last executing test programs: 3m14.119924451s ago: executing program 3 (id=454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x0, 0x3, 0x5, 0x0, 0x0, {}, [@typed={0xc, 0xea, 0x0, 0x0, @u64=0x1}]}, 0x20}}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0xf}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000140)='syzkaller\x00'}, 0x94) 3m13.02855553s ago: executing program 3 (id=456): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtfilter={0x64, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x7}, {0xfff2, 0xffff}, {0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x71, 0x8, 0x1}, {0x3, 0x0, 0x6}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0x8}]}}]}, 0x64}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000600)={'wg1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000640)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000840)={'batadv0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000880)="114353012008ba00000037510800", 0xe, 0x4008005, &(0x7f00000008c0)={0x11, 0xd, r11, 0x1, 0x7, 0x6, @local}, 0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000a00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r2, @ANYBLOB="000826bd7000fedbdf250400000024000180080003000000000008000100", @ANYRES32=r5, @ANYBLOB="97bf608eb12b5e6d24b81a3e2ff44220945d01b61057411acddcd39042bd15ccccbf31e88a1f648b8b4202bc57220187cce036e5796dbdb7fc5b680b44e85c5a1c0443c59a964d3d8dd7a5ae6b7bd7a755132cc1d0ef0da43a69f13a0bad92dd3629643ac49d00d1931400f44913b80dfb7c4932ba26402273df7b3dbcf62bbc6e00"/145, @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="6c000180140002006272696467655f736c6176655f3100001400020064766d727030000000000000000000000800030001000000080003000200000014000200776c616e31000000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="140002007369743000"/20], 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x8044) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000080)=0x1, 0x4) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000a80)=@assoc_value={0x0}, &(0x7f0000000ac0)=0x4) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r12, 0x84, 0xa, &(0x7f0000000b00)={0x5, 0x4, 0x3, 0x5, 0x5, 0x6, 0x2, 0x6, r13}, 0x20) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000b40)={r13, @in={{0x2, 0x4e23, @remote}}, 0x9, 0x7, 0xfffffff7, 0x0, 0x7}, &(0x7f0000000c00)=0x98) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @random="facfff00716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x26, 0x28, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0xab}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3}}}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x3f7, 0x4) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/43, 0x14}}], 0x1, 0x2, 0x0) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f00000004c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r14}, {}, {}, {0x54}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x10000000}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 3m11.748292779s ago: executing program 3 (id=460): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4040850) sendmsg$NFT_BATCH(r0, 0x0, 0x24000840) r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40024000}, 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="bb13c2c9a06f9e5c5add2b2b9bdba40605d2", @ANYRES16=r1, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x80}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000480)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg(r3, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) connect$inet6(r2, &(0x7f0000000500)={0xa, 0x4e01, 0x3, @empty, 0x10000004}, 0x1c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x14, 0x0, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x38, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @rand_addr=0x64010101}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x800) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="2903fcfffffffedbdf25160000000c000600010000"], 0x20}, 0x1, 0x0, 0x0, 0x10000860}, 0x400c014) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="367c9306100001040c1db3dad619f79b09df3219824bf15f0000000000e3ffffff000000bc52cd0c668339d6a7b7c910c6f25d6ac387c650772383f2e9a90ca99444aa680acdce39467d2eeaca1ff98d6225c79e950f5d3d03b9c310d4f27cbfe515998669c2eff33e0d8177b5fb20f7fff6c887ffcca031c16658221f3f61f82021971397f39f7b3c795a243f9f6934453bd28f95646bdbc20a364a2dc87a352ffe05faa5e0bc4aec6b2dab7c7debca9e4cc3ec7e811fb63a8161690ce0829f307263efbb7f9953f96728a690c432a23c50dde59860493e47ccfa53fc25b6b12dccf390214a45d5ceeb903f8c38d804c1d70d6477d652887a5e539f07b3de124c1df2e4", @ANYRES32=0x0, @ANYBLOB="85980000080001001c00128009000100626f6e64000000000c00028008001a0000000000"], 0x3c}}, 0x0) 3m11.014740988s ago: executing program 3 (id=463): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000500), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000540)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000580)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000005c0)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0f000000000000000600", "1d1cbe23", "090019d1ebcdc493"}, 0x28) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000640)='.', 0x1}], 0x1) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000200)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000103, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004184, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYRES16=r0], 0x18}}, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x8e, &(0x7f00000006c0)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x80, 0x65, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x7, 0x1f, {0x17, 0x4, 0x3, 0x3a, 0x7ff, 0x68, 0x1ce2, 0xd9, 0x2f, 0xe5c, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x11, 0x3, [{0x7, 0x9, "a8806558a18f92"}, {0x0, 0x2}]}, @timestamp_addr={0x44, 0x34, 0x4c, 0x1, 0x0, [{@multicast2, 0x9}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x5}, {@loopback, 0x20005}, {@loopback}, {@remote, 0x329}, {@multicast2, 0x4}]}]}}, "90d04d16917a0d1a"}}}}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000000100)=ANY=[@ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtaction={0x80, 0x1c, 0x300, 0x1, 0x0, {0x0, 0x0, 0x1300}, [{0x6c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0x2}, {0x4}, {0x6, 0x6, 'vP'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_csum={0x30, 0xe, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x80}}, 0x0) openat$cgroup_devices(r4, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) openat$cgroup_ro(r4, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 3m9.653453958s ago: executing program 3 (id=467): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000040000000600000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000580)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000600)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x94) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000001780)={0x1, 0x0, 0x1000, 0x61, &(0x7f0000000700)="886c672004491f9d892f9dbfe7de7a2f156cc342e38ea2ba3d82107e771e4f94cb5056ff6d3f86b50752bae19d99aaec4e609798e865e8c44da28674b7db8e0c39a179d879cfc5b172bebadc2ea825b0482754f13072b3707b195db25b70f7f061", 0x1000, 0x0, &(0x7f0000000780)="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"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0xfeff, &(0x7f00000006c0)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r0]}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="0725461dd3e9b423140000001000018a278627d54f910285138f0f220000000000000000000700000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a32000000004c000000060a010400000000000000000500000008000b40000000002471101b514e3627f50001006374000014000280088a01400000000a0800024000db0f0d0900010073797a300000000014000000110001"], 0xc0}}, 0x0) ioctl$XFS_IOC_FSCOUNTS(r4, 0x80205871, &(0x7f0000000080)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000040000000600000008"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000580)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000600)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x94) (async) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000001780)={0x1, 0x0, 0x1000, 0x61, &(0x7f0000000700)="886c672004491f9d892f9dbfe7de7a2f156cc342e38ea2ba3d82107e771e4f94cb5056ff6d3f86b50752bae19d99aaec4e609798e865e8c44da28674b7db8e0c39a179d879cfc5b172bebadc2ea825b0482754f13072b3707b195db25b70f7f061", 0x1000, 0x0, &(0x7f0000000780)="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"}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0xfeff, &(0x7f00000006c0)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r0]}, 0x90) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="0725461dd3e9b423140000001000018a278627d54f910285138f0f220000000000000000000700000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a32000000004c000000060a010400000000000000000500000008000b40000000002471101b514e3627f50001006374000014000280088a01400000000a0800024000db0f0d0900010073797a300000000014000000110001"], 0xc0}}, 0x0) (async) ioctl$XFS_IOC_FSCOUNTS(r4, 0x80205871, &(0x7f0000000080)) (async) 3m9.149060871s ago: executing program 3 (id=472): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x29, 0x1, 0x70bd27, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2204c85c}, 0x20040000) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x8, "f0f03b"}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r3 = socket(0x1, 0x803, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x54}, 0x1, 0xba01}, 0x4000000) 2m53.876319817s ago: executing program 32 (id=472): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x29, 0x1, 0x70bd27, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2204c85c}, 0x20040000) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x8, "f0f03b"}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r3 = socket(0x1, 0x803, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x54}, 0x1, 0xba01}, 0x4000000) 2m47.763580375s ago: executing program 0 (id=554): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$NILFS_IOCTL_SYNC(r4, 0x80086e8a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffea}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}}, 0x44840) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xfffffffffffff4fb, 0x70bd25, 0x25de59f7, {0x0, 0x0, 0x0, 0x0, 0x2813, 0x2c31}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0x40}, @IFLA_IPTUN_PMTUDISC={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20004800) 2m45.455138766s ago: executing program 0 (id=560): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, &(0x7f0000000000)="4c00000011009df2be3c3554f708160002000000200000", 0x17) 2m45.189458843s ago: executing program 0 (id=561): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x20000002) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r4, @ANYRES16=0x0], 0x3c}}, 0x1000) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="400401000000000008000a00", @ANYRES32=r4, @ANYBLOB="d134b8694992afc1d73581c5c59ea0d79caf98d4a51c7892e99114b7d0809802b013a2d1400cc7a4e6649bc047e5cf3033b1e58e70ff41b312a803022cedcc2a9d7ae533e525434b8f20626a44ef39b7cf45d16dbc9974fd01e26af26491d374b2dae464011a1a005f22d7c2fbaa6f66e40f90b9a2475b50fa6a02c6f070e9057d2ea20ca4c4ee3adcaa38fe0c91a9ec40f9e16bbe83a21b86a75951778a86d2bc4a3a08a433b29b6179fa91b2836cd9d059f86f4fe457ca3bb152a004b482a46796a88c72bff9442b68fbb7"], 0x50}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r6, 0x6, 0x1f, &(0x7f0000000140)='espintcp', 0x8) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r6, 0xf507, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) (async) recvmmsg(r7, &(0x7f0000000680), 0x0, 0x0, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x1c, r9, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000018}, 0x80) (async) sendmsg$FOU_CMD_ADD(r7, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000880)={0x30, r9, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48004}, 0x4040) (async) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000980)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, r9, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c0002001e0000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRESDEC=r4], 0x60}}, 0x8000) 2m43.785938198s ago: executing program 0 (id=565): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f00000003c0)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000440)='cpu.max\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0xaf, 0x0, 0x1, 0x3, 0x53, 0x9, 0x3, 0x4, 0x1, 0xde, 0x1, 0xd, 0x4, 0xf5}, 0xe) bind$inet6(r0, &(0x7f0000002900)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000480)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f00000004c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000500)={0x1, [0x0]}, &(0x7f0000000540)=0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0x4, 0xa, 0x80, 0x140}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={r6}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000006c0)={r6, 0x0, 0x0, 0x4}, 0x20) r7 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000000580)={r5}, &(0x7f00000005c0)=0x8) sendto$inet6(r0, &(0x7f0000002940)='X', 0x34000, 0xe0, &(0x7f0000002980)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000029c0)={0x1, &(0x7f0000002a00)=[{0x6, 0x8, 0x8f, 0x8}]}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1a, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000072"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r9}, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000002a40)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x54, 0x6}, 0x9c) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x60, 0x3, 0x7, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3ff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x40040) 2m41.53739466s ago: executing program 0 (id=571): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6000000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000100000002c0012800c0001006d6163766c616e001c00028008000900ffffffff0800030002000000080001"], 0x60}}, 0x8000) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e20, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@eol]}}}}}}}, 0x0) 2m39.909518929s ago: executing program 0 (id=573): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x29, 0x1, 0x0, 0x0, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32}]}, 0x1c}}, 0x20000040) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0600000004000000020000000100000000000000", @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000340)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r2, 0x0) unshare(0x22020400) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/pid_for_children\x00') read(r3, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES8=r4], 0x30}}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) writev(r6, &(0x7f0000000200)=[{&(0x7f0000000240)='X\x00\x00', 0x3}], 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000800)={0x58, r8, 0x1, 0x70bf27, 0x25dfdbfc, {}, [{{0x8, 0x1, r9}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x58}, 0x1, 0x400000000000000, 0x0, 0x10}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000711232000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r10, r1}, 0xc) 2m24.675666916s ago: executing program 33 (id=573): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x29, 0x1, 0x0, 0x0, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32}]}, 0x1c}}, 0x20000040) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0600000004000000020000000100000000000000", @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000340)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r2, 0x0) unshare(0x22020400) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/pid_for_children\x00') read(r3, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES8=r4], 0x30}}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) writev(r6, &(0x7f0000000200)=[{&(0x7f0000000240)='X\x00\x00', 0x3}], 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000800)={0x58, r8, 0x1, 0x70bf27, 0x25dfdbfc, {}, [{{0x8, 0x1, r9}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x58}, 0x1, 0x400000000000000, 0x0, 0x10}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000711232000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r10, r1}, 0xc) 2m7.418777431s ago: executing program 5 (id=658): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000280)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000400)={0x2, 'nr0\x00', {0x7}, 0x6}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000170100000300000003000000000000001800"], 0x30, 0x1}], 0x1, 0x4080005) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000020c0)=ANY=[@ANYBLOB="240000001a006da800000000000000001c14000000000000000000000800010000ffff"], 0x24}}, 0x0) 2m5.745662341s ago: executing program 5 (id=661): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x82220}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, r0, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xffff7fff, 0x8}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "03d60443bd9062d0590776210bf27f47"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "9c9ae1dab121c201b0288940a3865d74"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "fe481475a44175cf7e5e237849859f7f"}, @NL80211_ATTR_PMK={0x14, 0xfe, "2769ad476506d688218e398002a9d7ad"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "46f1c2ed45450a3135a169540ae04512"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x40004) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'netpci0\x00', 0x0}) sendmsg$sock(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="d00ad1812f36abd958ad163bd99eba6bb76a39d8b70b7a37d4549fb33c0134f7faaabd715406396a65e69fc6ede5a69d5315c41a7db0a402ce1aaacdcdb94492c08110eb51af97544c236a557ece4cd44d47a9fed10779dad05b5dab1a3c459a21189b3522d94e1ccc785731b979cce690796b8a5fbdc2b9900736151305ff7e452479aaab62b053fbb63d56ab2a3243", 0x90}, {&(0x7f0000000300)="8db27829e430b041ef7ebe647b11619598847c5b25c580cd24d482cd0da5a5d26fb68d45ff6778f1091130f0efe4484c5363a04afe77ddc385e8493aafbb9a4315be756c1f81f518cc535faa32e34abd854cf7e4a5040a3586a4523623ae15221c1e51fc1364089868ee3b6921342dcbe8026b2fe78166c286a132f2a4186da876e999029376e2bfe9d60da389f2081895e5a4d089f10dbca6e17387189e2037ac4f2c69b29623de20c3a4dd86057e654568143727c605213c82457933919d792fa2064fd4607ebd49a21f7141dcffe1f3141fb9f0de0ce852f7e1006ea2c97975375ab6e07e1b761f01", 