last executing test programs: 2m1.65964471s ago: executing program 3 (id=1558): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0xd938, 0x4) (async) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0xd938, 0x4) socket$netlink(0x10, 0x3, 0x4) (async) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m1.427124644s ago: executing program 3 (id=1561): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001680)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000040)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r5, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)=ANY=[@ANYBLOB="bd1bd2fe24ccbb7e81bb5c979566517f0e6e8297c4289c0399754c1c94e76160e1c8f3b0aaa1e447efe9ba1012653140f2d473dcd10934de66be2ca4555af5f6dbbe8c5f54246957476a4809036e050d290e1f1f3cfec94886fe1b4466817248575ddfb2114452c6d6822f3579bb8b076ee0bb6506cc78ab3a3aa17e6d3746e847059a76f8520d04a6563716738bb5b93b9f7c1b66e83754987089c6b897dbb2b9f35756d5de62501f9e1e96a3cc3d57b8b868133def2c4aa8ddb51e573bfb9b891eced95b1881f1c27b160c60a19f04e5f320947834707eb5dc9221d2169feeba148942db87fb26978a9c77709eb5b06189039eae3b669a93aaed46bec4a7533682dce2caf063944329d7e9410ca29111d36ad23058fdfd7161bce38cb1868749a5d812c9ae53d4aeb60b1d70c6b7710141d01bf051c71dde2ba90f4ab8858d9d2729f6ae6042bd5bff13d82a4aa7bcf36b746c8079fa10ac21e94f743972ac99973d0776a6dd26ade7c6a7610da72ccb4f8f1392bec0bf2b5a4dedfb4bc002f0c1901d161654b69bd1f57ac4f26a68bf9afad665466a4f0635f786eba0163a4109d3cbb9c4622a42439924ef6d5eabfec4b7c4d289d7caa61295082fd0110f06718bc353c6eada7f113e174ec8ba6c82732fc887f319b8ab1285e00d1d02be9c5c90d59ef038dd2148572f2ff699d9e47048fbdea0ddea1e2d1539cf7f6a83022f3e30fb2deb39c49881b49fbf662c9f7e610624ce23758d1073eb9ca196c5ae2de4e30a5b61dc0736931d6c0aaee5062561e736ccec31199c90e77c7c119da1c3d1a573abf98a2a620dd56f127d63994f1aacb25fc80a884066e04cdf7964d7c56999383cf87bcc08b87eb6c6b9801b1c2e013012a9779bfa045a8fc26e89f5bf003ab47606b0a8e66a60532d8bb3d6649d62264bf4bb74c7764bd4b9e845264bf94eface9db2b94e3efaf5f0ad3f4960280fca830ce9285e87ffa561b5b608de77c8092450ad4dd5480fc3bbd880efc1d7918fcc7224142090ac4e95b001711dea281a95f8bf0fe329f86cc2d73e5d1978f6bdd645d14daa0e10c70aa953cd3bc71eda41f1fc883cc3b8050dd7233b6a427b20287893167ab6d8ef9b5aef4b6d58bc1fa6bfe5f0a41cd28d3ca67bb9cfc25c177bd917b89a5865340bf969f98f673d6f31f283bcb5140085322c7226a56280e0da458d3518a8cc991666b3e67631e49d15f30c33602aa7edef718b3842979af1363a69dc89eb45303d4e0326f32ef8af84e7582da718752046336fcac5daf08b7b94e4db52f6b518d8ba29daff5b4cc2690850bb889fa0967c76dbb09bb87ac7f4df49d3a39eb234679d47d686689eb6a7a9bad1ef05e80d4c8e800598f10987cae37c089bc3445a84bdc94180dfeea7e4820df60a9b549eb9fd6f9c6cf34f6e85e4fef40669159882fd184730e531bb20008814e6cefe7d26b5a817840099a8b10c970f1e44f389171cdd95c62e96420a03f8a5559104a0a907dc627b35e0b0385e6af875842aef8ffa43d849a4614d5058fa5f10ca875ccee5ddda428b46de4c1c11b0d2efe37ff0b52fa265d65eadcc130925b7cc478bff430532477d55b2c18b801da54cc64983b520b91d25a2f55312429f70a7584fde22542887db64c49cb500f4be8e94f132e4d5339b6b4d9b8506bf46e92765c7963c5478f4ac0eab8b7391912168ec8010e14da01a34f0b6c070ab518c225578eee7b863058798b1601e45b5d54994ab7bd5843f05d2a6808e7b8c6273fb1671e637942ddfe206399c9ff7d46c566f0e87ff23ba96bbed1d0b379e4d33015e0546c146796f40afb4c80a29e79ce6735f33dcbe868f4d0abdf85f596d582d08ae62970c9f6d58bd62b42e17193502e09950ab79f94da35075a8f86d4e226ef0edc7cd585c513f62379321a5a56e2192910621b219a1606587cf49a44e748bf4f15713f09ae5e0f68626602a83db8fbce3e5ef8e728a039cfb71a77b243978d902efff6eef7b7a3d1dce6bcbdcf8d6db6448471ce390c54a96b71f72b608be14c61ea50a7b961b4b27e1123cd7eeb5c17b2d4922caa9d94a239f98a7f2bbc955dbf29b199038b52627f1294c343dd15292c6f10eac92fe371d99b94ceccd4a6adbdfeba04a19f65e22147257de582814ef2c0f1294882ba56f42ed5b7f740decec8462b0bf731183e2fc550a41ece635c6a28e98cde20ef7575e83dc18ec85f4c0eeb3e2567798d5d5a17467f4319c878c6b2bd88c7e5bffa2e5c12422b48aa19a97c048e5ec9c11d55aa7ed74b7370773eadf15884282fb82371c368c736c9eb847ae39361a3a0817936758c39367150c0e35a8b7c87b2301891e058015e03066eac25209a86bb4d55adca0f1a9646869fd33d8b794dcc78e75c9cadba77f32aa4926215e6fd6a397b3c8d044a5ec3e047c4e477052f5c9183beb38f3a33640c0bf337b6947ff8b0baf1fb54c3e8212d990125537b6dbaa793a3303bcdb962130b51b1a9687f7c2d3d39aad0a7b613c9cc0b51f3bb56792e328d3b94006bdf0aa2b8088064096d731e3d47e7de7608efccdd203caf364c74352a8a69763415f23ae5bf19e547ac05876a338b1618130709572f3e8291d1963512dd7daf0470e6dc3ff58b76f85959c42dc96917824982899bb7bdea0dab91d0df9f42176163d4d35315985c9f137c38d6003d273e7ccd1940535c88425f80177ecd4b1f09b1677a31ad4160f86ded72fa1373b83f67a811163bb9facf9e15ccec82ac3609a512f37558f29f7f6135bb01b6e39fc391139cbfc40c3bfd55d72e1571644d09ade95186ce82d50487bef78666f1383601926af4da5066de4fbfdb32a44efc5178502d9fe01d0b1f3f879e50510c193b7fa6a78d1ffaa5bd28e7af24551b6c98f285b42cb30b657018f74f665aaa7f6c8391ef44d4b31e08aba76c98ac63a463d3c8098e7623c7f198bb86c9fdde468b6d42615bc07849c8c985a11c38f05fccc5d0f5b36bc0dde873f2dd5a80c2f0305373a7dd593e1e314f4d8899d5b0a9f65101d8b497aeeef23bcb672183be107acdde0dbcdfe3b94c04895466978f05767a7ba85775cac6159fa9975dfe1054d782781a27ca653710f28c39954c4ecc5249011415a48a83bbece3b04bb3ce2fa670d3c0e4cded1acf2794b78e6a7e1a59bf159e805335afdc8ecf0d9391ba9ace5a6eccac124b0a8744a050e7de784f4b3c604e802564e7121b955da531ced542d818335b1b696ad79826d42afe1b740c66144909a306e80ff694142c38af6a30793a4a98a3b82ab2119ca5f2e594ede3788f85170b693316b9669967fd704bd5817cd92ed1e18172a93c6ec345bb97a8ae689412f528e7b5f5f6bf4becd0a6739691dc47b717174716a68018ee913edf3b062bb05dcd478ba45d8ac081a436a2d62deef8e146d52b7660f5e19af9f2266d08b3bcd6b53b65418bf387e1bda7188d73d2c795f85ca7abc4cc74dbad14d5be6eb81fb3415d807ac6a9f2fe63c105e4c29ccbc39e882f4dbdc35f8ddb2f937b5426e68d2a7c3e3b507ab7bb81ac9716d865e1dceb77ff6c964ddaeea0b45c25c4a069fd73336864c7aa745b96a7b6e34d867a4a10347527e871d05167d88a55cb9d8c5daad8dc1d43289b0e8def152ff2d40d15def43de714a9859075a91819cac1191b78ccb26109131ce41ddaff75d3846f67623772c694994da6f9c1c425bf0cb94becf0c0fa378cbfcf5ee7075f45f5b40daae6109d952b0457596998f95abe8f531c97203e561ceac36dfdb2711a4b00737bd5e33310f6273436181a7aefac552cb9487de70d2ae3cfd1755f78ce547435208df4eaf2982c88418a6cf973373e9863e0d0aa891f4d47cbdd7859664c114dd172acde03608fb3a85a2217bd77347aa280c3fab4ef470dae45fd71891106da366680c79fc70246b1082712bf3fdbbca2f107a903f43beb438846d44ffc6adf249435f4ae5ce6b327f8e0b807632b04cdcc1168e82435ae811e496e26b06b79787a0070c4c1830928e7ae3abe832742b5bb72fcf4b84b302b440376e676d35425f00152c1e0f1953369075fc463a9c45e8453182439cb1c8c3c99dc690a1822b6b498e7de528adb336b5d2b985f98bae5aadca4b1b153b3c199e2d343e352378ddea8cce448f28fb1417641f6314679a6828f59dc78f397701ba987440e8e46be2be1aa45c070af578a23c80ce159ad2cd673fb9a4e850d2eb5210ec5caee55bfbaf7873a920dde86ab187e852699ee955d270a58d3e233fa5b304ff6b6688b4fce0724e0967a310fc4b2f62545e7cc059bb81cbb27a8cfedd9859ae586c5d4095aacdc6578cfe9002946b58c5fafac2cb50efcae915b4a742ddda354d326b99cfd19df2c47b200de24999d950d3d85f5a6b550eb8c8d14b5bffe8690a05002bab518194acfa6fbf48779c827406446979e64c8fd364c883cea5c54e64eadba08c3bc3b8a049b32e516926579e557c2fb82c1dc10696118ba489b400fa56567bf1391f15e4741d95ce9b3ada46d0edaf4303fb1d0013d105aa0c749d655a8b8b1295923e32a2ffd69443158840d5a6b477f262937058fdf966ed969bdb0eef4833d7409169e95ee66c7be7bbd552e0aecefe95d9425657bdc491c32c9859a15b4889048007008285c04c61fec5bd311c3cda5145fc4565bb65f4d814aa97b184a0a86aab4d7afea4a5ac308d2242f39b4d9f535ebb2c09bc67872bcf1adad712ed983125d3e54f3a4a6459b2a994dc94a50f7cece63555046cb9612beabe773ec867e4517fdc34e1cdcd2bdb67c5d0303c26e1c0d76bafa844b5bc9c4822f88dacd830325e3e964811d9253c801437b862a2c945fbfb31c413e74b925d56ed03cfc0396ad937299f0687349c336f82b23221086a9a9777d2d50609a1477c124cb059301a2c196607961f08bbd7029f73d04317d6dbe46ac29f320aa62ac20012fd067048bb1d0c34ae39a71c9566bd4af5fe225ca6a52677859ab026f1f9cabd995acdda686a516bd428b1264000f40a843d26cb0f4178833f59c0a2e7a92814da567ead4c063bde5da274a629446a7eecdf610e949d4deaf6b5998c3c079dee4bc613fc7f9814736dee6f7d39b8c32de45d3ebe64f624f5ed4e64c4183149d975185d86548a4552509b1cb58a667ed1f9493297cc0bdb1279277b8448c40665db09ed394dd6fcb13caf0d819642e5c3de9ba31a4813e6d925ec0f736eecae0789ff958ec01c09140dadc09c6535b5476e25cef133aa83859eeef13fa2339a2e03b4b5b5650957bf4972887ea78be58b33fce9037ff59c34ac5c6d6ca6b3a32bae93fcb81f8e13bb2cc689a8fca6f2b93e1bc877decca9b1bd6239a272ece1af83141306d1c33a77ceee396ffb7849c51780cc8b079f167b596d0f170cc754e101778d5da0063de9ef0649ffa1ccf43e50b5198d9e562c71cbf8f284ba65dd716fdf1db66bede19f5552d655d805311a08d7da130bb7e8dd46bee67be5414f4d2981494d85b4c65d5accb945ab4628b0c64d3beb1f7964f58012cbb081bfa9b49ec73c6054052e68a86556926338677f285c6e55d25c0fc076ff984d303d7f9fb8074b81531606ec7cc3152175cd6ed8aa5add737dae53774ece678b5052cac959057364d754e5758d2014b29c74050ed0a0a0189264642f4742153dae0ed298ee81de6b05ce78d8f7b3515226a37858e6ffe9aac2797886a1ae086baf39f2ff6c11f59e14d08c7fae9e499510fa1c61bc72092b5900"/4096], 0xc8}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r8, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20400023}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r9, 0x620, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_SEC_DEVICE={0x30, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xd}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x80400}, 0x44000) r13 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r13, 0x107, 0xf, &(0x7f0000000100)=0xc99, 0x4) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r13, &(0x7f0000000280)="0b031260feffffff02005400f6a13bb1000000086086dd480300", 0xfffffd6a, 0x40000850, &(0x7f0000000140)={0x11, 0x8627, r14, 0x1, 0x0, 0x6, @random="dee0a0fece9e"}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES16=r13], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x9}]}, @NFT_MSG_NEWRULE={0x118, 0x6, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_USERDATA={0xdf, 0x7, 0x1, 0x0, "32e92b38ab1d95d15432d00fa15f07273fa62639963bbf553aa51f5c5d355482d28e39887d9955ac85f44dc6fc8fb6e02124d5a754da7e076a3604a78c6e2ee85769df5c6560c78b1ca726ba83f73233dfac7b6c6583cbbec6d10576e952b062b00f883def97bbd945843321d752f53bee4d1841018ea04fd42d8a8587cd334f9d5e7af2edaa299a28b4c7d04b0bc36d7bb3f86855f3f7e9982d45d1aeb9d25a4089faae3469616130707f70e7e911faad980136b95009ca00bc601e97779cb40a78036ca3927b9c0d24823af5b633729cc455eef8968b9c570fcb"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x15c}, 0x1, 0x0, 0x0, 0x4000084}, 0xc040) 2m1.111304276s ago: executing program 3 (id=1566): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, 0x0, &(0x7f0000000180)=""/113}, 0x20) 2m0.944170459s ago: executing program 3 (id=1569): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000004800070128bd700000000000017c00000c00018003000000800a0000080002"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2m0.819745696s ago: executing program 3 (id=1572): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xa, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) 2m0.608013956s ago: executing program 3 (id=1578): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000002a00)=ANY=[@ANYBLOB="140000002700010026bd7000fcdbdf3206"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1m46.011595239s ago: executing program 1 (id=1785): setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) (async) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 1m45.880614998s ago: executing program 1 (id=1787): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x140c, 0x10, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x800) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002a0012800b00010067656e65766500000c00028008001100ff"], 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x188, 0x30, 0xffff, 0x0, 0x0, {}, [{0x174, 0x1, [@m_police={0xdc, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x80, 0x0, 0xd26f}, {0x0, 0x0, 0x0, 0x2000}, 0x1}}]]}, {0x71, 0x6, "7abb6dc1de5b84f217510bab6134a3ea3a8409a7cb3acd84b46d0f7b5e24cc174b965d16434975a9882d817cad97fcb15973b56f0d046a8250d152eae3cf5c36dc083dee20f2c7342a26fcc01142ad4ea1abf19feeca51a42fce47cf87433289f17362e19a31aff577b7fbb7a2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5}}}}, @m_gact={0x94, 0x2, 0x0, 0x0, {{0x1e}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x2, 0x8, 0x0, 0x80000}}]}, {0x4e, 0x6, "c2500150f4619cd81c1e772277d8994bd831ae10c859bcfbb19578357e3d54e13120c547ee656f9bda98b8ccd0bc12ae52c97b5a673707000000d4826f157e3e2719fec613831722e417"}, {0xc}, {0xc}}}]}]}, 0x188}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 1m45.645119139s ago: executing program 1 (id=1790): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f00000005c0)) syz_emit_ethernet(0x1e, &(0x7f00000003c0)={@multicast, @empty, @void, {@can={0xc, {{0x2, 0x1, 0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, "e5a9eccb5bba82dd"}}}}, 0x0) 1m45.530683s ago: executing program 32 (id=1578): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000002a00)=ANY=[@ANYBLOB="140000002700010026bd7000fcdbdf3206"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1m45.442984331s ago: executing program 1 (id=1794): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c00)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@mcast2, 0x0, 0x6c}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e21, 0xb42, @private1, 0xc5}, 0x1c) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000004a00)={'batadv_slave_1\x00'}) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x17}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x1, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x2e, 0xe]}}, 0x0, 0x28}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100017800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) setsockopt$packet_int(r7, 0x107, 0xc, &(0x7f0000000000)=0x10000, 0x4) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r6) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f0000000140)={0x1d, r10}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x44001) write$nbd(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="67446598000000000100020004000000"], 0x10) recvmmsg(r5, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000008c0)=""/36, 0x24}], 0x1}, 0x8}], 0x1, 0x10000, 0x0) recvmsg$can_raw(r5, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x40) 1m44.455966882s ago: executing program 1 (id=1802): r0 = socket$netlink(0x10, 0x3, 0x4) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0x305, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x8000000}, 0x0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r2) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtclass={0x24, 0x28, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0xb}, {0x6, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xc1}, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) write(r0, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b0f33b49db96ad24d12595fbea5", 0x29) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) 1m44.176706085s ago: executing program 1 (id=1807): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x49, '\x00', 0x0, @fallback=0x16}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0xd, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@fwd={0x7}, @float={0x10, 0x0, 0x0, 0x10, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x5f, 0x61]}}, &(0x7f00000001c0)=""/4096, 0x40, 0x1000, 0x0, 0x73f9b819}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r4, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000002700090025bd7000fddbdf2505"], 0x14}}, 0x4000080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x4c, r8, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0xffffffffffffff23, 0xb, 0x9}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x1f, 0x9, 0x7, 0x5, 0x80, r0, 0x7, '\x00', r1, r2, 0x5, 0x2, 0x4}, 0x50) 1m38.655692114s ago: executing program 2 (id=1859): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "e4fffffffffffbff", "9da15200", "b6730761", "f3ffffffffffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x48, 0x0, 0x0, 0xffe00001}, {0x16}]}, 0x10) sendto$inet6(r2, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc1", @ANYBLOB="3baa7d57c5e2dc1040d8e43006bc76c2efa17e7c33073ba660775f37a2d892f43b7701ba97f1aca7afe1d9a6c593b8e098f331d6"], 0xfc}}, 0x4) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00') vmsplice(r4, &(0x7f0000000440)=[{&(0x7f0000000080)="b44d071541f2e3", 0x7}], 0x1, 0xd) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendto$inet6(r0, 0x0, 0x0, 0x8080, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) getsockopt$inet_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 1m38.438466232s ago: executing program 2 (id=1861): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6, 0x0, 0x1, 0xb], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000540)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0xe1e571d2193a0e72) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x22}, @private1={0xfc, 0x1, '\x00', 0x7}, [0x0, 0xff, 0xffffff00, 0xff000000], [0x0, 0xff000000, 0x0, 0xff], 'veth0_vlan\x00', 'veth0_to_team\x00', {}, {}, 0x2f, 0x1, 0x1, 0x1}, 0x0, 0xd0, 0xf8, 0x60030000, {0x0, 0xff000000}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x40000001}}, {0x8}, {0x6, 0x11, 0x4000}}]}, 0x4c}}, 0x0) 1m38.289947031s ago: executing program 2 (id=1862): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 1m38.028028223s ago: executing program 2 (id=1864): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="8c00000012001fff0004000000000200aaf7e9af", @ANYRES32=0x0, @ANYBLOB="0000210000000000400012800b000030000280140007002001000000000000000000000000000014000600fc020000000000000000000000000000040012000800280070cf00000c0019800500060014000000080004"], 0x8c}}, 0x4800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}]}], {0x14}}, 0x50}}, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7b}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000140), 0x0}, 0x20) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x1411, 0x100, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x4000010) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000001c0)={r0, &(0x7f0000000080)='^&^\x00', 0x141a40, &(0x7f0000000100)={@_ha_fsid={[0x80, 0x100]}, {0x5, 0x7, 0x80000000, 0x7}}, 0x7, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0xb6}) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0xfffffffe, {{0x2, 0x4e23, @empty}}}, 0x88) 1m37.412549009s ago: executing program 2 (id=1868): r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000009c0)={r3, 0x9}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4706c6, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000ddff370001001000000095"], &(0x7f0000000000)='GPL\x00', 0x7}, 0x94) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r4], 0x50}}, 0x0) 1m37.407443029s ago: executing program 2 (id=1869): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) 1m34.262749582s ago: executing program 0 (id=1892): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000033c0)={{0xffffffffffffffff, &(0x7f0000000280)='GPL\x00', 0x6001, &(0x7f0000000300)={@align=0x3, {0x3ff, 0x0, 0x5b07, 0x7}}, 0x9, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x4}, 0xa, &(0x7f0000003280)=[{0x2, 0x7, &(0x7f00000003c0)='!\xd1#}\x85+^-:$[$%{\x00', &(0x7f0000000500)="ee6bc06f664a5a2586dd6f495e1ecc03fb20ccbb5b182f26c07cda698fd9c226d5697515607f82bf0171606a7027fdfd907b2471961a2004fb39041d1e3bd619f89251edae76770836ad1b3a0faa04bd6e88d6ab512dd7026c", 0x59}, {0x3, 0x8, &(0x7f0000000580)='\xe5.}%-[\x00', &(0x7f0000000c40)="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", 0x1000, 0x2a}, {0x1, 0x9, &(0x7f0000001c40)='\x00', &(0x7f0000001c80)="b767cdf422926960ce469e7cf11c5b1929a7dc36b732d02a92ab9b346933871eaa06db39d110a278d050a702c5ee8193082c61cf3d170099d7c2f4a8af7b646a24c35b548ad8ce693d8a5aeabd872799bac516619f1355d8c86ed6bc680d515ed444c11e2331412558b5afb9041789f6f5fc312d84631012028b6d0bee743de115c3ca901dac1b344e73d0e5f319", 0x8e, 0x20}, {0x3, 0x2, &(0x7f0000001d40)='\x1b-#}\x00', &(0x7f0000001d80)="ee220fc3f6e1ce6f963e4cb6a48ab3250a77e9f65fee758a55cce92cf833c02123183e41d7dfc637e0e32e5631538d85dbe4f4b6004701c6cfb8a0ba09dfdf770eac048c7eaa8a11160ce168e2992c9148f98b9f2a3c38ca6dbc7cbf924201e50f1e2b414063fd7a7a673f0225b016c42b400c12c49586e5ca7a238c3248c61dbfc408a9bc1c342e", 0x88, 0x10}, {0x2, 0x725, &(0x7f0000001e40)='GPL\x00', &(0x7f0000001e80)="768a4f976d5d24b5c17f57fe3e72c04b907ddb62333f78fca6e2e2638834c411495917143d1c76532285395a9da7f6873be94ea0012944e3212a390edba558671adb357f04e5a6fc44b810a57abb5295632c505609af482168e7a8f30f361d9dc76acc3aa9899e46ba2a6aabfe48ab6c3569", 0x72}, {0x1, 0x5, &(0x7f0000001f00)='tcindex\x00', &(0x7f0000001f40)="3fab6b4e45a4c603a6270689e2c82175901f80ba6c4d4cd90370ff28637ba27d4372c16fe059b7ca34bbdbc9c4ffdbbc4a9676675be7bc8bc932e4db117738f4700eb4172158902abb798d12a7193ec0387d2f78ce794965b95c8c2b616da0de371aa11e8e2d54a4c312f91a03", 0x6d, 0x20}, {0x1, 0xff, &(0x7f0000001fc0)='tcindex\x00', &(0x7f0000002000)="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", 0x1000, 0x10}, {0x2, 0x10001, &(0x7f0000003000)='[*^#\x9d\x00', &(0x7f0000003040)="3cbe94ad787c152a32b6aae5aadee6c68c83d65ce76834bfd96214aba764afa26f3f77ec89e699f43d856b71da82ce016186c2cd153830bb4181cafeb276a1fb4aaf477c6d79b84fa9c7f60216f8d2892fcd6a2b5ffc1d6540841184de389fcfc526d60191ffacb46e98c64e8ac4f80159913a50deee382c083954fe0dc085d4e2959ad6c8a9d62c9eb2cd8f9668b11a810078d0a8d65146e8170665d9d7c83ae590c3ef71f2b540", 0xa8, 0x10}, {0x1, 0x6, &(0x7f0000003100)='&.:[.@\x00', &(0x7f0000003140)="7df1e5367edfccde982cf065db32a32f49b56c4b29271325ff779171ef73f938ea42f723602a1fdd13503bcbc8efda75a929048c8308d25e9c501cdd22a0778b9aaf324c692df9385147b30b36069dc23fca7450bc9383e7d23929402eb673a818c208e16f90f8634881229e10e8338b5f3faa536570cd8a99052b9f95b510f4c2f29b7926c911282b6563339bfee6412c0990f365afcf11f0dc", 0x9a}, {0x3, 0x5, &(0x7f0000003200)='/[@.#^\x00', &(0x7f0000003240)="e0281d0425", 0x5, 0x3a}]}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003480), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000003580)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003540)={&(0x7f00000034c0)={0x50, r1, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x27}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xff01}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x401}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xf}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xd62}, @NL80211_ATTR_NOACK_MAP={0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x48004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x2}, {0x0, 0xfff2}}}, 0x24}}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2c0000000000f12c18b789000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000980)={&(0x7f0000000400), 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x208, 0x2, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASK={0x4c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_NAT={0xcc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}]}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_EXPECT_MASK={0xbc, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xb}}, {0x8, 0x2, @multicast2}}}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x40004}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000002c0)={0x30, r3, 0x1, 0x70bd2c, 0xffeffffe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x52}]}, {0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@delchain={0x54, 0x65, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x3}, {0x1, 0xfff1}, {0xfff2, 0xb}}, [@f_tcindex={{0xc}, {0x24, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xfe48}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x0, 0xd}}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x7}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) 1m34.120338669s ago: executing program 0 (id=1893): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001280)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0xf0, 0x220, 0xffffffff, 0x0, 0x220, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@multicast1, @ipv6=@empty, @icmp_id=0x65, @gre_key=0x732}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @port=0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'syzkaller1\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x33, 0x2, 0x5, 0x20}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [0x0, 0xffffffff], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000140)=0x2, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x8, r8, 0x5}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="a9", 0x1}], 0x1}, 0x20008110) (async) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x8, r8, 0x5}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="a9", 0x1}], 0x1}, 0x20008110) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r9, 0x1, 0x2000000, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x91}, {0x6, 0x16, 0x2}, {0x5}}]}, 0x54}}, 0x0) 1m33.871258861s ago: executing program 0 (id=1894): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x1, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB="70010000", @ANYRES16=r1, @ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000dc0)={&(0x7f0000000000), 0xc, &(0x7f0000000d80)={&(0x7f0000000ac0)={0x298, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffff482}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa03}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @remote}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6991}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xca}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffc00000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x817}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9f6a}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x919}]}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x80}, 