [ 643.372787][T24274] ? hash_netnet_create+0x731/0x1500 [ 643.372890][T24274] ? hash_netnet_create+0x731/0x1500 [ 643.372915][T24274] hash_netnet_create+0x731/0x1500 [ 643.372947][T24274] ? __pfx_hash_netnet_create+0x10/0x10 [ 643.372970][T24274] ? __nla_parse+0x40/0x60 [ 643.372993][T24274] ? __pfx_hash_netnet_create+0x10/0x10 [ 643.373013][T24274] ip_set_create+0xae2/0x1a40 [ 643.373062][T24274] ? ip_set_create+0x4e9/0x1a40 [ 643.373091][T24274] ? __pfx_ip_set_create+0x10/0x10 [ 643.373143][T24274] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 643.373222][T24274] ? unwind_get_return_address+0x4d/0x90 [ 643.373242][T24274] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 643.373287][T24274] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 643.373360][T24274] netlink_rcv_skb+0x226/0x4a0 [ 643.373381][T24274] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 643.373411][T24274] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 643.373441][T24274] ? bpf_lsm_capable+0x9/0x20 [ 643.373463][T24274] ? security_capable+0x7e/0x2c0 [ 643.373551][T24274] nfnetlink_rcv+0x2b9/0x28c0 [ 643.373582][T24274] ? __dev_queue_xmit+0x29b/0x3820 [ 643.373638][T24274] ? __local_bh_enable_ip+0xd0/0x130 [ 643.373659][T24274] ? lockdep_hardirqs_on+0x7a/0x110 [ 643.373679][T24274] ? __dev_queue_xmit+0x29b/0x3820 [ 643.373697][T24274] ? __local_bh_enable_ip+0xd0/0x130 [ 643.373717][T24274] ? __dev_queue_xmit+0x29b/0x3820 [ 643.373737][T24274] ? __dev_queue_xmit+0x1edc/0x3820 [ 643.373755][T24274] ? do_syscall_64+0x174/0x580 [ 643.373773][T24274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.373803][T24274] ? __dev_queue_xmit+0x29b/0x3820 [ 643.373827][T24274] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 643.373855][T24274] ? __lock_acquire+0x683/0x2cf0 [ 643.373882][T24274] ? __pfx___dev_queue_xmit+0x10/0x10 [ 643.373910][T24274] ? ref_tracker_free+0x689/0x830 [ 643.373962][T24274] ? __pfx_ref_tracker_free+0x10/0x10 [ 643.373989][T24274] ? do_raw_spin_lock+0x12b/0x2f0 [ 643.374020][T24274] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 643.374077][T24274] ? lockdep_hardirqs_on+0x7a/0x110 [ 643.374096][T24274] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 643.374123][T24274] ? rcu_preempt_deferred_qs_irqrestore+0x7b7/0xb90 [ 643.374166][T24274] netlink_unicast+0x7bb/0x940 [ 643.374204][T24274] netlink_sendmsg+0x813/0xb40 [ 643.374234][T24274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.374257][T24274] ? aa_sock_msg_perm+0xf1/0x1b0 [ 643.374281][T24274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.374300][T24274] sock_sendmsg_nosec+0x13a/0x180 [ 643.374327][T24274] ____sys_sendmsg+0x54e/0x850 [ 643.374351][T24274] ? __pfx_____sys_sendmsg+0x10/0x10 [ 643.374379][T24274] ? import_iovec+0x73/0xa0 [ 643.374408][T24274] ___sys_sendmsg+0x2a5/0x360 [ 643.374427][T24274] ? __lock_acquire+0x683/0x2cf0 [ 643.374454][T24274] ? __pfx____sys_sendmsg+0x10/0x10 [ 643.374507][T24274] ? __fget_files+0x2a/0x420 [ 643.374529][T24274] ? __fget_files+0x3a2/0x420 [ 643.374562][T24274] __x64_sys_sendmsg+0x1b1/0x290 [ 643.374590][T24274] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 643.374627][T24274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.374647][T24274] do_syscall_64+0x174/0x580 [ 643.374667][T24274] ? clear_bhb_loop+0x40/0x90 [ 643.374690][T24274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.374709][T24274] RIP: 0033:0x7f3b27d9de99 [ 643.374726][T24274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.374742][T24274] RSP: 002b:00007f3b25ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 643.374762][T24274] RAX: ffffffffffffffda RBX: 00007f3b28025fa0 RCX: 00007f3b27d9de99 [ 643.374775][T24274] RDX: 0000000000084000 RSI: 0000200000000000 RDI: 0000000000000003 [ 643.374788][T24274] RBP: 00007f3b25ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 643.374799][T24274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.374810][T24274] R13: 00007f3b28026038 R14: 00007f3b28025fa0 R15: 00007ffe5fed0ac8 [ 643.374841][T24274] [ 643.433938][T24278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4815'. [ 643.626386][T24280] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4815'. [ 643.700015][T24186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.904014][T24292] FAULT_INJECTION: forcing a failure. [ 643.904014][T24292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 643.917077][T24292] CPU: 1 UID: 0 PID: 24292 Comm: syz.4.4818 Not tainted syzkaller #0 PREEMPT(full) [ 643.917099][T24292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 643.917111][T24292] Call Trace: [ 643.917119][T24292] [ 643.917126][T24292] dump_stack_lvl+0xe8/0x150 [ 643.917158][T24292] should_fail_ex+0x40c/0x560 [ 643.917186][T24292] _copy_to_user+0x31/0xb0 [ 643.917216][T24292] simple_read_from_buffer+0xe1/0x170 [ 643.917246][T24292] proc_fail_nth_read+0x1bb/0x230 [ 643.917275][T24292] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 643.917302][T24292] ? rw_verify_area+0x24a/0x4c0 [ 643.917330][T24292] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 643.917354][T24292] vfs_read+0x213/0xa80 [ 643.917386][T24292] ? __pfx___mutex_lock+0x10/0x10 [ 643.917408][T24292] ? __pfx_vfs_read+0x10/0x10 [ 643.917436][T24292] ? __fget_files+0x2a/0x420 [ 643.917464][T24292] ? __fget_files+0x3a2/0x420 [ 643.917486][T24292] ? __fget_files+0x2a/0x420 [ 643.917518][T24292] ksys_read+0x150/0x270 [ 643.917561][T24292] ? __pfx_ksys_read+0x10/0x10 [ 643.917596][T24292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.917617][T24292] do_syscall_64+0x174/0x580 [ 643.917636][T24292] ? trace_irq_disable+0x3b/0x140 [ 643.917659][T24292] ? clear_bhb_loop+0x40/0x90 [ 643.917681][T24292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.917699][T24292] RIP: 0033:0x7fb6e5f5e6ce [ 643.917717][T24292] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 643.917734][T24292] RSP: 002b:00007fb6e6f1dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 643.917754][T24292] RAX: ffffffffffffffda RBX: 00007fb6e6f1e6c0 RCX: 00007fb6e5f5e6ce [ 643.917768][T24292] RDX: 000000000000000f RSI: 00007fb6e6f1e0a0 RDI: 0000000000000007 [ 643.917779][T24292] RBP: 00007fb6e6f1e090 R08: 0000000000000000 R09: 0000000000000000 [ 643.917790][T24292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.917800][T24292] R13: 00007fb6e6226128 R14: 00007fb6e6226090 R15: 00007ffe924c0b28 [ 643.917831][T24292] [ 644.564965][T24300] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4821'. [ 644.849532][T24186] hsr_slave_0: entered promiscuous mode [ 644.856374][T24186] hsr_slave_1: entered promiscuous mode [ 644.864716][T24316] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4824'. [ 644.869904][T24186] debugfs: 'hsr0' already exists in 'hsr' [ 644.882875][T24318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4825'. [ 644.898082][T24186] Cannot create hsr debugfs directory [ 644.958762][T24316] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4824'. [ 645.284485][T17648] Bluetooth: hci6: command tx timeout [ 645.418405][T24345] netlink: 'syz.4.4832': attribute type 16 has an invalid length. [ 645.507894][T24344] syzkaller0: entered promiscuous mode [ 645.514635][T24344] syzkaller0: entered allmulticast mode [ 645.689500][T24355] xfrm0 speed is unknown, defaulting to 1000 [ 645.786935][T24361] ip6gretap0: left promiscuous mode [ 645.793629][T24361] ip6gretap0: left allmulticast mode [ 645.809329][T24364] erspan0: entered promiscuous mode [ 645.814558][T24364] erspan0: entered allmulticast mode [ 645.944358][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 646.132620][T24345] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 646.230961][T24186] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 646.252734][T24186] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 646.375585][T24186] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 646.402855][T24387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 646.414072][T24386] __nla_validate_parse: 4 callbacks suppressed [ 646.414087][T24386] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4845'. [ 646.417478][T24186] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 646.436504][T24375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4843'. [ 646.561034][T24394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 647.394314][T17648] Bluetooth: hci6: command tx timeout [ 647.631100][T24186] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 647.648531][T24186] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 647.669605][T24186] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 647.684551][T24186] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 647.873789][T24409] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4847'. [ 647.914781][T24186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 647.952647][T24409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4847'. [ 648.010218][T24186] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.023257][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.030408][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.098758][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.105906][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.367461][T24426] syzkaller0: entered promiscuous mode [ 648.385810][T24426] syzkaller0: entered allmulticast mode [ 648.786871][T24444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4857'. [ 648.969138][T24186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 649.095071][T24455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4860'. [ 649.193500][T24463] netlink: 'syz.5.4862': attribute type 2 has an invalid length. [ 649.201274][T24463] netlink: 'syz.5.4862': attribute type 8 has an invalid length. [ 649.209000][T24463] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4862'. [ 649.224315][T24455] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4860'. [ 649.300570][T24467] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4863'. [ 649.311095][T24469] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4862'. [ 649.546388][T24186] veth0_vlan: entered promiscuous mode [ 649.565730][T24186] veth1_vlan: entered promiscuous mode [ 649.618489][T24186] veth0_macvtap: entered promiscuous mode [ 649.631086][ T1124] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 649.636337][T24186] veth1_macvtap: entered promiscuous mode [ 649.662625][T24186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.681908][T24474] geneve3: entered allmulticast mode [ 649.697618][T24186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.740228][ T7033] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.750420][ T7033] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.785369][ T7033] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.810529][ T7033] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.968528][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.980137][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.017845][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.025680][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.345063][T24497] FAULT_INJECTION: forcing a failure. [ 650.345063][T24497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 650.358133][T24497] CPU: 1 UID: 0 PID: 24497 Comm: syz.4.4869 Not tainted syzkaller #0 PREEMPT(full) [ 650.358157][T24497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 650.358168][T24497] Call Trace: [ 650.358177][T24497] [ 650.358184][T24497] dump_stack_lvl+0xe8/0x150 [ 650.358216][T24497] should_fail_ex+0x40c/0x560 [ 650.358243][T24497] _copy_from_iter+0x1d3/0x1660 [ 650.358277][T24497] ? __pfx__copy_from_iter+0x10/0x10 [ 650.358303][T24497] ? __lock_acquire+0x683/0x2cf0 [ 650.358333][T24497] ? skb_put+0x112/0x210 [ 650.358363][T24497] rawv6_send_hdrinc+0x894/0x1950 [ 650.358519][T24497] ? __pfx_rawv6_send_hdrinc+0x10/0x10 [ 650.358551][T24497] ? ip6_dst_hoplimit+0x65/0x3e0 [ 650.358600][T24497] ? ip6_dst_hoplimit+0x65/0x3e0 [ 650.358627][T24497] rawv6_sendmsg+0x12fb/0x18c0 [ 650.358665][T24497] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 650.358720][T24497] ? sock_rps_record_flow+0x19/0x350 [ 650.358750][T24497] ? inet_sendmsg+0x298/0x320 [ 650.358777][T24497] ? __pfx_inet_sendmsg+0x10/0x10 [ 650.358802][T24497] sock_sendmsg_nosec+0x10e/0x180 [ 650.358828][T24497] ____sys_sendmsg+0x54e/0x850 [ 650.358853][T24497] ? __pfx_____sys_sendmsg+0x10/0x10 [ 650.358880][T24497] ? import_iovec+0x73/0xa0 [ 650.358909][T24497] ___sys_sendmsg+0x2a5/0x360 [ 650.358927][T24497] ? __lock_acquire+0x683/0x2cf0 [ 650.358955][T24497] ? __pfx____sys_sendmsg+0x10/0x10 [ 650.359007][T24497] ? __fget_files+0x2a/0x420 [ 650.359029][T24497] ? __fget_files+0x3a2/0x420 [ 650.359061][T24497] __x64_sys_sendmsg+0x1b1/0x290 [ 650.359083][T24497] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 650.359118][T24497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.359138][T24497] do_syscall_64+0x174/0x580 [ 650.359158][T24497] ? trace_irq_disable+0x3b/0x140 [ 650.359181][T24497] ? clear_bhb_loop+0x40/0x90 [ 650.359203][T24497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.359222][T24497] RIP: 0033:0x7fb6e5f9de99 [ 650.359240][T24497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.359256][T24497] RSP: 002b:00007fb6e6f3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 650.359275][T24497] RAX: ffffffffffffffda RBX: 00007fb6e6225fa0 RCX: 00007fb6e5f9de99 [ 650.359289][T24497] RDX: 0000000030008b08 RSI: 0000200000001c00 RDI: 0000000000000004 [ 650.359301][T24497] RBP: 00007fb6e6f3f090 R08: 0000000000000000 R09: 0000000000000000 [ 650.359313][T24497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.359324][T24497] R13: 00007fb6e6226038 R14: 00007fb6e6225fa0 R15: 00007ffe924c0b28 [ 650.359353][T24497] [ 650.828279][T24513] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.835988][T24513] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.892825][T24513] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.900078][T24513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.907690][T24513] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.914857][T24513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.959248][T24513] bridge0: entered promiscuous mode [ 650.964916][T24513] bridge0: entered allmulticast mode [ 651.222771][T24538] netlink: 'syz.5.4877': attribute type 2 has an invalid length. [ 651.269491][T24538] netlink: 'syz.5.4877': attribute type 8 has an invalid length. [ 651.433638][T24549] __nla_validate_parse: 3 callbacks suppressed [ 651.433658][T24549] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4880'. [ 651.554893][T24552] FAULT_INJECTION: forcing a failure. [ 651.554893][T24552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 651.569760][T24552] CPU: 0 UID: 0 PID: 24552 Comm: syz.2.4881 Not tainted syzkaller #0 PREEMPT(full) [ 651.569784][T24552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 651.569795][T24552] Call Trace: [ 651.569803][T24552] [ 651.569819][T24552] dump_stack_lvl+0xe8/0x150 [ 651.569853][T24552] should_fail_ex+0x40c/0x560 [ 651.569882][T24552] _copy_from_user+0x2d/0xb0 [ 651.569911][T24552] kstrtouint_from_user+0xd6/0x180 [ 651.569938][T24552] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 651.569978][T24552] proc_fail_nth_write+0x8e/0x210 [ 651.570006][T24552] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 651.570038][T24552] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 651.570062][T24552] vfs_write+0x296/0xba0 [ 651.570097][T24552] ? __pfx_vfs_write+0x10/0x10 [ 651.570126][T24552] ? __fget_files+0x2a/0x420 [ 651.570153][T24552] ? __fget_files+0x3a2/0x420 [ 651.570175][T24552] ? __fget_files+0x2a/0x420 [ 651.570207][T24552] ksys_write+0x150/0x270 [ 651.570236][T24552] ? __pfx_ksys_write+0x10/0x10 [ 651.570271][T24552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.570292][T24552] do_syscall_64+0x174/0x580 [ 651.570312][T24552] ? trace_irq_disable+0x3b/0x140 [ 651.570336][T24552] ? clear_bhb_loop+0x40/0x90 [ 651.570359][T24552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.570378][T24552] RIP: 0033:0x7ff27a55e6ce [ 651.570396][T24552] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 651.570413][T24552] RSP: 002b:00007ff27b3fcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 651.570433][T24552] RAX: ffffffffffffffda RBX: 00007ff27b3fd6c0 RCX: 00007ff27a55e6ce [ 651.570448][T24552] RDX: 0000000000000001 RSI: 00007ff27b3fd0a0 RDI: 0000000000000005 [ 651.570460][T24552] RBP: 00007ff27b3fd090 R08: 0000000000000000 R09: 0000000000000000 [ 651.570472][T24552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.570483][T24552] R13: 00007ff27a826038 R14: 00007ff27a825fa0 R15: 00007fff5873ba88 [ 651.570516][T24552] [ 651.897470][T24540] xfrm0 speed is unknown, defaulting to 1000 [ 652.061464][T24556] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 652.249260][T24543] xfrm0 speed is unknown, defaulting to 1000 [ 652.793338][T24586] netlink: 'syz.2.4891': attribute type 4 has an invalid length. [ 652.794779][T24584] netlink: 'syz.2.4891': attribute type 4 has an invalid length. [ 652.825312][T24584] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4891'. [ 652.845278][T24586] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4891'. [ 653.892623][T16594] block nbd5: Receive control failed (result -32) [ 653.892626][T17648] block nbd5: Receive control failed (result -32) [ 654.505603][T24650] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4908'. [ 654.537273][T24650] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4908'. [ 657.204675][T24629] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 657.611694][T24676] syzkaller0: entered promiscuous mode [ 657.617213][T24676] syzkaller0: entered allmulticast mode [ 658.010957][T24703] netdevsim netdevsim2: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 658.094144][T24705] syzkaller0: entered promiscuous mode [ 658.099654][T24705] syzkaller0: entered allmulticast mode [ 658.109204][T24707] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4927'. [ 658.178677][T24707] ip6gre1: entered promiscuous mode [ 658.183914][T24707] ip6gre1: entered allmulticast mode [ 658.197079][T24707] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4927'. [ 658.321928][T24710] netlink: 16166 bytes leftover after parsing attributes in process `syz.5.4928'. [ 658.494507][T24720] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4932'. [ 658.563900][T24729] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4935'. [ 658.761563][T24737] syzkaller0: entered promiscuous mode [ 658.779265][T24737] syzkaller0: entered allmulticast mode [ 658.794062][T24741] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 658.797643][T24739] FAULT_INJECTION: forcing a failure. [ 658.797643][T24739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.824787][T24739] CPU: 0 UID: 0 PID: 24739 Comm: syz.6.4940 Not tainted syzkaller #0 PREEMPT(full) [ 658.824811][T24739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 658.824822][T24739] Call Trace: [ 658.824829][T24739] [ 658.824837][T24739] dump_stack_lvl+0xe8/0x150 [ 658.824871][T24739] should_fail_ex+0x40c/0x560 [ 658.824899][T24739] _copy_from_user+0x2d/0xb0 [ 658.824928][T24739] ___sys_recvmsg+0x173/0x5a0 [ 658.824955][T24739] ? __pfx____sys_recvmsg+0x10/0x10 [ 658.824979][T24739] ? __fget_files+0x2a/0x420 [ 658.825019][T24739] ? __fget_files+0x3a2/0x420 [ 658.825052][T24739] __x64_sys_recvmsg+0x1ae/0x290 [ 658.825086][T24739] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 658.825122][T24739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.825143][T24739] do_syscall_64+0x174/0x580 [ 658.825162][T24739] ? trace_irq_disable+0x3b/0x140 [ 658.825184][T24739] ? clear_bhb_loop+0x40/0x90 [ 658.825206][T24739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.825224][T24739] RIP: 0033:0x7f4c1ed9de99 [ 658.825245][T24739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.825262][T24739] RSP: 002b:00007f4c1fbb8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 658.825281][T24739] RAX: ffffffffffffffda RBX: 00007f4c1f025fa0 RCX: 00007f4c1ed9de99 [ 658.825294][T24739] RDX: 0000000000000002 RSI: 0000200000000440 RDI: 0000000000000003 [ 658.825306][T24739] RBP: 00007f4c1fbb8090 R08: 0000000000000000 R09: 0000000000000000 [ 658.825317][T24739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.825328][T24739] R13: 00007f4c1f026038 R14: 00007f4c1f025fa0 R15: 00007ffcf4bc5b78 [ 658.825359][T24739] [ 659.072520][T24745] tipc: Enabling of bearer rejected, failed to enable media [ 659.228131][T24749] netlink: 'syz.3.4941': attribute type 10 has an invalid length. [ 659.241380][T24749] ipvlan0: entered allmulticast mode [ 659.279847][T24749] veth0_vlan: entered allmulticast mode [ 659.288020][T24749] team0: Device ipvlan0 failed to register rx_handler [ 659.458504][T24757] syzkaller0: entered promiscuous mode [ 659.464052][T24757] syzkaller0: entered allmulticast mode [ 659.641002][T24766] erspan0: left promiscuous mode [ 659.651015][T24766] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.658167][T24766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.665593][T24766] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.672717][T24766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.757049][T24766] vlan2: left promiscuous mode [ 659.761859][T24766] gretap0: left promiscuous mode [ 659.767522][T24766] geneve2: left promiscuous mode [ 659.775148][T24766] 8021q: adding VLAN 0 to HW filter on device bond1 [ 659.882526][T24775] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4953'. [ 659.949500][T24779] netlink: 'syz.5.4955': attribute type 21 has an invalid length. [ 659.981913][T24779] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4955'. [ 659.990997][T24779] netlink: 'syz.5.4955': attribute type 1 has an invalid length. [ 660.000580][T24775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4953'. [ 660.019224][T24781] syzkaller0: entered promiscuous mode [ 660.040966][T24781] syzkaller0: entered allmulticast mode [ 660.053535][T24779] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4955'. [ 660.188810][T24787] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 660.258615][T24794] netlink: 'syz.2.4961': attribute type 9 has an invalid length. [ 660.425319][T24800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4962'. [ 660.735912][T24813] syzkaller0: entered promiscuous mode [ 660.741556][T24813] syzkaller0: entered allmulticast mode [ 661.279125][T24834] vlan5: entered promiscuous mode [ 661.293579][T24834] hsr0: entered promiscuous mode [ 661.317779][T24834] vlan5: entered allmulticast mode [ 661.338770][T24834] hsr0: entered allmulticast mode [ 661.368083][T24834] hsr_slave_0: entered allmulticast mode [ 661.377681][T24834] hsr_slave_1: entered allmulticast mode [ 661.793768][T24834] hsr_slave_0: left promiscuous mode [ 661.800015][T24834] hsr_slave_1: left promiscuous mode [ 662.027394][T24838] syzkaller0: entered promiscuous mode [ 662.060110][T24838] syzkaller0: entered allmulticast mode [ 662.272259][T24867] netlink: 'syz.6.4974': attribute type 1 has an invalid length. [ 662.301317][T24874] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 662.336193][T24874] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 662.424563][T24881] netlink: 'syz.4.4979': attribute type 1 has an invalid length. [ 662.749310][T24898] tipc: Enabled bearer , priority 0 [ 662.756667][T24898] syzkaller0: entered promiscuous mode [ 662.762148][T24898] syzkaller0: entered allmulticast mode [ 662.772182][T24898] tipc: Resetting bearer [ 662.930438][T24897] tipc: Resetting bearer [ 662.958701][T24897] tipc: Disabling bearer [ 663.130236][T24904] netlink: 'syz.6.4987': attribute type 1 has an invalid length. [ 663.226299][T24909] syzkaller0: entered promiscuous mode [ 663.231957][T24909] syzkaller0: entered allmulticast mode [ 663.427736][T24920] ipip0: entered promiscuous mode [ 663.432803][T24920] ipip0: entered allmulticast mode [ 663.444864][T24921] ipip0: entered promiscuous mode [ 663.449890][T24921] ipip0: entered allmulticast mode [ 663.815726][T24933] __nla_validate_parse: 10 callbacks suppressed [ 663.815761][T24933] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4996'. [ 663.857431][T24936] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4997'. [ 663.947646][T24944] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4996'. [ 664.029090][T24944] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.067884][T24948] netlink: 'syz.6.4996': attribute type 1 has an invalid length. [ 664.142354][T24957] netlink: 'syz.5.5003': attribute type 2 has an invalid length. [ 664.150399][T24957] netlink: 'syz.5.5003': attribute type 8 has an invalid length. [ 664.173909][T24957] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5003'. [ 664.467943][T24944] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.513989][T24961] geneve1: entered promiscuous mode [ 664.560500][T24963] syzkaller0: entered promiscuous mode [ 664.574282][T24963] syzkaller0: entered allmulticast mode [ 664.751537][T24944] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.800202][T24971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5008'. [ 664.809096][T24971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5008'. [ 664.967107][T24976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5007'. [ 665.066361][T24979] sctp: [Deprecated]: syz.4.5009 (pid 24979) Use of struct sctp_assoc_value in delayed_ack socket option. [ 665.066361][T24979] Use struct sctp_sack_info instead [ 665.146669][T24983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5010'. [ 665.171480][T24983] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 665.220422][T24944] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.316476][T24990] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5014'. [ 665.692277][ T7033] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.709993][T25004] syzkaller0: entered promiscuous mode [ 665.721896][T25004] syzkaller0: entered allmulticast mode [ 665.748777][ T7033] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.762158][T25009] netlink: 'syz.5.5019': attribute type 1 has an invalid length. [ 665.789948][ T7033] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.805908][ T7033] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.248944][T25041] syzkaller0: entered promiscuous mode [ 666.264043][T25041] syzkaller0: entered allmulticast mode [ 666.356616][T25044] syzkaller0: entered promiscuous mode [ 666.362248][T25044] syzkaller0: entered allmulticast mode [ 666.432204][T25046] syzkaller0: entered promiscuous mode [ 666.439032][T25046] syzkaller0: entered allmulticast mode [ 667.775883][T25075] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5042'. [ 668.472196][T25095] erspan0: left allmulticast mode [ 668.768051][T25095] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.775875][T25095] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.939459][T25109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 669.313652][T25095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.394841][T25095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.042544][T21868] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.068983][T21868] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.077902][T21868] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.086787][T21868] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.148734][T25115] syzkaller0: entered promiscuous mode [ 670.163588][T25115] syzkaller0: entered allmulticast mode [ 670.172931][T25115] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 670.219644][ T29] audit: type=1800 audit(1784713118.391:19): pid=25115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5054" name="l" dev="tmpfs" ino=529 res=0 errno=0 [ 671.004997][T17648] block nbd6: Receive control failed (result -32) [ 671.011898][T16594] block nbd6: Receive control failed (result -32) [ 671.061120][T25137] __nla_validate_parse: 1 callbacks suppressed [ 671.061137][T25137] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5060'. [ 671.304361][T25148] netlink: 'syz.5.5063': attribute type 2 has an invalid length. [ 671.316707][T25148] netlink: 'syz.5.5063': attribute type 8 has an invalid length. [ 671.328992][T25148] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5063'. [ 672.149904][T25158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5066'. [ 672.188252][T25158] tipc: Invalid UDP bearer configuration [ 672.188304][T25158] tipc: Enabling of bearer rejected, failed to enable media [ 672.334011][T25160] syzkaller0: entered promiscuous mode [ 672.349520][T25160] syzkaller0: entered allmulticast mode [ 672.362009][T25158] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5066'. [ 672.373609][T25158] netlink: 'syz.4.5066': attribute type 1 has an invalid length. [ 673.086148][T25175] 8021q: adding VLAN 0 to HW filter on device eth0 [ 673.120639][T25175] 8021q: adding VLAN 0 to HW filter on device eth1 [ 673.168501][T25175] 8021q: adding VLAN 0 to HW filter on device eth2 [ 673.207474][T25175] 8021q: adding VLAN 0 to HW filter on device eth3 [ 673.229731][T25177] netlink: 'syz.4.5072': attribute type 4 has an invalid length. [ 673.904676][T25214] syzkaller0: entered promiscuous mode [ 673.929440][T25214] syzkaller0: entered allmulticast mode [ 673.955429][T25212] bridge0: port 3(dummy0) entered blocking state [ 674.017348][T25212] bridge0: port 3(dummy0) entered disabled state [ 674.030877][T25212] dummy0: entered allmulticast mode [ 674.050160][T25212] dummy0: entered promiscuous mode [ 674.160732][T17648] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 674.183699][T17648] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 674.198403][T17648] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 674.198593][T25212] dummy0: left allmulticast mode [ 674.210608][T25212] dummy0: left promiscuous mode [ 674.215959][T25212] bridge0: port 3(dummy0) entered disabled state [ 674.215984][T17648] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 674.232907][T17648] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 674.639371][T25246] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5088'. [ 674.648626][T25246] netlink: 260 bytes leftover after parsing attributes in process `syz.5.5088'. [ 674.882691][T25219] xfrm0 speed is unknown, defaulting to 1000 [ 675.155892][T25262] bond5 (unregistering): Released all slaves [ 675.389666][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 675.605845][T25273] syzkaller1: entered promiscuous mode [ 675.623291][T25273] syzkaller1: entered allmulticast mode [ 675.795891][T25283] netlink: 'syz.6.5096': attribute type 30 has an invalid length. [ 675.899474][ T5728] IPVS: starting estimator thread 0... [ 676.049052][T25287] IPVS: using max 27 ests per chain, 64800 per kthread [ 676.271490][T17648] Bluetooth: hci7: command tx timeout [ 676.291331][T25301] syzkaller0: entered promiscuous mode [ 676.298724][T25301] syzkaller0: entered allmulticast mode [ 676.299697][T25299] netlink: 'syz.6.5101': attribute type 8 has an invalid length. [ 676.318028][T25303] bridge0: port 3(dummy0) entered blocking state [ 676.324744][T25303] bridge0: port 3(dummy0) entered disabled state [ 676.331330][T25303] dummy0: entered allmulticast mode [ 676.337404][T25303] dummy0: entered promiscuous mode [ 676.343502][T25219] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.350895][T25219] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.358408][T25219] bridge_slave_0: entered allmulticast mode [ 676.365465][T25219] bridge_slave_0: entered promiscuous mode [ 676.383109][T25219] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.395108][T25219] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.404062][T25219] bridge_slave_1: entered allmulticast mode [ 676.422672][T25219] bridge_slave_1: entered promiscuous mode [ 676.452698][T25303] dummy0: left allmulticast mode [ 676.457762][T25303] dummy0: left promiscuous mode [ 676.462803][T25303] bridge0: port 3(dummy0) entered disabled state [ 676.506803][T25219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.519339][T25219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.587334][T25313] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5104'. [ 676.597070][T25313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5104'. [ 676.633143][T25219] team0: Port device team_slave_0 added [ 676.692432][T25219] team0: Port device team_slave_1 added [ 676.821367][T25319] dvmrp8: entered allmulticast mode [ 676.842453][T25219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.849419][T25219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.875292][T25219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.887748][T25219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.894822][T25219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.921009][T25219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.020828][T25326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5109'. [ 677.023067][T25219] hsr_slave_0: entered promiscuous mode [ 677.036246][T25219] hsr_slave_1: entered promiscuous mode [ 677.042552][T25219] debugfs: 'hsr0' already exists in 'hsr' [ 677.071479][T25219] Cannot create hsr debugfs directory [ 677.343486][T25219] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 677.710345][T25219] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 677.726626][T25219] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 677.795161][T25219] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 677.896578][T25350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5115'. [ 677.911406][T25336] bridge0: port 3(batadv0) entered blocking state [ 677.917914][T25336] bridge0: port 3(batadv0) entered forwarding state [ 677.924802][T25336] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.931980][T25336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.939345][T25336] bridge0: port 1(() entered blocking state [ 677.945390][T25336] bridge0: port 1(() entered forwarding state [ 677.951501][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 677.966252][ T1124] batman_adv: batadv0: MLD Querier disappeared - multicast optimizations disabled [ 677.996607][T25336] geneve1: left promiscuous mode [ 678.003368][T25336] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 678.023933][T25336] bridge2: left promiscuous mode [ 678.031688][T25336] bridge4: left promiscuous mode [ 678.037044][T25336] bond1: left promiscuous mode [ 678.044744][T25336] hsr1: Slave A (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 678.062124][T25336] 8021q: adding VLAN 0 to HW filter on device bond2 [ 678.094313][T25336] geneve2: left promiscuous mode [ 678.153097][T25336] bridge6: left promiscuous mode [ 678.200702][T25336] 8021q: adding VLAN 0 to HW filter on device bond4 [ 678.210645][T25336] ip6gre1: left promiscuous mode [ 678.219172][T25336] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 678.318220][T25219] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 678.336572][T25219] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 678.395097][T17648] Bluetooth: hci7: command tx timeout [ 678.423860][ T1124] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.432759][ T1124] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.447698][T25219] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 678.463380][T25219] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 678.470960][T25354] syzkaller0: entered promiscuous mode [ 678.478658][T25354] syzkaller0: entered allmulticast mode [ 678.486393][ T1124] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.503202][ T1124] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.586826][T25373] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5118'. [ 678.596328][T25373] bond_slave_0: entered promiscuous mode [ 678.645522][T25378] syzkaller0: entered promiscuous mode [ 678.651759][T25378] syzkaller0: entered allmulticast mode [ 678.810765][T25219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.866181][T25219] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.888846][T21881] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.896110][T21881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.952382][T21881] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.959530][T21881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.103034][T25399] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5126'. [ 679.132242][T25400] netlink: 'syz.4.5125': attribute type 2 has an invalid length. [ 679.174821][T25400] netlink: 'syz.4.5125': attribute type 8 has an invalid length. [ 679.182573][T25400] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5125'. [ 679.193664][T25399] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5126'. [ 679.236736][T25405] netlink: 'syz.6.5127': attribute type 4 has an invalid length. [ 679.279480][T25399] vlan3: entered promiscuous mode [ 679.284571][T25399] gretap0: entered promiscuous mode [ 679.309410][T25409] netlink: 'syz.6.5127': attribute type 4 has an invalid length. [ 679.351954][T25408] netlink: 'syz.2.5128': attribute type 3 has an invalid length. [ 679.392045][T25405] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5127'. [ 679.426499][T25412] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5125'. [ 679.548828][T25415] tipc: Started in network mode [ 679.553838][T25415] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 679.575343][T25415] tipc: Enabling of bearer rejected, failed to enable media [ 679.747189][T25418] netlink: 'syz.2.5130': attribute type 5 has an invalid length. [ 679.793159][T25418] geneve3: entered promiscuous mode [ 679.823979][T25418] geneve3: entered allmulticast mode [ 679.860153][ T151] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 58064 - 0 [ 679.956303][ T151] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 58064 - 0 [ 679.965154][ T151] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 58064 - 0 [ 679.974272][ T151] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 58064 - 0 [ 680.108642][T25219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.277963][T25443] vxcan0: tx address claim with dlc 0 [ 680.437291][T25447] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 680.485493][T17648] Bluetooth: hci7: command tx timeout [ 680.762199][T25219] veth0_vlan: entered promiscuous mode [ 680.790459][T25219] veth1_vlan: entered promiscuous mode [ 680.948582][T25219] veth0_macvtap: entered promiscuous mode [ 680.958737][T25219] veth1_macvtap: entered promiscuous mode [ 681.013126][T25219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.029844][T25219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.071023][ T1124] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.090840][ T1124] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.111962][ T1124] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.121466][ T1124] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.322361][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.334521][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.372660][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.387185][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.442932][T25479] netlink: 