0xea}], 0x2, &(0x7f0000000440)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0xa}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000000}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x78}, 0x20004040) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_FS_INFO(r4, 0x8400941f, &(0x7f0000000500)) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000a00)={r2, &(0x7f0000000900)='wlan0\x00', 0x60c080, &(0x7f0000000940)={@_ha_fsid={[0x10001, 0x40]}, {0x5, 0xbbc2, 0x80000001, 0x3}}, 0x8, &(0x7f0000000980), &(0x7f00000009c0)=0x5}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r6, 0x100, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f0000000b80)=0xfffffffa, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000bc0)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r5) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x20, r7, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x800, 0x2e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x15}, 0x80) pselect6(0x40, &(0x7f0000000d40)={0x8, 0x4, 0x200, 0x8, 0x6af5, 0x9c9, 0x1, 0x6}, &(0x7f0000000d80)={0x0, 0x1, 0x8, 0x6, 0x3, 0x4, 0xfb, 0x2}, &(0x7f0000000dc0)={0x81, 0x7fffffff, 0x2e, 0x4, 0x9, 0x4, 0x8000000000000000, 0x9}, &(0x7f0000000e00)={0x77359400}, &(0x7f0000000e80)={&(0x7f0000000e40)={[0x4]}, 0x8}) sendmsg$alg(r5, &(0x7f0000004580)={0x0, 0x0, &(0x7f0000004380)=[{&(0x7f0000000ec0)="e15689416090a48be67d31c4abbd3dcf18489b0124a098da44771b500c8afae5235b40a53ea508e22efdd97f00956fe9c7e65c11282cacce7e49bde749262ca388838a858785d410d3d41df9f5790b735ecff56ded782c218c098b6304c72db4ca7d0dae30037c", 0x67}, {&(0x7f0000000f40)="663805dbb81ddcb63da362e680b0fd112ef4ff2c0b62236c92db2a104858695d98450e3d13fcf32120d3a1bdc70b52274d54e616f97317cfcf436302a59eae93d2b64b6e711830f7b50978e74f61bac55bcacee510f724c72e346263df28d9e20b1e4590177e1a9042a9f8ca4309b77be57886a1b5e8d8bc7c1330adcfa7bed5900841b72ca19e22988117ff79e7415990bf622a822e7cf7f9856caabe1fa2acc910d594fc0e9f1637c00b2badc527de9daa7c455e316eba70d77fd7b0c0cda929c11b665d61a9c322d63e249ba20c7955abff706470d28ec9b96b9e9d8118bcacdc91af730c4a0afa451c6fe35f3980eaf592f5086201a34db59240a4051ba669c5318038f1d1909bef1236ab74fc45ff9493b77bd974cca2e70ab73138d16b2cb21a53e02e6eebaa7590c9a34076825ffc30c8ab04e678bca01ec2db2fcd3cb6dd27e400f86450e1d166fd2af3f20896b150df76e6793abd9565c9f756f8da216a067065a9fcca21f859eafce55a043f551b2959fac8bd4e27a3624c78fc5b3c608fd5f8cbe7b2ff23520b7aca24394bbabf88e5938c5e4f6f4827be5ddd7ce7a68a505f2de937fbf5a299262e6d7686ba2939bb105acc63e34b34a0fcc80d92436e2cc3a52a18911eb84fc0e297d631f88538bc442c75fa525b1473b26f648f9481eb101af3221832b8f707b36fcea285e3d4175563d34c5bd6c1fbcadc6b4596b3d0c421ab9da571552a1be97c37f7764f2c655c4c1135d9951b18da71d5c5ff2902a042bfd1ddca13b686af818f5375d846f668b2f97032fb65da7715937c54753b3b09d4dbe6aa194be36838589fbba45599cb7571ff12d5e39f553759419b8c09fc539db7dd1f7be67af56727ce209611d288168ea64c09a1426643f3494e932f264c1be891f0e46b6d9ea04ab0237788480f9bb7f66326f7aa285ef6f0972931a0168b4268c857988978233946b68c9b4784f5176b5e5882c1ff107994cb4a40b8d6a19c765bae8f3e5778ae8619e423159c61a62cc1cb87f67eb828df72b0b1d95a67c5f61251d5fbb50bff24f1bf031a8d11eda784dd7617a95f38df7819dfe2b66b9a945886838622a87915c1db110233db1c75244805ebe892a6f913dcad8e0f1f6fe874fe31bd2453c780c5708e7372d1898b4969b0379e6b2d6be5254c534073ad3e8da1dec414f700880f4a7e9e3dad219078ebbe50ff0fa21ed03bdd466a5c1061124881579b9b36edd45207e2711f3f9ee8d7ac1f4b6193d9e973763f4174c0033715ace2b8e8a3f079163e330cc4d789b0b2c09a3bda5627d8077781ad607c885d6150ea9d31f4a840779f18195149d7cd914eee815244a34c26f145434e1710c44855681b034fceb0f4a33a8093efc419befa083bb3b40f15eedceffc4e60ca7ecc45521bb804e39efa964566b9b7343f3a0f33d931f3a6ae421e3103c40de24a1d03a48420e5f308b1d5f03d83ce7ee08c27804f303abd84ee9fb62c4c6d3b2e7308e883bec49f7e4b99f2ba841ac1438971e32d89e25c02b180a86795e9bc43417063a76c0eb34eb93ca1b714c008144f9da8a17f3c963bdf0ea049db5292e6a306a7cd3606196efda139937b92eaf72e605bc970603617d6f34aa243fd09b19e5e5ba1dab409b1306adff23ae4f2ff9cef24f74b65f766b5524807e8ab82a3fb9629d3937a12cb2da143f61f5f8e5e4000a622f67290354a74f3b5d02f6953b40c4455a82165395df97a5bd2f56319668bbbac0f4d9e61df1aef556825e0a9842c99a88563d7869e36ec8ab345c4f176776eb112a89b0cd09bacd0a8217f8bd7c387571277a9324989a2261b306b3bcdde03b5feb4b03d486aab91daf92a2c70ca7ff8feb654a1a7033b17d3782e07b66a86a1ac9d374f2f25f4597f7b2d12198526ef2daed41b06cb0dba543d6e99ba581ac3df4b87cc2e9cf30c51a9188f98d6c0501a94fe714de1427c665176dbec8fef3a732f1af61b8bb059026307e828eb85ae90f126a6a549661c2bcf477362d6fdc7cf459a2efe83ab539f797294dd61031bf7d47441e55490f52979236d614b953875b14b4da8740b9f078172d6df979b4158e446e33d2de513f46f1740ffd357a5e9820ad9b09d3aee1cd62c78c64844a44fffc7b4a01326b42df2d692691f6774ffac3bdffd1fe44c073ca2254261149fa5bbe812abe8b4fe1980ef11dac545da9cb6c4d0248eccf13d2bf4b39035fa0705cc65a5e183ea3f819e13e827780632ad0dcc427e97008a789ef7fb4d09853ea58f3c32e5758bae10b4ba67224d5f57e3d35c163937cfd2c737878b9d5fdd3aa8d35439a21eda77dbd08aa5b61925f08bd718ec11030e8ee9a17feae3d513aefe12ae658f0d453473c4a7905a0c190f90ecf3d7264eb0fb06e81388e3c57d69d68294536b9f3abf14a78ec132850283588d105450859e6b48bb5fc7740918cb3f8e2048eee2088732f278a0373a610ba28efc1dd688cf2910fe20b59f5b75315af2333a438f8f74d30fd5c968ea3f900947667d07e81b0f5fb095d12993f2fbee11786880411603ac969be325e8830b1236f033869f9e852d82d4a41d1e1beefb01f021c99fea9ee7a0455a3f4ce20954a32e45bfd1d9536561479815c0218b9585936a796a22b3d03c8f6d72bbba98e6409b0dcd924534cf9040922ba9a472cf8c06a69fdc5dea023272546aa014dbef59109da34eb0b47105fcfa70351223a7df79c0f04c1be20717a836546a76bf4c3662dd8b8467c5b0a0d7c11580fc46bd6407f9a2340805387481cde0fe885cb55d4fc2f05fac8c692c372697f2d61d1857ff5d35930104bcbf964c5763438cfb59843bd39e3b0beb39daa18cbce8f1fdc834a2663ca4fbf85772828b9c234477f42132beeee32fed46a4b22a6c0636647e894bd197de4488831df71dbecc67ad395e21dd8ce01e841e6d7a7bc12adbf058192e606cb293f444c3d37875c3057006dba0be038e067413190ca283f131091c57ce59e68507453bf4b0b77d342038d164908a5db729f07362d1ce875b6053cf5347f682915fb5bfa21b5871844128935d2b356cce9b16f6e6038a64a819a854fef2208d8e315284ee24737667bf307321f758f0d79380fe12f53fd9a91c4f88684852163277796b08f90e75d8df1a1a7a41317206cf3cc0001e2dbd3831300a96f1e1cad6885cf3d2ed40bde362f4314410614421eaa53ca97a226a11429fa9bf144919d3afcf93c934aea5cb79def0a05bf01738aae30be055480806fac60b488dd1f9aef7d77c07d6382cef5fc475d2d9d06f022600e84b9100368a0bf6cd814c04e5141210fcbea4b4dccdcd6aec75efb63095c39215fa622eeda71df8a4401f304e7861164adc81f6e213fb786f995fb775f5e5b7db0d1d44a9782332b139e5d2a16063c08b5687ba51936d964403d9e69408bee28963c039745f7f4318b526ca1f0ab53b5b51254f6c6efcbcd69abec3f9e0f492991d04e49402fd44c3de9b627aa4a7d0106b85b0fa72905ceb9535db984b0208bafd34a3b3e7a86c21c0191e8e5c0901ae146abf4299278b41a73940927e478d59ed422352e18a416ef1345d7c2628024e72fde4982a5e7801874a98b0de834fa655dfb5aaeb89dde6ea4290f91c701f64d9c054d165bb5715ce38ec7e8517240ea39fc80e4a07b6c3d2086dd273bfe69734a2f543c385657a0855eb3ff0ff4cea9e4a619dceca969f8edc2c5b2b8e1a049886fe52311e121ad6ff0e137d66a7bafc07edfd19777901bb6af695b97e69d4d22bdb1011265c91d31672b3bfe4822d05d149e52d83c6b07263469928fd03a65cdb36fd79cf851eb8742a58267fc95467f4a8409e781914a5f3a549012630874ad48119b53bcea95468f819a4941a32e23a0c0c5ac55faf338cb86cf800c1abd556a527f40f3bc94cf685ed2a7200e8b19fcf675b417c8a33c8c7cec3d1cc7c7d61b98b1111fe63654a253410a7271543b2d78db57ae6e049da61ca2858ef58a063558e8906a358281cb597c858301f83067e8c0395c6ee06b003c306e20af6fce35dab713f39fad4344c8ebd19fb8f12570c0785622f248f526ebfeec093161f4cf02d16acbb36fb7ef464060f9afa5ae08f044cf72a5aa7a7f8bc0b54e2af903433dd5ddded4bdb8cd9f9bcba66b466d262651c07f3deddd7fc86c5cfe141d2baae16b2986f3c9f2894db5cba12fe088bc8dd1b7173c63de9c2a3ba3cc9a5d65ed6bb3b16e8b2745c699b2fb8013da48e7dfa3ce8ec088f260a587d641f70ba9c8ca079f10963891a20c02ada8a256b0fca05a63827f1f0171590a365ce510d010c3e6418171749f6c2a8c2566ae98062f6bb8856d5dcfec8c4c9dbe1b8939af4ac491d11657c162473adcc3012ec8c43173c36f527647246aa11a0ca07458a424817b48ed66d284742820a943bf8391f353e36b2ad2b2f31b173b7bf676e8df6f03765fe63b76f27024d423e66e8f5d5f6dcb6f493a6798b7811d4257473bbaeb2f5c0a40cf99394267ed42f63854f59437ee513a1c053485e4cb9a2529b565c1525eb8182fc33c917ec8612ba808c33587ce04837fe18cb84c06a77beaa8407defafc2d8b4ac54cfd400962f7c6acc45cef33b518a31d6af22319988dd369809e8e209979bf1f02d9c93d009125420382b9233fa17bc7cfb349bd2e80e700a10c43d52c56e0651b703c106cba3645b541aab67d2dbc0bee40c3cef2deb4bd027bacf757002a45f7e2685df6149acda700070e7dc19809ce906bae8edbe843326a0c4b72bf735af834d584a0b2b9e55aa9a45831180a35f0150653d611b85af3ab4750341613755465c11bded4ab206484a5b14cdead91d1f22aa63196074c4a6380e25a4cbbc22e2240690545f77a393ab58a879313a996572d60df265f69ac04b5bd1e0e75f4a0d71b66b53264f263639b871ba6114ea28806ac1a28dacc7c606e299b7f327d0d2f8acf0472198b130c2af1268832f2be080895ec1287fbe0a2b9cd2000f42ff663afdd804df3a5cbe6bb96147757971b889f991f4164e0f0193451937b41a45bab0f03cf2c8973c97f28b549f294ca28be2b79da1291951c717dc09f30a119748a6f7bd03082433bfdb894e35f90514f4f60cd7d67ce3759477af918e04ab3298fbb4638b347f70d3811447363af8a7089d73a53f2c0baf1980dbd70486101f798d85dbdc0911a50af339e251015db391d41a3d3716f9fcdada2b617c9f5d2057ebf5bb91e234a63879a7609bebe026d40c20b714bcf3ac251ef4361f4bb5aec1861c19bd8607f9eea3a676a493ea6a5138edbcd23bf5be29ac999ebd2163851f0cb4413021eafc3581762bc41f8bef51e04b043782dc73d08cdcffe201bc6183cdd38f87161e03f5e87cd6ee1543c8e431d52301ca34fbbf0d23c1811ab20ae080fb2549fce97386dfa7d8991940d291b1587c27ab19151c47b564093b8e0c768c78d70a1bf55f10ba532d9424d0c0b97a30808a39903e2ca1e510da37e922b198d605fa3a9d2b9136bb99a94a81a66724ceac620b4e804510d3d9b54c9cbfbac9944f5893875fc9b4f8bea2d545041ba66cb3b727e9496fca68a9f50560cbda27b38b76e3e16a0d4bc2078afd2c463702d4d37a16156b56fd20d357c18b63642c463be2a3029e367a9205c6c2aac70f36b38d35432532ae63a6e7e7dbe920c672f6cb0784423df884c15789864e72a7b97fddb1a4f6913443a71af780327e036880af53bf26702f293546212c9b21d459dbc5f57da0ee5f41ca6dce4d5", 0x1000}, {&(0x7f0000001f40)="a9d284940f07b35677ede3295f4ea9b4b529da2e6c4af7a79696fcbc0ea23db3ea1af9db06c59d7cb5a2de738576e9d0fdb3a0f89ca0f7abd9c633cd724370bb752455fc4964e99d6032c9643a9a1bcbb2aca2c3839aecee65ff35dc3803c576761c1650937e672c0656302f1ef18926267456861e54e77a5ceebb8c46c8dab13636fbbeb5b9914e9089ea2fa1a55c1d6ff99f86a6985e1acdd501c363fc531fb666017e996f8ec6b446", 0xaa}, {&(0x7f0000002000)="883f0e7c18557ee521c2f1241a69be6d2244495029f8656f83025e84607f9459f8b04e0b03dd1f1811d1823f63de6d6b6a66e9d7501bff65b2f0adba442f6d7a7067a241f956c575b5b8f136f5481e6cb6ca7f073994bfd679f8205c86f01a8b7b08a28677f544eff2a27cf062c0f962b13f74f9c82cf8de30a30f0953d8f57a04c041642e9327a243ce6a4bb3c2fa3a9db3c608f62502d8dcff7f7847a7870a01878d0da540f94c0454bcda79447485e8a22a7d074c705abc07e76bef91cae9611fdbfd3897c8e1e442e38347e9e910e65a50b4961515db10608cad3531089852607eb93eda95c19784b09f9e2d68c2ccbee97ece9c49585faccad46869a9ddc96fa0097d86b5679dc19c044f9b39b00335d95272a28ef4e1bc127d0f47bd0eafdcab148b9b77f9057fa9e924b0d5a0169b2b86c2711c36b8e58ea2b713b131ceda94370ef27d561a22c3baf0c14824b1b32c06002486ef591c6211926273cadda936b8db8dc713015f338edb04afad98e3370e36ef3968cf7aee9168fb25e18c2dd671d5e37b61f274de80b9cbdc1c5a3a484c5a69858ea43661bfadc68cac58e35083684d0010bed01b25542c7c7b1eac315f923a4f00ff5bccaabda2a4c32e9d57545736b9bb52639e7d68aba06c261509f6f7149d8d7e61f88562bb6f60fab65704548eb2b5d3bb3952e003a44c080dd5a20f3b23f9ab35e5e269036703dd977196209220e3454e11c90a45a2ada340e5bd20cd1934cfcac8f3357fb92b3a295b4da8f8c0e2db5c1800399b8e86e96013e2104a51308b541032d353527bfd340a25254817b594d3b364a37a76ad84ed91fa388c8cede5e0d6092bd6c9d064c02f445b7e09a7b24a417d7b51cf950e26f960b140fd4a165fe4930e6f5da75de6ee3aec56084a3a51b95170d6678f477604278dd4482e51a02f22b026464d84fd7b42a21fde3a47966d5707cb324277d7eb891828247a08de2da1156fb7f884c032a854d62941a27b4c2f6ab6055502a39620814f14e95e616df1555e26a42c687938891eb7e15be9acac485cf50d13c0bf4d2a57678eb4523481f9670da5d4951b7be30887284e680f5e26de8850a5081578e391ecddeb2cb9015ad42e04cc7e3d1e54e8affe76b24d0fdd1e90a0858bdef263bed4d14368094e324134e0e7671a52bca50be9b53bf4af5f3c161e3ae7b3d9c26ea177615fa81ccd4d583f1c25f70f80eef429ae81e526a46587cc063d13a2e6e972eb64c4c850c4395f7e72b93b85fc283903cabf490944e3107342896db0ac098dc130c8f470642207356adbae121a0b2a6251145b20e3f84bf800b0037b66280f3757aaa8ffb97b9610ecae90c617df3c26da3c6c08a5c51c4fdbbccf69988e3ef9bb910db42b90979282d9156c03fcb1075e3ce226bc317b81de75b4d4a10fad5b18bda85a72d4094df16444289b2b67255fcf7889ad76e32b5105f5aeb5330886831b12cc01caa1b7eefd5c6cae9c4c3f4089a922adfb41541ad6753532f2752d5f6e38b0cb4c7e8a57dd8f32811574a78d7cbae951d68e3deebc0a298de09fb71e9a1e5db2c73ff3b6ab7dd46be252e6c57328b26170fafb8002e217dc9922c3f476741aa65e90c1f5618bbc9aa7cc4e477dc501ec53bf48df859c4bcf4d59c457daf21d5d965f0da84dae92f9c3bf2294e32d97ebdbd08c23fcd6e69fa6f81043281e86f6acc9afb930f45ffa70d0c282992723508910a436e60e410614295286bfcf7b77026c7936c9f6bcbfa0d9794b75e27e8b9220df088600a2404c2b03a78e5f924d037eff7e5ab757f47f4af4f18515b026a5178025dded5c50c0a570038c718ef8656e68ec84ad4984df74ab02d04a7d830620a45a851ddebcc386aba1ae7aff80d39f6ebd930eff53ead4d1170c1b810dc059924b172bba8ae9a428fac1feb4515e7c63d30a38ed311408ee1f2df9453b3a17e5fbcb24606558c03d137f7483878f74c67abe2137ff8b9898764286513936ff164cd354ee7a6e790fb650cbf7432133a7b0fad759f1db360e004b8a525973b499f45b2770019b3b20813d00fbe4431becb21a0b56d493d0a791294ec3ec7e79cfecccd2db496c5b35864ae9ec5cb008825e716b0a694018f312cfc8135f8776af02a37aa3c64d6109423fe547a092c88abbb7991bae6baf7c1802ae428b98fb7eaf82d51e8003b7a19f9a85cf2bbcb5032fb5a4053b8ce67fac7094165314b44924bbed45d7c3d9303c1085750d1b98a27d6ff121db6dcae4e783d53731fb547de37168b00e0045ec8ec0668d55160e4af68f3fc6e5f10e03f8724aab2a358ace68c8b8ee213a9b8c0932f9fb10ddf205e25838d3fdb29801c6bca1217ec8e48e9ceff3532975b9f807aff2519eb8c056f3dc06d504ee16068c713a1dced25e2264ba236439919354a91ea93c1a99666b457230935354820094a9ef616bdf3e9bef9431e8f0f657c41e0644f4227d3f6e3177886c8316bba3b24c4cd63f1cf9e807fabd3b58c2056fce05ec25a9be951ffdb1367467856ff6ed6fd7d022701feb87919d38c1a67bf3a43689a5ef5447b4aea4e2cf8f50c6393ac7bdd6583c61ece93df6ab1a65df6c3e7cec0c19c08dea131a78ade6b03c24a51f8e10082efba1297e12316d067172734616223aaffbd3d79bc95c3058f53772a3708c326d973328e4eb8f878a62129069014310999d765216113dce96e59e5c54af7d0230824c8aff36f497835d39af41bc22f51e36a122abee463dfe46d1042230ff12f84a0c6d1e9690bea91710c88b258c7b4a35312d9ca85578427fb382a363e577327f62376ad395ec1491957f092d76f0e0a5b85910cb3174888fcd06a5587e2b21938c42856602dbfc2672f47e438ff773c3a9e2de53ae178fd105bb585846985e578a7b2422380fa2a6f033ed6abc133e5dd10592e872cc924e0d1cf2fa76236824348181802b3ceb864c8424b41a8761bebf5d554860eb3258f23c06904b94906f908e8dbe3efa47ba7e648b662fa3d0b9b658c29ac09d1c8289742189a1bb362eab56adba4960e7fa95d1f7739c49e771c6e9cce9261c6d090e8325805457c5e2c131405ce901a7c621aee2c9bd989ad200bc7c211162626845bc8478ed1e4a9b1a138a5bfd4783ead5916bb086162042409bace57c82cdac0f83133650c105189dfae58ac98f14ce89e57c9e73c2693861bb6f3ed04784155852212bac3ed56e42a84c64f5a62e80977cf9f7f636ec778668495b6bf1f202b2e32f9b11615696276405438d40aae37b24659572e0ffca9dfcabb8768c92a23a9a234ed59b52d94d66377ad86923576c1361e71cf362d755ac09ed0342f88e3998d1fbf4378049c6ba1b91a023f1a227f7282b3a0929af6d42c40125c3693ea8ee3b5c899fc3bb4048f6fa5c67181027c0fec679f603ebdd4f387d499a2621355c8fcdcbd8aad45b04e077048bfcda488b6f319a14e5b0f6dcaaee429a3ecb6c403cf2d2eb933cfb7fcead8e18d3d4db8bd2a7b39d191d73b6dce78b553cbb5c7902f8e2f3ad546a24873c6c06e4e03d79855647e95e7c6bb40b23586075b22bdd95f9a0a445b5c261f264d554a4bdc4990e4320ca757691ed9793a2f3edff85baadf909ee80f8e5a4ffda19140803ca3d09bb175c9788c3c40d5bbccfc05e661e884a0ca45f620107cf40a48a1e272244c7993fb6400b335d3268ee61f9f15e116cdf123d86ee1adb120bc9ff686a83b7dc60f268fa2a2ba40ecaa82ff5f75e804f6fc49860b42b9164fc11c7695a729558f770c8fd95c1d23068c6eeb5252d1aba74e9e11a376c5ed064ba342073a65911a9542d976931b04c406236e4ee164e1bbac62a84753e839ae8e98a55bd2ff8a76c95a2a44a95bd198f4aab9b5c49fd157463e9ccc47320702547734fd18d54ec9f41ca65743e360ead59da10f36462fad9ad0dcc20aeab10f524002697600da752923b7645713f8204c637bde9794912fb626a668f8a1c4994da26dec391f06b330f2a31c193918a7b5de7c11887dd74597c1d743582a94fd7ead09e4943e2bcfc0d75dcc11d7145a088289f777a446f74d8142583b380c2270f1ce2906e57086315feb50d5764367efdbb011b4db253eec249fe228f31e89c0a5313701bc315c14fc463fdb0d649db88a36aa4f495e42e92c2a14afbf84d09d2ea4521398e01d7684cb970e4754cd3a6b2c3590b775405e0d5765d244d41ed6453d90ce53f7a55c4efdaf1b80284bfac53c8fdab6b54310b585de5938bb875f663bbc21d48c48e6a66d5a914ab9ebabf6e94842e1d22b878eb9ec0781eae123955b4587ed39495ee92bec2fc589a539063cc93d89d00793e257872c440ec111c9a0c99754cf0c5997b88d9466703d5e917e13b3c93e84d27bd7f9ce61acef68242c7fe920c34bc42db99e0e98ecda7376082ca27d9dc5ca0522a9f230fd51af52de564118887903e4e8bb6714a13641bfd1c674b1b50125196f79ab2563f509205bfcc59566e6b4a59d1c2e69c8ca46bcab1798ea40d2165af2665058017ed65a7ca8de8bc2f24e4d3cdd4a82d613b6acbdba333a56d1414ef3bd34cf78116d30e1c4711e8d8476ddb00a2023317ea1d594b378c35ae3fee24a406831cfe968716ad3a930462c4f909ed1fb7c4f47f64ab89e8dcd7bcad70849e4208e40f58eee0e13bde3fc776e50f55d071c55f10491e43cba7998e5ac07308fc45964083dde620fc8c8009961be3700d30ddcf37bdb7f755968bc153af6540fbfab68c4b4839e96f8f293329188c32bdd3f4c828d193352b618de6e1ca0efb478bfa84f2a85ef7e3d8cf2c6e9816979cdea6139c52b2175fad2384eafaa4dd15d3bbdfee8af9c0ad58b64e603d83588a2c3cd29c38531e46aacdafea89bf8e536c357477740a14f55c4aa01b96417143d64a21a015041e45d157300738095781556a5571584c5b49fb3c088313cafc923782757ed2d4296af965d69b916cfe8fd3eacf213d30c966faa1f6fe03512254dccdf78739f1baa1d07832f5879b54e91804cdc669a9cdc377deae25fa29f582b855b8b50ab239edb33344a84c5c6d7a1db3b3c464222b290a22ef524a9b65c0ffca56edd6a6e3cb67e0b115ef79c80399e852c59b7979149e5a1a2bba850f54a799714cb9ddbe178cb1e2ab15b74caadc8107027e85ebb4fff522d57488d1f7a0264d145574f2cf81d8496a9310895bddcab830375f4b8dab9ee91e65837e237cd790c8066c34fd414004751ebc203ea5fb3354de0052b152de8af2c6229f78e239ddabd7f7d43bce38a7406dc1e09453ac6516cdfb682fce59e76f55c4c0c8cc69cf706f74b4a7654c4f5a1a0a64afe977d3078491a182c068d021f4622ee52c5f8f3bebeeaa570a08c35cad2ab627d5f4ba5d2e047fa35dff9c16c95570fc1779403791454d0168e5f2c31435fd4179396c8bc427f94bd58b7bb2834cfe6fad349dd01db05ab75eb861dd77eea1e8ddfe60de0383e177cfcaa5ab1fdd9880c78d68b671246156ec5b088ab058c71839b7f1602c9b199d575428c8bb6a88bd703c925021c150934d8e50e2487c84168ee1a92bfa75707e4f8a6e654e041db939ac0275e72eb5e2186df29883a57f79da0922d902efdcc427746a1d01507af4336e2304e7142cb33e39c05501c16a2b72662b8509cedbad0afaa64057055ebf3b6748b7c8e55a16525243e21333da9383ab57596a30220c5db3ac8cde739591ebbb130c5aa2d84c5070535ae183b69b1ba0d70345ffe306a2ab235a9e1e6e8d72", 