0x80000) 1m33.835192152s ago: executing program 0 (id=1896): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x1800) 1m33.744105378s ago: executing program 0 (id=1897): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, 0x0, 0xfffffffffffffffe, {0x0, 0x0, 0x1}, 0xfd}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x69a0a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4b0) 1m33.378966641s ago: executing program 0 (id=1899): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}}, 0x4000080) 1m29.127610008s ago: executing program 33 (id=1807): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x49, '\x00', 0x0, @fallback=0x16}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0xd, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@fwd={0x7}, @float={0x10, 0x0, 0x0, 0x10, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x5f, 0x61]}}, &(0x7f00000001c0)=""/4096, 0x40, 0x1000, 0x0, 0x73f9b819}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r4, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000002700090025bd7000fddbdf2505"], 0x14}}, 0x4000080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x4c, r8, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0xffffffffffffff23, 0xb, 0x9}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x1f, 0x9, 0x7, 0x5, 0x80, r0, 0x7, '\x00', r1, r2, 0x5, 0x2, 0x4}, 0x50) 1m22.077582642s ago: executing program 34 (id=1869): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) 1m18.001122845s ago: executing program 35 (id=1899): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}}, 0x4000080) 1m14.087839635s ago: executing program 6 (id=2047): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) socket(0xa, 0x3, 0x3a) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40089}, 0x8004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xa}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x800003, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x8, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x200100, 0x2, 0x8, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0xffffffff, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0x11, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) listen(r1, 0x5) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270fff0000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) (async) socket(0xa, 0x3, 0x3a) (async) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xa}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x800003, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x8, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x200100, 0x2, 0x8, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0xffffffff, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0x11, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x200000000000011, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) listen(r1, 0x5) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270fff0000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) 1m13.839833301s ago: executing program 6 (id=2049): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="581400002d00010000000000ffdbdf25037c000008000180040004803c140280361402"], 0x1458}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 1m13.655697718s ago: executing program 6 (id=2050): r0 = socket(0x10, 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r8, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c0c5}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0xfffffffd, 0x30, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x0, 0x0, 0x1000002}}) 1m13.172656452s ago: executing program 6 (id=2054): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) 1m12.983783435s ago: executing program 6 (id=2055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$sock(r0, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000140)="7e8828966b218b821d104b4e6d42533d671ba57b8c60c1d7eeafb8f9a08557e916f3779155665d72a9623a078b4c1abb4f2fbeb0dc9bcf158be62d6064307ebaa010714359dbea0afc0b6746239f5c7dd199e2b176b24dcfcce2279fb335ef31e855d57232e0a70950443405dbf71697eac5b123a69898c8fefbbe01d75a32d944eed299de91f53e4079a0df094ef1557aa2d5e250d67e41b86282cdee8c", 0x9e}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)="5040c384c0635f315f7394a8a6ebd2ff31bcccb541eacdfcfa78a6fd8256a2a58ae1adaa527fca3c3ff12ddefe6feceaac3b79b457912b8326e6923b0e928f7041ac76e0d3565bfd30112506770a674f41509d4e98eadd2a625c21bade5865a92f9b153a749521b9887b5724badd31862a0ba4b1968c41fb0255be0f48a4881549cdb7340b94dbc34e7ff63c514cce2fb990edb84cc3be35193c5fd412e98d28bc99c090bfa465", 0xa7}, {&(0x7f0000001c00)="d1ef652cb824a108e9c0d4d30312c6898342d19945612c02fcf3cdd1e8bf33b60d243332d4b5890fe8105d37ae9aeb9bc78f305d14f3049d2cc67e8d49a31cc6a251a428014df56c04c6ab85872902eb59392e23cc99626f1c46292d790d9f50afa537d9d52f43a2a2715763bb5f8e980b78323c4e6699ce2db123947d25150974dc43c6bb006f17bb1faae9a873d022a2cb0c02349a82090655264d330e0545f0ee80278b98de298e6072dee252add5049aeb9d0ebd", 0xb6}, {&(0x7f0000001cc0)}, {&(0x7f0000001d00)="49be906faa2feebe27b2", 0xa}, {&(0x7f0000001d40)="005b875c59f99147b43a2f7fdb3711d39f0a13155eb7fcd97d896884739a6c26c4f13bab2d78e288c4f9f4c62af807279cb28e5deaaeed09815a89d70636cbecdeaeaf06565ac5ad7b9970fcab1a8e28f9dfa68ed8f69e9ba9ee4541a54b094927e6c6407c55f99efdf151c7472b7a57cea5bba9c8efa3cff4a9c37826aac1b8644001295c60b88d5ac3e3f13c8fa65638e6dd1f933b4d0d2985c2f6173b8994133949f9df47f7ab08aaaab52cf295197b6fbce35f424c7ec764f40097200837defa6c327ae20dec11e6c9cb589dbf9f", 0xd0}], 0x7, &(0x7f0000001ec0)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x18}, 0x4000004) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'vlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000480)="3900000013000318680d07070000000f1801ff3f04000000170a001700000000040037000d00400001312564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r2}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x400) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x1000000, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='westwood', 0x8) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0xd, 0xa, 0x0, 0x0, 0x0, {0x6fdecff6f0efb5f9, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008050) socket$inet(0x2, 0x2, 0x1000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xc0, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) 1m12.405371852s ago: executing program 6 (id=2061): r0 = socket$nl_generic(0x10, 0x3, 0x10) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}}, 0x4000080) 57.314280609s ago: executing program 36 (id=2061): r0 = socket$nl_generic(0x10, 0x3, 0x10) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}}, 0x4000080) 15.067958484s ago: executing program 5 (id=2587): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x2500, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdba, 0x0, 0xfffd, 0x1, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3a}}}}}) r2 = socket(0x2a, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40080}, 0xa, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"/316], 0x13c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0x4, 0xffffffff, 0xfffffffc, 0x2, 0x9}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r2], 0x1c}}, 0x0) 14.663042298s ago: executing program 5 (id=2591): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000000)=0x4, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, 0x0, &(0x7f0000000080)) (async) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) (async) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x510, 0x280, 0x0, 0x370, 0x280, 0x370, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [0x0, 0xffffffff], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x300}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth0_vlan\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) accept4(r2, 0x0, 0x0, 0x800) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000003700)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x20044881) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x8, 0x2}, &(0x7f0000000100)=0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x8, 0x2}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000140)={r4, 0x2c}, 0x8) 14.359025602s ago: executing program 5 (id=2593): r0 = socket(0x28, 0x5, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000250000000000000000000000760001002500000095000000000000ee0003e1f14249725a411e001840000002000000000000070000000095000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 14.114514906s ago: executing program 5 (id=2597): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x24, 0x4, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x17, 0x56, 0xd23}, 0x18}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0xa3, "7023c57ca58289a0ea093ef6b51df6a0703095962a34c1e39e70bf56fbf8e7f447f88647ac881fd9e1939c50e7de334f9db4facac13306bb336fdd600e6fa194a7f10e7b2e3fccb050cda495dcd8bc6a4d3d87b7a225ed453084ddf81f14aef222082d08b90e07291adb262f45e0107215c224a5fe4f278d37862d4c0e439b09f24a5ebfcbc649dbb632d4eb26afb07ce521a2c90e1677ec4dd62c86842e19d8755e12"}, &(0x7f00000001c0)=0xab) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000200)={r6, @in={{0x2, 0x4e22, @multicast1}}, 0x5, 0xd, 0x7, 0xf7, 0x101}, &(0x7f00000002c0)=0x98) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x12, 0x2, 0x1, 0x104}}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xa, 0xf}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0xffffffff}, @TCA_PIE_ECN={0x8}]}}]}, 0x40}}, 0x40) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r10, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020002000003be8c5ee17688a8006c00030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xb8) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000380)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000017f22707d00000000000069dff59600000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000001e0a01020000000000000000070000000900020073792eacd5fc00000900010073797a30000000001800038014000080080003400000000004000a80f3ff0180140000001000010000000000000000000084000a"], 0xc8}}, 0x0) 13.06152207s ago: executing program 5 (id=2606): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x9, 0xa5, &(0x7f00000001c0)=""/165, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x1, 0x1], &(0x7f0000000300)=[{0x4, 0x4, 0x3, 0x9}, {0x5, 0x5, 0x4, 0x4}, {0x3, 0x4, 0xe, 0x8}, {0x1, 0x1, 0xb, 0x6}], 0x10, 0x5}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) r2 = socket$kcm(0xa, 0x3, 0x3a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}, 0x0, 0x1}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000880)="00bc49eb00000009cecefb5d97e5a3", 0xf}], 0x1, 0x0, 0x0, 0x900}, 0x60) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3, r1, 0xffffffff00000000}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x17, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7d90, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x5, 0x9, 0x4, 0x9, 0xc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @generic={0x1, 0x5, 0x1, 0x8001, 0x8001}, @jmp={0x5, 0x1, 0x8, 0xa, 0x2, 0x38, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) 11.948369644s ago: executing program 5 (id=2608): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1800000027000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 11.941467025s ago: executing program 7 (id=2614): socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r1}, 0x80, 0x0}}], 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8ba4, 0x3, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000007c0)={0x0, @initdev, @remote}, &(0x7f0000000800)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000f00)={&(0x7f0000001300)=ANY=[@ANYBLOB="84050000", @ANYRES16=0x0, @ANYBLOB="10002bbd7000ffdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="7c0002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=0x0, @ANYBLOB="7001028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000002000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000500000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004007a60000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="ec01028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ffff0000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ad29000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=r4, @ANYBLOB="400001002400010071756575655f696400000000000000000000000000000000000000000000000005000300030000000800040033b1000008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040006000000"], 0x584}, 0x1, 0x0, 0x0, 0x4010}, 0x4004) r6 = socket(0x10, 0x3, 0x6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00012dbd7000fbdbdf250300000008000400ffffffff14000200200100"/42], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) getpeername$llc(r6, &(0x7f0000000540)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000580)=0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@newtfilter={0x6c, 0x2c, 0x20, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x4, 0xffe0}, {0xd, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x10001}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}]}}, @TCA_CHAIN={0x8, 0xb, 0x7fff}, @TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_CHAIN={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24004804}, 0x0) openat$cgroup_freezer_state(r12, &(0x7f0000000200), 0x2, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x32, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r11, {0xa}, {0xf, 0x4}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40008c0}, 0x4000800) socket$xdp(0x2c, 0x3, 0x0) 11.538149173s ago: executing program 7 (id=2619): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xb, 0x8}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0xd, 0x6, 0x2, 0xfffd, 0x7, 0x9, 0x4, 0x8, [{0x0, 0x575e, 0x6, 0x9}, {0x1, 0xf, 0xfffffffe, 0xd5bd}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001"], 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000b80)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b40)={&(0x7f0000000c00)={0x118, r10, 0x400, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x4}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x118}, 0x1, 0x0, 0x0, 0x20008041}, 0x20008091) sendto$packet(r8, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x181000, 0x0) ioctl$PPPIOCSPASS(r11, 0x40107447, &(0x7f0000000340)={0x1, &(0x7f00000002c0)=[{0x3, 0xb, 0x3, 0x6}]}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800000}, [@alu={0x4, 0x0, 0x8, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x62}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f0000000700)={r8, &(0x7f0000000500)='@\x00', 0x422401, &(0x7f0000000540)={@align=0x200, {0x6, 0x7, 0x4, 0x2}}, 0x79, &(0x7f00000005c0), &(0x7f00000006c0)}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000740)=@o_path={&(0x7f00000004c0)='./file0\x00', r13, 0x4000, r14}, 0x18) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r12, 0x28}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x300}], 0x2}, 0x40005) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r15, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r15, &(0x7f0000000780)}, 0x20) 7.194531181s ago: executing program 7 (id=2623): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0xcb8}, {0x60, 0x8}, {}, {0x2}, {0x6, 0x0, 0xfe, 0x10000000}]}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0xcb8}, {0x60, 0x8}, {}, {0x2}, {0x6, 0x0, 0xfe, 0x10000000}]}) r1 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xfd, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"], 0x18}, 0x0) 6.803404058s ago: executing program 7 (id=2628): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x8000000003c) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0xe}, {0xfff3, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000440)=0x200, 0x5f) sendmmsg$inet(r0, &(0x7f0000001800)=[{{&(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000700)="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", 0xfdef}], 0x1}}], 0x1, 0x0) 6.697246671s ago: executing program 7 (id=2630): mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0xe, 0x200000006c832, 0xffffffffffffffff, 0xbd6bd000) 6.475354295s ago: executing program 7 (id=2633): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000130001002cbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB='G'], 0x20}, 0x1, 0x0, 0x0, 0x8064040}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000180)={0xfffd, 0x1}, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) socket$packet(0x11, 0x2, 0x300) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1800000027000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r10 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b7000000000007000000000000940f000000000000fa536637de89a2521479d95d9612af76252602eb679c08a7c7b757c9b0687e618561f9ceb4fb7982675101a30631fb686f3f95d2501aba0320a8364722543175fb66a10ab1fa6c16f94a6e999a9a863b2801c448b0ff2b6f"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00'}) sendmsg$SEG6_CMD_SETHMAC(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0xfffffffffffffe13, r11, 0x1, 0x8000000, 0x80, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x10, 0x4, [0xfffffefe, 0x6800, 0x5]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x5f}}, 0xc0c4) sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x804420b}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r11, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1d}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x2, 0x40, 0x63b, 0x3ff]}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x0, 0x1, 0x101]}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44001}, 0x404c801) 3.506587743s ago: executing program 4 (id=2661): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) (async) accept(r0, &(0x7f0000000000)=@ax25={{0x3, @bcast}, [@rose, @netrom, @remote, @null, @rose, @null, @rose, @netrom]}, &(0x7f0000000080)=0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0x2000000000000108, &(0x7f0000000740)=ANY=[@ANYBLOB="8520000004000010000000000000"], &(0x7f0000001800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x1b) 3.504125096s ago: executing program 4 (id=2663): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000070000000c00018008000700", @ANYRES32=0x0, @ANYBLOB="e11b8531de44e70c9328d907185deb951097e0a21701b55da2996706c5703b59281492ea90bc83aecc6696db6a5616390300007855e2f53dbb46db73334c20d8a6b32355816f58236ed417139be976b2066cc8a5b6c7bc18d0f643d0389c29d97ae5371351f3fe0239c9f0d908c2502ca88a0784561ccc16"], 0x20}}, 0x880) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0xffffff01, @mcast2, 0x0, 0x4}, 0x20) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x2cb}, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (async) write$tun(r4, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x36, 0x65, 0x0, 0x3f, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x22, 0x0, @wg=@data={0x4, 0x7ff, 0x7f, "5000fe961948108900fa"}}}}, 0x44) (async) r7 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000000)={r7}) (async) write(r3, &(0x7f0000000500)="240000001e005f02141f00fffffffff801000000080000000000000008000902009ea5b1", 0x24) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x602b2, 0x40c41}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x401}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.922365618s ago: executing program 4 (id=2667): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x4, 0x4, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xf, 0x13, [{0x60, 0x1}, {0x48, 0x1}, {0xc}, {0x4e, 0x1}, {0x3}, {0xc}, {0xc, 0x1}, {0x16, 0x1}, {0x24}, {0xc, 0x1}, {0x30, 0x1}]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000001b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140)=r4, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x3b, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac141416440c05114d2f87e5940c05ab840c13f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 2.49921496s ago: executing program 4 (id=2670): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) (async) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000800850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.36832436s ago: executing program 4 (id=2672): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xfff) accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32], 0x5c}}, 0x40) 1.308889218s ago: executing program 8 (id=2676): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, 0x0, 0x1, 0x405, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x58}}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006d61637365630000100002800c0004000200000100c2800008000500", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x0) 1.277040873s ago: executing program 8 (id=2678): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000003feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000006f440000000000006b0a00fe000000007303000000000000b500feff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050cdcfc92f5daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf9bf04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff4e2c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62cd15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc8230000065937f36f6490eb033b1ce0d4922701cb42aa86ee11cd5950b58ebffffae2aba1a21410e6cb3835bc2c19c9dacbb5f836d1c0de069c20c55fa567859aca8be3afdc3a14779e9181a382831580eac154d314974d209c00896548b04f80d68da1c7ecdfea1e05d0f442b81c4f2a38ae1f43688aff1d3eb14112da5d5289bedeeff7093a12faf47f55bd7ffc82893600042e761ec18de4cd287e176befc4af4063e5f091f8a50cbf02ad70682c0131d616ff6d999fc6fba6e9d4a3fc4e6430aca493d38db18ef4b2d46a22c1dc14910a49126684e453d30ea51dc537a0c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10, 0xffffffffffffffff}, 0x94) 1.276457731s ago: executing program 9 (id=2679): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0x7, 0x3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 1.255272894s ago: executing program 8 (id=2680): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@newtaction={0x1a4c, 0x30, 0x83d79f1e8021ba05, 0x0, 0x0, {}, [{0x1a38, 0x1, [@m_police={0x1a34, 0xe, 0x0, 0x0, {{0xb}, {0x1910, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x80000001, 0x6, 0x3, 0x7f, 0x1002, 0x5, 0x4820, 0x34d, 0x1, 0x2, 0x2, 0x8, 0x4, 0x1, 0x76a, 0x5811, 0x2, 0x8, 0x0, 0x8, 0x80, 0x0, 0x6, 0xe, 0xff, 0x10000, 0xfff, 0x200, 0x7, 0xa, 0xfffffbff, 0x7, 0x400, 0x2, 0x1, 0x7, 0x1, 0x2, 0x3, 0x2, 0x5, 0x30d7, 0x5, 0x800, 0xfffffffd, 0x4, 0x0, 0xffffff6b, 0x5, 0x8, 0x0, 0x5, 0xfffffffc, 0x1, 0x7a, 0x5, 0xaf, 0x4, 0x5, 0x4, 0x0, 0x0, 0x377, 0x2, 0x3, 0x400, 0x4, 0x0, 0x2, 0x3, 0x80000001, 0x3, 0xff, 0x7, 0x5, 0x7, 0x80, 0x17, 0x81, 0xb8f, 0x3, 0x0, 0x400, 0x0, 0xfffffffa, 0x1, 0x5, 0x800, 0x0, 0x6, 0x8, 0x400, 0x80000000, 0x7fffffff, 0xe434, 0x9, 0xfffffff8, 0x80, 0x2, 0x2, 0x5, 0x2e21, 0x87e0, 0x9, 0x9663, 0xa, 0x200, 0x79d, 0xf, 0x3, 0x0, 0xc06, 0x80000000, 0x6, 0x4, 0x7ff, 0x58b3, 0x1, 0xb, 0x40, 0xbe9, 0x1, 0xfffffeff, 0x1, 0x5, 0x50d557ab, 0xc, 0x9, 0x9, 0x6, 0x3, 0x63, 0x249, 0x452, 0x7, 0xffff4a7a, 0x6, 0x9, 0x9, 0x25cd, 0x9, 0x47fd, 0x5, 0xe02, 0x7, 0x0, 0x8, 0x81, 0x60000, 0xf, 0x800, 0x4, 0x4000000, 0x101, 0x81, 0x9, 0xc99b, 0x8, 0x8, 0x4, 0x6e9c, 0x36, 0x6, 0xd12, 0x7, 0x1, 0x3, 0x1ff, 0x4, 0x5, 0x1000, 0x7ff, 0x401, 0x7, 0x7, 0x2, 0x8a, 0x9, 0x1, 0x9, 0x7, 0x6, 0x2, 0x1327, 0x5, 0x400, 0x8, 0x5, 0xa00, 0x8, 0x9, 0x7ff, 0x1, 0x7, 0x9, 0x7, 0xad, 0x4, 0x401, 0x86a6, 0x7901, 0x0, 0x6, 0x4, 0x2, 0x3, 0xb509, 0x45b, 0x0, 0x3, 0x80000001, 0x68000000, 0x3e2b, 0x3, 0x7fff, 0x8597, 0x6, 0x4, 0x1, 0x8001, 0xa0000000, 0x10, 0x3, 0x87, 0xfffffffa, 0x0, 0x71, 0x4, 0x2, 0x10001, 0x7, 0x5, 0x7fff, 0xc40e, 0x8, 0xb, 0x7f, 0x17f, 0x8000, 0x8, 0x7, 0x424, 0xc8, 0x82, 0x2, 0x800000, 0x10001, 0x7, 0x6, 0x347320a6, 0x0, 0xf52b, 0x8, 0x4, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x751}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x6, 0xffffffb3, 0x100, 0x1, {0x3f, 0x0, 0x5, 0x8, 0x5, 0x1000}, {0x3, 0x2, 0x81, 0x7, 0x4, 0x2}, 0x4, 0x0, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x800, 0xa9, 0x9, 0x3ff, 0x9, 0x80000001, 0x2, 0xfffff001, 0x89b, 0x8, 0x4, 0x721, 0x3, 0x80000001, 0x22, 0x2, 0x8, 0x4, 0x3, 0x9, 0x8, 0xffff9844, 0x3, 0x8, 0x400, 0x7f, 0xf7, 0x3, 0x9, 0x0, 0x7, 0x2, 0x1, 0x3, 0x6, 0x9, 0x3ff, 0x5, 0x3ff, 0x4, 0xba2, 0xffff, 0x7fffffff, 0x7, 0x3, 0x9, 0x4, 0x7, 0x401, 0x239b, 0xfffffff7, 0x7fffffff, 0xfffffffd, 0x8, 0x9, 0x9, 0x0, 0x0, 0x2, 0x1, 0x4, 0xfffffc00, 0x3, 0x4, 0x1, 0xffff, 0x3, 0x676, 0xd3, 0x7, 0x1, 0x1, 0xfffffff4, 0x8001, 0xe93d, 0x4, 0xdb2, 0x80000000, 0x6, 0xffffff1e, 0x2, 0x7f, 0x3, 0x0, 0x2bb, 0x200, 0x9, 0x0, 0xff, 0x4, 0x3, 0x721c, 0x2, 0x26c5, 0x6, 0x7, 0x12, 0x1, 0x4, 0x6, 0x1, 0x2, 0xcb91, 0x0, 0x4, 0x6154, 0x9, 0x6, 0x7, 0x0, 0x3, 0xda2a, 0x1, 0xffffbd6d, 0x0, 0x7, 0x0, 0x4, 0x401, 0x4, 0xfffffffe, 0x1, 0x81, 0x10, 0xffff, 0x9, 0x600000, 0x8, 0x6, 0x8001, 0x2, 0x1, 0x5d, 0x2, 0x7fff, 0x8, 0x7fffffff, 0x3, 0x5, 0x1, 0x2, 0x9, 0xfffffffa, 0x4, 0x8, 0x4, 0x200, 0xfffffff7, 0x7, 0x7fffffff, 0x7f, 0xc, 0x1, 0x80000000, 0x3, 0x80000000, 0x101, 0x0, 0x5, 0x7, 0x3, 0x2, 0x1, 0xa579, 0xfffffff9, 0xf, 0x113, 0xfffffffb, 0xce58, 0x9, 0x6, 0x4, 0x1000, 0x6, 0x101, 0x0, 0x6a57, 0x9, 0x7, 0x0, 0x3, 0x800000, 0x0, 0x401, 0x7, 0x6, 0x401, 0x8, 0x0, 0x2, 0xffff, 0xb4, 0xfffffffd, 0x1, 0x3, 0xfffffdb7, 0x7, 0x65d, 0x260e, 0x7, 0x1, 0x1, 0x4, 0xd, 0x6, 0x9c, 0x8, 0x40, 0x1, 0xfffffff4, 0xfffffffe, 0x2, 0x7, 0x2, 0xc, 0x800, 0x485, 0xa292, 0x1ff, 0x1000, 0xfffff800, 0xffffff01, 0x120, 0x3, 0x5c00000, 0x80000000, 