'syz.5.5146': attribute type 13 has an invalid length. [ 681.465479][T25478] netlink: 'syz.5.5146': attribute type 13 has an invalid length. [ 681.493877][T25478] netlink: 'syz.5.5146': attribute type 17 has an invalid length. [ 681.513887][T25479] netlink: 'syz.5.5146': attribute type 17 has an invalid length. [ 681.887949][T25485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 682.092345][T25496] __nla_validate_parse: 5 callbacks suppressed [ 682.092364][T25496] netlink: 9 bytes leftover after parsing attributes in process `syz.6.5150'. [ 682.176898][T25496] gretap0: entered promiscuous mode [ 682.222839][T25500] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5152'. [ 682.242273][T25496] netlink: 5 bytes leftover after parsing attributes in process `syz.6.5150'. [ 682.266001][T25496] 0ªî{X¹¦: renamed from gretap0 [ 682.277824][T25496] 0ªî{X¹¦: left promiscuous mode [ 682.283020][T25496] 0ªî{X¹¦: entered allmulticast mode [ 682.291294][T25496] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 682.351803][T25498] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5151'. [ 682.404193][T25498] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5151'. [ 682.445355][T25498] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5151'. [ 682.539727][T25506] syzkaller0: entered promiscuous mode [ 682.560766][T25506] syzkaller0: entered allmulticast mode [ 682.580467][T17648] Bluetooth: hci7: command tx timeout [ 683.113353][T25514] gretap0: entered promiscuous mode [ 683.566920][T25508] gretap0: left promiscuous mode [ 685.188831][T25507] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 685.397741][T25534] xt_hashlimit: max too large, truncated to 1048576 [ 685.451789][T25534] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 685.508315][T25535] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5159'. [ 685.579184][T25545] batadv_slave_1: entered promiscuous mode [ 685.634617][T25544] batadv_slave_1: left promiscuous mode [ 685.745256][T25553] netlink: 164 bytes leftover after parsing attributes in process `syz.5.5166'. [ 685.849583][T25556] 8021q: adding VLAN 0 to HW filter on device bond5 [ 685.857542][T25556] bridge0: port 4(bond5) entered blocking state [ 685.864045][T25556] bridge0: port 4(bond5) entered disabled state [ 685.871337][T25556] bond5: entered allmulticast mode [ 685.878847][T25556] bond5: entered promiscuous mode [ 685.884824][T25556] bridge0: port 4(bond5) entered blocking state [ 685.891215][T25556] bridge0: port 4(bond5) entered forwarding state [ 686.023650][ T7033] batman_adv: batadv0: MLD Querier appeared [ 686.228433][T25579] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 686.279434][T25583] veth1_to_hsr: entered promiscuous mode [ 686.287006][T25583] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5173'. [ 686.297469][T25583] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 686.314257][ T130] bridge0: port 4(bond5) entered disabled state [ 686.362805][T25585] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 686.594874][T25601] netlink: 'syz.7.5177': attribute type 13 has an invalid length. [ 686.605853][T25601] gretap0: refused to change device tx_queue_len [ 686.613184][T25601] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 686.643736][T25598] syzkaller0: entered promiscuous mode [ 686.649243][T25598] syzkaller0: entered allmulticast mode [ 686.955706][T25613] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5183'. [ 687.498155][T25639] __nla_validate_parse: 3 callbacks suppressed [ 687.498173][T25639] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5188'. [ 687.609693][T25640] syzkaller0: entered promiscuous mode [ 687.615314][T25640] syzkaller0: entered allmulticast mode [ 687.816310][T25623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 688.351211][T25659] bridge0: port 3(dummy0) entered blocking state [ 688.362616][T25659] bridge0: port 3(dummy0) entered disabled state [ 688.374836][T25659] dummy0: entered allmulticast mode [ 688.387868][T25659] dummy0: entered promiscuous mode [ 688.398488][T25659] bridge0: port 3(dummy0) entered blocking state [ 688.404975][T25659] bridge0: port 3(dummy0) entered forwarding state [ 688.445761][T25661] dummy0: left allmulticast mode [ 688.450950][T25661] dummy0: left promiscuous mode [ 688.456056][T25661] bridge0: port 3(dummy0) entered disabled state [ 688.916012][T25682] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5201'. [ 688.975553][T25680] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5201'. [ 689.352741][T25688] bridge0: port 3(dummy0) entered blocking state [ 689.359251][T25688] bridge0: port 3(dummy0) entered disabled state [ 689.365715][T25688] dummy0: entered allmulticast mode [ 689.372553][T25688] dummy0: entered promiscuous mode [ 689.378286][T25688] bridge0: port 3(dummy0) entered blocking state [ 689.384709][T25688] bridge0: port 3(dummy0) entered forwarding state [ 689.425599][T25688] dummy0: left allmulticast mode [ 689.430687][T25688] dummy0: left promiscuous mode [ 689.452184][T25688] bridge0: port 3(dummy0) entered disabled state [ 689.695913][ T151] wlan1: Trigger new scan to find an IBSS to join [ 690.081404][T25725] tipc: Enabled bearer , priority 0 [ 690.147916][T25724] tipc: Disabling bearer [ 690.324844][T25728] tipc: Resetting bearer [ 690.355618][T25735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5217'. [ 691.279706][T25749] syzkaller0: entered promiscuous mode [ 691.304922][T25749] syzkaller0: entered allmulticast mode [ 691.324707][T25747] xfrm0 speed is unknown, defaulting to 1000 [ 691.350500][T25749] tipc: Enabled bearer , priority 0 [ 691.428255][T25749] tipc: Resetting bearer [ 691.513072][T25749] tipc: Resetting bearer [ 691.610422][T25749] tipc: Disabling bearer [ 691.714707][T25763] bond0: (slave bond_slave_1): Releasing backup interface [ 692.129861][T25785] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5228'. [ 692.255112][T25794] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5233'. [ 692.287951][T25794] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5233'. [ 692.343745][T25785] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5228'. [ 692.527125][T25799] xt_CT: You must specify a L4 protocol and not use inversions on it [ 692.668324][T25805] netlink: 'syz.5.5235': attribute type 2 has an invalid length. [ 692.744983][T25799] bridge9: entered promiscuous mode [ 692.776158][T25799] bridge9: entered allmulticast mode [ 692.800792][T25799] team0: Port device bridge9 added [ 693.235649][T25822] can: request_module (can-proto-0) failed. [ 693.527223][T25838] netlink: 'syz.6.5242': attribute type 12 has an invalid length. [ 694.080057][T25860] bridge3: entered promiscuous mode [ 694.086206][T25860] bridge3: entered allmulticast mode [ 694.088372][T25863] openvswitch: netlink: Missing key (keys=40, expected=100) [ 694.117163][T25860] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5249'. [ 694.128322][T25867] syzkaller0: entered promiscuous mode [ 694.133903][T25867] syzkaller0: entered allmulticast mode [ 694.179241][T25860] bond0: (slave bond_slave_1): Releasing backup interface [ 694.622307][T25880] netlink: 'syz.4.5254': attribute type 13 has an invalid length. [ 694.638337][T25880] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5254'. [ 694.682575][T25875] tipc: Resetting bearer [ 694.809133][T25889] netlink: 'syz.7.5257': attribute type 2 has an invalid length. [ 694.810163][T25875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.816900][T25889] netlink: 'syz.7.5257': attribute type 8 has an invalid length. [ 694.816920][T25889] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5257'. [ 694.852277][T25875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 695.028772][T25900] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5257'. [ 695.030825][T25875] batman_adv: batadv0: Interface deactivated: gretap1 [ 695.226219][ T7021] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.237172][ T7021] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 42431 - 0 [ 695.249538][T25908] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5264'. [ 695.270397][ T7021] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.302135][ T7021] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 42431 - 0 [ 695.449921][ T7021] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.479519][ T7021] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 42431 - 0 [ 695.496747][ T7021] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.516636][ T7021] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 42431 - 0 [ 696.155040][T25929] x_tables: duplicate underflow at hook 3 [ 696.325916][T25940] netlink: 76 bytes leftover after parsing attributes in process `syz.7.5275'. [ 696.532073][T25947] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 696.762142][T25955] netlink: 92 bytes leftover after parsing attributes in process `syz.7.5281'. [ 697.349836][T25973] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5282'. [ 698.181199][T17648] block nbd7: Receive control failed (result -32) [ 698.190248][T16594] block nbd7: Receive control failed (result -32) [ 698.398712][T26018] netlink: 'syz.2.5290': attribute type 2 has an invalid length. [ 698.424590][T26018] netlink: 'syz.2.5290': attribute type 1 has an invalid length. [ 698.478745][T26023] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5291'. [ 698.487926][T26022] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5291'. [ 698.628415][T26034] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.649772][T26034] bridge_slave_1 (unregistering): left allmulticast mode [ 698.668539][T26034] bridge_slave_1 (unregistering): left promiscuous mode [ 698.675938][T26034] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.165454][T26055] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input5 [ 699.608055][T26084] ip6erspan0: entered allmulticast mode [ 700.170294][T26102] xt_bpf: check failed: parse error [ 700.252935][T26118] tipc: New replicast peer: 255.255.255.255 [ 700.259598][T26118] tipc: Enabled bearer , priority 10 [ 700.431462][T26132] __nla_validate_parse: 3 callbacks suppressed [ 700.431479][T26132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5319'. [ 700.535756][T26135] xt_hashlimit: size too large, truncated to 1048576 [ 700.559985][T26140] xt_recent: Unsupported userspace flags (000000c5) [ 700.612980][T26144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 700.645947][T26144] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5320'. [ 700.946337][T26165] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5327'. [ 701.409140][T26186] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5335'. [ 701.795576][ T5730] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 701.967945][ T5730] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 702.006725][T26206] xfrm0 speed is unknown, defaulting to 1000 [ 702.143236][T26213] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5342'. [ 702.153630][T26213] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5342'. [ 702.203938][T26217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5343'. [ 702.347661][ T151] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 702.610056][T26245] netlink: 'syz.4.5350': attribute type 30 has an invalid length. [ 702.748310][T26247] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5353'. [ 702.852453][T26254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5354'. [ 702.862197][T26254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5354'. [ 702.986826][T26263] mac80211_hwsim hwsim49 wlan0: entered promiscuous mode [ 702.994073][T26263] mac80211_hwsim hwsim49 wlan0: entered allmulticast mode [ 703.215887][T26267] xfrm0 speed is unknown, defaulting to 1000 [ 703.406379][ T7021] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 703.430237][ T7021] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 703.785928][ T5728] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 703.812419][T26286] netlink: 'syz.4.5364': attribute type 2 has an invalid length. [ 703.826854][T26286] netlink: 'syz.4.5364': attribute type 8 has an invalid length. [ 703.847352][T26287] netlink: 'syz.5.5365': attribute type 2 has an invalid length. [ 703.855098][T26287] netlink: 'syz.5.5365': attribute type 8 has an invalid length. [ 703.860161][T26288] bond1: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 703.871917][T26288] bond1: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 703.881883][T26288] bond1: entered allmulticast mode [ 704.076493][T26291] bridge5: entered promiscuous mode [ 704.082622][T26291] bridge5: entered allmulticast mode [ 704.925034][T26308] bridge0: port 2(dummy0) entered blocking state [ 704.931730][T26308] bridge0: port 2(dummy0) entered disabled state [ 704.939422][T26308] dummy0: entered allmulticast mode [ 704.965819][T26308] dummy0: entered promiscuous mode [ 704.974364][T26308] bridge0: port 2(dummy0) entered blocking state [ 