0x1000}, {&(0x7f0000003000)="624c4950fb8e07d52021d6c5676ceb9884ed8f483e7169068e11c835c4eeb83e60ed91f3b0ac260c1e82dbd25a7c56da00e716555955b6652e9a437eb6d58599cfbe25b1ef02c02d4773c6b0849454d2603fe7d9349a8003b4a5db7f6ef16dfc126688ccd09cfc742428e5a6702300f7734ceb5bb53de19a7dae3d84e1e5ce7fd1de41d75e01a05ede1707b6a28c729dee6143533c3398ac1e92fa26124b56dcb6c1076975091f80d44efb56763a71a18ad3c82ba9600e34ddd2b90a51c07b80fafb9e5c8654653a50e0613b89f3977f", 0xd0}, {&(0x7f0000003100)="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", 0x1000}, {&(0x7f0000004100)="44271635bf7b09705ca4f7a991ccf4a3a61d538de6132566e31aa653449940b95c8673f9244838d6f1f10bc469a4e9e8e057b8ce540340acd59d299b0aeb4ff8633b02ab6a50a13f65137481be793ce33e7a1b2323936820cdf2906a8eb6b9a10e2857d9e27fe7ec4746a0d38ea717c7f4fab42d0db0077131e746fae469074bd2fef5a48b2a7006923685b2af130a7842258f4b029720db1ce524a85a48ee692ca0b2a6faaebb8b3ef4be537b7e1f32b8d6ffd9f8a05393ab5131d63dc89e4794b5c2cec75516d8732c330a8f8fd114f008f7d746de460fac4db577d124f4e96e4d46ba41654a488afb967e9a6c74de", 0xf0}, {&(0x7f0000004200)="8564f9fbfcc3cfe0a21478ca199bacb43cf9196ea96c7703f8caab1374d42f7bd39fe0d25bca8e3039fec06203fa62fd0bfb9264bf3fdaf00f9fb5ef6e715f6024c456c85dac0e0f1a8b3e5adba1ba16d50e02e85dfaa2b36b65de496898435092bb25a20b8733ad18ed333c9454e909c0df6c67", 0x74}, {&(0x7f0000004280)="f01ac8be1b63c41f6f6e2a3aa0c480bafc6db4e57325b6cefe6bc30a60f93d83793de559adbc01b6966817058e1d94322d129633c9821c13272699e8e37edfa27eb8295b680d6a2af185e34bed91c3909a2366bbae8733f5d31c67891f7a4338dfaf2dad4d8717e71ebf89f4d614086ff077b7dd89f37bbb5f7db31ba8d5616353bc013afd355a1688a8fe9403bd19eed0880ce1bda3ea0ddf3a401e7a692a2b7c6804764cbf7eaf3fc2940c96bdaae447c08bb7fdaf012c5a46c6707a56732b45a19400b323cf97d07cd9fa", 0xcc}], 0x9, &(0x7f0000004440)=[@iv={0xd8, 0x117, 0x2, 0xc2, "ffa5972dff9c12073f685900a09b016b2fa56a18b705044cbcf28ffa703d59e45498cf8e90ae78100ec496feb07fdc3ee4e2d7e2b1a776efd304d34a5fe82035b3097777ea381994b7631192b68b7e65119dcd537c6e9c536f04b63596671e8428345111f7036200b8b945f43008b4eb8cd21607fd37364aba0108b1716f0c0d6fe3fc7735c204d304ca3735d7646429cb7d83a381e822e0cd6ffa51618932c41935f91f860c8ba9e9fafb684a8e229f8bc155cb180a066215d4f7c4ba850bae05f0"}, @assoc={0x18, 0x117, 0x4, 0xb}, @assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x138, 0x4044854}, 0x80) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r8, &(0x7f0000004680)={&(0x7f00000045c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004640)={&(0x7f0000004600)={0x38, r0, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x6000080}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f00000047c0)={&(0x7f00000046c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004780)={&(0x7f0000004700)={0x54, r0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x5a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x100}, @NL80211_ATTR_PMKID={0x14, 0x55, "6838d4dbc6181dc7f1fad61c74a2af78"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4051) bind$l2tp6(r5, &(0x7f0000004800)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0xee, 0x3}, 0x20) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004880), 0xffffffffffffffff) getsockname$packet(r5, &(0x7f00000048c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004900)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000004940)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000004980)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f0000004ac0)={&(0x7f0000004840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004a80)={&(0x7f00000049c0)={0xa8, r9, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0xf9}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000045}, 0x200040d5) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS_V2(r5, 0x84, 0x25, &(0x7f0000004b00)={0x2, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xfb3f, 0x200, 0x9be}, &(0x7f0000004bc0)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000004c80)={r13, 0x4c, &(0x7f0000004c00)=[@in={0x2, 0x4e24, @private=0xa010100}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e22, 0x9, @remote, 0x3}, @in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000004cc0)=0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000004d00)={r8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005000)={0x9, 0x30, &(0x7f0000004d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_val={0x18, 0x5, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xf3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x8f}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000004ec0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x33, '\x00', r3, 0x0, r5, 0x8, &(0x7f0000004f00)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000004f40)={0x1, 0x8, 0x0, 0x200}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000004f80)=[r5], &(0x7f0000004fc0), 0x10, 0x3ff}, 0x94) 2m4.701804916s ago: executing program 5 (id=667): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="0efa797e86b45f2da57a1ce87fcb", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x1d) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) 2m4.296226748s ago: executing program 5 (id=669): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x25400}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf250600000018000180140002006970766c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) 2m1.176081606s ago: executing program 5 (id=676): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="4c00000011009df2be3c3554f708160002000000200000", 0x17) (fail_nth: 2) 2m0.279248342s ago: executing program 5 (id=679): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000019c0)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001b40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001b80), &(0x7f0000001bc0)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000001c00)={0x2, [0x0, 0x0]}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000202000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x40000}}], 0x1, 0x8c0) recvmmsg(r4, &(0x7f0000001d80), 0x10106, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001c80)={r1, 0x2}, 0x8) 1m45.050683701s ago: executing program 34 (id=679): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000019c0)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001b40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001b80), &(0x7f0000001bc0)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000001c00)={0x2, [0x0, 0x0]}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000202000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x40000}}], 0x1, 0x8c0) recvmmsg(r4, &(0x7f0000001d80), 0x10106, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001c80)={r1, 0x2}, 0x8) 19.770695112s ago: executing program 4 (id=872): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000800)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000840)={0xa, 0x4e20, 0x440007, @empty, 0xffff8000}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[], 0x0, 0x2a, 0x0, 0x1}, 0x28) bind$alg(0xffffffffffffffff, &(0x7f0000000900)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000980)='rdma.current\x00', 0x26e1, 0x0) close(r2) syz_emit_ethernet(0x86, &(0x7f00000009c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0xfffd, 0x0, 0x6, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "13080001000000bb98c68e00", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) pselect6(0x40, &(0x7f0000000a80)={0x8, 0x65f, 0x7, 0x3, 0x6, 0x72, 0x3, 0x400}, 0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x3938700}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000d40)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000e00)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 19.180365041s ago: executing program 6 (id=874): r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x3, 0xc0, [0xffffffffffffffff, 0x401, 0x1, 0x8c, 0x2, 0x3e1771e9], 0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000080)=""/192}, &(0x7f00000001c0)=0x78) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000280)={0xffffffffffffffff}) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000340)={r1, 0x6, 0x7, 0x5}) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000380)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x8b, 0xbe, &(0x7f00000003c0)="4f6e40cdbfb025aa112a306f2599b77ab2d8a22d0bc3c80d6ea3d8df514ee58570b1c45938427279d96fcec1807442b57ace7ae530a0aed2beb2c074f57b06df6eb328ca912597d7770b80b8ab5660cf812f27bf80b65432f365e354ab8f2a5d870894a1c2bc14ba644c2c7f4e6a2016684370081e0c9b6ad67bc1877406d389fd198a459f3d3280649558", &(0x7f0000000480)=""/190, 0x5c3f5df3, 0x0, 0x16, 0xb5, &(0x7f0000000540)="d649860d8b89ce9be1fd5121c8ad6cfe6abb5db343c1", &(0x7f0000000580)="9676acd8831220752c4b7b686ed0e0f09ea5d4af7956f1704a7f73aad59b6d04f53c6729c406dab89f64421810c2b8b4e9ff0947ccbb182750ad9684c203383b5909341cd6a6d6431adb0af9a45540495b5b9c24656d608e5b05ef2ffab8258f8462f8d4b59f306c5cd864bc52bb44e0f2751447a2212efc32736795f122b85cdce86930a23cb192d259cc5e72cd3426670ca97dae88109a598183f83248c11a49d5524e416857ba21ca4c742b80bab6c60076f0a2", 0x7, 0x0, 0xac7}, 0x50) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f00000006c0)={0x29, @local, 0x4e20, 0x4, 'dh\x00', 0x3, 0x4, 0x10}, 0x2c) socket$inet6_mptcp(0xa, 0x1, 0x106) accept$nfc_llcp(r3, &(0x7f0000000700), &(0x7f0000000780)=0x60) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001980)={r3, 0x0, 0x1000, 0xd2, &(0x7f00000007c0)="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", &(0x7f00000017c0)=""/210, 0x8000, 0x0, 0xb, 0x49, &(0x7f00000018c0)="ee0a6dea72966e79e49335", &(0x7f0000001900)="9057f5bab12aefc85a9fb1d5c49c37ba5fd6ecc5f45d8c71d62a92b96c6b3f20fc8f645747af8b2fdc8ca8ba0e544d3489c79e7671dcbda93870c626e73ca3a658e431da0958a5dfa7", 0x4, 0x0, 0x17}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000001a40)={'gretap0\x00', &(0x7f0000001a00)={'gretap0\x00', 0x0, 0x7800, 0x10, 0x0, 0x31, {{0x8, 0x4, 0x3, 0x1, 0x20, 0x65, 0x0, 0x4, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x33}, @rand_addr=0x64010102, {[@end, @timestamp={0x44, 0x8, 0xb6, 0x0, 0xc, [0x69]}]}}}}}) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f0000001a80)={0x0, 0x0, 0x5f, r5, 0x8}, 0xc) r6 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000001d00)={&(0x7f0000001ac0)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @loopback, 0x6}}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001b40)="de1361079fbb50c02691638147b2d25e0aac33004ff94d6165c9fb502e6446dbe0d2ab395d45838f428fc9716e", 0x2d}, {&(0x7f0000001b80)="1d746d726b1d508833ae9e991e55fbb1d754cac6d25724e71c4cadada108ca8276309c391ba1df071b526a520ca35fac4957b27bea93be95fb7e307f3d0e4591a71551bd458278b7e96bf462edc8e13efedc80ac249fc314461e52e6cdbbd8c58cbe9da1491634ae46b61d6c32f493eac5a16f8a1492580d0c6f8d256e13ba41972ba8619fe835adc688f42c6a8e95cefc913490382cca9c88a720fbf153f104ef49b8634aad119a3916bbe70188e95fac631e7b8a510ff15a2c571e3fa6e02e2969d3788b0fba64af3d03d60c7c7f4309f4a097f3dacda5f895519669f321e4817a738cdc45dcb1d82a2f016c8bf0db3ddc", 0xf2}, {&(0x7f0000001c80)}], 0x3}, 0x20) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d40), 0xb000, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000001d80)=r3, 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000001dc0)={{0xa, 0x4e21, 0x10001, @dev={0xfe, 0x80, '\x00', 0x17}, 0x4}, {0xa, 0x4e22, 0x828b, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100}, 0xffffffffffffffff, {[0x79, 0xffffffff, 0x0, 0x5, 0x8000, 0xffffffff, 0x5, 0x1]}}, 0x5c) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), r2) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x24, r7, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040880}, 0x20000090) recvmsg$kcm(r2, &(0x7f0000003800)={&(0x7f0000001f80)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000002000)=""/249, 0xf9}, {&(0x7f0000002100)=""/145, 0x91}, {&(0x7f00000021c0)=""/181, 0xb5}, {&(0x7f0000002280)=""/208, 0xd0}, {&(0x7f0000002380)=""/245, 0xf5}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/72, 0x48}, {&(0x7f0000003500)=""/228, 0xe4}, {&(0x7f0000003600)=""/62, 0x3e}, {&(0x7f0000003640)=""/91, 0x5b}], 0xa, &(0x7f0000003780)=""/73, 0x49}, 0x40000100) readv(r1, &(0x7f0000003980)=[{&(0x7f0000003840)=""/222, 0xde}, {&(0x7f0000003940)=""/43, 0x2b}], 0x2) read(r0, &(0x7f00000039c0)=""/171, 0xab) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f0000003a80)) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000003d00)={r6, &(0x7f0000003c00)='nl80211\x00', 0x505000, &(0x7f0000003c40)={@align=0x7, {0x2, 0x7ff, 0xfffffffb, 0x5}}, 0x8, &(0x7f0000003c80)={@_ha_fsid}, &(0x7f0000003cc0)=0xc}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000004040)={r4, 0xe0, &(0x7f0000003f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000003d80)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000003dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003e00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdb, &(0x7f0000003e40)=[{}], 0x8, 0x10, &(0x7f0000003e80), &(0x7f0000003ec0), 0x8, 0xc8, 0x8, 0x8, &(0x7f0000003f00)}}, 0x10) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004080)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x8000, '\x00', 0x0, r4, 0x1, 0x1, 0x2}, 0x50) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004100)={0xffffffffffffffff, 0x5, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000004280)={0x18, 0x10, &(0x7f0000003ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3eb, 0x0, 0x0, 0x0, 0x2000}, [@jmp={0x5, 0x0, 0xb, 0x4, 0xa, 0x40, 0x10}, @exit, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xc}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000003b40)='syzkaller\x00', 0x2, 0x7f, &(0x7f0000003b80)=""/127, 0x40f00, 0x51, '\x00', 0x0, @fallback=0x1, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003d40)={0x0, 0x0, 0x7, 0xb4}, 0x10, r9, r4, 0x6, &(0x7f00000041c0)=[r2, r3, r10, r11, r2, r2, 0xffffffffffffffff, r2], &(0x7f0000004200)=[{0x3, 0x1, 0x1}, {0x5, 0x4, 0x6, 0xc}, {0x2, 0x4, 0x2, 0xa}, {0x5, 0x1, 0x0, 0x6}, {0x3, 0x1, 0x7, 0x7}, {0x0, 0x2, 0xb, 0x4}], 0x10, 0x7}, 0x94) 17.992933576s ago: executing program 6 (id=876): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000004, 0x10, r0, 0xcc52c000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000880)="47880ecd5a", 0x5) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000340)=0x5ba, 0x4) 17.4277857s ago: executing program 6 (id=877): epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000880)=@abs, 0x6e) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_getaddrlabel={0x30, 0x4a, 0x3, 0x2000, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0xffff}, [@IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x44090}, 0x900) unshare(0x20000400) socketpair$unix(0x1, 0x2, 0x0, 0x0) tee(r2, 0xffffffffffffffff, 0xfffffffffffffc01, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_EVENT(0xffffffffffffffff, 0x84, 0x7f, 0x0, &(0x7f0000000040)) sendmmsg$unix(r1, &(0x7f0000000900), 0x17a, 0x0) recvmmsg(r0, &(0x7f0000000980), 0x10106, 0x2, 0x0) epoll_create1(0x80000) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)) (async) connect$unix(r0, &(0x7f0000000880)=@abs, 0x6e) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_getaddrlabel={0x30, 0x4a, 0x3, 0x2000, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0xffff}, [@IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x44090}, 0x900) (async) unshare(0x20000400) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) tee(r2, 0xffffffffffffffff, 0xfffffffffffffc01, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) getsockopt$inet_sctp6_SCTP_EVENT(0xffffffffffffffff, 0x84, 0x7f, 0x0, &(0x7f0000000040)) (async) sendmmsg$unix(r1, &(0x7f0000000900), 0x17a, 0x0) (async) recvmmsg(r0, &(0x7f0000000980), 0x10106, 0x2, 0x0) (async) 16.411467747s ago: executing program 2 (id=880): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0x2, 0x3, 0x33) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000240)) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000280)={@dev, @local, @broadcast}, &(0x7f00000002c0)=0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0600000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000040f20000000000000000000000000000800000000000000000"], 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'ip_vti0\x00', &(0x7f0000000c80)={'gre0\x00', 0x0, 0x0, 0x80, 0x7, 0x8, {{0x3e, 0x4, 0x1, 0x1, 0xf8, 0x67, 0x0, 0x82, 0x2f, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0xc, 0x23, 0x3, 0x1, [{@private=0xa010102, 0xffffffff}]}, @generic={0x44, 0xd, "e32fb5ce9d848d1839d788"}, @timestamp_addr={0x44, 0x4c, 0xd6, 0x1, 0x1, [{@multicast1, 0xb}, {@local, 0xcf25}, {@multicast1, 0xcc42}, {@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x5}, {@multicast1, 0x8001}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x7}, {@multicast1, 0xfffffffb}, {@loopback, 0x1}]}, @generic={0x1, 0xf, "a86e0b74fe4017048173897303"}, @cipso={0x86, 0x2e, 0xffffffffffffffff, [{0x6, 0x5, 'V%%'}, {0x7, 0x10, "bc3c178af26d4af39a8733321cd8"}, {0x6, 0xd, "89de2fda407c2f1f24d796"}, {0x2, 0x6, "6a0ce005"}]}, @lsrr={0x83, 0x2b, 0x4d, [@private=0xa010102, @broadcast, @remote, @broadcast, @remote, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @remote]}, @timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x7, [{@rand_addr=0x64010100, 0x9}, {@broadcast, 0x9}]}, @end]}}}}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0xc, [@struct={0x7, 0x3, 0x0, 0x4, 0x1, 0x401, [{0xb, 0x0, 0x40}, {0x2, 0x5, 0x9a}, {0x5, 0x4, 0x9}]}, @typedef={0x9, 0x0, 0x0, 0x8, 0x4}, @fwd={0x8}]}, {0x0, [0x0, 0x30, 0x2e, 0x5f, 0x61, 0x2e, 0x0, 0x61, 0x5f, 0x0]}}, &(0x7f0000000840)=""/28, 0x6c, 0x1c, 0x1, 0xcce, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000940)={0x1, 0x0}, 