0x1, 0x400, 0x80, 0xa, 0xd, 0x0, 0x3, 0x9, 0x3, 0x9, 0x8, 0x7f, 0x545b, 0x100, 0x1ff, 0x5, 0x6, 0x6, 0x8, 0x2, 0x9, 0x40, 0x2, 0x1, 0x80, 0xd, 0x4a, 0x7fffffff, 0x5, 0xad]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffff2}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x34beb362}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000000, 0x0, 0xfff, 0x7, 0xffff, 0x7, 0x8, 0xef, 0x2, 0x8, 0x1, 0x81, 0x7, 0x4, 0x17b, 0x5ec, 0x1, 0x40, 0x2, 0x10001, 0x0, 0x1200000, 0x4, 0x800, 0x7, 0x5af6, 0x1, 0x80, 0xfffffec4, 0x5, 0xc, 0x10, 0x3, 0x1141, 0x5, 0x8, 0xffffc644, 0xfffffc00, 0xfffffff7, 0x10001, 0x81, 0x2, 0x5, 0x7ff80, 0x90, 0x6, 0x1ff, 0x3, 0x2, 0x6c1, 0xfffffffc, 0x111, 0xce23, 0x8000, 0x2, 0xfffffff9, 0xfffffffa, 0x9, 0x7a, 0x5, 0xfffffff9, 0x5, 0x800, 0x9, 0x6, 0x7, 0x7, 0x1, 0x9, 0x9, 0x4, 0x0, 0x4, 0x4, 0x6, 0xffff, 0xffffff80, 0x9, 0x4, 0x0, 0xe2ca, 0x8, 0xe1d0, 0x894, 0x7, 0x8, 0x8, 0x9, 0x2, 0xa52, 0x0, 0x800, 0x4, 0x5, 0x10000, 0x6, 0x9, 0x8, 0x401, 0x7ff, 0x800, 0x100, 0x78a2d1d6, 0x8451, 0x80000001, 0x1, 0x8, 0x5, 0xf, 0x2, 0xf, 0x6, 0x1ff, 0x9, 0x0, 0x24c0, 0x1, 0x5, 0xe41, 0x557, 0x6, 0x1, 0x1, 0x1ff, 0x9, 0x7, 0x7, 0x5, 0x3ff, 0x7, 0x3, 0x80000000, 0x6, 0x8, 0x4, 0xfffffffa, 0x76, 0x3, 0x9, 0x6a, 0xa, 0x80, 0xc, 0x1a4, 0x401, 0x8, 0x5, 0x3, 0x6, 0x80, 0x4, 0x5, 0x9, 0x1d5, 0x535b5328, 0x9, 0x5, 0xffffff4c, 0x2, 0x1, 0x10001, 0x86, 0x3, 0xff, 0x2, 0x3, 0x0, 0x4, 0xf627, 0x0, 0x5, 0x0, 0x5, 0x6, 0x100, 0x4505, 0x71a, 0x3, 0x4, 0xfffffffc, 0x2, 0x40, 0x48b1fd28, 0x51, 0x5, 0x7, 0x8, 0x15, 0xfffffff3, 0xa, 0xfd, 0x5, 0x2, 0xe, 0x14, 0x401, 0x6, 0x8, 0x0, 0x0, 0x9, 0x2, 0x6, 0x40, 0x6, 0xa5d, 0x2, 0x2, 0x3, 0x54c, 0x2, 0x9, 0xb7, 0x1a54c108, 0x4, 0x509, 0x0, 0x200, 0x7, 0x2, 0x3ff, 0x2, 0x29, 0x0, 0xff, 0x3, 0x8, 0xbcac, 0x7, 0x3, 0x7af53619, 0x10000000, 0xa60, 0x5c, 0x925a, 0x6, 0xfffff6b2, 0x0, 0x1, 0x7, 0x8, 0x7, 0x6, 0x49, 0x1, 0x9, 0xfffffffe, 0x0, 0x0, 0x8001, 0x5, 0x7498, 0x0, 0x9, 0x3, 0x4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5ad0}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x7, 0x7, 0xd, 0x5, {0x80, 0x2, 0x8, 0x3ff, 0xad, 0x8}, {0x0, 0x1, 0x4, 0xf0, 0xfff8}, 0xb, 0x7, 0x9782}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6601, 0x1, 0x1ff, 0x5a88, 0xffff, 0x0, 0x9eb, 0x9, 0x800, 0x9, 0x1, 0x7fffffff, 0xffff, 0x8001, 0x110, 0x1000, 0x2, 0x0, 0x38a, 0x4, 0xffffffff, 0xfffff800, 0x821, 0x9c01, 0xfffffff5, 0x6, 0x6, 0x5, 0x9, 0x8, 0x6, 0x4, 0x40, 0x1, 0x8665, 0xe5f, 0xe0, 0x8, 0x3, 0x8, 0x3, 0x5cf9, 0x5, 0x4b7, 0xffff, 0xffffffff, 0x7, 0x101, 0x8, 0x8, 0x8000, 0x7, 0x0, 0x1000, 0xfffffff9, 0x5, 0x14, 0x6, 0x6, 0x9, 0x10, 0x9, 0x5, 0xae5, 0x7, 0x1, 0xa, 0x7, 0x5, 0x2f6, 0x9, 0x8, 0x5, 0x8, 0x6, 0x6, 0x0, 0x0, 0x1, 0x7, 0x2, 0x610b, 0x3, 0x9, 0x8, 0x4, 0x8000, 0x5, 0x7360, 0x0, 0x8000, 0x1, 0xe, 0x262, 0x8001, 0x8, 0x4, 0xfffffff9, 0xfff, 0x9, 0x4, 0xfffffc7c, 0x10000, 0xfffffff9, 0x52d, 0x4, 0x0, 0x9cbc, 0x7f, 0xb19c, 0x8, 0x0, 0x4, 0xc, 0x7, 0x7, 0x7f, 0x8, 0x9, 0x1, 0x1, 0xfb4, 0x24, 0xffffffff, 0x8, 0x7fff, 0x8, 0x5, 0x0, 0xdb, 0x4, 0x4b9, 0x1, 0x7fffffff, 0x7fffffff, 0x4, 0x8, 0x7, 0x3, 0x7, 0xfb3b, 0xa5a, 0x4, 0xe, 0x4, 0x0, 0xfffffff8, 0x7f, 0x9, 0x6, 0x7, 0x2, 0xfffffffa, 0x5, 0xb93f, 0x7, 0x0, 0x9, 0x2, 0x3, 0x7, 0x0, 0xff, 0x8, 0xa, 0x81, 0x80000000, 0x7, 0x9, 0xa968, 0xb, 0x8, 0x1, 0x200, 0x80, 0x6, 0x3, 0x5, 0xe, 0xb40, 0x8, 0x4, 0xfffff800, 0x2, 0x6, 0x2, 0x32, 0x4, 0x0, 0x3, 0x5, 0x1da9fada, 0xb75, 0x6, 0x946, 0xa, 0x7, 0x3, 0x2, 0x5, 0x7fff, 0x4, 0x8, 0x5, 0x61c, 0xa, 0x1, 0x3c21c644, 0x5, 0x5, 0x80000, 0x1, 0x1, 0x7, 0x2, 0x0, 0x9, 0x7, 0x5, 0xffffffff, 0x8b8, 0xffff0000, 0x2, 0x2, 0x3, 0x9, 0x0, 0xde, 0x2, 0x15b90183, 0x5, 0xa4, 0x5, 0x8, 0xa98a, 0x0, 0xbc49, 0x8, 0xff, 0x6, 0x0, 0x2, 0x6, 0x6b9, 0x6, 0x8, 0x9, 0x6, 0xf2, 0xa4dc, 0x4, 0x12f, 0x5, 0xfffffffa, 0x6, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffe, 0x81, 0x2, 0xfff, 0x3, 0x10, 0xc2, 0x6, 0x8, 0x7f, 0xfffff001, 0xffffff7d, 0x80000001, 0xa, 0x6, 0x6, 0x8, 0xce, 0x10001, 0xd, 0x8, 0x6b, 0x8000, 0x6, 0xffffffff, 0x9, 0x4, 0x3, 0x0, 0x8, 0x4, 0x7, 0x401, 0xe83, 0xd5, 0x98b2, 0x1, 0x4, 0x6, 0x25107a07, 0x4, 0x1, 0x5, 0xca34, 0xf27, 0x5e9, 0xd10c, 0x8, 0x4, 0x0, 0xd9ee, 0x3ff, 0x1, 0x7, 0x5, 0x4, 0x3, 0x2, 0x7, 0xa5, 0x8001, 0x589c, 0x9, 0xfffffffd, 0xcb21, 0xfffffffb, 0x4c0, 0xffff, 0x9, 0x9, 0xff, 0x10000, 0xffffffff, 0xfffffffd, 0x5, 0x7c4d, 0x6, 0x1, 0xc, 0x4285, 0x3, 0xf8, 0x7fff, 0xfff, 0xfdb, 0x4, 0x2, 0xa, 0x9, 0x400, 0x5, 0x2, 0x8, 0x9bcd, 0x1, 0xda8, 0x6, 0xffffff00, 0x550a, 0x5, 0x3, 0xff, 0xb4dcd61, 0x0, 0x3be6, 0x57e, 0x1ff, 0xcb4, 0x7, 0x5b3ac3ba, 0x1ff, 0x3f3a, 0x1, 0x40, 0x4, 0x7fff, 0x400, 0x94, 0x40, 0x8000, 0xffff, 0x6, 0xa1, 0xfffffff8, 0x9, 0x7, 0x7, 0xfff, 0x10, 0x9, 0x8, 0x6, 0x7, 0x80, 0x2, 0x5, 0xfff, 0x8, 0x4, 0x9, 0x1ff, 0x3, 0xd, 0x2, 0xfffffff9, 0x7fff, 0xfffffff9, 0x7, 0xe4d, 0x1010000, 0x1, 0xffffffa1, 0x33af, 0x7fffffff, 0x5, 0x10000, 0x7, 0x2, 0xb13d, 0x4c, 0xd, 0x3, 0x5, 0x32143a65, 0x5, 0xf, 0x7fff, 0x5, 0x5, 0xff, 0x7fffffff, 0x7fff, 0x1, 0x2, 0x8, 0x800, 0x0, 0x1, 0x2, 0x9, 0x3, 0x1, 0x10000, 0x5, 0x0, 0x6, 0x6, 0x8, 0x6, 0x6, 0x0, 0xd5, 0x5, 0x1, 0x2, 0x9, 0x4, 0x9, 0x0, 0x2, 0x4, 0x6, 0x1, 0x1, 0x8, 0x2, 0x7, 0x8, 0x3, 0xfffffffd, 0x3, 0xfffffffa, 0x4, 0x0, 0x4, 0x6, 0x7, 0x2, 0x5, 0x9, 0x7, 0x9, 0x1, 0xf83, 0x4, 0x9, 0x9, 0xfffffff7, 0x5, 0x5, 0x2, 0x10000, 0x4, 0x314e, 0xb9e6, 0x9, 0xffff5256, 0x86, 0x4, 0x7, 0xf9, 0x1b3, 0x3, 0x7, 0xfffffff8, 0x7ff, 0x81, 0xe, 0x2, 0x6, 0x5, 0x0, 0x6, 0x1, 0x400, 0x513]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xbe21}], [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x20000000, 0x6, 0x4, 0x9, 0xe, 0x5, 0x7d, 0x2, 0x5, 0x6, 0x1ff, 0x5, 0x6, 0x1a72, 0x100, 0x2, 0x40, 0xfff, 0x101, 0xfffffff5, 0xfffffffc, 0xfffffff7, 0xbd, 0x3, 0x82, 0xffff, 0x0, 0x6, 0xfffffff7, 0x40, 0x2, 0x2, 0x5, 0x8, 0x5, 0x7, 0x6, 0x4, 0x80, 0x100, 0xf25, 0x10001, 0x2, 0x0, 0x2, 0x6, 0x1, 0x80, 0x9, 0x8, 0x2, 0x7fff, 0x1c, 0xe, 0x1, 0x8, 0x1, 0x59, 0x8000, 0x3, 0x1, 0x9, 0x1ff, 0x7, 0x6, 0xb7, 0x4, 0xfffffffb, 0xfffffffa, 0x3, 0xbd8, 0xcf, 0x8000, 0x5, 0xffff, 0x3, 0x1, 0x7, 0x7, 0xffffffff, 0x10001, 0x4, 0xc409, 0xfffffff7, 0x3ff, 0x7fffffff, 0x0, 0xfff, 0x80, 0x3, 0x7, 0xd3a, 0x10, 0xe, 0xcb, 0xfa, 0x5, 0xcdb, 0x0, 0x0, 0x2, 0x7, 0x9, 0x10, 0x5, 0xd1, 0x3, 0x100, 0x4e6091b3, 0x7, 0x3, 0x8, 0x9, 0x3, 0x7562, 0x2, 0x3, 0xf, 0x1, 0x2, 0x0, 0x200, 0xb61, 0x401, 0x2, 0x7f, 0x0, 0x4, 0xe, 0xffff, 0xd3, 0x8, 0x77, 0x0, 0x7, 0x8, 0x2365, 0x1, 0x8, 0xfffffffc, 0x2, 0x6, 0x50000000, 0x8, 0x7, 0x800, 0x4, 0x9, 0xf3, 0x21, 0x2582, 0x101, 0x3, 0x9, 0x0, 0x0, 0x5, 0x0, 0x61, 0xff, 0x4, 0x0, 0x8000, 0x8000, 0xdc1, 0x20, 0x3, 0x401, 0x6, 0x10001, 0x6, 0x3, 0x3, 0x4, 0x52, 0x7, 0xfffffff8, 0x8, 0x0, 0x1, 0x6e5, 0xf, 0x9ffffffc, 0x4d8, 0x9, 0x8001, 0xa6f, 0x0, 0x6, 0x8, 0xe, 0xfffffffe, 0xe, 0x5, 0x6, 0x1, 0x3, 0x8, 0x7, 0x80, 0x8, 0x5, 0x6, 0x1023, 0x6, 0xdc, 0x0, 0x0, 0x3, 0x6, 0x5, 0x7f, 0x101, 0x10, 0x9, 0x8001, 0xff, 0x3, 0x0, 0x7, 0x2, 0x7, 0x9, 0x8, 0x8, 0x5c89, 0x0, 0xfb, 0xa, 0x0, 0x6, 0x10, 0x9, 0xf, 0x5, 0x200, 0x80, 0xe, 0x10000, 0x2, 0x3, 0x3, 0x6, 0x3, 0xfffffc00, 0x1, 0x2, 0xcf, 0xf, 0x1, 0xfff, 0x6, 0x0, 0x8, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}]]}, {0xf9, 0x6, "265c0054b365f45ad773cc5ea5add06844ecb32a9b8bf88faed8a379d7da77f7144bf9470d52eed9deced86929190ae5250ea9416a13f84ddb02193254e77cf6dd6f616df4ea33e7b1699ec942191a3a58302877bdd9a9a3b7ef7312021abbef46a061e8dbd449ecaa42c9d875929c75f0d0adf89d38f2eebf081d4e0120d3a53e8fbc259e737c114cb3d71eecc7720fd4f4c540dcde9671f7e586e6b91de691d45d4245fe7ad1d72b6841a7b26c6ad9a682e2492bf22b4614cb19da63146542c385ed3eaaeedcdbdc0316e00e30b06de57141f565f826418715f1568acbd895eb33bc3a367becc1b110c9fe7d1aadfd09e9ae0967"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x1a4c}}, 0x0) 1.016140163s ago: executing program 8 (id=2681): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000900000004", 0x2f}], 0x1}, 0x4880) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.015194237s ago: executing program 9 (id=2682): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00ef0008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) (async, rerun: 32) bind$llc(r5, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54, 0x0, 0x0, @broadcast}, 0x10) (async, rerun: 32) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x820b008}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x80) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000000008ad09000000000000000086fb00000000000073797a31000000000c0004800800014000007f000000024088be00000500030001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x54}, 0xc044) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r8, 0x0) (async, rerun: 32) mmap(&(0x7f0000428000/0x2000)=nil, 0x2000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) (rerun: 32) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@empty, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x4040, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100}, {0xbe00, 0x88be, 0x8}}}}}, 0x0) (async) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r7, 0xc6e9f000) (async) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0xffffe000) (async, rerun: 32) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r8, 0x100000000) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000200000c00000000030000001801000020786c2500000000002020207b0af8ff00000000bda100000000000057010000f8ffffb8f4654e0008000000b70300009500000085000000190000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 845.036843ms ago: executing program 8 (id=2683): socket$rds(0x15, 0x5, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2716, 0x0, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x2004e884}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x10007, 0x5c}, 0x94) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f00000001c0)={0x2}, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) sendmsg$nl_route_sched(r1, &(0x7f0000004700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x9fdeb199a27f1693}, 0xc, &(0x7f00000046c0)={&(0x7f0000003300)=@newtfilter={0x139c, 0x2c, 0x400, 0x70bd2c, 0x7, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfffd}, {0xb, 0xe}, {0xe, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x136c, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x1}, @TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc}}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xcb}, @TCA_FLOW_MASK={0x8, 0x6, 0x8000}, @TCA_FLOW_ADDEND={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x9}, @TCA_FLOW_ACT={0x132c, 0x9, 0x0, 0x1, [@m_connmark={0x1050, 0xd, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x4, 0x10000000, 0x0, 0x6752}, 0xff}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbedit={0x80, 0x17, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xffffffff}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffffe, 0x100, 0x4, 0x6, 0x426}}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7fff}]}, {0x21, 0x6, "16128833087e451fced8e73e50bce3da9ac440d3bf4850dbee00343e68"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_nat={0x1cc, 0x1c, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x4, 0x1, 0x895, 0xd06}, @multicast2, @private=0xa010101}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1ff, 0x5, 0x1, 0x5, 0x10}, @multicast2, @loopback, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x1, 0xffffffffffffffff, 0x0, 0x6}, @loopback, @dev={0xac, 0x14, 0x14, 0x32}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x20000000, 0x5, 0x858f}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00}}]}, {0x101, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x8c, 0x18, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8e, 0x5, 0xffffffffffffffff, 0xb9, 0x1732}}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, {0x30, 0x6, "e276670aaa0d749ba8ea636331bb31b10803ed9e0cb6d70f9fc934dcc3a2df165d67e7eb14324d9e4da14372"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x139c}, 0x1, 0x0, 0x0, 0x80}, 0x4014000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000001300)='%pB \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r5, &(0x7f00000004c0), &(0x7f00000001c0)=""/13}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, 0x0, &(0x7f0000000280)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000190001002cbd700000c8c3532d"], 0x24}}, 0x0) socket$inet(0x2, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r10, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xdbb8, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}], 0x1, 0xc88c4) 591.994522ms ago: executing program 9 (id=2684): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x40, '\x00', 0x0, 0x0}, 0x50) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000001380)=[{{&(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000880)="723aa5669d6534e4069306556265a52d7b4979d14adbb3c76ab355fedcc87612f0f5", 0x25}, {&(0x7f00000008c0)="c23c31cc005949df9c3658d49469a5d9f7b75e57db1dd8e048dc77391e6f98f12d2ae5086ab922aa99faa10ab8c63a35cc1fcd2a91f1b5decaaae47dd93840897b55e1b7fc26f8dcec7273b7ef83a79295149a8a86df3b96136aa682dca6eb6d374e2f3f89566de2e177430bc165f6a00ea69cb9", 0x74}, {&(0x7f0000000940)="9ef74240a0e15251771c6030011864e9be14f804b512ac5a70158b1f144755b19c9f249b59d8e99cea6177b28d0cf7", 0xffffffb3}], 0x3, 0x0, 0x0, 0x20084044}}, {{&(0x7f00000009c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000a40)="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", 0xfd}], 0x1}}, {{&(0x7f0000000b80)=@abs, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000e40)="00a52754418d60845891f171de02b260178bb1c8bed61cf7d7c45894fed6c5128fb7860bdc03c3276d902a20fc0ff4796350bf2edbcf50c91ffc791b9588e666998c52ef9c0af37edd10731a1696e4f7a2955f25516f5012335c768acd9a9ee23898ed09cdb1abbd37c658e058f7c8", 0x6f}], 0x1, &(0x7f0000000d00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="dc5aa9bcbf900b50b49e70a29077f17300a74f1d185d09941f2e48690bd59f9a13dfe5925e763c6d6cf4dbc2dab1dbb08f6ab89c843b7f633364ca0ee12ccb26f93ae74cc85f72c5f15ecbe413bfc2745e0127dcf44628d27d7d1b5b0b3459cfb79e2583be041efd9ce2afb953813cbf2f29", 0x72}], 0x1, &(0x7f0000000fc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0xb8}}, {{&(0x7f0000001080)=@abs, 0x6e, &(0x7f0000001280)=[{&(0x7f0000001100)="21abb9324d4bb0e142c60944b8f4722af52b9ab909390262a5d6c32aba6fe9eee6016da156e93e257e23ece67f6e74b254c75e76a74a", 0x36}, {&(0x7f0000001140)="d92a4161e20fd18389f3347fc4a8db3900829b87945e91344d0c440a63262e30f6c1e1e39a527d22abceb7b783c115533e68681ca0ffbcfe4d04f890394456034e2f0f5e6259bc1119aceb1d2e079b8da4510a797c07685febda2c69cbc5533e701b1c5df2835bbb0e49697f72c19937f703fe94ae6ff9eb2ed9cb6d6e7fa72e64a6d4745413a1905f24acfeaeaf02a2f61575f13a824fbdfb1f15dd6563ff0971a07850a71f758f764333fc4a935df29c81f8f75bb9ae3a10d11e9e860b79d246866ee467fbbcaf52ce94aff48eed0b25357a507547b7949a6ab041764d3962878bbf66864d53560492cbd40c9d4ab0f450", 0xf2}, {&(0x7f0000001240)="81c1cb152774ad5120d3269d2a892740ccc92b0f67e099aa80e62e5c0d7e3da5d7fa714dce56bcc5cd", 0x29}], 0x3, &(0x7f00000012c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}], 0x5, 0x10) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 443.323851ms ago: executing program 4 (id=2685): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000f40)={0x8000000000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r1}], 0x40, "b6e82d71306ddf"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001f40)={{r2, 0x4, 0x9, 0x4, 0x2, 0x5, 0xa, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2, 0x7}}) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1c, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r6, 0x4) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r7, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) (async) pipe(&(0x7f0000000380)={0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0xfffffffc, 0xf) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r10, r11, 0x8f5, 0x100000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xa, 0x1b, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x78d5b66f, 0x0, 0x0, 0x0, 0xffff}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f00000003c0)='GPL\x00', 0xfffffbff, 0x6a, &(0x7f0000000400)=""/106, 0x1e00, 0x31, '\x00', 0x0, @fallback=0x17, r3, 0x8, &(0x7f0000000480)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x7, 0x2, 0xfff}, 0x10, r6, r8, 0x0, &(0x7f00000005c0)=[r9, r0, r10, r0], 0x0, 0x10, 0xffff}, 0x94) r12 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x238, 0x258, 0x258, 0x238, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x20}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x368) 410.308197ms ago: executing program 8 (id=2686): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800124000001800050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x52, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xc, 0x0, 0x0, {[@generic={0x4, 0x6, "5eee37d2"}]}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x52, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xc, 0x0, 0x0, {[@generic={0x4, 0x6, "5eee37d2"}]}}}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000000f06010400000000000000000700000405000100"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000810) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket(0x400000000010, 0x3, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r9) socket$unix(0x1, 0x2, 0x0) (async) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x4}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x2, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0x240, 0x6, 0x1a, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0xfffffffe, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0xe, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0xe9a5}, {0x0, 0x3, 0x1fb, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0x1c}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x105, 0x2, 0x6, 0x1000, 0x4, 0x8001}, {0xd, 0x8, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x4, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x2, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x80000741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x8, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xffffffef, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0xc, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x7, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0xffffffff, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x5, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000009, 0x2, 0x7fc, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x8, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000, 0x0, 0x1}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x6, 0x1}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0xcf1e5dd1cfc6b99f}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x4}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x2, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0x240, 0x6, 0x1a, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0xfffffffe, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0xe, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0xe9a5}, {0x0, 0x3, 0x1fb, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0x1c}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x105, 0x2, 0x6, 0x1000, 0x4, 0x8001}, {0xd, 0x8, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x4, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x2, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x80000741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x8, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xffffffef, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0xc, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x7, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0xffffffff, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x5, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000009, 0x2, 0x7fc, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x8, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000, 0x0, 0x1}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x6, 0x1}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0xcf1e5dd1cfc6b99f}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r10, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r8, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)="6b46afbe0e1232a8a371039dbee9", 0xe}], 0x1}, 0x20000885) (async) sendmsg$kcm(r10, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r8, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)="6b46afbe0e1232a8a371039dbee9", 0xe}], 0x1}, 0x20000885) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r14 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 390.38292ms ago: executing program 9 (id=2687): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz1\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x800, 0x70bd28, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x10) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r3, 0x89e4, &(0x7f0000000400)={0x4f, "d8caccf4001071d66c155bdd71dc52a9c4b47841a49ba10800122c69bcafaa2abcf78cba7b368261cd17d076acd9901017641abe8e4567f086a593375808de1171cf0e3b925065d214119e421276f0addd81f4987f74a18ff76e563c2b6c9d55ffca4df6280c4059c5c23a440b40937aaa5c066b35150fb074cd4bf934e7ca87"}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000380)={0x0, 0xd6d}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000004c0)={r5, 0x1c, "ff959f7b31ddf58910f713c7e9592f390a5596d3ca33ce4041574d8e"}, &(0x7f0000000500)=0x24) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r6, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x20008000) 123.480339ms ago: executing program 9 (id=2688): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x5, &(0x7f0000000000)=@framed={{}, [@map_val={0x18, 0x340e47394361591a, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000018c0)={0x18, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket(0x10, 0x3, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x8136, 0x1}, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c000280060001000016"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@getlink={0x28, 0x12, 0xb07, 0x70b92c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0xa81, 0x8000}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20) 0s ago: executing program 9 (id=2689): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="24005a802000018014000300000000000000000001020004"], 0x40}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newneigh={0x34, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@NDA_LLADDR={0xa, 0x2, @local}, @NDA_DST_MAC={0xa, 0x1, @local}]}, 0x34}}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r8, 0x84, 0x81, 0x0, &(0x7f0000001200)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x215eb000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000100)={r7, 0xfffffffffffffff9, 0xb9f3, 0x7}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x100, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x200000000000000, 0x100000, 0x1}}, 0x40) r12 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0x7}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x1, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) kernel console output (not intermixed with test programs): tes in process `syz.4.1465'. [ 251.126815][T11328] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1467'. [ 251.283876][T11337] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1470'. [ 251.471199][T11352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1470'. [ 251.589525][T11354] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1474'. [ 251.618614][T11354] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1474'. [ 251.774360][T11354] veth11: entered promiscuous mode [ 251.809507][T11368] netlink: 'syz.4.1475': attribute type 21 has an invalid length. [ 251.841465][T11368] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1475'. [ 251.889722][T11368] netlink: 'syz.4.1475': attribute type 5 has an invalid length. [ 251.941330][T11368] netlink: 'syz.4.1475': attribute type 6 has an invalid length. [ 251.986412][T11368] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1475'. [ 252.187616][T11374] syzkaller0: entered promiscuous mode [ 252.226060][T11374] syzkaller0: entered allmulticast mode [ 252.523432][T11396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1481'. [ 252.560047][T11395] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 253.068576][T11414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1485'. [ 253.129089][T11417] pim6reg527: entered allmulticast mode [ 253.785223][T11445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.801514][T11446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1492'. [ 253.879491][T11452] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 253.949286][T11459] x_tables: duplicate underflow at hook 1 [ 254.212346][T11474] netlink: 'syz.2.1499': attribute type 10 has an invalid length. [ 254.270919][T11474] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.312779][T11474] bond0: (slave team0): Enslaving as an active interface with an up link [ 254.814189][T11497] ipt_REJECT: TCP_RESET invalid for non-tcp [ 255.279979][T11525] vcan0: tx address claim with dlc 0 [ 255.500209][T11535] netlink: 'syz.2.1518': attribute type 19 has an invalid length. [ 255.594001][ T30] audit: type=1800 audit(1782627451.869:5): pid=11538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1519" name="memory.events" dev="tmpfs" ino=1672 res=0 errno=0 [ 255.762881][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.769516][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.991501][T11556] netlink: 