704.980844][T26308] bridge0: port 2(dummy0) entered forwarding state [ 704.992678][T26308] dummy0: left allmulticast mode [ 705.000206][T26308] dummy0: left promiscuous mode [ 705.028988][T26308] bridge0: port 2(dummy0) entered disabled state [ 705.195101][T26323] bridge11: entered promiscuous mode [ 705.200514][T26323] bridge11: entered allmulticast mode [ 705.459797][T26323] __nla_validate_parse: 9 callbacks suppressed [ 705.459816][T26323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5377'. [ 705.588679][T26337] team0: No ports can be present during mode change [ 705.610286][T26337] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5380'. [ 705.810598][T26347] netlink: 'syz.4.5385': attribute type 2 has an invalid length. [ 705.826609][T26347] netlink: 'syz.4.5385': attribute type 8 has an invalid length. [ 705.834520][T26347] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5385'. [ 705.881723][T26347] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5385'. [ 705.941691][T26349] netlink: 240 bytes leftover after parsing attributes in process `syz.6.5386'. [ 705.950770][T26349] netlink: 'syz.6.5386': attribute type 9 has an invalid length. [ 706.102597][T26359] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5387'. [ 706.141330][T26359] netlink: 76 bytes leftover after parsing attributes in process `syz.7.5387'. [ 706.150974][T26359] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5387'. [ 706.305091][T26369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 706.435080][T26372] bridge9: entered promiscuous mode [ 706.441542][T26372] bridge9: entered allmulticast mode [ 706.492253][T26375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5393'. [ 706.558115][T26385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5392'. [ 706.987131][T26415] netlink: 'syz.4.5400': attribute type 3 has an invalid length. [ 707.172096][T26417] netlink: 'syz.7.5402': attribute type 2 has an invalid length. [ 707.184400][T26417] netlink: 'syz.7.5402': attribute type 8 has an invalid length. [ 707.320803][T26433] bridge3: entered promiscuous mode [ 707.329778][T26433] bridge3: entered allmulticast mode [ 707.421013][T26440] tc_dump_action: action bad kind [ 707.776358][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 708.651128][T26485] bridge7: entered promiscuous mode [ 708.665520][T26485] bridge7: entered allmulticast mode [ 709.074732][T26500] xfrm0 speed is unknown, defaulting to 1000 [ 709.742022][T26509] pimreg: entered allmulticast mode [ 709.751450][T26509] pimreg: left allmulticast mode [ 710.170856][T26513] validate_nla: 5 callbacks suppressed [ 710.170874][T26513] netlink: 'syz.4.5432': attribute type 2 has an invalid length. [ 710.185681][T26513] netlink: 'syz.4.5432': attribute type 8 has an invalid length. [ 710.302995][T26515] veth0: entered promiscuous mode [ 710.317385][T26515] netlink: 'syz.4.5433': attribute type 1 has an invalid length. [ 710.328280][T26515] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 710.347189][T26514] veth0: left promiscuous mode [ 710.643492][T26447] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 710.938294][T26535] sit1: entered promiscuous mode [ 711.143005][T26542] netlink: 'syz.2.5443': attribute type 2 has an invalid length. [ 711.167522][T26542] netlink: 'syz.2.5443': attribute type 8 has an invalid length. [ 711.190142][T26542] __nla_validate_parse: 17 callbacks suppressed [ 711.190160][T26542] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5443'. [ 711.275404][T26556] bridge9: entered promiscuous mode [ 711.283514][T26542] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5443'. [ 711.302420][T26556] bridge9: entered allmulticast mode [ 711.324339][T26550] vlan5: entered promiscuous mode [ 711.329409][T26550] erspan0: entered promiscuous mode [ 711.417837][T26558] xfrm0 speed is unknown, defaulting to 1000 [ 711.476446][T26556] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5449'. [ 711.577351][T26570] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5452'. [ 711.587141][T26570] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.623691][T26564] netlink: 76 bytes leftover after parsing attributes in process `syz.7.5452'. [ 711.632817][T26564] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5452'. [ 711.991858][T26583] netlink: zone id is out of range [ 712.001681][T26583] netlink: zone id is out of range [ 712.009179][T26583] netlink: zone id is out of range [ 712.015875][T26583] netlink: zone id is out of range [ 712.025135][T26583] netlink: zone id is out of range [ 712.030813][T26583] netlink: zone id is out of range [ 712.035925][T26583] netlink: zone id is out of range [ 712.041329][T26583] netlink: zone id is out of range [ 714.390126][T26564] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 714.789953][T26607] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5462'. [ 714.802434][T26608] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5461'. [ 714.880850][T26610] bridge12: entered promiscuous mode [ 714.892150][T26610] bridge12: entered allmulticast mode [ 714.979704][T26614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5463'. [ 715.043594][T26624] netlink: 'syz.6.5466': attribute type 1 has an invalid length. [ 715.069666][T26623] netlink: 'syz.7.5467': attribute type 2 has an invalid length. [ 715.076108][T26624] bond1: option mode: invalid value (9) [ 715.087126][T26624] bond1 (unregistering): Released all slaves [ 715.097778][T26623] netlink: 'syz.7.5467': attribute type 8 has an invalid length. [ 715.097798][T26623] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5467'. [ 715.604787][T26645] netlink: 'syz.5.5473': attribute type 1 has an invalid length. [ 715.660118][T26650] 8021q: adding VLAN 0 to HW filter on device bond7 [ 715.696576][T26654] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 716.136828][T26670] syzkaller0: entered promiscuous mode [ 716.142338][T26670] syzkaller0: entered allmulticast mode [ 716.288330][T26663] __nla_validate_parse: 9 callbacks suppressed [ 716.288349][T26663] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5478'. [ 716.305257][T26663] netlink: 19 bytes leftover after parsing attributes in process `syz.7.5478'. [ 716.314289][T26663] netlink: 19 bytes leftover after parsing attributes in process `syz.7.5478'. [ 716.345156][T26682] tipc: Resetting bearer [ 716.371759][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 716.699278][ T151] bridge_slave_1: left allmulticast mode [ 716.705001][ T151] bridge_slave_1: left promiscuous mode [ 716.712251][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.128914][T26687] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 717.353281][T26699] netlink: 'syz.7.5486': attribute type 2 has an invalid length. [ 717.361377][T26699] netlink: 'syz.7.5486': attribute type 8 has an invalid length. [ 717.370137][T26699] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5486'. [ 717.480093][T26702] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5486'. [ 717.794913][ T151] bond4 (unregistering): (slave bridge3): Releasing active interface [ 717.843713][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.853801][ T151] bond0 (unregistering): Released all slaves [ 717.879197][ T151] bond1 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 717.897229][ T151] bond1 (unregistering): Released all slaves [ 717.938924][ T151] bond2 (unregistering): Released all slaves [ 717.960517][ T151] bond3 (unregistering): Released all slaves [ 717.981233][ T151] bond4 (unregistering): Released all slaves [ 718.007008][ T151] bond5 (unregistering): Released all slaves [ 718.034436][ T151] bond6 (unregistering): Released all slaves [ 718.054215][ T151] bond7 (unregistering): Released all slaves [ 718.279861][ T151] tipc: Left network mode [ 718.592880][T26721] bond2: (slave syz_tun): Releasing backup interface [ 718.721042][T26735] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5496'. [ 718.730046][T26732] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5495'. [ 718.749059][T26732] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5495'. [ 718.759182][T26730] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5493'. [ 718.759454][T26735] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5496'. [ 718.769931][T26736] xt_TCPMSS: Only works on TCP SYN packets [ 718.951216][T26746] lo: entered promiscuous mode [ 718.972944][T26746] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 719.124294][T26758] netlink: 'syz.5.5502': attribute type 2 has an invalid length. [ 719.151118][T26758] netlink: 'syz.5.5502': attribute type 8 has an invalid length. [ 719.457510][ T151] hsr_slave_0: left promiscuous mode [ 719.481414][ T151] hsr_slave_1: left promiscuous mode [ 719.519791][ T151] veth1_to_batadv: left promiscuous mode [ 719.526950][ T151] veth1_macvtap: left promiscuous mode [ 719.534003][ T151] veth0_macvtap: left promiscuous mode [ 719.980020][ T151] team0 (unregistering): Port device team_slave_1 removed [ 720.001781][ T151] team0 (unregistering): Port device team_slave_0 removed [ 720.451452][ T151] IPVS: stop unused estimator thread 0... [ 720.513572][T26804] openvswitch: netlink: Message has 8 unknown bytes. [ 722.142934][T26760] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 722.433807][T26814] netlink: 'syz.2.5515': attribute type 1 has an invalid length. [ 722.441652][T26814] netlink: 'syz.2.5515': attribute type 2 has an invalid length. [ 722.557999][T26826] netlink: 'syz.5.5522': attribute type 3 has an invalid length. [ 722.566135][T26826] netlink: 'syz.5.5522': attribute type 3 has an invalid length. [ 722.577945][T26826] __nla_validate_parse: 10 callbacks suppressed [ 722.577964][T26826] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5522'. [ 722.671517][T26831] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5524'. [ 722.687711][T26835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5526'. [ 722.720660][T26835] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5526'. [ 722.748671][T26831] netlink: 'syz.2.5524': attribute type 1 has an invalid length. [ 722.757203][T26831] netlink: 'syz.2.5524': attribute type 1 has an invalid length. [ 722.764941][T26831] netlink: 264 bytes leftover after parsing attributes in process `syz.2.5524'. [ 722.774027][T26831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5524'. [ 722.788017][T26831] netlink: 'syz.2.5524': attribute type 1 has an invalid length. [ 722.796585][T26842] xt_CT: You must specify a L4 protocol and not use inversions on it [ 722.797878][T26831] netlink: 'syz.2.5524': attribute type 1 has an invalid length. [ 722.825171][T26831] netlink: 264 bytes leftover after parsing attributes in process `syz.2.5524'. [ 722.841359][T26831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5524'. [ 723.081285][T26858] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5533'. [ 723.170260][T26864] netlink: 'syz.2.5535': attribute type 5 has an invalid length. [ 723.172647][T26865] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20003 [ 723.334727][T26870] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5538'. [ 723.408724][T26870] ipvlan2: entered allmulticast mode [ 723.414252][T26870] syz_tun: entered allmulticast mode [ 723.535363][T17648] Bluetooth: hci4: command 0x0419 tx timeout [ 723.763891][T20089] IPVS: starting estimator thread 0... [ 723.865328][T26888] IPVS: using max 29 ests per chain, 69600 per kthread [ 724.163171][T26909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 724.549283][T26925] netlink: 'syz.2.5549': attribute type 21 has an invalid length. [ 725.052938][T26947] bridge4: entered promiscuous mode [ 725.068031][T26947] bridge4: entered allmulticast mode [ 725.579421][T26957] syzkaller1: entered promiscuous mode [ 725.602753][T26957] syzkaller1: entered allmulticast mode [ 725.617108][T16594] Bluetooth: hci4: command 0x0419 tx timeout [ 726.410025][T26994] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 726.477021][T26994] bond1: (slave lo): Enslaving as an active interface with an up link [ 726.521015][T26994] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 726.704263][T27007] tipc: Enabled bearer , priority 10 [ 727.024386][ T46] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 727.159581][T27023] xfrm0 speed is unknown, defaulting to 1000 [ 727.325928][T27031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.357509][T27031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.553175][T27041] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 727.573306][T27041] syzkaller1: linktype set to 0 [ 727.767866][T27046] batman_adv: batadv0: Adding interface: gretap2 [ 727.774241][T27046] batman_adv: batadv0: Interface activated: gretap2 [ 727.810929][T20089] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 727.826869][T27050] pim6reg: entered allmulticast mode [ 727.869167][T27046] sch_fq: defrate 4294967293 ignored. [ 727.887810][T27046] pim6reg: left allmulticast mode [ 728.045774][T27059] __nla_validate_parse: 89 callbacks suppressed [ 