0x8) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980)=r4, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000a80)=ANY=[], &(0x7f0000000ac0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, 0x0, 0x1, 0x0, &(0x7f0000000b00)=[{0x0, 0xd, 0x80000004, 0x9}], 0x10, 0x3}, 0x94) pipe(&(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x14, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0xc, 0x8, 0xb, 0x2}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x7}, @ldst={0x0, 0x1, 0x3, 0xb, 0x7, 0x8, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x67}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x44, '\x00', r2, @fallback=0x1c, r3, 0x8, &(0x7f00000008c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0x10, 0x8}, 0x10, r4, r6, 0x0, &(0x7f0000000b80)=[r1], 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r7, &(0x7f0000000540)={@val={0xa, 0x806}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x10, 0x11, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x8, 0x100, @val=0xd7a919ca9eb57b16}}}}}}}}}, 0x4a) 16.410900979s ago: executing program 4 (id=881): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES16], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xb, [@ptr={0xa}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x5}}, @func={0x2, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x0, 0x61, 0x2e, 0x0, 0x30, 0x2e, 0x61, 0x61, 0x0]}}, &(0x7f0000000080)=""/184, 0x53, 0xb8, 0x0, 0x6}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x17, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2d, '\x00', 0x0, @xdp, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfca804a0, 0xe, 0x0, &(0x7f00000004c0)="0400000098d1db1ba91d3305a782", 0x0, 0x975, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r5 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x10, &(0x7f0000000840)=ANY=[@ANYRESOCT=r6, @ANYRES8=r7, @ANYRES32=r3, @ANYRES32=r7, @ANYBLOB="00c55b5037bdac138100b702000000000000858a4ca898740d864a943b35cbc54728f41e8540ecc5d6cef90b99907086a0da011a75c2a0b9ff0080870531c08725996e28f3a2b73135ee1316645c84"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0x10, &(0x7f00000009c0)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000a40)=r10, 0x4) sendmsg$unix(r9, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) close(0x3) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, 0x0, 0x4000) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, 0x0, 0x40044) socket$netlink(0x10, 0x3, 0x15) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) close(0xffffffffffffffff) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) 15.422555168s ago: executing program 4 (id=883): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000700)=@nat={'nat\x00', 0x19, 0x4, 0x248, [0x2000000001c0, 0x0, 0x0, 0x2000000001f0, 0x200000000220], 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]}, 0x2c9) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0xfff, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/212, 0xd4}], 0x1}, 0x10009}], 0x1, 0x10000, 0x0) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="72a272746d4fe5abbe85c511b735b788e4147f9a0d3251df7b263711e6b1cfa0668d1fe8804168927c4f153b83509844f5ff6474ca26b8b8151a9732264fe9fc791af85cef", 0x45}], 0x1}}], 0x2, 0x20a8086) sendmmsg(r0, &(0x7f00000003c0), 0x4ff, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x44, 0x0, 0x0, 0x17, 0x6, 0x0, @private=0xa010100, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0x1d, 0x7, 0xf989, "e8321a"}, @md5sig={0x13, 0x12, "d140c2ba3d3f09659390e45c2a2b031e"}]}}}}}}}, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000003c0), 0x0) close(r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000500)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000640)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2}, &(0x7f0000000400), &(0x7f0000000680)=r3}, 0x20) 13.974837911s ago: executing program 2 (id=886): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x19240}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x0) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(r3) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x19240}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x0) (async) 13.971575926s ago: executing program 4 (id=887): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000dc0)={'erspan0\x00', &(0x7f0000000a00)={'gretap0\x00', 0x0, 0x8080, 0x7, 0x1, 0x3, {{0xc, 0x4, 0x3, 0x9, 0x30, 0x64, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@end, @timestamp_prespec={0x44, 0xc, 0xab, 0x3, 0x5, [{@rand_addr=0x64010100, 0xba}]}, @noop, @timestamp={0x44, 0xc, 0x27, 0x0, 0x9, [0xe0, 0x10000]}]}}}}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@bloom_filter={0x1e, 0x3, 0x1, 0x2, 0x2208, r1, 0x5, '\x00', r2, 0xffffffffffffffff, 0x5, 0x3, 0x2, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000005000000018010000776c6c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x5, 0x3, 0x9fa, 0x85, 0x41}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000b80)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x14, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x14, &(0x7f0000000dc0)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000e40)={r4}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x21}]}, &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000100)=ANY=[], 0x8) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r5, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/158, 0x9e}, 0x5}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4, &(0x7f0000000300)=0x2, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6e5415445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d8b6d2ccd00"}, 0xd8) r6 = socket$kcm(0x23, 0x5, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x40241, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1e, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000500)=0x9, 0x4) listen(r6, 0x800) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000640)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000680)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) socket$netlink(0x10, 0x3, 0x12) 12.888098338s ago: executing program 1 (id=888): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), r0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x60, r1, 0x5, 0x0, 0x0, {0x5, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11.876976297s ago: executing program 1 (id=889): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6000000002060103be8c1cb2000000000000fffd0900020073797a3000000000050001000600000005000500020000000500040000000000140007800800114000000010080012400000ed1b13000300686173683a6e65742c696661636500"], 0x60}}, 0x4840) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) 10.335420079s ago: executing program 1 (id=890): r0 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000100)=@base={0x4, 0x4, 0x4, 0x40007, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000180)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000580)={"9e2e40170fc161df142896a1b5a884c6", r1, r2, {0x4, 0x3}, {0x2, 0x3}, 0x0, [0x7, 0x9, 0x81, 0xfffffffffffffe01, 0x200, 0x8, 0x9, 0x7fffffff, 0xac2f, 0x9, 0x4, 0x6, 0x1, 0x96f4, 0x1, 0xba7b]}) 9.103955578s ago: executing program 1 (id=891): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x20004000) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000c00)={'syztnl0\x00', 0x0, 0x700, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x20, 0x14, 0x0, 0x20, 0x0, 0x0, 0x0, @remote, @multicast1}}}}) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32, @ANYBLOB="0c001a804800030001"], 0x2c}}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r7, @ANYBLOB="0100000002"], 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000002000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090008000000005509010000000000950000000000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r6, &(0x7f0000000d00)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000030428bd7800fcdbdf2500000019d9ffc1db28a2bc41f2dfb38b00", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000200000008000500", @ANYRES32=r10, @ANYBLOB="0800040005000000"], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0x3, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) socket$unix(0x1, 0x1, 0x0) 6.44581821s ago: executing program 6 (id=892): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x34, 0x3e, 0x107, 0x70bd27, 0xfffffdfe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x17, 0x0, 0x1, [@nested={0x8, 0x6b, 0x0, 0x1, [@nested={0x4, 0xa3}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c855}, 0xc0d4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={'syzkaller1\x00', 0xc201}) write$tun(r1, 0x0, 0xffe) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f00000000c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300000a5b0500850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x34, 0x3e, 0x107, 0x70bd27, 0xfffffdfe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x17, 0x0, 0x1, [@nested={0x8, 0x6b, 0x0, 0x1, [@nested={0x4, 0xa3}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c855}, 0xc0d4) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40a01, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={'syzkaller1\x00', 0xc201}) (async) write$tun(r1, 0x0, 0xffe) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f00000000c0)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300000a5b0500850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 4.358668908s ago: executing program 2 (id=893): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="4c00000011009df2be3c3554f708160002000000200000", 0x17) 3.999968184s ago: executing program 2 (id=894): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300030000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x404, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000e80)='syzkaller\x00'}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ec0)={r2, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000f40)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000001040)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000001100), 0x0, 0x700}, 0x2c) (async) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffd, @broadcast}, 0x10) 2.858557358s ago: executing program 2 (id=895): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000240)={0xffffffffffffffff}) connect$bt_rfcomm(r0, &(0x7f00000002c0)={0x1f, @any, 0x2}, 0xa) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect(r4, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0, 0x31}, 0x80) bind$nfc_llcp(r2, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r5, 0xff, 0x24, &(0x7f0000000440)="f0c46000", 0x4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x100}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x9, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22040010}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x0, 0xaf, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xf2, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) getpeername$packet(r3, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r6, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="640000001000000325bd7000fddbdf2500000000b0e08f5efa316d9df0e77efbf561d42a87f6f69644ecc32c67658e5083fef5fa96a5360e3aa91839ef472754012aebe76ce42369fe46234420b04be27487a24fda1862c5f2ce83dc5244c5bcfdd174451a53540adb13e84f17aaed920e1007a864ad8e7fb29c150b0516159d4a0693bb16db9d41ac84ce75efcd6aa23b3be6b5dca60bcba4004a271f005a009ae5941407c559e0131ef0fc2063454fc9655de08528daca2b3a02810ffa2900e87a1adb43227c86bb1e142d895f08b557c5fcbb62d6cdb3e9b21e3cb57b8e", @ANYRES32=r8, @ANYBLOB="42800000100407003400128009000100626f6e64000000002400028005000c0002000000080009000300000008000200", @ANYRES32=r9, @ANYBLOB="05000e000200000008000a00", @ANYRES32=r10, @ANYBLOB="0800230001000000"], 0x64}, 0x1, 0x0, 0x0, 0x48004}, 0x20000000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000780)={r2}) ioctl$BTRFS_IOC_SPACE_INFO(r11, 0xc0109414, &(0x7f00000009c0)={0x8, 0x9f7e, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a) 2.555879004s ago: executing program 1 (id=896): r0 = socket$kcm(0x10, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200"], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x2, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x8000) 2.309381485s ago: executing program 4 (id=897): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x25, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ldst={0x3, 0x1, 0x4, 0x8, 0xa, 0x4}, @ringbuf_output, @cb_func={0x18, 0x5, 0x4, 0x0, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x3c, &(0x7f00000002c0)=""/60, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x1, 0x10, 0xb, 0x8}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000380)=[{0x5, 0x5, 0x9, 0x3}, {0x4, 0x2, 0x6, 0xc}, {0x2, 0x4, 0x4, 0x2}, {0x1, 0x1, 0x8, 0xb}], 0x10, 0x1ff}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x0, 0xb4, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xfa, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff210000000402000010000000000000003f16ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108a8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218df577b5ab4bcdcd4d9d322fe7c9fd68775730d1600360d8bcc00400040fad95667e0060000725c8bbb58794c64f4cd2ff7dc3b000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb100273f90a9b9a45fbfce601d3f0d38f156a4", 0xe9}], 0x1, 0x0, 0x0, 0x7400}, 0x20004c04) 1.9163126s ago: executing program 6 (id=898): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), r0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x60, r1, 0x5, 0x0, 0x0, {0x5, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.778701655s ago: executing program 1 (id=899): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000800000007000000000000080000000000000000000061009180eeed64e74e0b8c887011c91d16380d19756a3cf1f607355b69e151b45ec036c79fb515c1e1658e4de785b8f95764c52c4f2652032d6814441bf082513e3392ba3830766795f488688d455a133218c18ad949063306648ecccdbcdd17c6933b5e64abffad6644fa851df8ab1bed4ff259e5fc78c269450e6a3909b08dc34ac9a809697a596f81106c02274e826486021751f9061c9410b98d4f6f17a0cfd87a35d7b07d4db19e2fc3f2b131b354586ad7de9889cdbc514ee01136608f5e303365eca8f378621740c49a84b293c7b36c9db10a0e5ed6b057df9293d231ec504224eb0100c7953b19e951f6e5"], 0x0, 0x2c}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(0x3) r3 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f00000008c0)='espintcp', 0x8) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={0x0, 0x100000}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000015ffbb00fdffffff000000000a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000640)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000680)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x3, 0xeffc}, &(0x7f0000000780)=0x90) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@polexpire={0xd8, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa}, {0x0, 0x0, 0x4000000000}, 0x0, 0x0, 0x0, 0x0, 0x94cb9baf97fc2846}}, [@sec_ctx={0xc, 0x8, {0x8}}, @mark={0xc, 0x15, {0x0, 0xca44}}]}, 0xd8}}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0xa02, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r8, &(0x7f0000000580)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r8, &(0x7f00000005c0)={0x24, @none={0x0, 0xfffd}}, 0x14) close(r7) r9 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x800, 0x0, 0x3, 0x1, 0x8, 0x8000}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000300)=0x2005, 0x4) sendmsg$inet6(r9, &(0x7f0000000340)={&(0x7f0000000380)={0xa, 0x4e20, 0x180000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000029000000360000000c00000000000000180000000000000029000000040000001440"], 0x30}, 0x8040) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(0xffffffffffffffff, r10, 0x0, 0x8000000000000000) ioctl$OCFS2_IOC_RESVSP64(0xffffffffffffffff, 0x4030582a, &(0x7f0000000a40)={0x2, 0x0, 0xc853, 0xd, 0x9, 0x4}) ioctl$PPPIOCGIDLE32(r6, 0x8008743f, &(0x7f0000000180)) r11 = getpid() sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="f800000023df25e800f280d4005a80d000a5802f9f911b8135f3591de560f0f7ad189ea6d9be4c5816277a8185da6d573d400abf9fa62f9aff6b40aa10d62cdccbb1851b0c7d8971d7ce1ad9c510392b17bf29078e29db10d0226e787ddc6337c0203e5f516a5572da472b9b60ceda8652e30c95f2dcb9b00ac29d80512ec9d71211acfc167020cd224d0f93a6882bc5da3779af168779fe00c4df1b9725e7452e1fe378d49918fac5177713611681e6a06db0adf22104b510419bb47c9976f49db863538e98290e40594c08040000000000868008000200"/227, @ANYRES32=r11, @ANYBLOB="040030000400e900"], 0xf8}], 0x1, 0x0, 0x0, 0x48000}, 0x0) 1.313403512s ago: executing program 4 (id=900): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0200001900010000000000fedbdf250a010100000000000000000000000000ac14144400000000000000000000000000000000000100000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000010000000500000000000000fbffffffffffffff00000000000000000000000040004000000000000000000200000004000000000200000000000000000100000000000084010500fc020000000000000000000000000001000004d43c0000000200000000000000000000000000ffff000000000735000004000000070000000000000002000000ac1414aa000000000000000000000000000004d33c0000000a000000ac1e00010000000000000000000000000000000004010c00050000000f00000008000000ac1414aa000000000000000000000000000004d42b0000000a000000fe8800000000000000000000000001010235000001020200a7010000810000000400000064010101000000000000000000000000000004d5330000000a00000064010102000000000000000000000000023500000003070004000000000000000000000000000000000000000000000000000000000004d5330000000a000000640101000000000000000000000000000135000001024000090000000400000001000000ac1414aa000000000000000000000000000004d4320000"], 0x23c}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)="2e00000013000500000000000000000006010000100002007664706173696d5f6e6574000a000400766470793000", 0x2e}], 0x1}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f00000008c0), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000900)={'vcan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$can_raw(r2, &(0x7f0000000940)={&(0x7f0000000980)={0x1d, r3}, 0x10, &(0x7f00000009c0)={&(0x7f0000000a00)=@can={{0x2, 0x1, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "28cb4bbdc5664aa3"}, 0x10}, 0x1, 0x0, 0x0, 0x4000051}, 