'syz.1.1525': attribute type 4 has an invalid length. [ 256.012749][T11555] netlink: 'syz.1.1525': attribute type 4 has an invalid length. [ 256.470219][T11575] __nla_validate_parse: 32 callbacks suppressed [ 256.470249][T11575] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1533'. [ 256.495970][T11575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1533'. [ 256.568800][T11575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1533'. [ 256.642804][T11584] ip6t_srh: unknown srh invflags 4000 [ 257.020261][T11605] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1543'. [ 257.125336][T11605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1543'. [ 257.284072][T11620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1547'. [ 257.367129][T11619] syzkaller0: entered promiscuous mode [ 257.386924][T11619] syzkaller0: entered allmulticast mode [ 257.568492][T11631] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1551'. [ 257.914365][T11647] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 257.923577][T11647] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 259.495208][T11638] veth0: entered promiscuous mode [ 259.505686][T11643] syz_tun: refused to change device tx_queue_len [ 259.514814][T11646] veth0: left promiscuous mode [ 260.373311][T11694] netlink: 'syz.3.1569': attribute type 1 has an invalid length. [ 260.553097][T11702] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1573'. [ 260.770827][T11714] openvswitch: netlink: Missing key (keys=40, expected=100) [ 261.105199][T11726] netlink: 'syz.0.1584': attribute type 16 has an invalid length. [ 261.142341][T11726] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1584'. [ 261.249823][T11729] netlink: 762 bytes leftover after parsing attributes in process `syz.0.1588'. [ 261.517953][T11742] netlink: 'syz.1.1593': attribute type 29 has an invalid length. [ 261.529338][T11742] netlink: 'syz.1.1593': attribute type 29 has an invalid length. [ 261.567588][T11742] netlink: 'syz.1.1593': attribute type 29 has an invalid length. [ 261.992054][T11763] netlink: 'syz.1.1603': attribute type 5 has an invalid length. [ 262.014644][T11763] netlink: 'syz.1.1603': attribute type 6 has an invalid length. [ 262.022894][T11763] netlink: 'syz.1.1603': attribute type 5 has an invalid length. [ 262.034549][T11763] netlink: 'syz.1.1603': attribute type 6 has an invalid length. [ 262.668728][T11785] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1613'. [ 265.363557][T11842] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1639'. [ 265.397508][T11844] netlink: 'syz.0.1640': attribute type 9 has an invalid length. [ 265.881201][T11864] netlink: 64467 bytes leftover after parsing attributes in process `syz.4.1647'. [ 265.982224][T11867] netlink: 'syz.2.1649': attribute type 29 has an invalid length. [ 266.139058][T11873] validate_nla: 1 callbacks suppressed [ 266.139078][T11873] netlink: 'syz.1.1652': attribute type 2 has an invalid length. [ 266.222454][T11879] C: renamed from veth1_to_team [ 266.260739][T11879] netlink: 'syz.4.1655': attribute type 1 has an invalid length. [ 266.278851][T11879] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1655'. [ 266.297595][T11879] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 266.454307][T11887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1659'. [ 266.792761][T11900] netlink: 'syz.1.1665': attribute type 1 has an invalid length. [ 267.334370][T11921] netlink: 'syz.0.1675': attribute type 2 has an invalid length. [ 267.967023][T11940] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1684'. [ 269.302318][T11936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1682'. [ 269.682011][T11956] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1691'. [ 269.728064][T11956] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1691'. [ 269.753429][T11956] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1691'. [ 270.184746][T11980] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1703'. [ 270.226384][T11982] netlink: 'syz.0.1704': attribute type 10 has an invalid length. [ 270.236936][T11980] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1703'. [ 270.294222][T11986] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1705'. [ 270.430802][T11990] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 270.583695][T11996] netlink: 'syz.4.1711': attribute type 10 has an invalid length. [ 270.617762][T11996] netlink: 'syz.4.1711': attribute type 10 has an invalid length. [ 271.043061][T12016] netlink: 'syz.0.1721': attribute type 1 has an invalid length. [ 271.809960][T12040] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1732'. [ 273.516275][T12100] ip6erspan2: entered allmulticast mode [ 273.552895][T12102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1761'. [ 273.844348][T12120] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1768'. [ 273.995075][T12127] IPv6: Can't replace route, no match found [ 274.167959][T12135] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1772'. [ 274.880536][T12172] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1781'. [ 275.485654][T12186] netlink: 'syz.0.1786': attribute type 3 has an invalid length. [ 275.518241][T12194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1787'. [ 275.533412][T12194] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1787'. [ 275.663021][T12200] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1789'. [ 275.791344][T12205] netlink: 'syz.0.1791': attribute type 8 has an invalid length. [ 275.990272][T12211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.092366][T12218] sock: sock_set_timeout: `syz.2.1797' (pid 12218) tries to set negative timeout [ 276.124465][T12218] Bluetooth: MGMT ver 1.23 [ 276.197559][ T5643] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.211282][ T5643] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.223147][ T5643] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.235640][ T5643] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.243905][ T5643] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.273348][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.285336][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.293168][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.303343][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.312901][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.709866][T12241] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 276.961260][T12250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1802'. [ 277.080995][T12256] netlink: 'syz.4.1804': attribute type 1 has an invalid length. [ 277.212100][T12256] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 277.264992][T12222] lo speed is unknown, defaulting to 1000 [ 277.322513][T12268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1807'. [ 277.423460][T12273] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1811'. [ 278.035067][T12303] syzkaller0: entered promiscuous mode [ 278.048938][T12303] syzkaller0: entered allmulticast mode [ 278.063139][T12303] netlink: 'syz.2.1818': attribute type 2 has an invalid length. [ 278.096928][T12303] vlan2: entered allmulticast mode [ 278.102123][T12303] bridge0: entered allmulticast mode [ 278.332560][T12222] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.340455][T12222] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.348173][T12222] bridge_slave_0: entered allmulticast mode [ 278.357273][T12222] bridge_slave_0: entered promiscuous mode [ 278.368362][T12222] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.375527][T12222] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.406017][ T5633] Bluetooth: hci5: command tx timeout [ 278.425366][T12222] bridge_slave_1: entered allmulticast mode [ 278.447034][T12222] bridge_slave_1: entered promiscuous mode [ 278.637711][T12222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.726798][T12317] 0: left allmulticast mode [ 278.749970][T12317] hsr_slave_0: left allmulticast mode [ 278.770311][T12317] hsr_slave_1: left allmulticast mode [ 278.790169][T12317] bond2: left promiscuous mode [ 278.801481][T12317] geneve3: left promiscuous mode [ 278.806608][T12317] geneve3: left allmulticast mode [ 278.827243][T12317] gretap2: left promiscuous mode [ 278.832337][T12317] gretap2: left allmulticast mode [ 278.840262][T12317] bond3: left promiscuous mode [ 278.845165][T12317] bridge7: left promiscuous mode [ 278.854462][T12317] macvtap1: left allmulticast mode [ 278.860314][T12317] macvtap2: left allmulticast mode [ 278.878283][T12222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.945624][ T7162] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 278.967454][ T7162] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 279.045092][ T7162] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 279.054655][ T7162] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 279.068076][T12340] __nla_validate_parse: 2 callbacks suppressed [ 279.068094][T12340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1824'. [ 279.127397][T12222] team0: Port device team_slave_0 added [ 279.158355][T12222] team0: Port device team_slave_1 added [ 279.265594][T12222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.278662][T12222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.333426][T12222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.403659][T12222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.411328][T12222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.495609][T12222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.656311][T12222] hsr_slave_0: entered promiscuous mode [ 279.678324][T12222] hsr_slave_1: entered promiscuous mode [ 279.692969][T12222] debugfs: 'hsr0' already exists in 'hsr' [ 279.713583][T12222] Cannot create hsr debugfs directory [ 279.773630][T12363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1832'. [ 279.944052][T12369] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1835'. [ 280.020869][T12366] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1833'. [ 280.036166][T12375] netlink: 'syz.0.1835': attribute type 1 has an invalid length. [ 280.044732][T12366] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1833'. [ 280.072832][T12366] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1833'. [ 280.095331][T12371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.119633][T12375] 8021q: adding VLAN 0 to HW filter on device bond4 [ 280.303955][T12222] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 280.326975][T12222] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 280.338246][T12222] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 280.351354][T12222] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 280.365994][T12222] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 280.389436][T12222] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 280.409343][T12222] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 280.443554][T12222] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 280.475901][ T5633] Bluetooth: hci5: command tx timeout [ 280.621824][T12222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.698255][T12222] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.728119][ T7162] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.735331][ T7162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.767953][ T7162] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.775182][ T7162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.329173][T12408] nbd: must specify a size in bytes for the device [ 281.352347][T12411] netlink: zone id is out of range [ 281.378636][T12411] netlink: zone id is out of range [ 281.399481][T12411] netlink: zone id is out of range [ 281.419120][T12411] netlink: zone id is out of range [ 281.850792][T12440] sctp: [Deprecated]: syz.2.1849 (pid 12440) Use of int in maxseg socket option. [ 281.850792][T12440] Use struct sctp_assoc_value instead [ 281.869738][T12441] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1847'. [ 282.194308][T12222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.232074][T12459] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 282.558112][ T5633] Bluetooth: hci5: command tx timeout [ 282.627670][ T7541] hid-generic 0005:0C45:1010.0001: item fetching failed at offset 7/8 [ 282.652607][ T7541] hid-generic 0005:0C45:1010.0001: probe with driver hid-generic failed with error -22 [ 282.854928][T12222] veth0_vlan: entered promiscuous mode [ 282.875407][T12484] bridge: RTM_NEWNEIGH with invalid ether address [ 282.893862][T12222] veth1_vlan: entered promiscuous mode [ 282.971018][T12222] veth0_macvtap: entered promiscuous mode [ 282.993118][T12222] veth1_macvtap: entered promiscuous mode [ 283.028965][T12222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.062276][T12222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.082864][ T730] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.101159][ T730] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.132382][ T730] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.152609][ T730] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.268746][ T7173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.287359][ T7173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.392232][T12499] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1864'. [ 283.402134][T12499] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1864'. [ 283.429051][ T730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.448844][ T730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.606472][T12498] syzkaller0: entered promiscuous mode [ 283.612062][T12498] syzkaller0: entered allmulticast mode [ 284.636331][ T5633] Bluetooth: hci5: command tx timeout [ 285.560803][T12515] syz_tun: entered allmulticast mode [ 285.568156][T12515] syz_tun: left allmulticast mode [ 285.991324][T12537] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 285.992949][ T30] audit: type=1800 audit(1782627482.269:6): pid=12537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1876" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 286.008422][T12537] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 286.063100][T12537] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 286.080690][T12543] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1878'. [ 286.158469][T12547] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1879'. [ 286.179336][T12537] syz.4.1876 (12537) used greatest stack depth: 18536 bytes left [ 286.307587][T12553] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1882'. [ 286.330035][T12553] 8021q: VLANs not supported on gre0 [ 286.499053][T12564] rdma_op ffff88805653c1f0 conn xmit_rdma 0000000000000000 [ 286.727325][T12576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1888'. [ 287.233373][T12591] syzkaller0: entered promiscuous mode [ 287.239215][T12591] syzkaller0: entered allmulticast mode [ 287.250914][T12591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1893'. [ 287.847310][T12606] netlink: 292 bytes leftover after parsing attributes in process `syz.5.1898'. [ 288.383756][T12619] netlink: 'syz.5.1902': attribute type 1 has an invalid length. [ 288.436273][T12619] macvtap1: entered allmulticast mode [ 288.454049][T12619] macvtap2: entered allmulticast mode [ 288.460926][T12619] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1902'. [ 288.564545][T12621] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1903'. [ 288.645839][T12624] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 289.054424][T12634] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 289.250446][T12640] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1908'. [ 289.641148][T12648] netlink: 'syz.5.1910': attribute type 1 has an invalid length. [ 289.811005][T12653] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 289.817676][ T5634] IPVS: starting estimator thread 0... [ 289.905876][T12657] IPVS: using max 39 ests per chain, 93600 per kthread [ 289.979244][T12666] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 290.150236][T12674] xt_bpf: check failed: parse error [ 290.790153][T12709] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1927'. [ 291.195467][T12721] netlink: 'syz.4.1931': attribute type 3 has an invalid length. [ 291.204503][T12721] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1931'. [ 291.413317][T12725] netlink: 'syz.4.1933': attribute type 1 has an invalid length. [ 291.478301][T12725] 8021q: adding VLAN 0 to HW filter on device bond5 [ 291.506445][T12728] bond5: (slave geneve4): making interface the new active one [ 291.517186][T12728] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 291.540262][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.557466][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.577651][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.588145][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.009837][T12746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1939'. [ 292.023355][T12746] netlink: 'syz.4.1939': attribute type 5 has an invalid length. [ 292.046658][T12746] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1939'. [ 292.321463][T12757] xt_hashlimit: size too large, truncated to 1048576 [ 292.360300][ T5643] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 292.374280][ T5643] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 292.383297][ T5643] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 292.392508][ T5643] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 292.400976][ T5643] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 292.409784][T12761] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1944'. [ 292.931911][T12758] lo speed is unknown, defaulting to 1000 [ 293.352485][T12779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.429928][T12779] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.498263][T12779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.654893][T12779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.667464][T12779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.687515][T12779] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 293.698432][T12779] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.734441][T12779] veth1_vlan: left promiscuous mode [ 293.777031][T12779] veth0_vlan: left promiscuous mode [ 293.785020][T12779] veth0_vlan: entered promiscuous mode [ 293.794702][T12779] veth1_vlan: entered promiscuous mode [ 293.808666][T12779] veth1_macvtap: left promiscuous mode [ 293.816394][T12779] veth0_macvtap: left promiscuous mode [ 293.823383][T12779] veth0_macvtap: entered promiscuous mode [ 293.833327][T12779] veth1_macvtap: entered promiscuous mode [ 293.861661][T12779] 8021q: adding VLAN 0 to HW filter on device bond1 [ 293.891190][T12779] 8021q: adding VLAN 0 to HW filter on device bond2 [ 293.942786][T12779] 8021q: adding VLAN 0 to HW filter on device eth0 [ 293.968739][T12779] 8021q: adding VLAN 0 to HW filter on device eth1 [ 293.984757][T12779] 8021q: adding VLAN 0 to HW filter on device eth2 [ 294.002911][T12779] 8021q: adding VLAN 0 to HW filter on device eth3 [ 294.055529][T12779] A link change request failed with some changes committed already. Interface dvmrp1 may have been left with an inconsistent configuration, please check. [ 294.089826][ T7173] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.097106][ T7173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.182154][ T1106] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 294.191205][ T1106] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 294.266957][ T7173] bridge0: port 1(team0) entered blocking state [ 294.273397][ T7173] bridge0: port 1(team0) entered forwarding state [ 294.317683][ T36] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 294.349530][ T36] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 294.478183][ T5643] Bluetooth: hci6: command tx timeout [ 294.652798][T12812] bridge0: port 1(team0) entered disabled state [ 294.660109][T12812] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.674086][T12758] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.682437][T12758] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.690266][T12758] bridge_slave_0: entered allmulticast mode [ 294.698749][T12758] bridge_slave_0: entered promiscuous mode [ 294.708884][T12758] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.716658][T12758] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.730069][T12758] bridge_slave_1: entered allmulticast mode [ 294.738901][T12758] bridge_slave_1: entered promiscuous mode [ 294.747159][T12815] bridge0: port 1(team0) entered blocking state [ 294.753614][T12815] bridge0: port 1(team0) entered forwarding state [ 294.760543][T12815] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.767889][T12815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.785140][T12815] bridge0: entered promiscuous mode [ 294.791274][T12815] bridge0: entered allmulticast mode [ 294.953390][T12758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.991603][T12821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1959'. [ 295.002191][T12758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.054793][T12758] team0: Port device team_slave_0 added [ 295.077581][T12758] team0: Port device team_slave_1 added [ 295.147542][T12758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.154670][T12758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.182194][T12758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.198155][T12758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.205323][T12758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.234868][T12758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.371941][T12758] hsr_slave_0: entered promiscuous mode [ 295.380177][T12758] hsr_slave_1: entered promiscuous mode [ 295.392998][T12829] openvswitch: netlink: Message has 8 unknown bytes. [ 295.395019][T12758] debugfs: 'hsr0' already exists in 'hsr' [ 295.407497][T12758] Cannot create hsr debugfs directory [ 295.493913][T12831] FAULT_INJECTION: forcing a failure. [ 295.493913][T12831] name failslab, interval 1, probability 0, space 0, times 1 [ 295.508527][T12831] CPU: 1 UID: 0 PID: 12831 Comm: syz.4.1964 Not tainted syzkaller #0 PREEMPT(full) [ 295.508557][T12831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 295.508579][T12831] Call Trace: [ 295.508588][T12831] [ 295.508597][T12831] dump_stack_lvl+0xe8/0x150 [ 295.508630][T12831] should_fail_ex+0x40c/0x560 [ 295.508666][T12831] should_failslab+0xa8/0x100 [ 295.508693][T12831] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 295.508726][T12831] ? skb_clone+0x212/0x3a0 [ 295.508758][T12831] ? skb_clone+0x212/0x3a0 [ 295.508790][T12831] skb_clone+0x212/0x3a0 [ 295.508817][T12831] __netlink_deliver_tap+0x413/0x860 [ 295.508856][T12831] ? netlink_deliver_tap+0x2e/0x1b0 [ 295.508883][T12831] netlink_deliver_tap+0x19c/0x1b0 [ 295.508910][T12831] netlink_unicast+0x77f/0x940 [ 295.508945][T12831] netlink_sendmsg+0x813/0xb40 [ 295.508981][T12831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.509012][T12831] ? aa_sock_msg_perm+0xf1/0x1b0 [ 295.509045][T12831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.509072][T12831] sock_sendmsg_nosec+0x13a/0x180 [ 295.509106][T12831] ____sys_sendmsg+0x54e/0x850 [ 295.509137][T12831] ? __pfx_____sys_sendmsg+0x10/0x10 [ 295.509171][T12831] ? import_iovec+0x73/0xa0 [ 295.509198][T12831] ___sys_sendmsg+0x2a5/0x360 [ 295.509220][T12831] ? __lock_acquire+0x683/0x2cf0 [ 295.509249][T12831] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.509314][T12831] ? __fget_files+0x2a/0x420 [ 295.509335][T12831] ? __fget_files+0x3a2/0x420 [ 295.509368][T12831] __x64_sys_sendmsg+0x1b1/0x290 [ 295.509396][T12831] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 295.509441][T12831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.509467][T12831] do_syscall_64+0x174/0x580 [ 295.509487][T12831] ? trace_irq_disable+0x3b/0x140 [ 295.509508][T12831] ? clear_bhb_loop+0x40/0x90 [ 295.509536][T12831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.509557][T12831] RIP: 0033:0x7ff35179ce59 [ 295.509578][T12831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.509597][T12831] RSP: 002b:00007ff352684028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.509620][T12831] RAX: ffffffffffffffda RBX: 00007ff351a15fa0 RCX: 00007ff35179ce59 [ 295.509636][T12831] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 295.509649][T12831] RBP: 00007ff352684090 R08: 0000000000000000 R09: 0000000000000000 [ 295.509663][T12831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.509675][T12831] R13: 00007ff351a16038 R14: 00007ff351a15fa0 R15: 00007ffd8539cee8 [ 295.509711][T12831] [ 295.923085][T12836] netlink: 'syz.4.1966': attribute type 1 has an invalid length. [ 295.979958][T12836] 8021q: adding VLAN 0 to HW filter on device bond6 [ 296.169998][T12758] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 296.184554][T12758] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 296.224518][T12758] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 296.287201][T12758] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 296.313123][T12758] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 296.334638][T12758] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 296.343864][T12758] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 296.360624][T12758] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 