728.045792][T27059] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5580'. [ 728.109271][T27059] 8021q: adding VLAN 0 to HW filter on device bond2 [ 728.223983][T27065] netlink: 179624 bytes leftover after parsing attributes in process `syz.6.5581'. [ 729.071135][T27105] syzkaller0: entered promiscuous mode [ 729.076826][T27105] syzkaller0: entered allmulticast mode [ 729.292449][T27117] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5592'. [ 729.316333][T27112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5593'. [ 729.508115][T27121] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5595'. [ 729.527367][T27126] netlink: 7 bytes leftover after parsing attributes in process `syz.5.5596'. [ 729.541887][T27126] netlink: 7 bytes leftover after parsing attributes in process `syz.5.5596'. [ 730.076423][T27156] validate_nla: 3 callbacks suppressed [ 730.076442][T27156] netlink: 'syz.7.5602': attribute type 27 has an invalid length. [ 730.089729][T27156] netlink: 'syz.7.5602': attribute type 4 has an invalid length. [ 730.097453][T27156] netlink: 152 bytes leftover after parsing attributes in process `syz.7.5602'. [ 730.313541][T27169] netlink: 'syz.4.5606': attribute type 1 has an invalid length. [ 730.330967][T27169] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.5606'. [ 730.386472][T27169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5606'. [ 730.482496][T27149] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.490157][T27149] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.764386][T27149] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 730.805575][T27162] syz_tun: entered allmulticast mode [ 730.865128][T27162] syz_tun: left allmulticast mode [ 731.160705][T27189] netlink: 'syz.6.5610': attribute type 2 has an invalid length. [ 731.180151][T27189] netlink: 'syz.6.5610': attribute type 8 has an invalid length. [ 731.223709][T27191] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 731.292546][T20086] team_slave_0: entered promiscuous mode [ 731.299076][T20086] team_slave_1: entered promiscuous mode [ 731.731524][T27227] netlink: 'syz.7.5618': attribute type 12 has an invalid length. [ 731.870211][T27226] syzkaller0: entered promiscuous mode [ 731.875717][T27226] syzkaller0: entered allmulticast mode [ 731.926343][T27226] 0: reclassify loop, rule prio 0, protocol 800 [ 732.419575][T27249] xfrm0 speed is unknown, defaulting to 1000 [ 733.015609][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 733.060169][T27264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 733.303340][T27269] netlink: 'syz.2.5624': attribute type 11 has an invalid length. [ 733.320008][T27269] __nla_validate_parse: 5 callbacks suppressed [ 733.320025][T27269] netlink: 240 bytes leftover after parsing attributes in process `syz.2.5624'. [ 733.338187][T27269] netlink: 'syz.2.5624': attribute type 9 has an invalid length. [ 733.573579][T27278] IPv6: Can't replace route, no match found [ 733.793371][T27281] xfrm0 speed is unknown, defaulting to 1000 [ 735.027570][T27340] ip6gre2: entered promiscuous mode [ 735.032831][T27340] ip6gre2: entered allmulticast mode [ 735.299901][T27355] gretap0: entered promiscuous mode [ 735.360322][T27358] netlink: 'syz.2.5643': attribute type 1 has an invalid length. [ 735.368690][T27360] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.5644'. [ 735.399257][T27358] 8021q: adding VLAN 0 to HW filter on device bond8 [ 735.417930][T27358] bond8: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 735.438287][T27358] bond8: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 735.486175][T27365] netlink: 'syz.7.5646': attribute type 2 has an invalid length. [ 735.494141][T27365] netlink: 'syz.7.5646': attribute type 8 has an invalid length. [ 735.502402][T27365] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5646'. [ 735.691471][T27374] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5646'. [ 735.762301][T27383] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5647'. [ 735.783255][T27383] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5647'. [ 736.073973][T27390] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5650'. [ 738.658541][T27379] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 739.031762][T27415] syzkaller0: entered promiscuous mode [ 739.047098][T27415] syzkaller0: entered allmulticast mode [ 739.229808][T27423] syzkaller0: entered promiscuous mode [ 739.245341][T27423] syzkaller0: entered allmulticast mode [ 739.406240][T27427] netlink: 'syz.4.5661': attribute type 2 has an invalid length. [ 739.429357][T27427] netlink: 'syz.4.5661': attribute type 8 has an invalid length. [ 739.450551][T27427] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5661'. [ 739.453721][T27428] syzkaller0: entered promiscuous mode [ 739.469285][T27428] syzkaller0: entered allmulticast mode [ 739.607333][T27427] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5661'. [ 739.822177][T27436] lo speed is unknown, defaulting to 1000 [ 739.828050][T27436] lo speed is unknown, defaulting to 1000 [ 739.834562][T27436] lo speed is unknown, defaulting to 1000 [ 739.841263][T27436] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 739.855433][T27436] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 739.872292][T27436] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 739.892591][T27436] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 740.008906][T27441] sctp: [Deprecated]: syz.7.5667 (pid 27441) Use of int in max_burst socket option deprecated. [ 740.008906][T27441] Use struct sctp_assoc_value instead [ 740.106269][T27447] xfrm0 speed is unknown, defaulting to 1000 [ 740.119259][T27436] lo speed is unknown, defaulting to 1000 [ 740.176238][T27436] lo speed is unknown, defaulting to 1000 [ 740.254849][T27436] lo speed is unknown, defaulting to 1000 [ 740.262467][T27436] lo speed is unknown, defaulting to 1000 [ 740.269931][T27436] lo speed is unknown, defaulting to 1000 [ 740.277823][T27436] lo speed is unknown, defaulting to 1000 [ 740.309113][T27436] lo speed is unknown, defaulting to 1000 [ 740.316960][T27436] lo speed is unknown, defaulting to 1000 [ 740.324550][T27436] lo speed is unknown, defaulting to 1000 [ 740.332184][T27436] lo speed is unknown, defaulting to 1000 [ 740.339778][T27436] lo speed is unknown, defaulting to 1000 [ 740.838947][T27470] syzkaller0: entered promiscuous mode [ 740.844469][T27470] syzkaller0: entered allmulticast mode [ 740.932054][T27478] tipc: Enabled bearer , priority 0 [ 740.952991][T27475] syzkaller0: entered promiscuous mode [ 740.958481][T27475] syzkaller0: entered allmulticast mode [ 741.712470][T27467] tipc: Resetting bearer [ 741.784023][T27467] tipc: Disabling bearer [ 741.794871][T27502] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5683'. [ 741.810104][T27502] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5683'. [ 741.825988][T27500] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5682'. [ 741.843308][T27500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5682'. [ 741.866266][T27500] xt_TPROXY: Can be used only with -p tcp or -p udp [ 742.082626][T27517] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5687'. [ 742.560293][T27549] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5698'. [ 742.839119][T27562] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5701'. [ 742.878047][T27561] can: request_module (can-proto-5) failed. [ 743.533125][T27595] netlink: 'syz.4.5708': attribute type 3 has an invalid length. [ 743.540891][T27595] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5708'. [ 743.711478][T27601] netlink: 'syz.4.5709': attribute type 2 has an invalid length. [ 743.719244][T27601] netlink: 'syz.4.5709': attribute type 8 has an invalid length. [ 744.128359][T17648] Bluetooth: hci2: command 0x0406 tx timeout [ 744.408404][T27632] sctp: [Deprecated]: syz.7.5715 (pid 27632) Use of int in max_burst socket option. [ 744.408404][T27632] Use struct sctp_assoc_value instead [ 744.724535][T27633] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.731804][T27633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.780658][T27633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.828380][T27633] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.875516][T27633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 745.174554][T27633] bridge3: left promiscuous mode [ 745.185416][T27633] bridge5: left promiscuous mode [ 745.192911][T27633] bridge7: left promiscuous mode [ 745.198222][T27633] sit1: left promiscuous mode [ 745.204500][T27633] bridge9: left promiscuous mode [ 745.211844][T27633] 8021q: adding VLAN 0 to HW filter on device bond1 [ 745.236921][ T9089] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 745.260809][ T7033] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.267959][ T7033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.293793][T27650] netlink: 'syz.5.5720': attribute type 1 has an invalid length. [ 745.302297][T27655] syzkaller0: entered promiscuous mode [ 745.308506][T27650] __nla_validate_parse: 3 callbacks suppressed [ 745.308519][T27650] netlink: 232 bytes leftover after parsing attributes in process `syz.5.5720'. [ 745.321057][T27655] syzkaller0: entered allmulticast mode [ 745.355235][T27650] netlink: 'syz.5.5720': attribute type 1 has an invalid length. [ 745.399090][T27655] FAULT_INJECTION: forcing a failure. [ 745.399090][T27655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 745.417260][T27655] CPU: 0 UID: 0 PID: 27655 Comm: syz.2.5721 Not tainted syzkaller #0 PREEMPT(full) [ 745.417283][T27655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 745.417295][T27655] Call Trace: [ 745.417302][T27655] [ 745.417311][T27655] dump_stack_lvl+0xe8/0x150 [ 745.417344][T27655] should_fail_ex+0x40c/0x560 [ 745.417372][T27655] _copy_from_iter+0x1d3/0x1660 [ 745.417397][T27655] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 745.417426][T27655] ? dev_get_by_index+0x22/0x2d0 [ 745.417456][T27655] ? __pfx__copy_from_iter+0x10/0x10 [ 745.417483][T27655] ? dev_get_by_index+0x22/0x2d0 [ 745.417503][T27655] ? dev_get_by_index+0x22/0x2d0 [ 745.417531][T27655] packet_sendmsg+0x2f1d/0x5040 [ 745.417553][T27655] ? aa_label_sk_perm+0x532/0x6e0 [ 745.417582][T27655] ? __lock_acquire+0x683/0x2cf0 [ 745.417614][T27655] ? __lock_acquire+0x683/0x2cf0 [ 745.417651][T27655] ? unwind_next_frame+0x8f/0x2550 [ 745.417685][T27655] ? __pfx_packet_sendmsg+0x10/0x10 [ 745.417718][T27655] ? __pfx_aa_sk_perm+0x10/0x10 [ 745.417747][T27655] ? aa_sock_msg_perm+0xf1/0x1b0 [ 745.417771][T27655] ? __pfx_packet_sendmsg+0x10/0x10 [ 745.417792][T27655] sock_sendmsg_nosec+0x13a/0x180 [ 745.417820][T27655] ____sys_sendmsg+0x54e/0x850 [ 745.417844][T27655] ? __pfx_____sys_sendmsg+0x10/0x10 [ 745.417873][T27655] ? import_iovec+0x73/0xa0 [ 745.417902][T27655] ___sys_sendmsg+0x2a5/0x360 [ 745.417921][T27655] ? __lock_acquire+0x683/0x2cf0 [ 745.417949][T27655] ? __pfx____sys_sendmsg+0x10/0x10 [ 745.418001][T27655] ? __fget_files+0x2a/0x420 [ 745.418026][T27655] ? __fget_files+0x3a2/0x420 [ 745.418059][T27655] __x64_sys_sendmsg+0x1b1/0x290 [ 745.418081][T27655] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 745.418125][T27655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.418148][T27655] do_syscall_64+0x174/0x580 [ 745.418170][T27655] ? trace_irq_disable+0x3b/0x140 [ 745.418195][T27655] ? clear_bhb_loop+0x40/0x90 [ 745.418218][T27655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.418235][T27655] RIP: 0033:0x7ff27a59de99 [ 745.418252][T27655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 745.418267][T27655] RSP: 002b:00007ff27b3fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 745.418289][T27655] RAX: ffffffffffffffda RBX: 00007ff27a825fa0 RCX: 00007ff27a59de99 [ 745.418303][T27655] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 745.418314][T27655] RBP: 00007ff27b3fd090 R08: 0000000000000000 R09: 0000000000000000 [ 745.418326][T27655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.418337][T27655] R13: 00007ff27a826038 R14: 00007ff27a825fa0 R15: 00007fff5873ba88 [ 745.418367][T27655] [ 745.423288][T27661] netlink: 'syz.7.5723': attribute type 30 has an invalid length. [ 745.485295][T27663] netlink: 'syz.6.5722': attribute type 4 has an invalid length. [ 745.806497][T27663] netlink: 'syz.6.5722': attribute type 8 has an invalid length. [ 745.817959][T27663] netlink: 'syz.6.5722': attribute type 1 has an invalid length. [ 745.826065][T27663] netlink: 172 bytes leftover after parsing attributes in process `syz.6.5722'. [ 745.835563][T27663] NCSI netlink: No device for ifindex 0 [ 745.903169][ T9089] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 746.157777][T27685] syzkaller1: entered promiscuous mode [ 746.163283][T27685] syzkaller1: entered allmulticast mode [ 746.317695][T27692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 746.450383][T27705] batman_adv: batadv0: Adding interface: dummy0 [ 746.475445][T27705] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 746.555044][T27712] syzkaller0: entered promiscuous mode [ 746.567033][T27712] syzkaller0: entered allmulticast mode [ 746.659745][T27716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5741'. [ 747.178427][T27740] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5746'. [ 747.404361][T27750] xfrm0 speed is unknown, defaulting to 1000 [ 747.847039][T27750] lo speed is unknown, defaulting to 1000 [ 747.983327][T27761] netlink: 'syz.7.5750': attribute type 1 has an invalid length. [ 748.073745][T27761] ip6tnl1: entered allmulticast mode [ 748.158733][ T151] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 748.198180][T25110] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 748.207825][ T151] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 748.288575][T27771] netlink: 'syz.5.5752': attribute type 11 has an invalid length. [ 748.375434][T27770] syzkaller0: entered promiscuous mode [ 748.405397][T27770] syzkaller0: entered allmulticast mode [ 748.745963][T27780] netlink: 140 bytes leftover after parsing attributes in process `syz.7.5757'. [ 748.830408][ T5730] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 749.018031][T27787] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5759'. [ 749.083660][T27789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5760'. [ 749.185373][ T5730] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 749.198210][T27797] netlink: 'syz.5.5762': attribute type 1 has an invalid length. [ 749.220317][T27797] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5762'. [ 749.266456][T27797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5762'. [ 749.512490][T27809] syzkaller0: entered promiscuous mode [ 749.518008][T27809] syzkaller0: entered allmulticast mode [ 749.647948][T27813] syzkaller0: entered promiscuous mode [ 749.653458][T27813] syzkaller0: entered allmulticast mode [ 750.052842][T27827] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5774'. [ 750.088780][T27831] netlink: 'syz.2.5775': attribute type 30 has an invalid length. [ 750.145767][T27834] FAULT_INJECTION: forcing a failure. [ 750.145767][T27834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 750.187498][T27834] CPU: 0 UID: 0 PID: 27834 Comm: syz.5.5776 Not tainted syzkaller #0 PREEMPT(full) [ 750.187523][T27834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 750.187534][T27834] Call Trace: [ 750.187541][T27834] [ 750.187549][T27834] dump_stack_lvl+0xe8/0x150 [ 750.187582][T27834] should_fail_ex+0x40c/0x560 [ 750.187608][T27834] _copy_from_user+0x2d/0xb0 [ 750.187636][T27834] ___sys_sendmsg+0x1c6/0x360 [ 750.187655][T27834] ? __lock_acquire+0x683/0x2cf0 [ 750.187682][T27834] ? __pfx____sys_sendmsg+0x10/0x10 [ 750.187732][T27834] ? __fget_files+0x2a/0x420 [ 750.187756][T27834] ? __fget_files+0x3a2/0x420 [ 750.187788][T27834] __x64_sys_sendmsg+0x1b1/0x290 [ 750.187811][T27834] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 750.187848][T27834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.187868][T27834] do_syscall_64+0x174/0x580 [ 750.187888][T27834] ? trace_irq_disable+0x3b/0x140 [ 750.187912][T27834] ? clear_bhb_loop+0x40/0x90 [ 750.187934][T27834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.187955][T27834] RIP: 0033:0x7f3b27d9de99 [ 750.187972][T27834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.187988][T27834] RSP: 002b:00007f3b25ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 750.188008][T27834] RAX: ffffffffffffffda RBX: 00007f3b28025fa0 RCX: 00007f3b27d9de99 [ 750.188022][T27834] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 750.188034][T27834] RBP: 00007f3b25ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 750.188046][T27834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 750.188057][T27834] R13: 00007f3b28026038 R14: 00007f3b28025fa0 R15: 00007ffe5fed0ac8 [ 750.188089][T27834] [ 750.488371][T27844] syzkaller0: entered promiscuous mode [ 750.525526][T27844] syzkaller0: entered allmulticast mode [ 750.534963][T27846] netlink: 'syz.6.5780': attribute type 2 has an invalid length. [ 750.628458][T27846] __nla_validate_parse: 2 callbacks suppressed [ 750.628477][T27846] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5780'. [ 750.689555][T27837] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5777'. [ 750.939525][T27864] syzkaller0: entered promiscuous mode [ 750.945039][T27864] syzkaller0: entered allmulticast mode [ 750.973977][T27867] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20002 [ 750.980848][T27866] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20002 [ 751.014512][ T9088] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 751.130213][ T9088] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 751.275504][T27850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 751.322972][T27850] bridge0: port 3(batadv0) entered blocking state [ 751.350972][T27850] bridge0: port 3(batadv0) entered disabled state [ 751.357582][T27850] batadv0: entered allmulticast mode [ 751.387981][T27850] batadv0: entered promiscuous mode [ 751.410828][T27885] 8021q: VLANs not supported on sit0 [ 751.416678][T27886] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5793'. [ 751.437039][T27885] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5793'. [ 751.553848][T27892] ip6gre3: entered allmulticast mode [ 751.721679][T27902] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5798'. [ 751.901631][T21868] batman_adv: batadv0: IGMP Querier appeared [ 751.907880][T21868] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 751.966666][T27914] syzkaller0: entered promiscuous mode [ 751.972178][T27914] syzkaller0: entered allmulticast mode [ 752.100410][T27918] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5804'. [ 752.345416][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 752.458043][T27930] netlink: 460 bytes leftover after parsing attributes in process `syz.6.5806'. [ 752.467115][T27930] netlink: 3744 bytes leftover after parsing attributes in process `syz.6.5806'. [ 752.476236][T27930] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5806'. [ 752.485176][T27930] netlink: 6158 bytes leftover after parsing attributes in process `syz.6.5806'. [ 752.601450][T27918] netlink: 'syz.5.5804': attribute type 30 has an invalid length. [ 753.648276][T27967] netlink: 'syz.5.5819': attribute type 1 has an invalid length. [ 756.227824][T27967] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 756.402778][T27989] tipc: Enabling of bearer rejected, failed to enable media [ 756.424845][T27987] syzkaller0: entered promiscuous mode [ 756.430327][T27987] syzkaller0: entered allmulticast mode [ 756.633215][T27994] netlink: 'syz.7.5825': attribute type 30 has an invalid length. [ 757.146738][T28022] __nla_validate_parse: 1 callbacks suppressed [ 757.146754][T28022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5834'. [ 757.174742][T28022] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 757.313278][T28029] netlink: 'syz.5.5837': attribute type 30 has an invalid length. [ 757.497723][T28041] syzkaller0: entered promiscuous mode [ 757.503250][T28041] syzkaller0: entered allmulticast mode [ 757.576270][T28045] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5842'. [ 757.686890][T28050] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5844'. [ 757.907932][T28064] IPVS: Unknown mcast interface: bridge_slave_0 [ 757.917728][T28060] xfrm0 speed is unknown, defaulting to 1000 [ 757.976265][T28067] netlink: 'syz.5.5849': attribute type 30 has an invalid length. [ 758.778572][T28089] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5854'. [ 758.953497][T28075] dvmrp0: entered allmulticast mode [ 759.008214][T28073] xfrm0 speed is unknown, defaulting to 1000 [ 759.008781][T28060] lo speed is unknown, defaulting to 1000 [ 759.118976][T28089] syzkaller0: entered promiscuous mode [ 759.147792][T28089] syzkaller0: entered allmulticast mode [ 759.198831][T28098] syzkaller0: entered promiscuous mode [ 759.204339][T28098] syzkaller0: entered allmulticast mode [ 759.608710][T28112] syzkaller0: entered promiscuous mode [ 759.614217][T28112] syzkaller0: entered allmulticast mode [ 760.499813][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 760.994869][T28131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5859'. [ 762.313527][T28073] lo speed is unknown, defaulting to 1000 [ 762.316384][T28107] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 762.545064][T25110] lo speed is unknown, defaulting to 1000 [ 762.953376][T28158] syzkaller0: entered promiscuous mode [ 762.962838][T28158] syzkaller0: entered allmulticast mode [ 763.358371][T28170] netlink: 'syz.2.5867': attribute type 11 has an invalid length. [ 763.377445][T28170] netlink: 'syz.2.5867': attribute type 4 has an invalid length. [ 763.446166][T28170] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5867'. [ 763.525014][T28171] netlink: 152 bytes leftover after parsing attributes in process `syz.7.5866'. [ 764.458360][T28214] netlink: 'syz.2.5880': attribute type 11 has an invalid length. [ 764.611668][T16594] Bluetooth: hci6: command 0x0406 tx timeout [ 764.631364][T28219] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5882'. [ 764.926145][T28234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 764.928267][T28237] netlink: 'syz.2.5887': attribute type 21 has an invalid length. [ 764.989548][T28234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 764.998646][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 765.033484][T28235] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5887'. [ 765.042821][T28235] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5887'. [ 765.052583][T28237] netlink: 'syz.2.5887': attribute type 21 has an invalid length. [ 765.055936][T28235] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5887'. [ 765.070261][T28235] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5887'. [ 765.079395][T28235] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5887'. [ 765.090701][T28237] netlink: 'syz.2.5887': attribute type 21 has an invalid length. [ 765.098786][T28237] netlink: 'syz.2.5887': attribute type 21 has an invalid length. [ 765.106804][T28237] netlink: 'syz.2.5887': attribute type 21 has an invalid length. [ 765.114831][T28237] netlink: 'syz.2.5887': attribute type 21 has an invalid length. [ 765.122850][T28237] netlink: 'syz.2.5887': attribute type 21 has an invalid length. [ 765.130873][T28237] netlink: 'syz.2.5887': attribute type 21 has an invalid length. [ 765.138894][T28237] netlink: 'syz.2.5887': attribute type 21 has an invalid length. [ 765.167060][T28235] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5887'. [ 765.176206][T28235] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5887'. [ 765.586562][T28257] erspan0: entered promiscuous mode [ 765.879257][T28271] xfrm0 speed is unknown, defaulting to 1000 [ 766.176861][T28280] syzkaller0: entered promiscuous mode [ 766.182366][T28280] syzkaller0: entered allmulticast mode [ 766.224501][T28286] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 766.306242][T28271] lo speed is unknown, defaulting to 1000 [ 767.066587][T16594] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 767.081085][T16594] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 767.096652][T16594] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 767.104677][T16594] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 767.121460][T28316] batman_adv: batadv0: Removing interface: dummy0 [ 767.134113][T16594] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 767.136826][T28316] bridge_slave_0: left allmulticast mode [ 767.169769][T28316] bridge_slave_0: left promiscuous mode [ 767.185543][T28316] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.617100][T28316] bridge_slave_1: left allmulticast mode [ 767.624030][T28316] bridge_slave_1: left promiscuous mode [ 767.635478][T28316] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.646560][T28316] vlan3: left promiscuous mode [ 767.651342][T28316] geneve0: left promiscuous mode [ 767.670393][T28316] bond0: (slave bond_slave_0): Releasing backup interface [ 767.679056][T28316] bond_slave_0: left allmulticast mode [ 767.685679][T28316] team0: Port device team_slave_0 removed [ 767.710328][T28316] team0: Port device team_slave_1 removed [ 767.716359][T28316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 767.723977][T28316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.731816][T28316] batman_adv: batadv0: Removing interface: gretap1 [ 767.738976][T28316] vlan3: left allmulticast mode [ 767.743815][T28316] geneve0: left allmulticast mode [ 767.749715][T28316] bridge0: port 4(vlan3) entered disabled state [ 767.759050][T28316] team0: Port device bridge6 removed [ 767.780071][T28316] batman_adv: batadv0: Interface deactivated: gretap2 [ 767.792330][T28316] batman_adv: batadv0: Removing interface: gretap2 [ 767.803279][T28305] syzkaller1: entered promiscuous mode [ 767.816822][T28305] syzkaller1: entered allmulticast mode [ 767.835298][T28317] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 767.845132][T28317] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 