0x811) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x70) sendmsg$rds(r4, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x48}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000002030300000000000001000000000010"], 0x1c}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000dc0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000e00)={0x1, 0x10, &(0x7f0000000e40)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f0000000e80)=0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffff8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x81}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x41) sendmsg$NFQNL_MSG_VERDICT(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000010303"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000240)={@loopback, 0x200000, 0x2, 0x0, 0x0, 0xfffd, 0x3}, 0x20) 533.48038ms ago: executing program 6 (id=901): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINK={0x8, 0x5, r0}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}]}, 0x54}, 0x1, 0xba01}, 0x30008804) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="44000000100039041e000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1198260050d80100240024800b00010067656e65766500001424b786ac3fb8cba10000008e0d000001000000"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r3) sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) vmsplice(r2, &(0x7f0000000340)=[{&(0x7f0000000380)='/', 0x1}], 0x1, 0x1) writev(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_xfrm(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfe, {{@in6=@remote, @in=@local, 0xfffc, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x9ff, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000c90}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={0x0}, 0x1, 0x0, 0x0, 0xc060}, 0x0) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={0x0}, 0x1, 0x0, 0x0, 0xc060}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="18120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000008000023bfa400000000000007040000f8ffffffb705000008000000850000001900000095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond0\x00'}) socket(0x11, 0x2, 0x10001) (async) r9 = socket(0x11, 0x2, 0x10001) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0xae9, 0x8}, {0xfffffff6, 0x2}]}}) 0s ago: executing program 2 (id=902): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x368, 0x1d0, 0x368, 0x1d0, 0x0, 0x408, 0x408, 0x408, 0x408, 0x408, 0x8000000, 0x0, {[{{@ip={@remote, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'macvlan1\x00', {}, {}, 0x11, 0x0, 0x9}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {}, {0xff}, 0x1d}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010101, @loopback, 0xffffff00, 0xff000000, 'veth1_to_team\x00', 'ip6erspan0\x00', {0xff}, {}, 0x32, 0x0, 0x9}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x9, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0xffffffffffffffff}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x80401}]}}}]}, 0x4c}}, 0x80) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x368, 0x1d0, 0x368, 0x1d0, 0x0, 0x408, 0x408, 0x408, 0x408, 0x408, 0x8000000, 0x0, {[{{@ip={@remote, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'macvlan1\x00', {}, {}, 0x11, 0x0, 0x9}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {}, {0xff}, 0x1d}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010101, @loopback, 0xffffff00, 0xff000000, 'veth1_to_team\x00', 'ip6erspan0\x00', {0xff}, {}, 0x32, 0x0, 0x9}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x9, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0xffffffffffffffff}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x80401}]}}}]}, 0x4c}}, 0x80) (async) kernel console output (not intermixed with test programs): bridge_slave_1: entered promiscuous mode [ 71.730443][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.730584][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.730665][ T5636] bridge_slave_1: entered allmulticast mode [ 71.731605][ T5636] bridge_slave_1: entered promiscuous mode [ 71.746267][ T5627] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.824814][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.868272][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.872066][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.912963][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.913046][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.913164][ T5639] bridge_slave_0: entered allmulticast mode [ 71.937348][ T5639] bridge_slave_0: entered promiscuous mode [ 71.939703][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.939853][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.940283][ T5638] bridge_slave_0: entered allmulticast mode [ 71.945596][ T5638] bridge_slave_0: entered promiscuous mode [ 71.950706][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.950803][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.952437][ T5638] bridge_slave_1: entered allmulticast mode [ 71.955518][ T5638] bridge_slave_1: entered promiscuous mode [ 71.961681][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.030363][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.030485][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.030610][ T5639] bridge_slave_1: entered allmulticast mode [ 72.032179][ T5639] bridge_slave_1: entered promiscuous mode [ 72.064917][ T5628] team0: Port device team_slave_0 added [ 72.094294][ T5636] team0: Port device team_slave_0 added [ 72.096117][ T5628] team0: Port device team_slave_1 added [ 72.124366][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.137385][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.139296][ T5636] team0: Port device team_slave_1 added [ 72.163206][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.163356][ T5627] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.179551][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.231352][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.231369][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.231397][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.261802][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.261818][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.261840][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.264194][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.264206][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.264228][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.277529][ T5639] team0: Port device team_slave_0 added [ 72.280921][ T5638] team0: Port device team_slave_0 added [ 72.281881][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.281897][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.281919][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.299593][ T5639] team0: Port device team_slave_1 added [ 72.329908][ T5638] team0: Port device team_slave_1 added [ 72.360143][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.360160][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.360182][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.481032][ T5628] hsr_slave_0: entered promiscuous mode [ 72.485135][ T5628] hsr_slave_1: entered promiscuous mode [ 72.491159][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.491172][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.491194][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.511112][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.511127][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.511149][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.560888][ T5636] hsr_slave_0: entered promiscuous mode [ 72.563433][ T5636] hsr_slave_1: entered promiscuous mode [ 72.565735][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 72.565837][ T5636] Cannot create hsr debugfs directory [ 72.567292][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.567304][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.567341][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.717907][ T5639] hsr_slave_0: entered promiscuous mode [ 72.718524][ T5639] hsr_slave_1: entered promiscuous mode [ 72.719086][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 72.719103][ T5639] Cannot create hsr debugfs directory [ 72.812283][ T5638] hsr_slave_0: entered promiscuous mode [ 72.812883][ T5638] hsr_slave_1: entered promiscuous mode [ 72.813485][ T5638] debugfs: 'hsr0' already exists in 'hsr' [ 72.813503][ T5638] Cannot create hsr debugfs directory [ 73.233770][ T5636] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.247501][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.248447][ T5636] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.253795][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.258571][ T5636] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.271850][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.275075][ T5636] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.292253][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.413424][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.413587][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.413706][ T5627] bridge_slave_0: entered allmulticast mode [ 73.424369][ T5627] bridge_slave_0: entered promiscuous mode [ 73.437389][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.437489][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.437614][ T5627] bridge_slave_1: entered allmulticast mode [ 73.441915][ T5627] bridge_slave_1: entered promiscuous mode [ 73.463519][ T5628] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.473587][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.474486][ T5628] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.480237][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.503754][ T5628] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.508565][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.516747][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.520117][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.541056][ T5634] Bluetooth: hci0: command tx timeout [ 73.541086][ T5634] Bluetooth: hci2: command tx timeout [ 73.546644][ T5635] Bluetooth: hci1: command tx timeout [ 73.558696][ T5628] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.561380][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.596955][ T5627] team0: Port device team_slave_0 added [ 73.614441][ T5627] team0: Port device team_slave_1 added [ 73.616968][ T5635] Bluetooth: hci4: command tx timeout [ 73.616995][ T5635] Bluetooth: hci3: command tx timeout [ 73.659087][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.659103][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.659124][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.714808][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.714824][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.714847][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.760950][ T5639] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.763455][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.763935][ T5639] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.768751][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.794840][ T5639] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.799460][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.800321][ T5639] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.805890][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.851945][ T5627] hsr_slave_0: entered promiscuous mode [ 73.852592][ T5627] hsr_slave_1: entered promiscuous mode [ 73.853007][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 73.853024][ T5627] Cannot create hsr debugfs directory [ 73.983684][ T5638] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.987643][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.988493][ T5638] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.997209][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.022924][ T5638] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.025530][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.026267][ T5638] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.037328][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.043084][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.119062][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.153742][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.153923][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.194191][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.194251][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.244308][ T5627] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.249905][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.258205][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.269091][ T5627] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.271653][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.273758][ T5627] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.291978][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.312112][ T5627] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.314989][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.352400][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.364922][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.364993][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.373081][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.401061][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.401120][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.469151][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.509513][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.509610][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.520589][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.555668][ T188] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.555807][ T188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.643623][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.694547][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.694681][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.740109][ T188] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.740219][ T188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.807569][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.915744][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.940378][ T1517] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.940480][ T1517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.982183][ T1517] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.982285][ T1517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.616485][ T5634] Bluetooth: hci1: command tx timeout [ 75.616516][ T5634] Bluetooth: hci2: command tx timeout [ 75.616536][ T5634] Bluetooth: hci0: command tx timeout [ 75.645597][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.669143][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.696847][ T5635] Bluetooth: hci3: command tx timeout [ 75.696877][ T5635] Bluetooth: hci4: command tx timeout [ 75.805448][ T5636] veth0_vlan: entered promiscuous mode [ 75.867902][ T5636] veth1_vlan: entered promiscuous mode [ 76.023900][ T5636] veth0_macvtap: entered promiscuous mode [ 76.052528][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.061213][ T5636] veth1_macvtap: entered promiscuous mode [ 76.132083][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.161337][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.294466][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.301086][ T1517] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.318565][ T5639] veth0_vlan: entered promiscuous mode [ 76.325504][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.350527][ T1517] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.356056][ T1014] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.380063][ T5639] veth1_vlan: entered promiscuous mode [ 76.458141][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.458164][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.533472][ T5628] veth0_vlan: entered promiscuous mode [ 76.581134][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.581154][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.585452][ T5639] veth0_macvtap: entered promiscuous mode [ 76.629170][ T5628] veth1_vlan: entered promiscuous mode [ 76.644306][ T5639] veth1_macvtap: entered promiscuous mode [ 76.662244][ T5627] veth0_vlan: entered promiscuous mode [ 76.686514][ T5638] veth0_vlan: entered promiscuous mode [ 76.704950][ T5627] veth1_vlan: entered promiscuous mode [ 76.721911][ T5638] veth1_vlan: entered promiscuous mode [ 76.745672][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.778347][ T1014] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.785775][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.812467][ T5628] veth0_macvtap: entered promiscuous mode [ 76.825781][ T5628] veth1_macvtap: entered promiscuous mode [ 76.878158][ T5636] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.884563][ T5627] veth0_macvtap: entered promiscuous mode [ 76.954771][ T5627] veth1_macvtap: entered promiscuous mode [ 76.975766][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.984899][ T5638] veth0_macvtap: entered promiscuous mode [ 77.005462][ T5638] veth1_macvtap: entered promiscuous mode [ 77.028845][ T1014] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.028921][ T1014] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.028956][ T1014] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.028988][ T1014] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.034340][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.077824][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.082361][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.134283][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.180561][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.202089][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.202109][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.239025][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.330784][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.330803][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.410176][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.410197][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.513776][ T5838] warning: `syz.2.