296.370414][T12850] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1970'. [ 296.556189][ T5643] Bluetooth: hci6: command tx timeout [ 296.639303][T12758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.667964][T12862] openvswitch: netlink: Message has 8 unknown bytes. [ 296.670234][T12758] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.704691][ T134] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.711937][ T134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.756637][ T134] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.763859][ T134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.814443][T12864] netlink: 5180 bytes leftover after parsing attributes in process `syz.5.1974'. [ 296.928448][T12866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1975'. [ 297.004013][T12869] openvswitch: netlink: Flow actions attr not present in new flow. [ 297.176396][T12875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1978'. [ 297.349556][T12881] tipc: Failed to remove unknown binding: 66,0,0/0:875718174/875718176 [ 297.367380][T12881] tipc: Failed to remove unknown binding: 66,0,0/0:875718174/875718175 [ 297.398365][T12881] tipc: Failed to remove unknown binding: 66,0,0/0:875718174/875718176 [ 297.418155][T12881] tipc: Failed to remove unknown binding: 66,0,0/0:875718174/875718175 [ 297.529875][T12887] gretap0: entered promiscuous mode [ 297.547132][T12887] netlink: 'syz.5.1982': attribute type 4 has an invalid length. [ 297.728163][T12894] openvswitch: netlink: Message has 8 unknown bytes. [ 297.802261][T12896] netlink: 5180 bytes leftover after parsing attributes in process `syz.4.1985'. [ 297.843456][T12758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.253402][T12912] netlink: 'syz.5.1989': attribute type 2 has an invalid length. [ 298.264415][T12912] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1989'. [ 298.504690][T12758] veth0_vlan: entered promiscuous mode [ 298.552602][T12758] veth1_vlan: entered promiscuous mode [ 298.629464][T12758] veth0_macvtap: entered promiscuous mode [ 298.639142][ T5643] Bluetooth: hci6: command tx timeout [ 298.667238][T12758] veth1_macvtap: entered promiscuous mode [ 298.695382][T12758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.713737][T12758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.761635][ T64] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.782912][ T64] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.804521][ T64] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.826192][ T64] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.926527][T12924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.999382][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.017423][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.065167][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.079733][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.553626][ T5633] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 299.573326][ T5633] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 299.586552][ T5633] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 299.600063][ T5633] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 299.611560][ T5633] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 299.666887][T12941] netlink: 5180 bytes leftover after parsing attributes in process `syz.4.1996'. [ 300.191366][T12971] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1999'. [ 300.220818][T12971] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1999'. [ 300.263633][T12973] Cannot find add_set index 2 as target [ 300.542115][T12985] netlink: 5120 bytes leftover after parsing attributes in process `syz.6.2007'. [ 300.590625][T12937] lo speed is unknown, defaulting to 1000 [ 300.716124][ T5643] Bluetooth: hci6: command tx timeout [ 301.157091][T13002] pim6reg: entered allmulticast mode [ 301.427592][T13013] __nla_validate_parse: 5 callbacks suppressed [ 301.427613][T13013] netlink: 5120 bytes leftover after parsing attributes in process `syz.4.2017'. [ 301.677138][ T5643] Bluetooth: hci7: command tx timeout [ 301.749474][T13023] netlink: 'syz.5.2021': attribute type 12 has an invalid length. [ 301.757733][T13023] netlink: 'syz.5.2021': attribute type 29 has an invalid length. [ 301.765718][T13023] netlink: 'syz.5.2021': attribute type 7 has an invalid length. [ 301.779426][T13023] netlink: 'syz.5.2021': attribute type 39 has an invalid length. [ 301.790222][T13024] syzkaller1: entered promiscuous mode [ 301.803056][T13024] syzkaller1: entered allmulticast mode [ 302.576724][T12937] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.604233][T12937] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.632441][T12937] bridge_slave_0: entered allmulticast mode [ 302.670418][T12937] bridge_slave_0: entered promiscuous mode [ 302.765441][T12937] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.779379][T13045] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2024'. [ 302.782504][T12937] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.816956][T12937] bridge_slave_1: entered allmulticast mode [ 302.826580][T12937] bridge_slave_1: entered promiscuous mode [ 302.840589][T13044] veth1_to_bond: entered allmulticast mode [ 303.030147][T13045] veth1_to_bond (unregistering): left allmulticast mode [ 303.079901][T13045] bond0: (slave bond_slave_1): Releasing backup interface [ 303.250680][T12937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.303147][T12937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.460061][T12937] team0: Port device team_slave_0 added [ 303.491872][T12937] team0: Port device team_slave_1 added [ 303.635599][T12937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.665511][T12937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.756901][ T5633] Bluetooth: hci7: command tx timeout [ 303.773194][T12937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.792756][ T5633] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 303.806524][ T5633] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 303.815446][ T5633] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 303.823680][ T5633] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 303.831484][ T5633] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 303.909938][T12937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.926304][T12937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.967350][T12937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.179811][T13059] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 304.228036][T13060] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 304.282615][T12937] hsr_slave_0: entered promiscuous mode [ 304.303791][T12937] hsr_slave_1: entered promiscuous mode [ 304.336173][T12937] debugfs: 'hsr0' already exists in 'hsr' [ 304.341972][T12937] Cannot create hsr debugfs directory [ 304.518157][T13070] netlink: 5120 bytes leftover after parsing attributes in process `syz.5.2029'. [ 305.157279][T13079] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2031'. [ 305.337423][T13056] lo speed is unknown, defaulting to 1000 [ 305.344538][T12937] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 305.380712][T12937] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 305.397566][T12937] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 305.417746][T12937] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 305.453246][T12937] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 305.502573][T12937] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 305.593621][T12937] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 305.619341][T12937] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 305.815902][T13090] sctp: [Deprecated]: syz.4.2034 (pid 13090) Use of int in maxseg socket option. [ 305.815902][T13090] Use struct sctp_assoc_value instead [ 305.846823][ T5633] Bluetooth: hci7: command tx timeout [ 305.917318][ T5643] Bluetooth: hci8: command tx timeout [ 306.158111][T12937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.210168][T12937] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.239409][ T7176] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.246623][ T7176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.300912][T13106] netlink: 'syz.6.2038': attribute type 2 has an invalid length. [ 306.348180][ T134] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.355410][ T134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.670847][T13124] netlink: 'syz.6.2043': attribute type 1 has an invalid length. [ 306.790442][T13130] Cannot find add_set index 2 as target [ 306.831614][T13056] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.840103][T13056] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.848413][T13056] bridge_slave_0: entered allmulticast mode [ 306.857101][T13056] bridge_slave_0: entered promiscuous mode [ 306.870311][T13056] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.879049][T13056] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.886574][T13056] bridge_slave_1: entered allmulticast mode [ 306.894895][T13056] bridge_slave_1: entered promiscuous mode [ 306.989487][T13056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.041232][T13056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.126943][T13136] netlink: 'syz.5.2046': attribute type 1 has an invalid length. [ 307.181817][T13056] team0: Port device team_slave_0 added [ 307.193235][T13136] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2046'. [ 307.239330][T13056] team0: Port device team_slave_1 added [ 307.261498][T13136] NCSI netlink: No device for ifindex 0 [ 307.301175][T13141] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.308929][T13141] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.350330][T13056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.376582][T13056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.463805][T13056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.513747][T13056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.532724][T13056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.568165][T13150] netlink: 'syz.6.2049': attribute type 2 has an invalid length. [ 307.600173][T13056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.717663][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888050725400: rx timeout, send abort [ 307.729739][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888050725000: rx timeout, send abort [ 307.802196][T13056] hsr_slave_0: entered promiscuous mode [ 307.821696][T13056] hsr_slave_1: entered promiscuous mode [ 307.837806][T13056] debugfs: 'hsr0' already exists in 'hsr' [ 307.843708][T13056] Cannot create hsr debugfs directory [ 307.917892][ T5643] Bluetooth: hci7: command tx timeout [ 307.936086][T12937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.996053][ T5643] Bluetooth: hci8: command tx timeout [ 308.228431][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888050725400: abort rx timeout. Force session deactivation [ 308.240877][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888050725000: abort rx timeout. Force session deactivation [ 308.458203][T13172] netlink: 'syz.6.2055': attribute type 64 has an invalid length. [ 308.480351][T13172] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2055'. [ 308.671471][T13184] xfrm1: entered allmulticast mode [ 308.678683][T13172] syzkaller0: entered promiscuous mode [ 308.684447][T13172] syzkaller0: entered allmulticast mode [ 308.695914][T13056] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 308.717781][T13056] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 308.780220][T13056] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 308.816629][T13056] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 308.824804][T13056] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 308.848613][T13056] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 308.930535][T13056] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 308.981147][T13056] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 309.041467][T13200] FAULT_INJECTION: forcing a failure. [ 309.041467][T13200] name failslab, interval 1, probability 0, space 0, times 0 [ 309.059517][T13200] CPU: 0 UID: 0 PID: 13200 Comm: syz.4.2062 Not tainted syzkaller #0 PREEMPT(full) [ 309.059546][T13200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 309.059568][T13200] Call Trace: [ 309.059576][T13200] [ 309.059585][T13200] dump_stack_lvl+0xe8/0x150 [ 309.059618][T13200] should_fail_ex+0x40c/0x560 [ 309.059653][T13200] should_failslab+0xa8/0x100 [ 309.059680][T13200] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 309.059713][T13200] ? skb_clone+0x212/0x3a0 [ 309.059736][T13200] ? skb_clone+0x212/0x3a0 [ 309.059772][T13200] skb_clone+0x212/0x3a0 [ 309.059801][T13200] __netlink_deliver_tap+0x413/0x860 [ 309.059841][T13200] ? netlink_deliver_tap+0x2e/0x1b0 [ 309.059868][T13200] netlink_deliver_tap+0x19c/0x1b0 [ 309.059894][T13200] netlink_unicast+0x77f/0x940 [ 309.059929][T13200] netlink_sendmsg+0x813/0xb40 [ 309.059965][T13200] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.059995][T13200] ? aa_sock_msg_perm+0xf1/0x1b0 [ 309.060029][T13200] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.060053][T13200] sock_sendmsg_nosec+0x13a/0x180 [ 309.060087][T13200] ____sys_sendmsg+0x54e/0x850 [ 309.060117][T13200] ? __pfx_____sys_sendmsg+0x10/0x10 [ 309.060152][T13200] ? import_iovec+0x73/0xa0 [ 309.060180][T13200] ___sys_sendmsg+0x2a5/0x360 [ 309.060203][T13200] ? __lock_acquire+0x683/0x2cf0 [ 309.060232][T13200] ? __pfx____sys_sendmsg+0x10/0x10 [ 309.060296][T13200] ? __fget_files+0x2a/0x420 [ 309.060319][T13200] ? __fget_files+0x3a2/0x420 [ 309.060353][T13200] __x64_sys_sendmsg+0x1b1/0x290 [ 309.060413][T13200] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 309.060458][T13200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.060483][T13200] do_syscall_64+0x174/0x580 [ 309.060510][T13200] ? trace_irq_disable+0x3b/0x140 [ 309.060531][T13200] ? clear_bhb_loop+0x40/0x90 [ 309.060569][T13200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.060597][T13200] RIP: 0033:0x7ff35179ce59 [ 309.060618][T13200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.060637][T13200] RSP: 002b:00007ff352684028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.060660][T13200] RAX: ffffffffffffffda RBX: 00007ff351a15fa0 RCX: 00007ff35179ce59 [ 309.060676][T13200] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 309.060691][T13200] RBP: 00007ff352684090 R08: 0000000000000000 R09: 0000000000000000 [ 309.060704][T13200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.060717][T13200] R13: 00007ff351a16038 R14: 00007ff351a15fa0 R15: 00007ffd8539cee8 [ 309.060753][T13200] [ 309.589088][T12937] veth0_vlan: entered promiscuous mode [ 309.619316][T12937] veth1_vlan: entered promiscuous mode [ 309.728850][T13056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.739793][T12937] veth0_macvtap: entered promiscuous mode [ 309.777488][T12937] veth1_macvtap: entered promiscuous mode [ 309.802903][T13056] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.856381][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.863639][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.901038][T12937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.908755][T13217] netlink: 3588 bytes leftover after parsing attributes in process `syz.4.2067'. [ 309.909084][T13217] netlink: 3588 bytes leftover after parsing attributes in process `syz.4.2067'. [ 309.947829][T13217] netlink: 3588 bytes leftover after parsing attributes in process `syz.4.2067'. [ 309.969756][T12937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.979319][T13217] netlink: 3588 bytes leftover after parsing attributes in process `syz.4.2067'. [ 309.994640][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.001860][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.015988][T13217] netlink: 3588 bytes leftover after parsing attributes in process `syz.4.2067'. [ 310.038629][T13217] netlink: 3588 bytes leftover after parsing attributes in process `syz.4.2067'. [ 310.049237][T13217] netlink: 3588 bytes leftover after parsing attributes in process `syz.4.2067'. [ 310.065231][T13217] netlink: 3588 bytes leftover after parsing attributes in process `syz.4.2067'. [ 310.080837][ T7162] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.089907][ T5643] Bluetooth: hci8: command tx timeout [ 310.147083][ T7162] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.172328][ T7162] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.190757][ T7162] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.398729][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.423024][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.564228][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.588482][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.150329][T13247] hsr_slave_1 (unregistering): left promiscuous mode [ 311.457556][T13258] pim6reg: entered allmulticast mode [ 311.637682][T13056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.156346][ T5643] Bluetooth: hci8: command tx timeout [ 312.265293][T13298] FAULT_INJECTION: forcing a failure. [ 312.265293][T13298] name failslab, interval 1, probability 0, space 0, times 0 [ 312.302844][T13298] CPU: 0 UID: 0 PID: 13298 Comm: syz.7.2086 Not tainted syzkaller #0 PREEMPT(full) [ 312.302874][T13298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 312.302887][T13298] Call Trace: [ 312.302895][T13298] [ 312.302904][T13298] dump_stack_lvl+0xe8/0x150 [ 312.302936][T13298] should_fail_ex+0x40c/0x560 [ 312.302972][T13298] should_failslab+0xa8/0x100 [ 312.303000][T13298] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 312.303032][T13298] ? local_lock_release+0x9c/0x160 [ 312.303066][T13298] ? __alloc_skb+0x1d7/0x7a0 [ 312.303088][T13298] ? __alloc_skb+0x1d7/0x7a0 [ 312.303115][T13298] __alloc_skb+0x1d7/0x7a0 [ 312.303140][T13298] netlink_ack+0x136/0xb30 [ 312.303162][T13298] ? __pfx_genl_rcv_msg+0x10/0x10 [ 312.303196][T13298] ? __pfx_ref_tracker_free+0x10/0x10 [ 312.303240][T13298] netlink_rcv_skb+0x2a4/0x4a0 [ 312.303265][T13298] ? __pfx_genl_rcv_msg+0x10/0x10 [ 312.303297][T13298] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 312.303348][T13298] ? down_read+0x2be/0x330 [ 312.303375][T13298] genl_rcv+0x28/0x40 [ 312.303404][T13298] netlink_unicast+0x7bb/0x940 [ 312.303438][T13298] netlink_sendmsg+0x813/0xb40 [ 312.303474][T13298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.303505][T13298] ? aa_sock_msg_perm+0xf1/0x1b0 [ 312.303539][T13298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.303562][T13298] sock_sendmsg_nosec+0x13a/0x180 [ 312.303595][T13298] ____sys_sendmsg+0x54e/0x850 [ 312.303626][T13298] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.303661][T13298] ? import_iovec+0x73/0xa0 [ 312.303689][T13298] ___sys_sendmsg+0x2a5/0x360 [ 312.303712][T13298] ? __lock_acquire+0x683/0x2cf0 [ 312.303740][T13298] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.303805][T13298] ? __fget_files+0x2a/0x420 [ 312.303827][T13298] ? __fget_files+0x3a2/0x420 [ 312.303860][T13298] __x64_sys_sendmsg+0x1b1/0x290 [ 312.303888][T13298] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 312.303933][T13298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.303957][T13298] do_syscall_64+0x174/0x580 [ 312.303976][T13298] ? trace_irq_disable+0x3b/0x140 [ 312.303998][T13298] ? clear_bhb_loop+0x40/0x90 [ 312.304025][T13298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.304047][T13298] RIP: 0033:0x7ff5b179ce59 [ 312.304067][T13298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.304086][T13298] RSP: 002b:00007ff5b2638028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.304109][T13298] RAX: ffffffffffffffda RBX: 00007ff5b1a15fa0 RCX: 00007ff5b179ce59 [ 312.304125][T13298] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 312.304139][T13298] RBP: 00007ff5b2638090 R08: 0000000000000000 R09: 0000000000000000 [ 312.304152][T13298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.304165][T13298] R13: 00007ff5b1a16038 R14: 00007ff5b1a15fa0 R15: 00007fff0e72eb28 [ 312.304201][T13298] [ 312.315703][T13056] veth0_vlan: entered promiscuous mode [ 312.671375][T13056] veth1_vlan: entered promiscuous mode [ 312.742233][T13056] veth0_macvtap: entered promiscuous mode [ 312.753580][T13056] veth1_macvtap: entered promiscuous mode [ 312.967301][T13310] syzkaller0: entered promiscuous mode [ 312.972890][T13310] syzkaller0: entered allmulticast mode [ 312.979806][T13309] tipc: Started in network mode [ 312.986386][T13309] tipc: Node identity 76a97b127f75, cluster identity 4711 [ 312.995611][T13309] tipc: Enabled bearer , priority 0 [ 313.012168][T13056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.078952][T13309] tipc: Resetting bearer [ 315.126312][T13309] tipc: Disabling bearer [ 315.139522][T13056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.205060][ T5738] tipc: Node number set to 165444370 [ 315.229304][ T730] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.270164][ T730] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.291872][ T730] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.330345][ T730] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.365250][T13331] veth0_to_bond: entered promiscuous mode [ 315.389559][T13331] veth0_to_bond: entered allmulticast mode [ 315.502876][T13334] __nla_validate_parse: 27 callbacks suppressed [ 315.502897][T13334] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2096'. [ 315.772973][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.813408][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.011526][ T7176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.043399][ T7176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.200363][T13362] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2105'. [ 316.237200][T13366] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2107'. [ 316.383970][T13371] bond0: entered promiscuous mode [ 316.394494][T13371] bond_slave_0: entered promiscuous mode [ 316.401296][T13371] bond_slave_1: entered promiscuous mode [ 316.419821][T13371] batadv0: entered promiscuous mode [ 316.432615][T13371] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 316.443433][T13373] FAULT_INJECTION: forcing a failure. [ 316.443433][T13373] name failslab, interval 1, probability 0, space 0, times 0 [ 316.462726][T13375] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2109'. [ 316.473621][T13373] CPU: 1 UID: 0 PID: 13373 Comm: syz.4.2108 Not tainted syzkaller #0 PREEMPT(full) [ 316.473649][T13373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 316.473663][T13373] Call Trace: [ 316.473671][T13373] [ 316.473680][T13373] dump_stack_lvl+0xe8/0x150 [ 316.473712][T13373] should_fail_ex+0x40c/0x560 [ 316.473747][T13373] should_failslab+0xa8/0x100 [ 316.473775][T13373] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 316.473808][T13373] ? skb_clone+0x212/0x3a0 [ 316.473831][T13373] ? skb_clone+0x212/0x3a0 [ 316.473863][T13373] skb_clone+0x212/0x3a0 [ 316.473892][T13373] __netlink_deliver_tap+0x413/0x860 [ 316.473930][T13373] ? netlink_deliver_tap+0x2e/0x1b0 [ 316.473956][T13373] netlink_deliver_tap+0x19c/0x1b0 [ 316.473983][T13373] netlink_sendskb+0x68/0x140 [ 316.474008][T13373] netlink_rcv_skb+0x2a4/0x4a0 [ 316.474069][T13373] ? __pfx_genl_rcv_msg+0x10/0x10 [ 316.474102][T13373] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 316.474144][T13373] ? down_read+0x2be/0x330 [ 316.474172][T13373] genl_rcv+0x28/0x40 [ 316.474201][T13373] netlink_unicast+0x7bb/0x940 [ 316.474235][T13373] netlink_sendmsg+0x813/0xb40 [ 316.474276][T13373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.474307][T13373] ? aa_sock_msg_perm+0xf1/0x1b0 [ 316.474340][T13373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.474365][T13373] sock_sendmsg_nosec+0x13a/0x180 [ 316.474398][T13373] ____sys_sendmsg+0x54e/0x850 [ 316.474428][T13373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 316.474464][T13373] ? import_iovec+0x73/0xa0 [ 316.474492][T13373] ___sys_sendmsg+0x2a5/0x360 [ 316.474513][T13373] ? __lock_acquire+0x683/0x2cf0 [ 316.474540][T13373] ? __pfx____sys_sendmsg+0x10/0x10 [ 316.474605][T13373] ? __fget_files+0x2a/0x420 [ 316.474626][T13373] ? __fget_files+0x3a2/0x420 [ 316.474661][T13373] __x64_sys_sendmsg+0x1b1/0x290 [ 316.474688][T13373] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 316.474733][T13373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.474758][T13373] do_syscall_64+0x174/0x580 [ 316.474777][T13373] ? trace_irq_disable+0x3b/0x140 [ 316.474798][T13373] ? clear_bhb_loop+0x40/0x90 [ 316.474825][T13373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.474846][T13373] RIP: 0033:0x7ff35179ce59 [ 316.474866][T13373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.474885][T13373] RSP: 002b:00007ff352684028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.474907][T13373] RAX: ffffffffffffffda RBX: 00007ff351a15fa0 RCX: 00007ff35179ce59 [ 316.474923][T13373] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 316.474938][T13373] RBP: 00007ff352684090 R08: 0000000000000000 R09: 0000000000000000 [ 316.474950][T13373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.474962][T13373] R13: 00007ff351a16038 R14: 00007ff351a15fa0 R15: 00007ffd8539cee8 [ 316.474997][T13373] [ 316.794648][T13371] bond0: left promiscuous mode [ 316.805408][T13371] bond_slave_0: left promiscuous mode [ 316.826225][T13371] bond_slave_1: left promiscuous mode [ 316.835171][T13371] batadv0: left promiscuous mode [ 