767.854689][T28317] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 767.995524][T28330] syzkaller0: entered promiscuous mode [ 768.001060][T28330] syzkaller0: entered allmulticast mode [ 768.230193][T28318] xfrm0 speed is unknown, defaulting to 1000 [ 768.525032][T28318] lo speed is unknown, defaulting to 1000 [ 768.657640][T28355] validate_nla: 60 callbacks suppressed [ 768.657660][T28355] netlink: 'syz.6.5918': attribute type 1 has an invalid length. [ 768.698483][T28355] 8021q: adding VLAN 0 to HW filter on device bond2 [ 768.884059][T28355] 8021q: adding VLAN 0 to HW filter on device bond2 [ 768.891091][T28355] bond2: (slave sit0): The slave device specified does not support setting the MAC address [ 768.901982][T28355] bond2: (slave sit0): Error -95 calling set_mac_address [ 769.245606][T16594] Bluetooth: hci8: command tx timeout [ 769.300695][T28368] xt_NFQUEUE: number of queues (3633) out of range (got 69163) [ 769.360051][T28373] __nla_validate_parse: 72 callbacks suppressed [ 769.360070][T28373] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5923'. [ 769.465732][ T30] INFO: task syz.0.4684:23830 blocked for more than 143 seconds. [ 769.483086][ T30] Not tainted syzkaller #0 [ 769.501586][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 769.530405][T28375] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5921'. [ 769.555282][ T30] task:syz.0.4684 state:D stack:26736 pid:23830 tgid:23829 ppid:17169 task_flags:0x400140 flags:0x00080002 [ 769.609243][ T30] Call Trace: [ 769.620659][ T30] [ 769.630146][ T30] __schedule+0x17d9/0x56c0 [ 769.680887][ T30] ? __lock_acquire+0x683/0x2cf0 [ 769.715005][ T30] ? __lock_acquire+0x683/0x2cf0 [ 769.761420][ T30] ? __pfx___schedule+0x10/0x10 [ 769.792884][ T30] ? schedule+0x90/0x2b0 [ 769.815450][ T30] schedule+0x164/0x2b0 [ 769.838420][ T30] schedule_preempt_disabled+0x13/0x30 [ 769.895238][ T30] __mutex_lock+0x7bf/0x1550 [ 769.925413][ T30] ? __mutex_lock+0x5d4/0x1550 [ 769.962790][ T30] ? nfsd_nl_unlock_export_doit+0x2cf/0x530 [ 770.025232][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 770.072837][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 770.156580][ T30] ? kern_path+0xd1/0x150 [ 770.160974][ T30] nfsd_nl_unlock_export_doit+0x2cf/0x530 [ 770.182106][ T30] ? __nla_parse+0x40/0x60 [ 770.186566][ T30] ? __pfx_nfsd_nl_unlock_export_doit+0x10/0x10 [ 770.192792][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 770.199108][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 770.205430][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 770.210963][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 770.217015][ T30] ? bpf_lsm_capable+0x9/0x20 [ 770.221674][ T30] ? security_capable+0x7e/0x2c0 [ 770.226600][ T30] genl_rcv_msg+0x614/0x7a0 [ 770.231091][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 770.236093][ T30] ? __pfx_nfsd_nl_unlock_export_doit+0x10/0x10 [ 770.249578][ T30] netlink_rcv_skb+0x226/0x4a0 [ 770.254366][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 770.259677][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 770.264989][ T30] ? down_read+0x2be/0x330 [ 770.269430][ T30] genl_rcv+0x28/0x40 [ 770.273417][ T30] netlink_unicast+0x7bb/0x940 [ 770.278220][ T30] netlink_sendmsg+0x813/0xb40 [ 770.282990][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 770.288836][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 770.293805][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 770.299117][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 770.304148][ T30] ____sys_sendmsg+0x54e/0x850 [ 770.309695][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 770.315024][ T30] ? import_iovec+0x73/0xa0 [ 770.319546][ T30] ___sys_sendmsg+0x2a5/0x360 [ 770.324222][ T30] ? __lock_acquire+0x683/0x2cf0 [ 770.329179][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 770.334382][ T30] ? futex_wake+0x51b/0x5f0 [ 770.338930][ T30] ? __fget_files+0x2a/0x420 [ 770.343524][ T30] ? __fget_files+0x3a2/0x420 [ 770.348227][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 770.353175][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 770.359348][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.365468][ T30] do_syscall_64+0x174/0x580 [ 770.370061][ T30] ? trace_irq_disable+0x3b/0x140 [ 770.375090][ T30] ? clear_bhb_loop+0x40/0x90 [ 770.379798][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.385712][ T30] RIP: 0033:0x7f8d74b9de99 [ 770.390109][ T30] RSP: 002b:00007f8d75a42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 770.399090][ T30] RAX: ffffffffffffffda RBX: 00007f8d74e25fa0 RCX: 00007f8d74b9de99 [ 770.407404][ T30] RDX: 0000000004000080 RSI: 00002000000000c0 RDI: 0000000000000008 [ 770.415381][ T30] RBP: 00007f8d74c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 770.423328][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 770.431274][ T30] R13: 00007f8d74e26038 R14: 00007f8d74e25fa0 R15: 00007ffd0033f0a8 [ 770.439234][ T30] [ 770.442292][ T30] [ 770.442292][ T30] Showing all locks held in the system: [ 770.450036][ T30] 1 lock held by khungtaskd/30: [ 770.454890][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 770.591357][ T30] 2 locks held by getty/5379: [ 770.596077][ T30] #0: ffff8880364500a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 770.605981][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 770.616107][ T30] 3 locks held by kworker/0:5/5730: [ 770.621302][ T30] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 770.632317][ T30] #1: ffffc900044ffc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 770.642610][ T30] #2: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 770.701699][ T30] 2 locks held by syz.1.4342/22475: [ 770.706929][ T30] #0: ffffffff9009d8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 770.715143][ T30] #1: ffffffff8ee8e5e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 770.725359][ T30] 2 locks held by syz.0.4684/23830: [ 770.730562][ T30] #0: ffffffff9009d8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 770.738781][ T30] #1: ffffffff8ee8e5e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_export_doit+0x2cf/0x530 [ 770.748987][ T30] 2 locks held by syz.3.4941/24743: [ 770.754192][ T30] #0: ffffffff9009d8a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 770.762386][ T30] #1: ffffffff8ee8e5e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 770.923565][ T30] 4 locks held by kworker/0:16/25110: [ 770.929008][ T30] [ 770.931343][ T30] ============================================= [ 770.931343][ T30] [ 770.939763][ T30] NMI backtrace for cpu 1 [ 770.939778][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 770.939799][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 770.939810][ T30] Call Trace: [ 770.939817][ T30] [ 770.939825][ T30] dump_stack_lvl+0xe8/0x150 [ 770.939858][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 770.939985][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 770.940021][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 770.940051][ T30] sys_info+0x135/0x170 [ 770.940100][ T30] watchdog+0xfd7/0x1030 [ 770.940143][ T30] ? watchdog+0x1c7/0x1030 [ 770.940171][ T30] kthread+0x388/0x470 [ 770.940198][ T30] ? __pfx_watchdog+0x10/0x10 [ 770.940217][ T30] ? __pfx_kthread+0x10/0x10 [ 770.940243][ T30] ret_from_fork+0x514/0xb70 [ 770.940281][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 770.940307][ T30] ? __switch_to+0xc89/0x1420 [ 770.940333][ T30] ? __pfx_kthread+0x10/0x10 [ 770.940358][ T30] ret_from_fork_asm+0x1a/0x30 [ 770.940391][ T30] [ 770.940398][ T30] Sending NMI from CPU 1 to CPUs 0: [ 771.060946][ C0] NMI backtrace for cpu 0 [ 771.060963][ C0] CPU: 0 UID: 0 PID: 28375 Comm: syz.6.5921 Not tainted syzkaller #0 PREEMPT(full) [ 771.060984][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 771.060994][ C0] RIP: 0010:debug_smp_processor_id+0x4/0x20 [ 771.061021][ C0] Code: 4c 89 f6 e8 fe 23 40 f9 e9 67 ff ff ff cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <48> c7 c7 20 da 4b 8c 48 c7 c6 60 da 4b 8c eb 1c 66 66 66 2e 0f 1f [ 771.061035][ C0] RSP: 0018:ffffc9000ef17708 EFLAGS: 00000283 [ 771.061051][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002 [ 771.061062][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8eb59c60 [ 771.061073][ C0] RBP: ffffffff823deb1e R08: 0000000000000000 R09: 0000000000000000 [ 771.061084][ C0] R10: 000000000000000e R11: ffffffff8eb59c60 R12: 0000000000000002 [ 771.061095][ C0] R13: ffffffff8eb59c60 R14: 0000000000000000 R15: 0000000000000000 [ 771.061107][ C0] FS: 0000000000000000(0000) GS:ffff888124f58000(0000) knlGS:0000000000000000 [ 771.061122][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 771.061134][ C0] CR2: 00007f6fcb551000 CR3: 000000000e946000 CR4: 00000000003526f0 [ 771.061150][ C0] Call Trace: [ 771.061156][ C0] [ 771.061163][ C0] rcu_is_watching+0x15/0xb0 [ 771.061190][ C0] lock_acquire+0x5f/0x350 [ 771.061213][ C0] ? page_ext_get+0x22/0x2e0 [ 771.061235][ C0] ? free_pages_prepare+0x960/0xa60 [ 771.061253][ C0] ? __free_contig_range_common+0x174/0x340 [ 771.061278][ C0] ? free_pages_bulk+0x48/0x120 [ 771.061299][ C0] ? vfree+0x224/0x4a0 [ 771.061315][ C0] ? kcov_close+0x28/0x50 [ 771.061335][ C0] ? __fput+0x418/0xa50 [ 771.061354][ C0] ? task_work_run+0x1d9/0x270 [ 771.061379][ C0] ? do_exit+0x73a/0x2360 [ 771.061401][ C0] ? do_group_exit+0x22d/0x2f0 [ 771.061427][ C0] ? __update_page_owner_free_handle+0x2e/0x4a0 [ 771.061450][ C0] __update_page_owner_free_handle+0x4b/0x4a0 [ 771.061472][ C0] ? __update_page_owner_free_handle+0x2e/0x4a0 [ 771.061495][ C0] ? page_ext_put+0x97/0xc0 [ 771.061519][ C0] __reset_page_owner+0x85/0x1f0 [ 771.061542][ C0] free_pages_prepare+0x960/0xa60 [ 771.061564][ C0] __free_contig_range_common+0x174/0x340 [ 771.061594][ C0] free_pages_bulk+0x48/0x120 [ 771.061624][ C0] vfree+0x224/0x4a0 [ 771.061643][ C0] ? __pfx_kcov_close+0x10/0x10 [ 771.061662][ C0] kcov_close+0x28/0x50 [ 771.061681][ C0] __fput+0x418/0xa50 [ 771.061709][ C0] task_work_run+0x1d9/0x270 [ 771.061736][ C0] ? __pfx_task_work_run+0x10/0x10 [ 771.061761][ C0] ? do_exit+0x735/0x2360 [ 771.061783][ C0] ? kmem_cache_free+0x182/0x650 [ 771.061804][ C0] ? put_net+0x191/0x260 [ 771.061826][ C0] do_exit+0x73a/0x2360 [ 771.061852][ C0] ? cgroup1_freezing+0x20/0x350 [ 771.061869][ C0] ? __pfx_do_exit+0x10/0x10 [ 771.061895][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 771.061919][ C0] do_group_exit+0x22d/0x2f0 [ 771.061942][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 771.061971][ C0] get_signal+0x121b/0x12c0 [ 771.062001][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 771.062026][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 771.062059][ C0] exit_to_user_mode_loop+0x104/0x730 [ 771.062081][ C0] ? rcu_is_watching+0x15/0xb0 [ 771.062107][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.062126][ C0] do_syscall_64+0x353/0x580 [ 771.062143][ C0] ? trace_irq_disable+0x3b/0x140 [ 771.062164][ C0] ? clear_bhb_loop+0x40/0x90 [ 771.062184][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.062201][ C0] RIP: 0033:0x7f4c1ed9de99 [ 771.062216][ C0] Code: Unable to access opcode bytes at 0x7f4c1ed9de6f. [ 771.062224][ C0] RSP: 002b:00007f4c1fb970e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 771.062241][ C0] RAX: fffffffffffffe00 RBX: 00007f4c1f026098 RCX: 00007f4c1ed9de99 [ 771.062254][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4c1f026098 [ 771.062265][ C0] RBP: 00007f4c1f026090 R08: 0000000000000000 R09: 0000000000000000 [ 771.062276][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 771.062287][ C0] R13: 00007f4c1f026128 R14: 00007ffcf4bc5a90 R15: 00007ffcf4bc5b78 [ 771.062310][ C0] [ 771.509839][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 771.516698][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 771.525802][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 771.535859][ T30] Call Trace: [ 771.539138][ T30] [ 771.542074][ T30] vpanic+0x56c/0xa60 [ 771.546084][ T30] ? __pfx___schedule+0x10/0x10 [ 771.550945][ T30] ? __pfx_vpanic+0x10/0x10 [ 771.555469][ T30] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 771.561638][ T30] panic+0xc5/0xd0 [ 771.565363][ T30] ? __pfx_panic+0x10/0x10 [ 771.569771][ T30] ? preempt_schedule_common+0x82/0xd0 [ 771.575218][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 771.580580][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 771.586729][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 771.592873][ T30] watchdog+0x1030/0x1030 [ 771.597198][ T30] ? watchdog+0x1c7/0x1030 [ 771.601609][ T30] kthread+0x388/0x470 [ 771.605670][ T30] ? __pfx_watchdog+0x10/0x10 [ 771.610335][ T30] ? __pfx_kthread+0x10/0x10 [ 771.614921][ T30] ret_from_fork+0x514/0xb70 [ 771.619509][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 771.624624][ T30] ? __switch_to+0xc89/0x1420 [ 771.629294][ T30] ? __pfx_kthread+0x10/0x10 [ 771.633877][ T30] ret_from_fork_asm+0x1a/0x30 [ 771.638651][ T30] [ 771.641918][ T30] Kernel Offset: disabled [ 771.646240][ T30] Rebooting in 86400 seconds..