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.525286][ T1517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.525307][ T1517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.538332][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.540990][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.541547][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.542294][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.542563][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.543304][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.647928][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.647948][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.698312][ T5634] Bluetooth: hci0: command tx timeout [ 77.698345][ T5634] Bluetooth: hci2: command tx timeout [ 77.698367][ T5634] Bluetooth: hci1: command tx timeout [ 77.701130][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.701476][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.701633][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.701768][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.724947][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.724965][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.776628][ T5635] Bluetooth: hci4: command tx timeout [ 77.776661][ T5635] Bluetooth: hci3: command tx timeout [ 77.846386][ T1517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.846408][ T1517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.846632][ T1517] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.985911][ T1517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.986016][ T1517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.025003][ T5634] Bluetooth: hci2: Malformed HCI Event [ 78.075860][ T5848] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 78.076119][ T5848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 78.076448][ T5848] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 78.076460][ T5848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 78.076647][ T5848] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 78.076659][ T5848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 78.076843][ T5848] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 78.076854][ T5848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 78.077038][ T5848] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 78.077050][ T5848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 78.089390][ T5848] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 78.089408][ T5848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 78.089610][ T5848] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 78.089622][ T5848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 78.089829][ T5848] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 78.089840][ T5848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 78.091374][ T5848] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 78.091389][ T5848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 78.095800][ T5848] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 78.095815][ T5848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 78.477558][ T5850] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.587080][ T5850] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.714303][ T5850] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.823330][ T5850] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.086740][ T1517] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.153888][ T1517] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.232740][ T5892] Bluetooth: MGMT ver 1.23 [ 79.233908][ T5892] Bluetooth: hci0: Invalid link address type 1 for 66:55:44:23:22:11 [ 79.259105][ T43] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.310505][ T5894] xt_MASQUERADE: bad rangesize 20224 [ 79.358169][ T188] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.827260][ T5921] Zero length message leads to an empty skb [ 80.622678][ T5955] bond1: Invalid ad_actor_system MAC address. [ 80.622698][ T5955] bond1: option ad_actor_system: invalid value (7) [ 80.625648][ T5955] bond1 (unregistering): Released all slaves [ 80.783712][ T5962] syz.3.32 uses obsolete (PF_INET,SOCK_PACKET) [ 80.892102][ T5937] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 81.157752][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.344528][ T5991] sctp: [Deprecated]: syz.2.41 (pid 5991) Use of struct sctp_assoc_value in delayed_ack socket option. [ 81.344528][ T5991] Use struct sctp_sack_info instead [ 81.547027][ T6001] macsec1: entered promiscuous mode [ 81.633970][ T6001] geneve2: entered promiscuous mode [ 81.633991][ T6001] geneve2: entered allmulticast mode [ 81.879682][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.892926][ T6002] syz.0.43 (6002) used greatest stack depth: 19336 bytes left [ 81.901347][ T6022] openvswitch: netlink: EtherType 0 is less than min 600 [ 81.990826][ T6038] openvswitch: netlink: EtherType 0 is less than min 600 [ 82.490764][ T6060] syzkaller0: entered promiscuous mode [ 82.490786][ T6060] syzkaller0: entered allmulticast mode [ 82.736239][ T63] IPVS: starting estimator thread 0... [ 82.826237][ T6069] IPVS: using max 31 ests per chain, 74400 per kthread [ 83.393879][ T6092] 8021q: adding VLAN 0 to HW filter on device eth0 [ 83.401469][ T6092] 8021q: adding VLAN 0 to HW filter on device eth1 [ 83.406370][ T6092] 8021q: adding VLAN 0 to HW filter on device eth2 [ 83.411344][ T6092] 8021q: adding VLAN 0 to HW filter on device eth3 [ 83.413142][ T6092] macsec1: left promiscuous mode [ 83.414390][ T6092] geneve2: left promiscuous mode [ 83.424935][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.425053][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.575184][ T6104] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 83.781688][ T6119] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 83.781713][ T6119] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 83.966780][ T6121] macsec1: entered allmulticast mode [ 83.966800][ T6121] veth1_macvtap: entered allmulticast mode [ 83.968975][ T6126] __nla_validate_parse: 64 callbacks suppressed [ 83.968990][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'. [ 83.969002][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.72'. [ 83.969022][ T6126] validate_nla: 56 callbacks suppressed [ 83.969032][ T6126] netlink: 'syz.1.72': attribute type 12 has an invalid length. [ 83.969044][ T6126] netlink: 'syz.1.72': attribute type 11 has an invalid length. [ 83.969920][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.71'. [ 83.976312][ T6131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.71'. [ 84.014941][ T6137] netlink: 24 bytes leftover after parsing attributes in process `syz.2.74'. [ 84.077733][ T6130] netlink: 16 bytes leftover after parsing attributes in process `syz.2.74'. [ 84.098866][ T5635] Bluetooth: hci4: command 0x0405 tx timeout [ 84.209710][ T6122] veth1_macvtap (unregistering): left allmulticast mode [ 84.439394][ T6121] macsec0: entered promiscuous mode [ 84.439418][ T6121] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 84.439718][ T6121] macsec0: entered allmulticast mode [ 84.439734][ T6121] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 84.441062][ T6121] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 84.444847][ T6121] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 84.498737][ T6145] netlink: 'syz.1.77': attribute type 6 has an invalid length. [ 84.503461][ T5090] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 84.704454][ T6162] batadv1: entered promiscuous mode [ 84.704476][ T6162] batadv1: entered allmulticast mode [ 84.825496][ T6173] netlink: 27 bytes leftover after parsing attributes in process `syz.4.79'. [ 84.852102][ T6168] syzkaller0: entered promiscuous mode [ 84.852123][ T6168] syzkaller0: entered allmulticast mode [ 84.930949][ T6162] batadv1: entered promiscuous mode [ 84.930964][ T6162] batadv1: entered allmulticast mode [ 85.183525][ T6162] batadv1: entered promiscuous mode [ 85.183546][ T6162] batadv1: entered allmulticast mode [ 85.395098][ T6162] batadv1: entered promiscuous mode [ 85.395119][ T6162] batadv1: entered allmulticast mode [ 85.532674][ T6190] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.544690][ T6190] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.584259][ T6195] netlink: 'syz.3.87': attribute type 5 has an invalid length. [ 85.599472][ T6190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.83'. [ 85.599696][ T6190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.83'. [ 85.823064][ T63] IPVS: starting estimator thread 0... [ 85.905751][ T6207] IPVS: set_ctl: invalid protocol: 163 0.0.0.0:20001 [ 85.909306][ T6208] IPVS: using max 29 ests per chain, 69600 per kthread [ 85.949760][ T6215] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.144300][ T6222] Driver unsupported XDP return value 0 on prog (id 32) dev N/A, expect packet loss! [ 86.403308][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.96'. [ 86.702718][ T10] cfg80211: failed to load regulatory.db [ 86.795524][ T51] IPVS: starting estimator thread 0... [ 86.901242][ T6244] IPVS: using max 32 ests per chain, 76800 per kthread [ 86.919756][ T6240] syzkaller0: entered promiscuous mode [ 86.919772][ T6240] syzkaller0: entered allmulticast mode [ 86.926572][ T6241] tipc: Started in network mode [ 86.926597][ T6241] tipc: Node identity , cluster identity 4711 [ 86.926610][ T6241] tipc: Failed to obtain node identity [ 86.926638][ T6241] tipc: Enabling of bearer rejected, failed to enable media [ 88.914451][ T6290] netlink: 'syz.1.112': attribute type 1 has an invalid length. [ 89.002667][ T6301] __nla_validate_parse: 4 callbacks suppressed [ 89.002685][ T6301] netlink: 24 bytes leftover after parsing attributes in process `syz.4.113'. [ 89.002926][ T6300] netlink: 24 bytes leftover after parsing attributes in process `syz.4.113'. [ 89.021482][ T6298] xfrm0: entered allmulticast mode [ 89.040069][ T6298] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 89.145926][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.115'. [ 89.161088][ T6309] netlink: 40 bytes leftover after parsing attributes in process `syz.4.116'. [ 89.161109][ T6309] netlink: 32 bytes leftover after parsing attributes in process `syz.4.116'. [ 89.161125][ T6309] netlink: 32 bytes leftover after parsing attributes in process `syz.4.116'. [ 89.450934][ T6322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.119'. [ 89.454465][ T6322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.119'. [ 89.454485][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.119'. [ 89.559411][ T6328] sctp: [Deprecated]: syz.1.120 (pid 6328) Use of struct sctp_assoc_value in delayed_ack socket option. [ 89.559411][ T6328] Use struct sctp_sack_info instead [ 89.564630][ T6328] sctp: [Deprecated]: syz.1.120 (pid 6328) Use of struct sctp_assoc_value in delayed_ack socket option. [ 89.564630][ T6328] Use struct sctp_sack_info instead [ 89.763547][ T6331] netlink: 9 bytes leftover after parsing attributes in process `syz.2.121'. [ 90.656311][ T6342] netlink: 'syz.1.123': attribute type 1 has an invalid length. [ 91.789843][ T6352] hsr_slave_0: left promiscuous mode [ 91.948748][ T6352] hsr_slave_1: left promiscuous mode [ 92.974426][ T6426] xt_cgroup: invalid path, errno=-2 [ 93.063803][ T6422] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.587452][ T6449] syzkaller0: entered promiscuous mode [ 93.587476][ T6449] syzkaller0: entered allmulticast mode [ 94.416931][ T5634] Bluetooth: hci4: command 0x0405 tx timeout [ 95.814239][ T6409] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.136391][ T6476] __nla_validate_parse: 8 callbacks suppressed [ 96.136408][ T6476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.159'. [ 96.136781][ T6475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.159'. [ 96.136936][ T9] bond_slave_0: entered promiscuous mode [ 96.136967][ T9] bond_slave_1: entered promiscuous mode [ 97.636693][ T6494] syzkaller0: entered promiscuous mode [ 97.636716][ T6494] syzkaller0: entered allmulticast mode [ 97.657036][ T6494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.164'. [ 98.001153][ T6503] netlink: 72 bytes leftover after parsing attributes in process `syz.2.166'. [ 98.001175][ T6503] netlink: 72 bytes leftover after parsing attributes in process `syz.2.166'. [ 98.003445][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.166'. [ 98.016782][ T6521] batadv_slave_1: entered promiscuous mode [ 98.138401][ T6518] batadv_slave_1: left promiscuous mode [ 98.222323][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.177'. [ 98.277834][ T6542] veth0_macvtap: left promiscuous mode [ 98.522886][ T6558] openvswitch: netlink: Missing valid actions attribute. [ 98.522918][ T6558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.594697][ T6554] netlink: 20 bytes leftover after parsing attributes in process `syz.4.179'. [ 98.594720][ T6554] netlink: 28 bytes leftover after parsing attributes in process `syz.4.179'. [ 98.934443][ T6583] netlink: 36 bytes leftover after parsing attributes in process `syz.1.185'. [ 98.940138][ T5634] Bluetooth: hci0: connection err: -111 [ 98.958676][ T6585] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 98.959233][ T6585] team0: Device ipvlan2 is already an upper device of the team interface [ 99.420375][ T6614] syzkaller0: entered promiscuous mode [ 99.420397][ T6614] syzkaller0: entered allmulticast mode [ 99.639251][ T6646] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 99.639372][ T6646] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 99.639473][ T6646] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 99.639563][ T6646] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 99.639652][ T6646] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 99.643952][ T6646] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 99.644064][ T6646] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 99.644160][ T6646] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 99.644251][ T6646] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 99.644341][ T6646] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 99.644446][ T6646] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 99.644535][ T6646] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 99.644622][ T6646] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 99.644712][ T6646] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 99.644801][ T6646] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 99.644892][ T6646] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 99.644983][ T6646] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 99.645074][ T6646] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 99.645163][ T6646] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 99.645248][ T6646] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 99.645336][ T6646] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 99.645444][ T6646] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 99.703188][ T6646] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 99.703301][ T6646] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 99.703403][ T6646] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 99.728433][ T6646] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 99.728559][ T6646] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 99.728648][ T6646] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 99.728734][ T6646] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 99.728821][ T6646] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 99.728908][ T6646] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 99.729002][ T6646] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 99.729089][ T6646] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 100.969547][ T6647] ipip0: entered promiscuous mode [ 100.971125][ T5294] veth0_macvtap: entered promiscuous mode [ 101.398593][ T6670] netlink: 'syz.4.202': attribute type 1 has an invalid length. [ 101.469101][ T6670] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.591662][ T6679] bond2: (slave gretap1): making interface the new active one [ 101.604223][ T6685] __nla_validate_parse: 2 callbacks suppressed [ 101.604241][ T6685] netlink: 2 bytes leftover after parsing attributes in process `syz.1.203'. [ 101.621594][ T6679] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 101.687210][ T6685] lo: entered promiscuous mode [ 101.732471][ T6685] tunl0: entered promiscuous mode [ 101.749389][ T6685] gre0: entered promiscuous mode [ 101.808191][ T6685] gretap0: entered promiscuous mode [ 101.862204][ T6685] erspan0: entered promiscuous mode [ 101.878154][ T6685] ip_vti0: entered promiscuous mode [ 101.894099][ T6685] ip6_vti0: entered promiscuous mode [ 101.920151][ T6685] sit0: entered promiscuous mode [ 101.928491][ T6685] ip6tnl0: entered promiscuous mode [ 101.959572][ T6685] ip6gre0: entered promiscuous mode [ 101.974653][ T6685] syz_tun: entered promiscuous mode [ 102.032414][ T6685] ip6gretap0: entered promiscuous mode [ 102.058167][ T6685] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.058811][ T6685] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.068529][ T6685] bridge0: entered promiscuous mode [ 102.089087][ T6685] vcan0: entered promiscuous mode [ 102.103237][ T6685] bond0: entered promiscuous mode [ 102.103256][ T6685] bond_slave_0: entered promiscuous mode [ 102.103459][ T6685] bond_slave_1: entered promiscuous mode [ 102.138169][ T6685] team0: entered promiscuous mode [ 102.138188][ T6685] team_slave_0: entered promiscuous mode [ 102.139700][ T6685] team_slave_1: entered promiscuous mode [ 102.163094][ T6685] dummy0: entered promiscuous mode [ 102.175474][ T6685] nlmon0: entered promiscuous mode [ 102.215649][ T6685] batadv0: entered promiscuous mode [ 102.238833][ T6685] vxcan0: entered promiscuous mode [ 102.239404][ T6685] vxcan1: entered promiscuous mode [ 102.258280][ T6685] veth0: entered promiscuous mode [ 102.281499][ T6685] veth1: entered promiscuous mode [ 102.325158][ T6685] wg0: entered promiscuous mode [ 102.352886][ T6685] wg1: entered promiscuous mode [ 102.364521][ T6685] wg2: entered promiscuous mode [ 102.372977][ T6685] veth0_to_bridge: entered promiscuous mode [ 102.398283][ T6685] veth1_to_bridge: entered promiscuous mode [ 102.411861][ T6685] veth0_to_bond: entered promiscuous mode [ 102.422805][ T6685] veth1_to_bond: entered promiscuous mode [ 102.429809][ T6685] veth0_to_team: entered promiscuous mode [ 102.442486][ T6685] veth1_to_team: entered promiscuous mode [ 102.458270][ T6685] veth0_to_batadv: entered promiscuous mode [ 102.462499][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.465177][ T6685] batadv_slave_0: entered promiscuous mode [ 102.473425][ T6685] veth1_to_batadv: entered promiscuous mode [ 102.481664][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.482442][ T6685] batadv_slave_1: entered promiscuous mode [ 102.491236][ T6685] xfrm0: entered promiscuous mode [ 102.504023][ T6685] veth0_to_hsr: entered promiscuous mode [ 102.520612][ T6685] veth1_to_hsr: entered promiscuous mode [ 102.552182][ T6685] hsr0: entered promiscuous mode [ 102.559126][ T6685] veth1_virt_wifi: entered promiscuous mode [ 102.573129][ T6685] veth0_virt_wifi: entered promiscuous mode [ 102.581642][ T6685] virt_wifi0: entered promiscuous mode [ 102.608227][ T6685] vlan0: entered promiscuous mode [ 102.620268][ T6685] vlan1: entered promiscuous mode [ 102.634923][ T6685] macvlan0: entered promiscuous mode [ 102.647788][ T6685] macvlan1: entered promiscuous mode [ 102.653480][ T6685] ipvlan0: entered promiscuous mode [ 102.653657][ T6685] ipvlan1: entered promiscuous mode [ 102.671686][ T6685] macsec0: entered promiscuous mode [ 102.679279][ T6685] geneve0: entered promiscuous mode [ 102.709430][ T6685] geneve1: entered promiscuous mode [ 102.725326][ T6685] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 102.744951][ T6685] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 102.760433][ T6685] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 102.780917][ T6685] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 102.811583][ T6685] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 102.850720][ T6685] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 102.857108][ T6685] vxlan0: entered promiscuous mode [ 102.857250][ T6685] bond1: entered promiscuous mode [ 102.857365][ T6685] geneve2: entered promiscuous mode [ 102.857588][ T63] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.857654][ T63] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.857687][ T63] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.857719][ T63] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.305101][ T6763] netlink: 'syz.4.215': attribute type 33 has an invalid length. [ 103.305301][ T6763] netlink: 'syz.4.215': attribute type 33 has an invalid length. [ 103.305469][ T6763] netlink: 'syz.4.215': attribute type 33 has an invalid length. [ 103.305636][ T6763] netlink: 'syz.4.215': attribute type 33 has an invalid length. [ 103.305800][ T6763] netlink: 'syz.4.215': attribute type 33 has an invalid length. [ 103.338613][ T6770] syzkaller0: entered promiscuous mode [ 103.338635][ T6770] syzkaller0: entered allmulticast mode [ 103.350861][ T6770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.216'. [ 103.353270][ T6770] netlink: 44 bytes leftover after parsing attributes in process `syz.1.216'. [ 103.354007][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.216'. [ 103.389187][ T6763] netlink: 'syz.4.215': attribute type 33 has an invalid length. [ 103.389389][ T6763] netlink: 'syz.4.215': attribute type 33 has an invalid length. [ 103.406789][ T6763] netlink: 'syz.4.215': attribute type 33 has an invalid length. [ 103.406996][ T6763] netlink: 'syz.4.215': attribute type 33 has an invalid length. [ 103.450931][ T6788] netlink: 40 bytes leftover after parsing attributes in process `syz.3.218'. [ 103.544749][ T6788] batadv0: entered promiscuous mode [ 103.544769][ T6788] batadv0: entered allmulticast mode [ 103.546530][ T6788] bridge0: port 3(batadv0) entered blocking state [ 103.549236][ T6788] bridge0: port 3(batadv0) entered disabled state [ 103.557987][ T6788] bridge0: port 3(batadv0) entered blocking state [ 103.558110][ T6788] bridge0: port 3(batadv0) entered forwarding state [ 103.572819][ T6788] netlink: 56 bytes leftover after parsing attributes in process `syz.3.218'. [ 103.649631][ T6812] netlink: 40 bytes leftover after parsing attributes in process `syz.3.218'. [ 103.729887][ T6798] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 103.729912][ T6798] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 103.825430][ T6795] netlink: 24 bytes leftover after parsing attributes in process `syz.2.219'. [ 103.863165][ T6811] netlink: 56 bytes leftover after parsing attributes in process `syz.3.218'. [ 104.492941][ T6830] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 104.751024][ T6834] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 106.063939][ T6849] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 106.324135][ T6882] batadv0: entered promiscuous mode [ 106.331862][ T5634] block nbd0: Receive control failed (result -32) [ 106.336849][ T5634] block nbd0: Receive control failed (result -32) [ 106.338697][ T6882] macvlan2: entered promiscuous mode [ 106.339574][ T6882] macvlan2: entered allmulticast mode [ 106.339586][ T6882] batadv0: entered allmulticast mode [ 106.364272][ T6882] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 106.387847][ T6882] batadv0: left allmulticast mode [ 106.403467][ T6882] batadv0: left promiscuous mode [ 107.139136][ T5634] Bluetooth: hci2: command 0x0401 tx timeout [ 107.382191][ T6876] validate_nla: 73 callbacks suppressed [ 107.382212][ T6876] netlink: 'syz.2.233': attribute type 15 has an invalid length. [ 107.666067][ T6896] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 107.770650][ T6898] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.845705][ T6899] netlink: 24 bytes leftover after parsing attributes in process `syz.1.239'. [ 108.236554][ T6910] netlink: 'syz.2.240': attribute type 2 has an invalid length. [ 108.268987][ T6909] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 108.503412][ T6910] !: entered promiscuous mode [ 108.804903][ T6928] netlink: 'syz.4.247': attribute type 2 has an invalid length. [ 108.804924][ T6928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.247'. [ 109.304393][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 109.353049][ T6937] IPv6: NLM_F_CREATE should be specified when creating new route [ 109.457635][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'. [ 109.476197][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'. [ 109.510430][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'. [ 109.537566][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'. [ 109.620191][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'. [ 109.763059][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'. [ 109.794800][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'. [ 110.419699][ T6969] xt_connbytes: Forcing CT accounting to be enabled [ 110.507991][ T6970] netlink: 'syz.3.256': attribute type 10 has an invalid length. [ 110.905879][ T6970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.940826][ T6970] team0: Port device bond0 added [ 111.203989][ T6982] ieee802154 phy0 wpan0: encryption failed: -22 [ 113.455926][ T7017] netlink: 'syz.0.265': attribute type 5 has an invalid length. [ 114.356343][ T6992] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 114.917794][ T7036] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 115.428687][ T7049] syzkaller1: entered allmulticast mode [ 115.512727][ T7050] x_tables: duplicate underflow at hook 1 [ 116.544293][ T7061] __nla_validate_parse: 8 callbacks suppressed [ 116.544314][ T7061] netlink: 32 bytes leftover after parsing attributes in process `syz.0.279'. [ 116.614978][ T7066] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 116.649324][ T7066] netlink: 40 bytes leftover after parsing attributes in process `syz.2.280'. [ 117.751888][ T7079] netlink: 'syz.3.286': attribute type 1 has an invalid length. [ 118.165117][ T7079] netlink: 28 bytes leftover after parsing attributes in process `syz.3.286'. [ 118.203133][ T7089] netlink: 60 bytes leftover after parsing attributes in process `syz.2.287'. [ 118.397338][ T7081] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.451565][ T7081] bond1: (slave bond2): making interface the new active one [ 118.515254][ T7081] bond1: (slave bond2): Enslaving as an active interface with an up link [ 118.648281][ T7085] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 118.866851][ T7112] netlink: 28 bytes leftover after parsing attributes in process `syz.4.290'. [ 120.302577][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.293'. [ 120.455036][ T7129] vlan2: entered allmulticast mode [ 120.455063][ T7129] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 120.532843][ T7129] batman_adv: batadv0: Adding interface: vlan2 [ 120.532862][ T7129] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 121.434561][ T7159] Cannot find add_set index 0 as target [ 121.482490][ T7159] ip_tables: iptables: counters copy to user failed while replacing table [ 121.586776][ T7159] syzkaller1: entered promiscuous mode [ 121.586964][ T7159] syzkaller1: entered allmulticast mode [ 121.646213][ T7159] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 121.677599][ T7159] netlink: 164 bytes leftover after parsing attributes in process `syz.3.297'. [ 122.239602][ T7178] bridge_slave_0: left allmulticast mode [ 122.239947][ T7178] bridge_slave_0: left promiscuous mode [ 122.244594][ T7178] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.334519][ T7178] bridge_slave_1: left allmulticast mode [ 122.338660][ T7178] bridge_slave_1: left promiscuous mode [ 122.352677][ T7178] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.575511][ T7178] bond0: (slave bond_slave_0): Releasing backup interface [ 122.612453][ T7178] bond_slave_0: left promiscuous mode [ 122.922741][ T7178] bond0: (slave bond_slave_1): Releasing backup interface [ 123.003746][ T7178] bond_slave_1: left promiscuous mode [ 123.477247][ T7178] team0: Port device team_slave_0 removed [ 123.796684][ T7178] team0: Port device team_slave_1 removed [ 123.820808][ T7178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.820999][ T7178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.919964][ T7178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.920141][ T7178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.051189][ T7178] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 125.154821][ T7224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.307'. [ 125.202571][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.308'. [ 125.411702][ T7233] netlink: 'syz.3.309': attribute type 1 has an invalid length. [ 125.411726][ T7233] netlink: 224 bytes leftover after parsing attributes in process `syz.3.309'. [ 125.666460][ T7219] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 125.993946][ T7232] netlink: 'syz.2.308': attribute type 5 has an invalid length. [ 125.993966][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.308'. [ 126.652102][ T7252] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 126.760423][ T7253] netlink: 88 bytes leftover after parsing attributes in process `syz.4.313'. [ 127.324369][ T7253] netlink: 88 bytes leftover after parsing attributes in process `syz.4.313'. [ 127.325248][ T7253] netlink: 88 bytes leftover after parsing attributes in process `syz.4.313'. [ 127.326421][ T7253] netlink: 88 bytes leftover after parsing attributes in process `syz.4.313'. [ 127.327287][ T7253] netlink: 88 bytes leftover after parsing attributes in process `syz.4.313'. [ 127.328149][ T7253] netlink: 88 bytes leftover after parsing attributes in process `syz.4.313'. [ 127.366957][ T7253] netlink: 88 bytes leftover after parsing attributes in process `syz.4.313'. [ 128.283826][ T7282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.319'. [ 128.332239][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.319'. [ 128.498082][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'. [ 129.247879][ T7299] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 129.646680][ T7312] netlink: 'syz.1.326': attribute type 9 has an invalid length. [ 130.799641][ T7334] netlink: 'syz.4.331': attribute type 12 has an invalid length. [ 131.393712][ T7329] syz.4.331 (7329) used greatest stack depth: 18496 bytes left [ 131.758221][ T7360] FAULT_INJECTION: forcing a failure. [ 131.758221][ T7360] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 131.758271][ T7360] CPU: 0 UID: 0 PID: 7360 Comm: syz.0.337 Not tainted syzkaller #0 PREEMPT(full) [ 131.758292][ T7360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 131.758312][ T7360] Call Trace: [ 131.758321][ T7360] [ 131.758329][ T7360] dump_stack_lvl+0xe8/0x150 [ 131.758370][ T7360] should_fail_ex+0x410/0x560 [ 131.758403][ T7360] _copy_from_user+0x2d/0xb0 [ 131.758431][ T7360] ___sys_sendmsg+0x1c6/0x360 [ 131.758457][ T7360] ? __lock_acquire+0x747/0x2de0 [ 131.758484][ T7360] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.758550][ T7360] ? __fget_files+0x3a2/0x420 [ 131.758569][ T7360] ? __fget_files+0x2a/0x420 [ 131.758598][ T7360] __x64_sys_sendmsg+0x1b1/0x290 [ 131.758620][ T7360] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 131.758670][ T7360] do_syscall_64+0x166/0x520 [ 131.758688][ T7360] ? trace_irq_disable+0x3b/0x140 [ 131.758709][ T7360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.758728][ T7360] ? clear_bhb_loop+0x70/0xc0 [ 131.758751][ T7360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.758777][ T7360] RIP: 0033:0x7fe47079f559 [ 131.758799][ T7360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.758814][ T7360] RSP: 002b:00007fe4715f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.758838][ T7360] RAX: ffffffffffffffda RBX: 00007fe470a25fa0 RCX: 00007fe47079f559 [ 131.758851][ T7360] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 131.758863][ T7360] RBP: 00007fe4715f0090 R08: 0000000000000000 R09: 0000000000000000 [ 131.758874][ T7360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.758885][ T7360] R13: 00007fe470a26038 R14: 00007fe470a25fa0 R15: 00007ffc5dc16dd8 [ 131.758917][ T7360] [ 132.177509][ T7363] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 132.360915][ T7370] ip_tables: iptables: counters copy to user failed while replacing table [ 132.544790][ T7368] __nla_validate_parse: 40 callbacks suppressed [ 132.544812][ T7368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.340'. [ 132.752083][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.752331][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.815561][ T7385] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.815974][ T7385] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.816994][ T7385] bridge_slave_0: entered allmulticast mode [ 132.824895][ T7385] bridge_slave_0: entered promiscuous mode [ 132.830071][ T7385] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.830191][ T7385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.874280][ T7377] bridge_slave_0: left allmulticast mode [ 132.874649][ T7377] bridge_slave_0: left promiscuous mode [ 132.876137][ T7377] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.097498][ T7389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.201214][ T7390] netlink: 48 bytes leftover after parsing attributes in process `syz.0.344'. [ 134.081219][ T7402] FAULT_INJECTION: forcing a failure. [ 134.081219][ T7402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.081250][ T7402] CPU: 1 UID: 0 PID: 7402 Comm: syz.0.349 Not tainted syzkaller #0 PREEMPT(full) [ 134.081271][ T7402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 134.081282][ T7402] Call Trace: [ 134.081289][ T7402] [ 134.081298][ T7402] dump_stack_lvl+0xe8/0x150 [ 134.081330][ T7402] should_fail_ex+0x410/0x560 [ 134.081363][ T7402] _copy_from_user+0x2d/0xb0 [ 134.081391][ T7402] __copy_msghdr+0x390/0x590 [ 134.081425][ T7402] ___sys_sendmsg+0x213/0x360 [ 134.081450][ T7402] ? __lock_acquire+0x747/0x2de0 [ 134.081477][ T7402] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.081543][ T7402] ? __fget_files+0x3a2/0x420 [ 134.081562][ T7402] ? __fget_files+0x2a/0x420 [ 134.081591][ T7402] __x64_sys_sendmsg+0x1b1/0x290 [ 134.081613][ T7402] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 134.081670][ T7402] do_syscall_64+0x166/0x520 [ 134.081688][ T7402] ? trace_irq_disable+0x3b/0x140 [ 134.081709][ T7402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.081727][ T7402] ? clear_bhb_loop+0x70/0xc0 [ 134.081751][ T7402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.081769][ T7402] RIP: 0033:0x7fe47079f559 [ 134.081786][ T7402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.081801][ T7402] RSP: 002b:00007fe4715f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.081821][ T7402] RAX: ffffffffffffffda RBX: 00007fe470a25fa0 RCX: 00007fe47079f559 [ 134.081834][ T7402] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 134.081846][ T7402] RBP: 00007fe4715f0090 R08: 0000000000000000 R09: 0000000000000000 [ 134.081857][ T7402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.081868][ T7402] R13: 00007fe470a26038 R14: 00007fe470a25fa0 R15: 00007ffc5dc16dd8 [ 134.081900][ T7402] [ 134.750864][ T7370] pimreg: entered allmulticast mode [ 134.766444][ T7406] syzkaller0: entered promiscuous mode [ 134.766560][ T7406] syzkaller0: entered allmulticast mode [ 134.788291][ T7414] netlink: 9 bytes leftover after parsing attributes in process `syz.2.351'. [ 134.788706][ T7414] 0·: renamed from hsr0 (while UP) [ 134.809544][ T7414] 0·: entered allmulticast mode [ 134.809571][ T7414] hsr_slave_0: entered allmulticast mode [ 134.809924][ T7414] hsr_slave_1: entered allmulticast mode [ 134.811613][ T7414] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 134.819325][ T7406] syzkaller1: entered promiscuous mode [ 134.819514][ T7406] syzkaller1: entered allmulticast mode [ 