317.198867][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.205776][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.249361][T13392] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2114'. [ 317.376327][T13399] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2116'. [ 317.541486][T13408] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2118'. [ 317.743798][T13415] FAULT_INJECTION: forcing a failure. [ 317.743798][T13415] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 317.773993][T13415] CPU: 0 UID: 0 PID: 13415 Comm: syz.7.2121 Not tainted syzkaller #0 PREEMPT(full) [ 317.774027][T13415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 317.774041][T13415] Call Trace: [ 317.774054][T13415] [ 317.774063][T13415] dump_stack_lvl+0xe8/0x150 [ 317.774096][T13415] should_fail_ex+0x40c/0x560 [ 317.774132][T13415] _copy_to_user+0x31/0xb0 [ 317.774160][T13415] simple_read_from_buffer+0xe1/0x170 [ 317.774194][T13415] proc_fail_nth_read+0x1bb/0x230 [ 317.774221][T13415] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 317.774249][T13415] ? rw_verify_area+0x24a/0x4c0 [ 317.774277][T13415] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 317.774300][T13415] vfs_read+0x213/0xa80 [ 317.774331][T13415] ? __pfx___mutex_lock+0x10/0x10 [ 317.774363][T13415] ? __pfx_vfs_read+0x10/0x10 [ 317.774391][T13415] ? __fget_files+0x2a/0x420 [ 317.774418][T13415] ? __fget_files+0x3a2/0x420 [ 317.774438][T13415] ? __fget_files+0x2a/0x420 [ 317.774470][T13415] ksys_read+0x150/0x270 [ 317.774500][T13415] ? __pfx_ksys_read+0x10/0x10 [ 317.774539][T13415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.774564][T13415] do_syscall_64+0x174/0x580 [ 317.774584][T13415] ? trace_irq_disable+0x3b/0x140 [ 317.774606][T13415] ? clear_bhb_loop+0x40/0x90 [ 317.774634][T13415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.774656][T13415] RIP: 0033:0x7ff5b175d68e [ 317.774677][T13415] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 317.774696][T13415] RSP: 002b:00007ff5b2637fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 317.774719][T13415] RAX: ffffffffffffffda RBX: 00007ff5b26386c0 RCX: 00007ff5b175d68e [ 317.774735][T13415] RDX: 000000000000000f RSI: 00007ff5b26380a0 RDI: 0000000000000004 [ 317.774749][T13415] RBP: 00007ff5b2638090 R08: 0000000000000000 R09: 0000000000000000 [ 317.774762][T13415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 317.774775][T13415] R13: 00007ff5b1a16038 R14: 00007ff5b1a15fa0 R15: 00007fff0e72eb28 [ 317.774810][T13415] [ 318.252109][T13427] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2125'. [ 318.356435][T13433] netlink: 'syz.7.2128': attribute type 39 has an invalid length. [ 318.555268][T13443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2130'. [ 318.943832][T13465] netlink: 'syz.8.2137': attribute type 1 has an invalid length. [ 318.967863][T13464] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 319.267534][T13473] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 319.893413][T13487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2146'. [ 321.301466][T13514] syzkaller0: entered promiscuous mode [ 321.307723][T13514] syzkaller0: entered allmulticast mode [ 321.472596][T13526] syzkaller1: entered promiscuous mode [ 321.479732][T13526] syzkaller1: entered allmulticast mode [ 323.661594][T13541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2163'. [ 323.877944][T13552] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2166'. [ 323.890170][T13552] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2166'. [ 324.076409][T13560] netlink: 'syz.4.2170': attribute type 17 has an invalid length. [ 324.126479][T13560] netlink: 'syz.4.2170': attribute type 27 has an invalid length. [ 324.317968][ T5633] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 324.330483][ T5633] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 324.341712][ T5633] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 324.352396][ T5633] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 324.363478][ T5633] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 324.739089][T13582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2177'. [ 324.794893][T13585] netlink: 'syz.4.2177': attribute type 1 has an invalid length. [ 324.942473][T13593] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2177'. [ 324.955118][T13594] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2179'. [ 325.113974][T13591] bond8: (slave geneve5): Opening slave failed [ 325.133788][T13596] batman_adv: batadv0: Adding interface: wlan0 [ 325.142702][T13596] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.247966][T13596] batman_adv: batadv0: Interface activated: wlan0 [ 325.272684][T13593] 8021q: adding VLAN 0 to HW filter on device bond8 [ 325.565036][T13607] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2181'. [ 325.614959][T13607] netlink: 1047 bytes leftover after parsing attributes in process `syz.8.2181'. [ 325.635447][T13607] veth0_to_bond: default FDB implementation only supports local addresses [ 325.754603][T13611] syzkaller0: entered promiscuous mode [ 325.782318][T13611] syzkaller0: entered allmulticast mode [ 325.800303][T13569] lo speed is unknown, defaulting to 1000 [ 326.228478][T13632] netlink: 'syz.7.2188': attribute type 3 has an invalid length. [ 326.250469][T13631] netlink: 'syz.7.2188': attribute type 3 has an invalid length. [ 326.284078][T13627] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2188'. [ 326.477603][ T5643] Bluetooth: hci9: command tx timeout [ 326.495590][T13646] netlink: 'syz.8.2193': attribute type 3 has an invalid length. [ 326.509413][T13646] netlink: 3 bytes leftover after parsing attributes in process `syz.8.2193'. [ 326.617042][T13626] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 326.665255][T13626] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 326.904310][T13626] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 326.923025][T13626] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 327.048316][T13626] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 327.067848][T13626] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 327.113143][T13626] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 327.143643][T13626] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 327.346219][T13626] batman_adv: batadv0: Interface deactivated: wlan0 [ 327.549180][T13626] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 327.556226][T13626] Bluetooth: hci9: Error when powering off device on rfkill (-4) [ 327.578850][T13569] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.586598][T13569] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.593977][T13569] bridge_slave_0: entered allmulticast mode [ 327.602899][T13569] bridge_slave_0: entered promiscuous mode [ 327.612322][T13569] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.620370][T13569] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.628191][T13569] bridge_slave_1: entered allmulticast mode [ 327.638015][T13569] bridge_slave_1: entered promiscuous mode [ 327.760769][T13569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.797615][T13569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.045308][T13569] team0: Port device team_slave_0 added [ 328.085548][T13569] team0: Port device team_slave_1 added [ 328.122701][T13690] openvswitch: netlink: Flow key attr not present in new flow. [ 328.227556][T13692] ip6_vti0: mtu less than device minimum [ 328.246959][T13569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.264729][T13569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.330824][T13569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.385285][T13569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.420941][T13569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.451276][T13699] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 328.505453][T13569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.590958][T13705] syzkaller0: entered promiscuous mode [ 328.614802][T13705] syzkaller0: entered allmulticast mode [ 328.800318][T13569] hsr_slave_0: entered promiscuous mode [ 328.814726][T13569] hsr_slave_1: entered promiscuous mode [ 328.831164][T13569] debugfs: 'hsr0' already exists in 'hsr' [ 328.845037][T13569] Cannot create hsr debugfs directory [ 328.866084][T13715] syz_tun: entered allmulticast mode [ 329.076996][T13715] vlan2: entered allmulticast mode [ 329.114436][T13729] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 329.155541][T13731] FAULT_INJECTION: forcing a failure. [ 329.155541][T13731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.187190][T13729] __nla_validate_parse: 4 callbacks suppressed [ 329.187211][T13729] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2215'. [ 329.204251][T13731] CPU: 1 UID: 0 PID: 13731 Comm: syz.4.2216 Not tainted syzkaller #0 PREEMPT(full) [ 329.204278][T13731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 329.204291][T13731] Call Trace: [ 329.204299][T13731] [ 329.204309][T13731] dump_stack_lvl+0xe8/0x150 [ 329.204340][T13731] should_fail_ex+0x40c/0x560 [ 329.204377][T13731] _copy_from_user+0x2d/0xb0 [ 329.204402][T13731] ___sys_sendmsg+0x1c6/0x360 [ 329.204426][T13731] ? __lock_acquire+0x683/0x2cf0 [ 329.204455][T13731] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.204523][T13731] ? __fget_files+0x2a/0x420 [ 329.204545][T13731] ? __fget_files+0x3a2/0x420 [ 329.204580][T13731] __x64_sys_sendmsg+0x1b1/0x290 [ 329.204608][T13731] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 329.204655][T13731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.204680][T13731] do_syscall_64+0x174/0x580 [ 329.204700][T13731] ? trace_irq_disable+0x3b/0x140 [ 329.204722][T13731] ? clear_bhb_loop+0x40/0x90 [ 329.204750][T13731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.204777][T13731] RIP: 0033:0x7ff35179ce59 [ 329.204797][T13731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.204817][T13731] RSP: 002b:00007ff352684028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.204846][T13731] RAX: ffffffffffffffda RBX: 00007ff351a15fa0 RCX: 00007ff35179ce59 [ 329.204862][T13731] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 329.204877][T13731] RBP: 00007ff352684090 R08: 0000000000000000 R09: 0000000000000000 [ 329.204890][T13731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.204902][T13731] R13: 00007ff351a16038 R14: 00007ff351a15fa0 R15: 00007ffd8539cee8 [ 329.204940][T13731] [ 329.612021][T13737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2217'. [ 329.841292][T13737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2217'. [ 329.919206][T13745] netlink: 'syz.7.2220': attribute type 24 has an invalid length. [ 329.970456][T13746] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 329.997515][T13569] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 330.019732][T13569] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 330.051785][T13569] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 330.097956][T13569] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 330.135503][T13569] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 330.177125][T13569] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 330.208840][T13569] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 330.237627][T13569] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 330.331651][T13759] netlink: 288 bytes leftover after parsing attributes in process `syz.8.2224'. [ 330.461072][T13767] bridge1: entered promiscuous mode [ 330.467175][T13767] bridge1: entered allmulticast mode [ 330.488027][T13771] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_virt_wifi, syncid = 5, id = 0 [ 330.527977][T13770] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2227'. [ 330.557897][T13770] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2227'. [ 330.583708][T13569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.641092][T13569] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.682219][ T730] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.689483][ T730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.734105][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.741375][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.821381][T13782] netlink: 'syz.5.2228': attribute type 1 has an invalid length. [ 330.840949][T13782] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2228'. [ 331.161325][T13793] FAULT_INJECTION: forcing a failure. [ 331.161325][T13793] name failslab, interval 1, probability 0, space 0, times 0 [ 331.228979][T13793] CPU: 0 UID: 0 PID: 13793 Comm: syz.4.2230 Not tainted syzkaller #0 PREEMPT(full) [ 331.229009][T13793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 331.229022][T13793] Call Trace: [ 331.229030][T13793] [ 331.229038][T13793] dump_stack_lvl+0xe8/0x150 [ 331.229074][T13793] should_fail_ex+0x40c/0x560 [ 331.229110][T13793] should_failslab+0xa8/0x100 [ 331.229138][T13793] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 331.229171][T13793] ? local_lock_release+0x9c/0x160 [ 331.229206][T13793] ? __alloc_skb+0x1d7/0x7a0 [ 331.229224][T13793] ? __alloc_skb+0x1d7/0x7a0 [ 331.229249][T13793] __alloc_skb+0x1d7/0x7a0 [ 331.229274][T13793] netlink_sendmsg+0x5d4/0xb40 [ 331.229311][T13793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.229341][T13793] ? aa_sock_msg_perm+0xf1/0x1b0 [ 331.229374][T13793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.229398][T13793] sock_sendmsg_nosec+0x13a/0x180 [ 331.229432][T13793] ____sys_sendmsg+0x54e/0x850 [ 331.229462][T13793] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.229496][T13793] ? import_iovec+0x73/0xa0 [ 331.229524][T13793] ___sys_sendmsg+0x2a5/0x360 [ 331.229547][T13793] ? __lock_acquire+0x683/0x2cf0 [ 331.229574][T13793] ? __pfx____sys_sendmsg+0x10/0x10 [ 331.229638][T13793] ? __fget_files+0x2a/0x420 [ 331.229669][T13793] ? __fget_files+0x3a2/0x420 [ 331.229703][T13793] __x64_sys_sendmsg+0x1b1/0x290 [ 331.229731][T13793] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 331.229776][T13793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.229800][T13793] do_syscall_64+0x174/0x580 [ 331.229820][T13793] ? trace_irq_disable+0x3b/0x140 [ 331.229842][T13793] ? clear_bhb_loop+0x40/0x90 [ 331.229870][T13793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.229892][T13793] RIP: 0033:0x7ff35179ce59 [ 331.229912][T13793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.229931][T13793] RSP: 002b:00007ff352684028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.229954][T13793] RAX: ffffffffffffffda RBX: 00007ff351a15fa0 RCX: 00007ff35179ce59 [ 331.229971][T13793] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 331.229985][T13793] RBP: 00007ff352684090 R08: 0000000000000000 R09: 0000000000000000 [ 331.229998][T13793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.230011][T13793] R13: 00007ff351a16038 R14: 00007ff351a15fa0 R15: 00007ffd8539cee8 [ 331.230046][T13793] [ 331.700429][T13804] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2231'. [ 331.740826][T13807] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2235'. [ 331.779272][T13807] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2235'. [ 331.986801][T13820] netdevsim netdevsim8: Firmware load for './file0/file0/..' refused, path contains '..' component [ 332.004528][T13820] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 332.310353][T13569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.373510][T13835] FAULT_INJECTION: forcing a failure. [ 332.373510][T13835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.387419][T13835] CPU: 1 UID: 0 PID: 13835 Comm: syz.8.2243 Not tainted syzkaller #0 PREEMPT(full) [ 332.387448][T13835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 332.387461][T13835] Call Trace: [ 332.387470][T13835] [ 332.387479][T13835] dump_stack_lvl+0xe8/0x150 [ 332.387510][T13835] should_fail_ex+0x40c/0x560 [ 332.387545][T13835] _copy_from_iter+0x1d3/0x1660 [ 332.387593][T13835] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 332.387627][T13835] ? rcu_is_watching+0x15/0xb0 [ 332.387655][T13835] ? trace_kmem_cache_alloc+0x29/0xe0 [ 332.387689][T13835] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 332.387722][T13835] ? __pfx__copy_from_iter+0x10/0x10 [ 332.387754][T13835] ? __alloc_skb+0x276/0x7a0 [ 332.387773][T13835] ? __alloc_skb+0x276/0x7a0 [ 332.387798][T13835] ? netlink_sendmsg+0x650/0xb40 [ 332.387824][T13835] ? skb_put+0x112/0x210 [ 332.387847][T13835] netlink_sendmsg+0x6c0/0xb40 [ 332.387882][T13835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.387912][T13835] ? aa_sock_msg_perm+0xf1/0x1b0 [ 332.387945][T13835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.387968][T13835] sock_sendmsg_nosec+0x13a/0x180 [ 332.388002][T13835] ____sys_sendmsg+0x54e/0x850 [ 332.388032][T13835] ? __pfx_____sys_sendmsg+0x10/0x10 [ 332.388066][T13835] ? import_iovec+0x73/0xa0 [ 332.388093][T13835] ___sys_sendmsg+0x2a5/0x360 [ 332.388116][T13835] ? __lock_acquire+0x683/0x2cf0 [ 332.388143][T13835] ? __pfx____sys_sendmsg+0x10/0x10 [ 332.388215][T13835] ? __fget_files+0x2a/0x420 [ 332.388236][T13835] ? __fget_files+0x3a2/0x420 [ 332.388269][T13835] __x64_sys_sendmsg+0x1b1/0x290 [ 332.388296][T13835] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 332.388359][T13835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.388383][T13835] do_syscall_64+0x174/0x580 [ 332.388402][T13835] ? trace_irq_disable+0x3b/0x140 [ 332.388425][T13835] ? clear_bhb_loop+0x40/0x90 [ 332.388452][T13835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.388474][T13835] RIP: 0033:0x7f287c39ce59 [ 332.388494][T13835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.388513][T13835] RSP: 002b:00007f287d320028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.388536][T13835] RAX: ffffffffffffffda RBX: 00007f287c615fa0 RCX: 00007f287c39ce59 [ 332.388552][T13835] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 332.388565][T13835] RBP: 00007f287d320090 R08: 0000000000000000 R09: 0000000000000000 [ 332.388587][T13835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.388601][T13835] R13: 00007f287c616038 R14: 00007f287c615fa0 R15: 00007ffc1a2e9ac8 [ 332.388636][T13835] [ 333.142771][T13849] FAULT_INJECTION: forcing a failure. [ 333.142771][T13849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.211174][T13849] CPU: 1 UID: 0 PID: 13849 Comm: syz.5.2245 Not tainted syzkaller #0 PREEMPT(full) [ 333.211200][T13849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 333.211211][T13849] Call Trace: [ 333.211218][T13849] [ 333.211226][T13849] dump_stack_lvl+0xe8/0x150 [ 333.211252][T13849] should_fail_ex+0x40c/0x560 [ 333.211281][T13849] _copy_from_user+0x2d/0xb0 [ 333.211301][T13849] ___sys_sendmsg+0x1c6/0x360 [ 333.211321][T13849] ? __lock_acquire+0x683/0x2cf0 [ 333.211345][T13849] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.211405][T13849] ? __fget_files+0x2a/0x420 [ 333.211423][T13849] ? __fget_files+0x3a2/0x420 [ 333.211449][T13849] __x64_sys_sendmsg+0x1b1/0x290 [ 333.211472][T13849] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 333.211515][T13849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.211535][T13849] do_syscall_64+0x174/0x580 [ 333.211554][T13849] ? clear_bhb_loop+0x40/0x90 [ 333.211577][T13849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.211594][T13849] RIP: 0033:0x7fd96519ce59 [ 333.211612][T13849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.211628][T13849] RSP: 002b:00007fd966010028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.211648][T13849] RAX: ffffffffffffffda RBX: 00007fd965415fa0 RCX: 00007fd96519ce59 [ 333.211661][T13849] RDX: 0000000000001800 RSI: 0000200000000080 RDI: 0000000000000003 [ 333.211673][T13849] RBP: 00007fd966010090 R08: 0000000000000000 R09: 0000000000000000 [ 333.211684][T13849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.211694][T13849] R13: 00007fd965416038 R14: 00007fd965415fa0 R15: 00007ffecffa1418 [ 333.211723][T13849] [ 333.403713][T13569] veth0_vlan: entered promiscuous mode [ 333.418692][T13569] veth1_vlan: entered promiscuous mode [ 333.492006][T13569] veth0_macvtap: entered promiscuous mode [ 333.504815][T13569] veth1_macvtap: entered promiscuous mode [ 333.529632][T13569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.567749][T13569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.586607][ T7162] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.622011][ T7162] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.697364][ T7162] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.728164][ T7162] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.171213][T13868] gre2: entered promiscuous mode [ 334.648177][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.689733][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.702815][T13897] __nla_validate_parse: 2 callbacks suppressed [ 334.702848][T13897] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2260'. [ 334.878670][T13897] xfrm1: entered promiscuous mode [ 334.883864][T13897] xfrm1: entered allmulticast mode [ 334.966796][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.030781][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.451386][T13926] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2169'. [ 335.629894][T13932] syzkaller0: entered promiscuous mode [ 335.649464][T13932] syzkaller0: entered allmulticast mode [ 335.660950][T13932] simple: basic_1 [ 335.926522][T13944] netlink: 576 bytes leftover after parsing attributes in process `syz.9.2272'. [ 336.470744][T13960] netlink: 96 bytes leftover after parsing attributes in process `syz.9.2279'. [ 336.544136][T13968] netlink: 'syz.5.2283': attribute type 8 has an invalid length. [ 336.566376][T13968] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2283'. [ 336.604866][T13968] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.612693][T13968] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.684104][T13969] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 336.957524][T13984] vcan0: tx address claim with different name [ 336.989644][T13984] IPVS: set_ctl: invalid protocol: 33 172.30.1.6:20002 [ 337.027267][T13986] syzkaller0: entered promiscuous mode [ 337.058381][T13986] syzkaller0: entered allmulticast mode [ 337.123397][T13986] simple: basic_1 [ 337.147044][T13993] FAULT_INJECTION: forcing a failure. [ 337.147044][T13993] name failslab, interval 1, probability 0, space 0, times 0 [ 337.223936][T13993] CPU: 1 UID: 0 PID: 13993 Comm: syz.9.2291 Not tainted syzkaller #0 PREEMPT(full) [ 337.223968][T13993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 337.223981][T13993] Call Trace: [ 337.223989][T13993] [ 337.223999][T13993] dump_stack_lvl+0xe8/0x150 [ 337.224031][T13993] should_fail_ex+0x40c/0x560 [ 337.224068][T13993] should_failslab+0xa8/0x100 [ 337.224096][T13993] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 337.224130][T13993] ? kmem_cache_alloc_noprof+0x308/0x5f0 [ 337.224171][T13993] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 337.224200][T13993] ? ovs_flow_alloc+0x103/0x1f0 [ 337.224223][T13993] ? ovs_flow_alloc+0x103/0x1f0 [ 337.224255][T13993] ovs_flow_alloc+0x103/0x1f0 [ 337.224283][T13993] ovs_flow_cmd_new+0x2b9/0xe80 [ 337.224314][T13993] ? __kmalloc_noprof+0x1ad/0x720 [ 337.224346][T13993] ? kasan_save_track+0x3e/0x80 [ 337.224371][T13993] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 337.224459][T13993] ? __kmalloc_noprof+0x396/0x720 [ 337.224497][T13993] ? __nla_parse+0x40/0x60 [ 337.224534][T13993] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 337.224566][T13993] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 337.224604][T13993] genl_family_rcv_msg_doit+0x233/0x340 [ 337.224644][T13993] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 337.224690][T13993] ? bpf_lsm_capable+0x9/0x20 [ 337.224710][T13993] ? security_capable+0x7e/0x2c0 [ 337.224743][T13993] genl_rcv_msg+0x614/0x7a0 [ 337.224780][T13993] ? __pfx_genl_rcv_msg+0x10/0x10 [ 337.224810][T13993] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 337.224841][T13993] ? __pfx_ref_tracker_free+0x10/0x10 [ 337.224884][T13993] netlink_rcv_skb+0x226/0x4a0 [ 337.224909][T13993] ? __pfx_genl_rcv_msg+0x10/0x10 [ 337.224941][T13993] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 337.224982][T13993] ? down_read+0x2be/0x330 [ 337.225010][T13993] genl_rcv+0x28/0x40 [ 337.225037][T13993] netlink_unicast+0x7bb/0x940 [ 337.225072][T13993] netlink_sendmsg+0x813/0xb40 [ 337.225107][T13993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.225136][T13993] ? aa_sock_msg_perm+0xf1/0x1b0 [ 337.225176][T13993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.225200][T13993] sock_sendmsg_nosec+0x13a/0x180 [ 337.225234][T13993] ____sys_sendmsg+0x54e/0x850 [ 337.225264][T13993] ? __pfx_____sys_sendmsg+0x10/0x10 [ 337.225299][T13993] ? import_iovec+0x73/0xa0 [ 337.225326][T13993] ___sys_sendmsg+0x2a5/0x360 [ 337.225347][T13993] ? __lock_acquire+0x683/0x2cf0 [ 337.225375][T13993] ? __pfx____sys_sendmsg+0x10/0x10 [ 337.225439][T13993] ? __fget_files+0x2a/0x420 [ 337.225458][T13993] ? __fget_files+0x3a2/0x420 [ 337.225491][T13993] __x64_sys_sendmsg+0x1b1/0x290 [ 337.225519][T13993] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 337.225564][T13993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.225588][T13993] do_syscall_64+0x174/0x580 [ 337.225607][T13993] ? trace_irq_disable+0x3b/0x140 [ 337.225629][T13993] ? clear_bhb_loop+0x40/0x90 [ 337.225655][T13993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.225677][T13993] RIP: 0033:0x7f4812b9ce59 [ 337.225697][T13993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.225716][T13993] RSP: 002b:00007f4813ae2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.225738][T13993] RAX: ffffffffffffffda RBX: 00007f4812e15fa0 RCX: 00007f4812b9ce59 [ 337.225754][T13993] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 337.225767][T13993] RBP: 00007f4813ae2090 R08: 0000000000000000 R09: 0000000000000000 [ 337.225780][T13993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.225793][T13993] R13: 00007f4812e16038 R14: 00007f4812e15fa0 R15: 00007ffd067ab8b8 [ 337.225829][T13993] [ 337.878369][T14011] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 338.045545][T14016] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2297'. [ 338.062992][T14017] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 338.420320][T14032] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2301'. [ 338.437503][T14032] netlink: 'syz.5.2301': attribute type 2 has an invalid length. [ 338.583408][T14035] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2303'. [ 338.632997][T14039] FAULT_INJECTION: forcing a failure. [ 338.632997][T14039] name failslab, interval 1, probability 0, space 0, times 0 [ 338.670120][T14039] CPU: 1 UID: 0 PID: 14039 Comm: syz.8.2305 Not tainted syzkaller #0 PREEMPT(full) [ 338.670152][T14039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 338.670165][T14039] Call Trace: [ 338.670173][T14039] [ 338.670183][T14039] dump_stack_lvl+0xe8/0x150 [ 338.670215][T14039] should_fail_ex+0x40c/0x560 [ 338.670251][T14039] should_failslab+0xa8/0x100 [ 338.670278][T14039] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 338.670311][T14039] ? kmem_cache_alloc_noprof+0x308/0x5f0 [ 338.670342][T14039] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 338.670371][T14039] ? ovs_flow_alloc+0x103/0x1f0 [ 338.670394][T14039] ? ovs_flow_alloc+0x103/0x1f0 [ 338.670426][T14039] ovs_flow_alloc+0x103/0x1f0 [ 338.670455][T14039] ovs_flow_cmd_new+0x2b9/0xe80 [ 338.670490][T14039] ? __kmalloc_noprof+0x1ad/0x720 [ 338.670524][T14039] ? kasan_save_track+0x3e/0x80 [ 338.670555][T14039] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 338.670643][T14039] ? __kmalloc_noprof+0x396/0x720 [ 338.670679][T14039] ? __nla_parse+0x40/0x60 [ 338.670716][T14039] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 338.670748][T14039] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 338.670789][T14039] genl_family_rcv_msg_doit+0x233/0x340 [ 338.670829][T14039] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 338.670875][T14039] ? bpf_lsm_capable+0x9/0x20 [ 338.670896][T14039] ? security_capable+0x7e/0x2c0 [ 338.670929][T14039] genl_rcv_msg+0x614/0x7a0 [ 338.670968][T14039] ? __pfx_genl_rcv_msg+0x10/0x10 [ 338.670998][T14039] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 338.671031][T14039] ? __pfx_ref_tracker_free+0x10/0x10 [ 338.671076][T14039] netlink_rcv_skb+0x226/0x4a0 [ 338.671102][T14039] ? __pfx_genl_rcv_msg+0x10/0x10 [ 338.671134][T14039] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 338.671176][T14039] ? down_read+0x2be/0x330 [ 338.671204][T14039] genl_rcv+0x28/0x40 [ 338.671232][T14039] netlink_unicast+0x7bb/0x940 [ 338.671272][T14039] netlink_sendmsg+0x813/0xb40 [ 338.671309][T14039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.671341][T14039] ? aa_sock_msg_perm+0xf1/0x1b0 [ 338.671373][T14039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.671397][T14039] sock_sendmsg_nosec+0x13a/0x180 [ 338.671431][T14039] ____sys_sendmsg+0x54e/0x850 [ 338.671463][T14039] ? __pfx_____sys_sendmsg+0x10/0x10 [ 338.671497][T14039] ? import_iovec+0x73/0xa0 [ 338.671525][T14039] ___sys_sendmsg+0x2a5/0x360 [ 338.671555][T14039] ? __lock_acquire+0x683/0x2cf0 [ 338.671583][T14039] ? __pfx____sys_sendmsg+0x10/0x10 [ 338.671648][T14039] ? __fget_files+0x2a/0x420 [ 338.671670][T14039] ? __fget_files+0x3a2/0x420 [ 338.671703][T14039] __x64_sys_sendmsg+0x1b1/0x290 [ 338.671730][T14039] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 338.671776][T14039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.671800][T14039] do_syscall_64+0x174/0x580 [ 338.671820][T14039] ? trace_irq_disable+0x3b/0x140 [ 338.671841][T14039] ? clear_bhb_loop+0x40/0x90 [ 338.671868][T14039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.671889][T14039] RIP: 0033:0x7f287c39ce59 [ 338.671910][T14039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.671929][T14039] RSP: 002b:00007f287d320028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.671952][T14039] RAX: ffffffffffffffda RBX: 00007f287c615fa0 RCX: 00007f287c39ce59 [ 338.671968][T14039] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 338.671982][T14039] RBP: 00007f287d320090 R08: 0000000000000000 R09: 0000000000000000 [ 338.671995][T14039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.672008][T14039] R13: 00007f287c616038 R14: 00007f287c615fa0 R15: 00007ffc1a2e9ac8 [ 338.672044][T14039] [ 339.064671][T14041] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2306'. [ 339.434214][T14052] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2310'. [ 339.802074][T14064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.080971][T14074] netlink: 'syz.9.2320': attribute type 1 has an invalid length. [ 340.114119][T14074] netlink: 'syz.9.2320': attribute type 2 has an invalid length. [ 340.148174][T14078] netlink: 'syz.9.2320': attribute type 1 has an invalid length. [ 340.204254][T14074] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2320'. [ 340.218068][T14078] netlink: 'syz.9.2320': attribute type 2 has an invalid length. [ 340.477562][T14090] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2326'. [ 340.488925][T14094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2325'. [ 340.555592][T14096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2325'. [ 340.587590][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888050714000: rx timeout, send abort [ 340.597077][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888050714000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 340.751301][T14106] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 341.193363][T14127] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2333'. [ 341.232076][T14128] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2333'. [ 341.272835][T14129] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2333'. [ 341.864886][T14150] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2338'. [ 342.408946][T14162] ipvlan2: entered promiscuous mode [ 342.807028][ C0] bridge0: received packet on  with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 342.894245][T14192] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2352'. [ 342.931754][T14192] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 342.950671][T14190] netlink: 11 bytes leftover after parsing attributes in process `syz.7.2350'. [ 344.238464][T14243] RDS: rds_bind could not find a transport for ::ffff:172.30.0.8, load rds_tcp or rds_rdma? [ 344.857531][T14261] netlink: 'syz.8.2376': attribute type 2 has an invalid length. [ 344.881573][T14261] netlink: 'syz.8.2376': attribute type 8 has an invalid length. [ 345.046717][T14265] netdevsim netdevsim9: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 345.229757][T14274] __nla_validate_parse: 2 callbacks suppressed [ 345.229779][T14274] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2383'. [ 345.255474][T14274] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2383'. [ 345.670633][T14293] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2388'. [ 345.717524][ T30] audit: type=1107 audit(1782627541.989:7): pid=14298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 345.734386][T14293] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.742237][T14293] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.802134][T14305] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.809513][T14305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.817171][T14305] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.822474][T14293] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20000 [ 345.824574][T14305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.918345][T14305] bridge0: entered promiscuous mode [ 345.941828][T14305] bridge0: entered allmulticast mode [ 346.140079][T14317] x_tables: duplicate underflow at hook 1 [ 346.457418][T14329] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2399'. [ 346.493077][T14335] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2399'. [ 346.494296][T14327] bond1: entered promiscuous mode [ 346.508105][T14327] bond1: entered allmulticast mode [ 346.530718][T14329] IPv6: NLM_F_CREATE should be specified when creating new route [ 346.613846][T14339] IPv6: sit1: Disabled Multicast RS [ 346.838838][T14350] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2407'. [ 346.873187][T14346] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2405'. [ 347.121492][T14356] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2409'. [ 347.150394][T14367] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2411'. [ 347.166676][T14362] tipc: Failed to obtain node identity [ 347.195454][T14369] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2413'. [ 347.207689][T14362] tipc: Enabling of bearer rejected, failed to enable media [ 347.235644][T14359] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 347.339601][T14369] veth7: entered promiscuous mode [ 347.370906][T14371] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 347.398933][T14371] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 347.459504][T14371] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 347.730313][T14392] bond0: (slave bond_slave_0): Releasing backup interface [ 347.895430][ T30] audit: type=1800 audit(1782627544.169:8): pid=14399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2420" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=396 res=0 errno=0 [ 348.024895][T14394] syz.8.2420 (14394) used greatest stack depth: 17312 bytes left [ 348.420597][T14426] netdevsim netdevsim5: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 348.452823][T14420] syzkaller0: entered promiscuous mode [ 348.461754][T14420] syzkaller0: entered allmulticast mode [ 348.532098][T14429] netlink: 'syz.4.2428': attribute type 15 has an invalid length. [ 348.657107][T14429] netlink: 'syz.4.2428': attribute type 15 has an invalid length. [ 348.666210][ T7176] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 348.709798][ T7176] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 349.025519][ T7176] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 349.035091][ T7176] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 349.845252][T14463] syzkaller0: entered promiscuous mode [ 349.851114][T14463] syzkaller0: entered allmulticast mode [ 351.340605][T14534] __nla_validate_parse: 8 callbacks suppressed [ 351.340653][T14534] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2463'. [ 351.358701][T14534] netlink: 252 bytes leftover after parsing attributes in process `syz.7.2463'. [ 351.688218][T14543] netlink: 'syz.9.2461': attribute type 1 has an invalid length. [ 353.098756][T14543] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 353.468721][T14558] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2469'. [ 353.552921][T14558] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.560622][T14558] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.798203][T14567] netlink: 'syz.9.2472': attribute type 10 has an invalid length. [ 353.820053][T14569] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2471'. [ 353.835884][T14572] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2474'. [ 353.867898][T14567] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 353.912571][T14567] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 354.251174][ T7176] tipc: Subscription rejected, illegal request [ 354.471141][T14613] bridge0: port 3(gretap0) entered blocking state [ 354.511597][T14612] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2484'. [ 354.518766][T14613] bridge0: port 3(gretap0) entered disabled state [ 354.558128][T14613] gretap0: entered allmulticast mode [ 354.595119][T14613] gretap0: entered promiscuous mode [ 354.611460][T14613] bridge0: port 3(gretap0) entered blocking state [ 354.618105][T14613] bridge0: port 3(gretap0) entered forwarding state [ 354.817134][T14622] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2488'. [ 355.087324][T14628] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2490'. [ 355.101563][T14632] netlink: 'syz.7.2491': attribute type 2 has an invalid length. [ 355.123513][T14632] netlink: 'syz.7.2491': attribute type 8 has an invalid length. [ 355.139948][T14632] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2491'. [ 355.952632][T14674] FAULT_INJECTION: forcing a failure. [ 355.952632][T14674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.966211][T14674] CPU: 1 UID: 0 PID: 14674 Comm: syz.4.2506 Not tainted syzkaller #0 PREEMPT(full) [ 355.966255][T14674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 355.966277][T14674] Call Trace: [ 355.966370][T14674] [ 355.966438][T14674] dump_stack_lvl+0xe8/0x150 [ 355.966587][T14674] should_fail_ex+0x40c/0x560 [ 355.966710][T14674] _copy_from_user+0x2d/0xb0 [ 355.966770][T14674] __copy_msghdr+0x390/0x590 [ 355.966893][T14674] ___sys_sendmsg+0x213/0x360 [ 355.966917][T14674] ? __lock_acquire+0x683/0x2cf0 [ 355.966990][T14674] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.967059][T14674] ? __fget_files+0x2a/0x420 [ 355.967109][T14674] ? __fget_files+0x3a2/0x420 [ 355.967143][T14674] __x64_sys_sendmsg+0x1b1/0x290 [ 355.967171][T14674] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 355.967216][T14674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.967259][T14674] do_syscall_64+0x174/0x580 [ 355.967339][T14674] ? trace_irq_disable+0x3b/0x140 [ 355.967375][T14674] ? clear_bhb_loop+0x40/0x90 [ 355.967402][T14674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.967424][T14674] RIP: 0033:0x7ff35179ce59 [ 355.967466][T14674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.967515][T14674] RSP: 002b:00007ff352684028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.967570][T14674] RAX: ffffffffffffffda RBX: 00007ff351a15fa0 RCX: 00007ff35179ce59 [ 355.967590][T14674] RDX: 0000000020000010 RSI: 00002000000005c0 RDI: 0000000000000003 [ 355.967604][T14674] RBP: 00007ff352684090 R08: 0000000000000000 R09: 0000000000000000 [ 355.967618][T14674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.967630][T14674] R13: 00007ff351a16038 R14: 00007ff351a15fa0 R15: 00007ffd8539cee8 [ 355.967665][T14674] [ 356.472215][T14682] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2511'. [ 356.686989][T14690] syzkaller0: entered promiscuous mode [ 356.698669][T14690] syzkaller0: entered allmulticast mode [ 359.493090][T14684] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 359.735120][T14712] FAULT_INJECTION: forcing a failure. [ 359.735120][T14712] name failslab, interval 1, probability 0, space 0, times 0 [ 359.760447][T14714] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2519'. [ 359.778921][T14712] CPU: 1 UID: 0 PID: 14712 Comm: syz.5.2517 Not tainted syzkaller #0 PREEMPT(full) [ 359.778955][T14712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 359.778969][T14712] Call Trace: [ 359.778977][T14712] [ 359.778986][T14712] dump_stack_lvl+0xe8/0x150 [ 359.779019][T14712] should_fail_ex+0x40c/0x560 [ 359.779055][T14712] should_failslab+0xa8/0x100 [ 359.779113][T14712] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 359.779156][T14712] ? local_lock_release+0x9c/0x160 [ 359.779253][T14712] ? __alloc_skb+0x1d7/0x7a0 [ 359.779271][T14712] ? __alloc_skb+0x1d7/0x7a0 [ 359.779299][T14712] __alloc_skb+0x1d7/0x7a0 [ 359.779324][T14712] netlink_sendmsg+0x5d4/0xb40 [ 359.779495][T14712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.779526][T14712] ? aa_sock_msg_perm+0xf1/0x1b0 [ 359.779609][T14712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.779634][T14712] sock_sendmsg_nosec+0x13a/0x180 [ 359.779666][T14712] ____sys_sendmsg+0x54e/0x850 [ 359.779695][T14712] ? __pfx_____sys_sendmsg+0x10/0x10 [ 359.779738][T14712] ? import_iovec+0x73/0xa0 [ 359.779787][T14712] ___sys_sendmsg+0x2a5/0x360 [ 359.779810][T14712] ? __lock_acquire+0x683/0x2cf0 [ 359.779839][T14712] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.779903][T14712] ? __fget_files+0x2a/0x420 [ 359.779924][T14712] ? __fget_files+0x3a2/0x420 [ 359.779958][T14712] __x64_sys_sendmsg+0x1b1/0x290 [ 359.779986][T14712] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 359.780031][T14712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.780056][T14712] do_syscall_64+0x174/0x580 [ 359.780076][T14712] ? trace_irq_disable+0x3b/0x140 [ 359.780097][T14712] ? clear_bhb_loop+0x40/0x90 [ 359.780125][T14712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.780146][T14712] RIP: 0033:0x7fd96519ce59 [ 359.780167][T14712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.780186][T14712] RSP: 002b:00007fd966010028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.780209][T14712] RAX: ffffffffffffffda RBX: 00007fd965415fa0 RCX: 00007fd96519ce59 [ 359.780225][T14712] RDX: 0000000020000010 RSI: 00002000000005c0 RDI: 0000000000000003 [ 359.780240][T14712] RBP: 00007fd966010090 R08: 0000000000000000 R09: 0000000000000000 [ 359.780252][T14712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.780265][T14712] R13: 00007fd965416038 R14: 00007fd965415fa0 R15: 00007ffecffa1418 [ 359.780300][T14712] [ 359.784505][T14713] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2518'. [ 359.847787][T14715] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2519'. [ 360.442409][T14726] netlink: 'syz.8.2523': attribute type 83 has an invalid length. [ 360.484621][T14730] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2526'. [ 360.508360][T14729] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 360.590176][T14730] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2526'. [ 361.317807][T14766] x_tables: duplicate underflow at hook 2 [ 361.340945][T14766] x_tables: duplicate underflow at hook 2 [ 361.370110][T14766] x_tables: duplicate underflow at hook 2 [ 361.403016][T14766] x_tables: duplicate underflow at hook 2 [ 361.427370][T14766] x_tables: duplicate underflow at hook 2 [ 361.450782][T14766] x_tables: duplicate underflow at hook 2 [ 361.474907][T14766] x_tables: duplicate underflow at hook 2 [ 361.492611][T14766] x_tables: duplicate underflow at hook 2 [ 361.507614][T14766] x_tables: duplicate underflow at hook 2 [ 361.522227][T14766] x_tables: duplicate underflow at hook 2 [ 361.570723][T14773] siw: device registration error -23 [ 361.828556][T14788] tipc: Enabled bearer , priority 0 [ 361.858593][T14788] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 362.014533][T14786] tipc: Disabling bearer [ 362.085000][T14804] Can't find ip_set type hash:net,rt [ 362.103745][T14807] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2546'. [ 362.213612][T14823] netlink: 'syz.5.2550': attribute type 1 has an invalid length. [ 362.225147][T14817] syzkaller1: entered promiscuous mode [ 362.288283][T14817] syzkaller1: entered allmulticast mode [ 362.400376][T14841] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2551'. [ 362.417479][T14833] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 362.444858][T14831] sctp: [Deprecated]: syz.5.2552 (pid 14831) Use of struct sctp_assoc_value in delayed_ack socket option. [ 362.444858][T14831] Use struct sctp_sack_info instead [ 362.491012][T14831] syzkaller1: entered allmulticast mode [ 362.897090][T14878] netlink: 'syz.7.2557': attribute type 1 has an invalid length. [ 363.115850][T14899] netlink: 'syz.5.2558': attribute type 4 has an invalid length. [ 363.187603][T14878] 8021q: adding VLAN 0 to HW filter on device bond1 [ 363.442812][T14915] vlan2: entered allmulticast mode [ 363.450968][T14915] bond0: entered allmulticast mode [ 363.458732][T14915] bond_slave_0: entered allmulticast mode [ 363.646407][T14929] netlink: 'syz.5.2562': attribute type 1 has an invalid length. [ 363.682609][T14934] netlink: 'syz.8.2563': attribute type 83 has an invalid length. [ 363.703407][T14934] netlink: 'syz.8.2563': attribute type 83 has an invalid length. [ 363.713880][T14934] netlink: 'syz.8.2563': attribute type 83 has an invalid length. [ 363.726887][T14934] netlink: 'syz.8.2563': attribute type 83 has an invalid length. [ 363.738684][T14929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 363.761615][T14934] netlink: 'syz.8.2563': attribute type 83 has an invalid length. [ 363.779611][T14939] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 363.949851][T14954] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2564'. [ 364.000577][T14941] bond1: (slave veth3): Enslaving as an active interface with a down link [ 364.068171][T14963] ipt_REJECT: TCP_RESET invalid for non-tcp [ 364.166557][T14795] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 364.205023][T14941] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 364.257136][T14941] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 364.719509][T14982] FAULT_INJECTION: forcing a failure. [ 364.719509][T14982] name failslab, interval 1, probability 0, space 0, times 0 [ 364.738046][T14982] CPU: 1 UID: 0 PID: 14982 Comm: syz.4.2571 Not tainted syzkaller #0 PREEMPT(full) [ 364.738075][T14982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 364.738089][T14982] Call Trace: [ 364.738096][T14982] [ 364.738105][T14982] dump_stack_lvl+0xe8/0x150 [ 364.738138][T14982] should_fail_ex+0x40c/0x560 [ 364.738174][T14982] should_failslab+0xa8/0x100 [ 364.738208][T14982] __kmalloc_noprof+0xfe/0x720 [ 364.738243][T14982] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 364.738276][T14982] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 364.738323][T14982] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 364.738366][T14982] genl_family_rcv_msg_doit+0xda/0x340 [ 364.738406][T14982] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 364.738445][T14982] ? apparmor_capable+0x126/0x170 [ 364.738562][T14982] ? bpf_lsm_capable+0x9/0x20 [ 364.738601][T14982] ? security_capable+0x7e/0x2c0 [ 364.738674][T14982] genl_rcv_msg+0x614/0x7a0 [ 364.738712][T14982] ? __pfx_genl_rcv_msg+0x10/0x10 [ 364.738741][T14982] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 364.738835][T14982] ? __pfx_nl80211_nan_change_config+0x10/0x10 [ 364.738882][T14982] ? __pfx_nl80211_post_doit+0x10/0x10 [ 364.738909][T14982] ? __pfx_ref_tracker_free+0x10/0x10 [ 364.738996][T14982] netlink_rcv_skb+0x226/0x4a0 [ 364.739022][T14982] ? __pfx_genl_rcv_msg+0x10/0x10 [ 364.739054][T14982] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 364.739094][T14982] ? down_read+0x2be/0x330 [ 364.739152][T14982] genl_rcv+0x28/0x40 [ 364.739180][T14982] netlink_unicast+0x7bb/0x940 [ 364.739214][T14982] netlink_sendmsg+0x813/0xb40 [ 364.739250][T14982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.739280][T14982] ? aa_sock_msg_perm+0xf1/0x1b0 [ 364.739321][T14982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.739346][T14982] sock_sendmsg_nosec+0x13a/0x180 [ 364.739379][T14982] ____sys_sendmsg+0x54e/0x850 [ 364.739410][T14982] ? __pfx_____sys_sendmsg+0x10/0x10 [ 364.739445][T14982] ? import_iovec+0x73/0xa0 [ 364.739472][T14982] ___sys_sendmsg+0x2a5/0x360 [ 364.739495][T14982] ? __lock_acquire+0x683/0x2cf0 [ 364.739523][T14982] ? __pfx____sys_sendmsg+0x10/0x10 [ 364.739588][T14982] ? __fget_files+0x2a/0x420 [ 364.739608][T14982] ? __fget_files+0x3a2/0x420 [ 364.739641][T14982] __x64_sys_sendmsg+0x1b1/0x290 [ 364.739668][T14982] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 364.739714][T14982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.739738][T14982] do_syscall_64+0x174/0x580 [ 364.739757][T14982] ? trace_irq_disable+0x3b/0x140 [ 364.739779][T14982] ? clear_bhb_loop+0x40/0x90 [ 364.739806][T14982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.739828][T14982] RIP: 0033:0x7ff35179ce59 [ 364.739850][T14982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.739869][T14982] RSP: 002b:00007ff352684028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.739891][T14982] RAX: ffffffffffffffda RBX: 00007ff351a15fa0 RCX: 00007ff35179ce59 [ 364.739907][T14982] RDX: 0000000020000010 RSI: 00002000000005c0 RDI: 0000000000000003 [ 364.739921][T14982] RBP: 00007ff352684090 R08: 0000000000000000 R09: 0000000000000000 [ 364.739934][T14982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.739947][T14982] R13: 00007ff351a16038 R14: 00007ff351a15fa0 R15: 00007ffd8539cee8 [ 364.739983][T14982] [ 365.211800][T14981] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2569'. [ 365.243863][T14986] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2573'. [ 365.460675][T14993] netlink: 10 bytes leftover after parsing attributes in process `syz.9.2575'. [ 365.505289][T14995] validate_nla: 28 callbacks suppressed [ 365.505400][T14995] netlink: 'syz.5.2578': attribute type 4 has an invalid length. [ 365.522532][T14992] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2574'. [ 365.558143][T14992] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2574'. [ 365.571144][T15000] netlink: 'syz.4.2576': attribute type 1 has an invalid length. [ 365.593784][T15000] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2576'. [ 365.634612][T15000] netlink: 'syz.4.2576': attribute type 1 has an invalid length. [ 365.856633][T15014] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2581'. [ 366.228677][T15029] nft_compat: unsupported protocol 0 [ 366.296989][T15035] FAULT_INJECTION: forcing a failure. [ 366.296989][T15035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.318347][T15035] CPU: 1 UID: 0 PID: 15035 Comm: syz.4.2586 Not tainted syzkaller #0 PREEMPT(full) [ 366.318378][T15035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 366.318391][T15035] Call Trace: [ 366.318400][T15035] [ 366.318409][T15035] dump_stack_lvl+0xe8/0x150 [ 366.318442][T15035] should_fail_ex+0x40c/0x560 [ 366.318478][T15035] _copy_from_user+0x2d/0xb0 [ 366.318503][T15035] ___sys_sendmsg+0x1c6/0x360 [ 366.318526][T15035] ? __lock_acquire+0x683/0x2cf0 [ 366.318555][T15035] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.318618][T15035] ? __fget_files+0x2a/0x420 [ 366.318639][T15035] ? __fget_files+0x3a2/0x420 [ 366.318672][T15035] __x64_sys_sendmsg+0x1b1/0x290 [ 366.318700][T15035] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 366.318745][T15035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.318769][T15035] do_syscall_64+0x174/0x580 [ 366.318789][T15035] ? trace_irq_disable+0x3b/0x140 [ 366.318811][T15035] ? clear_bhb_loop+0x40/0x90 [ 366.318838][T15035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.318860][T15035] RIP: 0033:0x7ff35179ce59 [ 366.318880][T15035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.318900][T15035] RSP: 002b:00007ff352684028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.318924][T15035] RAX: ffffffffffffffda RBX: 00007ff351a15fa0 RCX: 00007ff35179ce59 [ 366.318940][T15035] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000003 [ 366.318954][T15035] RBP: 00007ff352684090 R08: 0000000000000000 R09: 0000000000000000 [ 366.318967][T15035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.318979][T15035] R13: 00007ff351a16038 R14: 00007ff351a15fa0 R15: 00007ffd8539cee8 [ 366.319014][T15035] [ 366.798731][T15048] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 366.919125][T15051] netlink: 'syz.4.2592': attribute type 83 has an invalid length. [ 367.504313][T15070] __nla_validate_parse: 1 callbacks suppressed [ 367.504336][T15070] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2599'. [ 367.590111][T15074] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 367.610074][T15073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2600'. [ 367.721869][T15079] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2601'. [ 367.749617][T15080] FAULT_INJECTION: forcing a failure. [ 367.749617][T15080] name failslab, interval 1, probability 0, space 0, times 0 [ 367.763612][T15080] CPU: 0 UID: 0 PID: 15080 Comm: syz.7.2602 Not tainted syzkaller #0 PREEMPT(full) [ 367.763641][T15080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 367.763654][T15080] Call Trace: [ 367.763663][T15080] [ 367.763672][T15080] dump_stack_lvl+0xe8/0x150 [ 367.763705][T15080] should_fail_ex+0x40c/0x560 [ 367.763741][T15080] should_failslab+0xa8/0x100 [ 367.763768][T15080] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 367.763799][T15080] ? local_lock_release+0x9c/0x160 [ 367.763835][T15080] ? __alloc_skb+0x1d7/0x7a0 [ 367.763851][T15080] ? __alloc_skb+0x1d7/0x7a0 [ 367.763878][T15080] __alloc_skb+0x1d7/0x7a0 [ 367.763901][T15080] netlink_sendmsg+0x5d4/0xb40 [ 367.763934][T15080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.763961][T15080] ? aa_sock_msg_perm+0xf1/0x1b0 [ 367.763990][T15080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.764012][T15080] sock_sendmsg_nosec+0x13a/0x180 [ 367.764044][T15080] ____sys_sendmsg+0x54e/0x850 [ 367.764070][T15080] ? __pfx_____sys_sendmsg+0x10/0x10 [ 367.764098][T15080] ? import_iovec+0x73/0xa0 [ 367.764124][T15080] ___sys_sendmsg+0x2a5/0x360 [ 367.764145][T15080] ? __lock_acquire+0x683/0x2cf0 [ 367.764171][T15080] ? __pfx____sys_sendmsg+0x10/0x10 [ 367.764228][T15080] ? __fget_files+0x2a/0x420 [ 367.764244][T15080] ? __fget_files+0x3a2/0x420 [ 367.764269][T15080] __x64_sys_sendmsg+0x1b1/0x290 [ 367.764290][T15080] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 367.764324][T15080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.764343][T15080] do_syscall_64+0x174/0x580 [ 367.764359][T15080] ? trace_irq_disable+0x3b/0x140 [ 367.764376][T15080] ? clear_bhb_loop+0x40/0x90 [ 367.764397][T15080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.764414][T15080] RIP: 0033:0x7ff5b179ce59 [ 367.764432][T15080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.764447][T15080] RSP: 002b:00007ff5b2638028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.764474][T15080] RAX: ffffffffffffffda RBX: 00007ff5b1a15fa0 RCX: 00007ff5b179ce59 [ 367.764488][T15080] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000003 [ 367.764499][T15080] RBP: 00007ff5b2638090 R08: 0000000000000000 R09: 0000000000000000 [ 367.764513][T15080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.764531][T15080] R13: 00007ff5b1a16038 R14: 00007ff5b1a15fa0 R15: 00007fff0e72eb28 [ 367.764561][T15080] [ 368.326488][T15090] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2604'. [ 368.363429][T15092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2606'. [ 368.377401][T15090] netlink: 'syz.8.2604': attribute type 1 has an invalid length. [ 368.454020][T15090] bond2: entered promiscuous mode [ 368.459733][T15090] 8021q: adding VLAN 0 to HW filter on device bond2 [ 368.611276][T15090] bond2: (slave bridge1): making interface the new active one [ 368.662323][T15090] bridge1: entered promiscuous mode [ 368.686990][T15090] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 368.982995][T15111] netlink: 'syz.9.2611': attribute type 83 has an invalid length. [ 369.020705][T15113] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 369.147237][T15116] netlink: 144 bytes leftover after parsing attributes in process `syz.9.2612'. [ 369.164641][T15117] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 369.458435][T15127] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2614'. [ 369.516377][T15131] ip6erspan0: entered allmulticast mode [ 369.797841][T15135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2607'. [ 369.856618][T15108] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 370.031959][T15135] hsr_slave_1 (unregistering): left promiscuous mode [ 370.502695][T15148] syzkaller0: entered promiscuous mode [ 370.529812][T15148] syzkaller0: entered allmulticast mode [ 370.566550][T15151] netlink: 'syz.9.2617': attribute type 3 has an invalid length. [ 370.856645][T15157] ieee802154 phy1 wpan1: encryption failed: -90 [ 374.490977][T15186] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2628'. [ 374.768358][T15199] openvswitch: netlink: Actions may not be safe on all matching packets [ 375.329601][T15215] bond3: Removing last arp target with arp_interval on [ 375.503623][T15221] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2638'. [ 375.552911][T15221] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2638'. [ 376.028598][T15236] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2643'. [ 376.249718][T15242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2646'. [ 376.279580][T15242] macsec2: entered promiscuous mode [ 376.288969][T15242] macsec2: entered allmulticast mode [ 376.308306][T15242] bridge0: port 3(macsec2) entered blocking state [ 376.329578][T15242] bridge0: port 3(macsec2) entered disabled state [ 376.480419][T15250] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2648'. [ 376.668710][T15253] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2649'. [ 376.758364][T15256] syzkaller0: entered promiscuous mode [ 376.784053][T15256] syzkaller0: entered allmulticast mode [ 377.344202][T15272] IPVS: set_ctl: invalid protocol: 136 100.1.1.2:20001 [ 377.480826][T15275] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2659'. [ 377.651652][T15279] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2660'. [ 377.740597][T15283] netlink: 'syz.9.2662': attribute type 1 has an invalid length. [ 377.851102][T15283] bond1: entered promiscuous mode [ 377.897947][T15283] 8021q: adding VLAN 0 to HW filter on device bond1 [ 377.992924][T15298] netlink: 5 bytes leftover after parsing attributes in process `syz.8.2664'. [ 378.048797][T15288] bond1: (slave bridge1): making interface the new active one [ 378.061762][T15288] bridge1: entered promiscuous mode [ 378.071912][T15288] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 378.203871][T15283] veth1_macvtap: renamed from vlan0 [ 378.436342][T15303] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 378.641722][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.174854][T15333] gre0: entered promiscuous mode [ 379.197347][T15333] gre0: entered allmulticast mode [ 380.119848][T15363] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2679'. [ 380.487981][T15375] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2682'. [ 380.542955][T15378] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1Y#ˌ [ 380.542955][T15378] d]Wʔ+NCmY<9 [ 381.032777][T15389] SET target dimension over the limit! [ 381.085197][T15394] xt_hashlimit: size too large, truncated to 1048576 [ 381.118154][T15396] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2686'. [ 381.223827][T15401] openvswitch: netlink: Flow key attr not present in new flow. [ 381.434467][T15408] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2689'. [ 381.972399][T15415] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2690'. [ 382.009896][T15417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2691'. [ 382.243020][T15422] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2692'. [ 382.265838][T15422] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2692'. [ 382.294249][T15422] netlink: 'syz.8.2692': attribute type 3 has an invalid length. [ 382.319263][T15422] netlink: 3 bytes leftover after parsing attributes in process `syz.8.2692'. [ 382.689673][T15431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2695'. [ 382.911384][T15433] netlink: 'syz.8.2696': attribute type 1 has an invalid length. [ 382.987976][T15433] 8021q: adding VLAN 0 to HW filter on device bond4 [ 383.052833][T15441] bond4: (slave veth3): Enslaving as an active interface with a down link [ 383.110544][T15433] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 383.167372][T15433] bond4: (slave batadv1): making interface the new active one [ 383.188916][T15433] batadv1: entered promiscuous mode [ 383.203209][T15433] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 394.126641][ T12] batadv1: left promiscuous mode [ 430.477877][ T31] INFO: task syz.1.1807:12266 blocked for more than 143 seconds. [ 430.485834][ T31] Not tainted syzkaller #0 [ 430.490897][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.499829][ T31] task:syz.1.1807 state:D stack:27176 pid:12266 tgid:12261 ppid:5629 task_flags:0x400140 flags:0x00080002 [ 430.512601][ T31] Call Trace: [ 430.516250][ T31] [ 430.519272][ T31] __schedule+0x17d9/0x56c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 430.523875][ T31] ? __lock_acquire+0x683/0x2cf0 [ 430.529367][ T31] ? __lock_acquire+0x683/0x2cf0 [ 430.534423][ T31] ? __pfx___schedule+0x10/0x10 [ 430.541111][ T31] ? schedule+0x90/0x2b0 [ 430.548194][ T31] schedule+0x164/0x2b0 [ 430.552462][ T31] schedule_preempt_disabled+0x13/0x30 [ 430.561439][ T31] __mutex_lock+0x7bf/0x1550 [ 430.576235][ T31] ? __mutex_lock+0x5d4/0x1550 [ 430.599987][ T31] ? nfsd_nl_version_get_doit+0x17c/0xd20 [ 430.648782][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 430.673607][ T31] ? __nlmsg_put+0xef/0x1b0 [ 430.688086][ T31] ? genlmsg_put+0x137/0x2e0 [ 430.692809][ T31] nfsd_nl_version_get_doit+0x17c/0xd20 [ 430.698616][ T31] ? __nla_parse+0x40/0x60 [ 430.703131][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 430.713442][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 430.733374][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 430.767963][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 430.777359][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 430.783559][ T31] ? __lock_acquire+0x683/0x2cf0 [ 430.791020][ T31] genl_rcv_msg+0x614/0x7a0 [ 430.795626][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 430.808941][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 430.815181][ T31] netlink_rcv_skb+0x226/0x4a0 [ 430.823517][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 430.847647][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 430.875519][ T31] ? down_read+0x2be/0x330 [ 430.884674][ T31] genl_rcv+0x28/0x40 [ 430.890048][ T31] netlink_unicast+0x7bb/0x940 [ 430.894938][ T31] netlink_sendmsg+0x813/0xb40 [ 430.902154][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.907947][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 430.912989][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.919201][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 430.924372][ T31] ____sys_sendmsg+0x54e/0x850 [ 430.929918][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 430.937595][ T31] ? import_iovec+0x73/0xa0 [ 430.942211][ T31] ___sys_sendmsg+0x2a5/0x360 [ 430.949469][ T31] ? __lock_acquire+0x683/0x2cf0 [ 430.954510][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 430.960511][ T31] ? futex_wait+0x2a2/0x390 [ 430.965179][ T31] ? __fget_files+0x2a/0x420 [ 430.973654][ T31] ? __fget_files+0x3a2/0x420 [ 430.979260][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 430.984309][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 430.991280][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.998538][ T31] do_syscall_64+0x174/0x580 [ 431.003396][ T31] ? trace_irq_disable+0x3b/0x140 [ 431.011051][ T31] ? clear_bhb_loop+0x40/0x90 [ 431.017964][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.023969][ T31] RIP: 0033:0x7f7abd19ce59 [ 431.028958][ T31] RSP: 002b:00007f7abe01c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.042049][ T31] RAX: ffffffffffffffda RBX: 00007f7abd415fa0 RCX: 00007f7abd19ce59 [ 431.052952][ T31] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 431.063282][ T31] RBP: 00007f7abd232e6f R08: 0000000000000000 R09: 0000000000000000 [ 431.072193][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.082770][ T31] R13: 00007f7abd416038 R14: 00007f7abd415fa0 R15: 00007ffcbcb0dca8 [ 431.105924][ T31] [ 431.109161][ T31] INFO: task syz.2.1869:12509 blocked for more than 143 seconds. [ 431.154017][ T31] Not tainted syzkaller #0 [ 431.199911][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.246170][ T31] task:syz.2.1869 state:D stack:26432 pid:12509 tgid:12508 ppid:5631 task_flags:0x400140 flags:0x00080002 [ 431.261190][ T31] Call Trace: [ 431.264584][ T31] [ 431.293700][ T31] __schedule+0x17d9/0x56c0 [ 431.301536][ T31] ? __lock_acquire+0x683/0x2cf0 [ 431.309911][ T31] ? __lock_acquire+0x683/0x2cf0 [ 431.314991][ T31] ? __kmalloc_noprof+0x1ad/0x720 [ 431.320687][ T31] ? kasan_save_track+0x4f/0x80 [ 431.325630][ T31] ? kasan_save_track+0x3e/0x80 [ 431.345892][ T31] ? __pfx___schedule+0x10/0x10 [ 431.353083][ T31] ? schedule+0x90/0x2b0 [ 431.369083][ T31] schedule+0x164/0x2b0 [ 431.373367][ T31] schedule_preempt_disabled+0x13/0x30 [ 431.387431][ T31] __mutex_lock+0x7bf/0x1550 [ 431.398814][ T31] ? __mutex_lock+0x5d4/0x1550 [ 431.405475][ T31] ? nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 431.414643][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 431.420022][ T31] ? net_generic+0x1e/0x240 [ 431.424627][ T31] ? net_generic+0x1e/0x240 [ 431.437358][ T31] ? net_generic+0x1e/0x240 [ 431.445802][ T31] ? net_generic+0x1e/0x240 [ 431.451871][ T31] nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 431.457768][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 431.463518][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 431.470722][ T31] ? bpf_lsm_capable+0x9/0x20 [ 431.475494][ T31] ? security_capable+0x7e/0x2c0 [ 431.480549][ T31] genl_rcv_msg+0x614/0x7a0 [ 431.485135][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 431.490310][ T31] ? __pfx_nfsd_nl_cache_flush_doit+0x10/0x10 [ 431.497580][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 431.503152][ T31] netlink_rcv_skb+0x226/0x4a0 [ 431.508050][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 431.513141][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 431.518820][ T31] ? down_read+0x2be/0x330 [ 431.523300][ T31] genl_rcv+0x28/0x40 [ 431.528700][ T31] netlink_unicast+0x7bb/0x940 [ 431.533580][ T31] netlink_sendmsg+0x813/0xb40 [ 431.538833][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.544211][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 431.549678][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.555281][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 431.561649][ T31] ____sys_sendmsg+0x54e/0x850 [ 431.566785][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 431.572355][ T31] ? import_iovec+0x73/0xa0 [ 431.577007][ T31] ___sys_sendmsg+0x2a5/0x360 [ 431.581788][ T31] ? __lock_acquire+0x683/0x2cf0 [ 431.588001][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 431.593277][ T31] ? futex_wait+0x2a2/0x390 [ 431.598741][ T31] ? __fget_files+0x2a/0x420 [ 431.603405][ T31] ? __fget_files+0x3a2/0x420 [ 431.608639][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 431.613653][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 431.620053][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.626460][ T31] do_syscall_64+0x174/0x580 [ 431.631384][ T31] ? trace_irq_disable+0x3b/0x140 [ 431.636834][ T31] ? clear_bhb_loop+0x40/0x90 [ 431.641606][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.652344][ T31] RIP: 0033:0x7f7142b9ce59 [ 431.657170][ T31] RSP: 002b:00007f7143990028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.665661][ T31] RAX: ffffffffffffffda RBX: 00007f7142e15fa0 RCX: 00007f7142b9ce59 [ 431.674275][ T31] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 431.684348][ T31] RBP: 00007f7142c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 431.692580][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.700941][ T31] R13: 00007f7142e16038 R14: 00007f7142e15fa0 R15: 00007ffcd50f0a38 [ 431.709907][ T31] [ 431.713197][ T31] [ 431.713197][ T31] Showing all locks held in the system: [ 431.722602][ T31] 2 locks held by ksoftirqd/0/15: [ 431.731767][ T31] 1 lock held by khungtaskd/31: [ 431.738012][ T31] #0: ffffffff8e959c20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 431.749210][ T31] 2 locks held by getty/5387: [ 431.753969][ T31] #0: ffff8880361ae0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 431.767634][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 431.779118][ T31] 3 locks held by syz-executor/5628: [ 431.784491][ T31] 3 locks held by kworker/1:4/5738: [ 431.792435][ T31] #0: ffff88813fe4f140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 431.804017][ T31] #1: ffffc900049ffc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 431.819086][ T31] #2: ffffffff8e95ff28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 431.831594][ T31] 2 locks held by syz.3.1578/11713: [ 431.851360][ T31] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 431.867962][ T31] #1: ffffffff8ec8e2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 431.879948][ T31] 2 locks held by syz.1.1807/12266: [ 431.885228][ T31] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 431.894469][ T31] #1: ffffffff8ec8e2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xd20 [ 431.905222][ T31] 2 locks held by syz.2.1869/12509: [ 431.911260][ T31] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 431.920617][ T31] #1: ffffffff8ec8e2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 431.931348][ T31] 2 locks held by syz.0.1899/12608: [ 431.938014][ T31] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 431.948472][ T31] #1: ffffffff8ec8e2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 431.959213][ T31] 1 lock held by syz-executor/13056: [ 431.964596][ T31] #0: ffff88804ff20ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 431.975591][ T31] 2 locks held by syz.6.2061/13205: [ 431.981245][ T31] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 431.990769][ T31] #1: ffffffff8ec8e2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 432.002751][ T31] 2 locks held by syz-executor/13569: [ 432.008552][ T31] #0: ffff88804fcbcea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 432.019221][ T31] #1: ffffffff8e95ff28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 432.031853][ T31] 2 locks held by syz.5.2608/15098: [ 432.038062][ T31] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 432.046674][ T31] #1: ffffffff8ec8e2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 432.061189][ T31] 2 locks held by syz.7.2633/15205: [ 432.067424][ T31] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 432.086353][ T31] #1: ffffffff8ec8e2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 432.099748][ T31] [ 432.110307][ T31] ============================================= [ 432.110307][ T31] [ 432.119616][ T31] NMI backtrace for cpu 1 [ 432.119639][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 432.119663][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 432.119676][ T31] Call Trace: [ 432.119685][ T31] [ 432.119693][ T31] dump_stack_lvl+0xe8/0x150 [ 432.119726][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 432.119862][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 432.119903][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 432.119936][ T31] sys_info+0x135/0x170 [ 432.119960][ T31] watchdog+0xfd7/0x1030 [ 432.120008][ T31] ? watchdog+0x1c7/0x1030 [ 432.120048][ T31] kthread+0x388/0x470 [ 432.120079][ T31] ? __pfx_watchdog+0x10/0x10 [ 432.120109][ T31] ? __pfx_kthread+0x10/0x10 [ 432.120134][ T31] ret_from_fork+0x514/0xb70 [ 432.120178][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 432.120202][ T31] ? __switch_to+0xc89/0x1420 [ 432.120244][ T31] ? __pfx_kthread+0x10/0x10 [ 432.120269][ T31] ret_from_fork_asm+0x1a/0x30 [ 432.120314][ T31] [ 432.120341][ T31] Sending NMI from CPU 1 to CPUs 0: [ 432.233131][ C0] NMI backtrace for cpu 0 [ 432.233149][ C0] CPU: 0 UID: 0 PID: 7162 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 432.233171][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 432.233184][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 432.233328][ C0] RIP: 0010:__raw_callee_save___pv_queued_spin_unlock+0x10/0x18 [ 432.233395][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 52 b8 01 00 00 00 31 d2 f0 0f b0 17 <75> 06 5a e9 18 3e 00 00 56 0f b6 f0 e8 9f ff ff ff 5e 5a e9 08 3e [ 432.233411][ C0] RSP: 0018:ffffc9000d1679a0 EFLAGS: 00000046 [ 432.233426][ C0] RAX: 0000000000000001 RBX: ffff8880b8626040 RCX: 0000000000000000 [ 432.233439][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880b8626040 [ 432.233457][ C0] RBP: 1ffff110170c4c09 R08: ffff8880b8626043 R09: 1ffff110170c4c08 [ 432.233471][ C0] R10: dffffc0000000000 R11: ffffed10170c4c09 R12: dffffc0000000000 [ 432.233486][ C0] R13: 1ffff110170c4c0a R14: ffff8880b8626050 R15: ffff8880b8626048 [ 432.233500][ C0] FS: 0000000000000000(0000) GS:ffff888125226000(0000) knlGS:0000000000000000 [ 432.233515][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 432.233528][ C0] CR2: 000055f3b27e0ee8 CR3: 000000000e746000 CR4: 00000000003526f0 [ 432.233545][ C0] Call Trace: [ 432.233560][ C0] [ 432.233568][ C0] do_raw_spin_unlock+0xf5/0x210 [ 432.233599][ C0] _raw_spin_unlock_irqrestore+0x23/0x80 [ 432.233625][ C0] __mod_timer+0xb53/0xed0 [ 432.233663][ C0] queue_delayed_work_on+0x11a/0x1e0 [ 432.233695][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 432.233721][ C0] process_scheduled_works+0xa8e/0x14e0 [ 432.233763][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 432.233793][ C0] ? assign_work+0x3cf/0x5d0 [ 432.233821][ C0] worker_thread+0xa47/0xfb0 [ 432.233864][ C0] kthread+0x388/0x470 [ 432.233883][ C0] ? __pfx_worker_thread+0x10/0x10 [ 432.233909][ C0] ? __pfx_kthread+0x10/0x10 [ 432.233929][ C0] ret_from_fork+0x514/0xb70 [ 432.233951][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 432.233971][ C0] ? __switch_to+0xc89/0x1420 [ 432.234000][ C0] ? __pfx_kthread+0x10/0x10 [ 432.234020][ C0] ret_from_fork_asm+0x1a/0x30 [ 432.234053][ C0] [ 432.522327][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 432.529247][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 432.538402][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 432.548512][ T31] Call Trace: [ 432.551820][ T31] [ 432.554799][ T31] vpanic+0x56c/0xa60 [ 432.558833][ T31] ? __pfx___schedule+0x10/0x10 [ 432.563730][ T31] ? __pfx_vpanic+0x10/0x10 [ 432.568319][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 432.574539][ T31] panic+0xc5/0xd0 [ 432.578307][ T31] ? __pfx_panic+0x10/0x10 [ 432.582763][ T31] ? preempt_schedule_common+0x82/0xd0 [ 432.588302][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 432.593724][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 432.599941][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 432.606160][ T31] watchdog+0x1030/0x1030 [ 432.610565][ T31] ? watchdog+0x1c7/0x1030 [ 432.615039][ T31] kthread+0x388/0x470 [ 432.619197][ T31] ? __pfx_watchdog+0x10/0x10 [ 432.623927][ T31] ? __pfx_kthread+0x10/0x10 [ 432.628560][ T31] ret_from_fork+0x514/0xb70 [ 432.633300][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 432.638452][ T31] ? __switch_to+0xc89/0x1420 [ 432.643180][ T31] ? __pfx_kthread+0x10/0x10 [ 432.647815][ T31] ret_from_fork_asm+0x1a/0x30 [ 432.652780][ T31] [ 432.656471][ T31] Kernel Offset: disabled [ 432.660814][ T31] Rebooting in 86400 seconds..