135.699129][ T7419] gre0: entered promiscuous mode [ 135.699314][ T7419] gre0: entered allmulticast mode [ 135.832614][ T7365] pimreg: left allmulticast mode [ 137.636623][ T7464] netlink: 'syz.1.364': attribute type 10 has an invalid length. [ 137.649235][ T7455] bond3: entered promiscuous mode [ 137.662827][ T7455] 8021q: adding VLAN 0 to HW filter on device bond3 [ 137.676533][ T7464] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 137.676724][ T7464] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 137.693103][ T7464] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 137.711529][ T7464] team0: Port device wlan0 added [ 137.817235][ T7467] v: renamed from vlan1 (while UP) [ 138.025365][ T7467] netlink: zone id is out of range [ 138.025380][ T7467] netlink: zone id is out of range [ 138.025387][ T7467] netlink: zone id is out of range [ 138.025394][ T7467] netlink: zone id is out of range [ 138.025401][ T7467] netlink: zone id is out of range [ 138.025408][ T7467] netlink: zone id is out of range [ 138.025415][ T7467] netlink: zone id is out of range [ 138.025422][ T7467] netlink: zone id is out of range [ 138.025450][ T7467] netlink: zone id is out of range [ 138.025458][ T7467] netlink: set zone limit has 4 unknown bytes [ 138.384670][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.368'. [ 138.421465][ T7481] netlink: 16 bytes leftover after parsing attributes in process `syz.0.369'. [ 138.512175][ T7482] netlink: 92 bytes leftover after parsing attributes in process `syz.4.370'. [ 138.540084][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.368'. [ 138.717323][ T7481] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 138.871102][ T7481] bond1 (unregistering): Released all slaves [ 139.081872][ T7499] netlink: 9 bytes leftover after parsing attributes in process `syz.2.371'. [ 139.735150][ T7518] netlink: 40 bytes leftover after parsing attributes in process `syz.0.375'. [ 139.746872][ T7520] netlink: 40 bytes leftover after parsing attributes in process `syz.0.375'. [ 140.060674][ T7529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.377'. [ 141.660751][ T7557] netlink: 32 bytes leftover after parsing attributes in process `syz.1.384'. [ 141.837564][ T7563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.386'. [ 142.016187][ T5635] Bluetooth: hci4: command 0x0405 tx timeout [ 143.432390][ T7612] __nla_validate_parse: 1 callbacks suppressed [ 143.432412][ T7612] netlink: 36 bytes leftover after parsing attributes in process `syz.2.394'. [ 144.231159][ T30] audit: type=1800 audit(1792884425.872:2): pid=7617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.395" name="blkio.bfq.time_recursive" dev="tmpfs" ino=398 res=0 errno=-22 [ 145.481107][ T7626] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 145.980942][ T7637] FAULT_INJECTION: forcing a failure. [ 145.980942][ T7637] name failslab, interval 1, probability 0, space 0, times 1 [ 145.980983][ T7637] CPU: 0 UID: 0 PID: 7637 Comm: syz.0.401 Not tainted syzkaller #0 PREEMPT(full) [ 145.981005][ T7637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 145.981016][ T7637] Call Trace: [ 145.981023][ T7637] [ 145.981032][ T7637] dump_stack_lvl+0xe8/0x150 [ 145.981085][ T7637] should_fail_ex+0x410/0x560 [ 145.981117][ T7637] ? __alloc_skb+0x1db/0x7a0 [ 145.981150][ T7637] should_failslab+0xa8/0x100 [ 145.981179][ T7637] ? __alloc_skb+0x1db/0x7a0 [ 145.981201][ T7637] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 145.981225][ T7637] ? __alloc_skb+0x18d/0x7a0 [ 145.981249][ T7637] ? __alloc_skb+0x1db/0x7a0 [ 145.981281][ T7637] __alloc_skb+0x1db/0x7a0 [ 145.981310][ T7637] alloc_skb_with_frags+0xc6/0x760 [ 145.981335][ T7637] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 145.981367][ T7637] ? rcu_is_watching+0x16/0xb0 [ 145.981395][ T7637] sock_alloc_send_pskb+0xc69/0xd90 [ 145.981442][ T7637] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 145.981464][ T7637] ? __lock_acquire+0x747/0x2de0 [ 145.981497][ T7637] rawv6_send_hdrinc+0x268/0x1950 [ 145.981539][ T7637] ? __pfx_rawv6_send_hdrinc+0x10/0x10 [ 145.981569][ T7637] ? ip6_dst_hoplimit+0x65/0x3e0 [ 145.981589][ T7637] ? ip6_dst_hoplimit+0x65/0x3e0 [ 145.981615][ T7637] rawv6_sendmsg+0x12fb/0x18c0 [ 145.981653][ T7637] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 145.981701][ T7637] ? __lock_acquire+0x747/0x2de0 [ 145.981727][ T7637] ? aa_sock_msg_perm+0xf5/0x210 [ 145.981749][ T7637] ? sock_rps_record_flow+0x19/0x350 [ 145.981779][ T7637] ? inet_sendmsg+0x298/0x320 [ 145.981806][ T7637] ? apparmor_socket_sendmsg+0x98/0x360 [ 145.981828][ T7637] ? __pfx_inet_sendmsg+0x10/0x10 [ 145.981854][ T7637] sock_sendmsg_nosec+0x10f/0x190 [ 145.981879][ T7637] ____sys_sendmsg+0x54e/0x850 [ 145.981912][ T7637] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.981949][ T7637] ? import_iovec+0x73/0xa0 [ 145.981979][ T7637] ___sys_sendmsg+0x2a5/0x360 [ 145.982004][ T7637] ? __lock_acquire+0x747/0x2de0 [ 145.982030][ T7637] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.982101][ T7637] ? __fget_files+0x3a2/0x420 [ 145.982120][ T7637] ? __fget_files+0x2a/0x420 [ 145.982150][ T7637] __x64_sys_sendmsg+0x1b1/0x290 [ 145.982171][ T7637] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 145.982221][ T7637] do_syscall_64+0x166/0x520 [ 145.982238][ T7637] ? trace_irq_disable+0x3b/0x140 [ 145.982260][ T7637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.982279][ T7637] ? clear_bhb_loop+0x70/0xc0 [ 145.982302][ T7637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.982325][ T7637] RIP: 0033:0x7fe47079f559 [ 145.982343][ T7637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.982358][ T7637] RSP: 002b:00007fe4715f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.982378][ T7637] RAX: ffffffffffffffda RBX: 00007fe470a25fa0 RCX: 00007fe47079f559 [ 145.982392][ T7637] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 145.982403][ T7637] RBP: 00007fe4715f0090 R08: 0000000000000000 R09: 0000000000000000 [ 145.982415][ T7637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.982426][ T7637] R13: 00007fe470a26038 R14: 00007fe470a25fa0 R15: 00007ffc5dc16dd8 [ 145.982458][ T7637] [ 146.456255][ T7624] xt_CT: No such helper "netbios-ns" [ 147.504014][ T7649] tipc: Failed to remove unknown binding: 66,0,0/0:1054995781/1054995783 [ 147.504227][ T7649] tipc: Failed to remove unknown binding: 66,0,0/0:1054995781/1054995782 [ 147.681990][ T7649] tipc: Failed to remove unknown binding: 66,0,0/0:1054995781/1054995782 [ 147.682195][ T7649] tipc: Failed to remove unknown binding: 66,0,0/0:1054995781/1054995783 [ 147.682376][ T7649] tipc: Failed to remove unknown binding: 66,0,0/0:1054995781/1054995782 [ 148.056580][ T7663] tipc: Started in network mode [ 148.056608][ T7663] tipc: Node identity a24ae8d7e88e, cluster identity 4711 [ 148.057986][ T7663] tipc: Enabled bearer , priority 0 [ 148.087127][ T7663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.406'. [ 148.406498][ T7663] tipc: Resetting bearer [ 148.467971][ T7662] tipc: Disabling bearer [ 148.542147][ T7677] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 148.610596][ T7679] FAULT_INJECTION: forcing a failure. [ 148.610596][ T7679] name failslab, interval 1, probability 0, space 0, times 0 [ 148.610629][ T7679] CPU: 1 UID: 0 PID: 7679 Comm: syz.3.412 Not tainted syzkaller #0 PREEMPT(full) [ 148.610650][ T7679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 148.610661][ T7679] Call Trace: [ 148.610669][ T7679] [ 148.610677][ T7679] dump_stack_lvl+0xe8/0x150 [ 148.610711][ T7679] should_fail_ex+0x410/0x560 [ 148.610744][ T7679] should_failslab+0xa8/0x100 [ 148.610774][ T7679] __kmalloc_noprof+0xf9/0x710 [ 148.610805][ T7679] ? ___neigh_create+0x6da/0x21f0 [ 148.610829][ T7679] ? ___neigh_create+0x6da/0x21f0 [ 148.610861][ T7679] ___neigh_create+0x6da/0x21f0 [ 148.610896][ T7679] ? __ipv6_neigh_lookup_noref+0x57d/0x780 [ 148.610929][ T7679] ? ipv6_neigh_create_noref+0x5e/0xe0 [ 148.610956][ T7679] ip6_finish_output2+0xe06/0x1460 [ 148.610990][ T7679] ? ip6_output+0x11e/0x540 [ 148.611011][ T7679] ip6_output+0x337/0x540 [ 148.611032][ T7679] ? __pfx_ip6_output+0x10/0x10 [ 148.611054][ T7679] rawv6_send_hdrinc+0xf38/0x1950 [ 148.611097][ T7679] ? __pfx_rawv6_send_hdrinc+0x10/0x10 [ 148.611125][ T7679] ? __pfx_dst_output+0x10/0x10 [ 148.611149][ T7679] ? ip6_dst_hoplimit+0x65/0x3e0 [ 148.611169][ T7679] ? ip6_dst_hoplimit+0x65/0x3e0 [ 148.611196][ T7679] rawv6_sendmsg+0x12fb/0x18c0 [ 148.611235][ T7679] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 148.611290][ T7679] ? __lock_acquire+0x747/0x2de0 [ 148.611318][ T7679] ? aa_sock_msg_perm+0xf5/0x210 [ 148.611340][ T7679] ? sock_rps_record_flow+0x19/0x350 [ 148.611371][ T7679] ? inet_sendmsg+0x298/0x320 [ 148.611395][ T7679] ? apparmor_socket_sendmsg+0x98/0x360 [ 148.611418][ T7679] ? __pfx_inet_sendmsg+0x10/0x10 [ 148.611443][ T7679] sock_sendmsg_nosec+0x10f/0x190 [ 148.611470][ T7679] ____sys_sendmsg+0x54e/0x850 [ 148.611504][ T7679] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.611543][ T7679] ? import_iovec+0x73/0xa0 [ 148.611573][ T7679] ___sys_sendmsg+0x2a5/0x360 [ 148.611599][ T7679] ? __lock_acquire+0x747/0x2de0 [ 148.611624][ T7679] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.611694][ T7679] ? __fget_files+0x3a2/0x420 [ 148.611714][ T7679] ? __fget_files+0x2a/0x420 [ 148.611744][ T7679] __x64_sys_sendmsg+0x1b1/0x290 [ 148.611766][ T7679] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 148.611819][ T7679] do_syscall_64+0x166/0x520 [ 148.611838][ T7679] ? trace_irq_disable+0x3b/0x140 [ 148.611860][ T7679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.611879][ T7679] ? clear_bhb_loop+0x70/0xc0 [ 148.611903][ T7679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.611922][ T7679] RIP: 0033:0x7f4a4ff9f559 [ 148.611940][ T7679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.611954][ T7679] RSP: 002b:00007f4a50dd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.611975][ T7679] RAX: ffffffffffffffda RBX: 00007f4a50225fa0 RCX: 00007f4a4ff9f559 [ 148.611989][ T7679] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 148.612000][ T7679] RBP: 00007f4a50dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 148.612012][ T7679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.612023][ T7679] R13: 00007f4a50226038 R14: 00007f4a50225fa0 R15: 00007fff9530d2d8 [ 148.612056][ T7679] [ 149.201430][ T7694] net_ratelimit: 2 callbacks suppressed [ 149.201450][ T7694] ip_tables: iptables: counters copy to user failed while replacing table [ 149.529169][ T7703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.419'. [ 150.201189][ T7703] 8021q: adding VLAN 0 to HW filter on device bond5 [ 150.376053][ T7703] bond5 (unregistering): Released all slaves [ 150.676712][ T7720] Bluetooth: MGMT ver 1.23 [ 151.005078][ T7730] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 151.067072][ T7683] netlink: 80 bytes leftover after parsing attributes in process `syz.1.414'. [ 151.200943][ T7731] tipc: Started in network mode [ 151.200966][ T7731] tipc: Node identity 1000001, cluster identity 4369 [ 151.200978][ T7731] tipc: Node number set to 16777217 [ 151.292543][ T7733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.424'. [ 151.418339][ T7731] tipc: New replicast peer: 127.0.0.1 [ 151.419289][ T7731] tipc: Enabled bearer , priority 10 [ 152.369376][ T7750] xt_hashlimit: size too large, truncated to 1048576 [ 152.436859][ T7751] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 152.445987][ T7751] netlink: 'syz.4.430': attribute type 1 has an invalid length. [ 152.532785][ T7751] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.111289][ T7751] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 153.355474][ T7761] netlink: 52 bytes leftover after parsing attributes in process `syz.1.431'. [ 153.385200][ T7763] netlink: 45 bytes leftover after parsing attributes in process `syz.3.433'. [ 153.585486][ T7770] netlink: 'syz.2.434': attribute type 1 has an invalid length. [ 153.801703][ T7779] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 153.851735][ T7775] netlink: 'syz.2.434': attribute type 1 has an invalid length. [ 153.926788][ T7779] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.254887][ T7785] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 154.798683][ T7794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.441'. [ 154.942370][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.443'. [ 154.945648][ T7805] netlink: 'syz.1.443': attribute type 13 has an invalid length. [ 155.203106][ T7811] ieee802154 phy0 wpan0: encryption failed: -22 [ 155.545878][ T7820] netlink: 60 bytes leftover after parsing attributes in process `syz.3.446'. [ 155.545903][ T7820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.446'. [ 155.545916][ T7820] netlink: 20 bytes leftover after parsing attributes in process `syz.3.446'. [ 156.100275][ T7833] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 156.406899][ T7841] netlink: 'syz.4.453': attribute type 1 has an invalid length. [ 156.406928][ T7841] netlink: 4320 bytes leftover after parsing attributes in process `syz.4.453'. [ 157.043371][ T7846] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 158.498368][ T7864] sctp: [Deprecated]: syz.3.456 (pid 7864) Use of int in max_burst socket option. [ 158.498368][ T7864] Use struct sctp_assoc_value instead [ 159.083995][ T7880] netlink: 48 bytes leftover after parsing attributes in process `syz.0.457'. [ 159.844749][ T7899] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 159.846250][ T7898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.461'. [ 159.993757][ T7900] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 159.997210][ T7900] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 160.360595][ T7916] netlink: 'syz.4.466': attribute type 46 has an invalid length. [ 161.547340][ T7928] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 162.062834][ T7942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.474'. [ 162.091696][ T7950] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 162.305352][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.477'. [ 162.305395][ T7953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.477'. [ 162.305409][ T7953] netlink: 20 bytes leftover after parsing attributes in process `syz.4.477'. [ 162.319659][ T7953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.477'. [ 163.088873][ T7953] bond4: Invalid ad_actor_system MAC address. [ 163.088893][ T7953] bond4: option ad_actor_system: invalid value (7) [ 163.223562][ T7953] bond4 (unregistering): Released all slaves [ 163.353910][ T7953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.477'. [ 163.354758][ T7953] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 164.752161][ T7982] netlink: 36 bytes leftover after parsing attributes in process `syz.0.485'. [ 164.785071][ T7985] x_tables: duplicate underflow at hook 2 [ 165.112426][ T7995] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 166.299068][ T8007] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 166.364413][ T8007] sctp: [Deprecated]: syz.4.493 (pid 8007) Use of struct sctp_assoc_value in delayed_ack socket option. [ 166.364413][ T8007] Use struct sctp_sack_info instead [ 166.501321][ T8007] netlink: 67 bytes leftover after parsing attributes in process `syz.4.493'. [ 167.363071][ T8007] 8021q: adding VLAN 0 to HW filter on device bond1 [ 167.442385][ T8007] batman_adv: batadv0: Interface activated: vlan2 [ 168.110634][ T6800] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.156698][ T6798] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.157582][ T6798] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.176145][ T6798] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 168.236960][ T6800] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.634291][ T8031] bond2: entered promiscuous mode [ 168.729932][ T8042] netlink: 24 bytes leftover after parsing attributes in process `syz.2.499'. [ 169.004723][ T8034] bond3: entered promiscuous mode [ 169.417564][ T8057] x_tables: unsorted underflow at hook 4 [ 169.425200][ T8057] netlink: 40 bytes leftover after parsing attributes in process `syz.0.502'. [ 169.800709][ T8065] ip_tables: iptables: counters copy to user failed while replacing table [ 169.974715][ T8073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.506'. [ 170.250504][ T8072] veth3: entered allmulticast mode [ 171.000994][ T8096] netlink: 44 bytes leftover after parsing attributes in process `syz.2.510'. [ 171.004771][ T8093] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 171.236938][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.511'. [ 171.356150][ T8103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.396897][ T8096] netlink: 68 bytes leftover after parsing attributes in process `syz.2.510'. [ 171.648351][ T8108] netlink: 'syz.4.513': attribute type 1 has an invalid length. [ 172.008902][ T8125] netlink: 'syz.0.514': attribute type 20 has an invalid length. [ 172.008923][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.514'. [ 172.096674][ T8108] bond4: entered promiscuous mode [ 172.099964][ T8108] 8021q: adding VLAN 0 to HW filter on device bond4 [ 172.173408][ T8111] veth3: entered allmulticast mode [ 172.405286][ T8125] netlink: 'syz.0.514': attribute type 20 has an invalid length. [ 172.405309][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.514'. [ 172.430572][ T6800] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.433434][ T6798] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.433475][ T6798] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.433510][ T6798] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.576491][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 172.622660][ T8111] veth3: entered allmulticast mode [ 173.666137][ T8152] netlink: 36 bytes leftover after parsing attributes in process `syz.1.520'. [ 174.936747][ T8173] syzkaller0: entered promiscuous mode [ 174.936921][ T8173] syzkaller0: entered allmulticast mode [ 174.991180][ T8173] tipc: Enabled bearer , priority 0 [ 175.282691][ T8191] ip_tables: iptables: counters copy to user failed while replacing table [ 175.348368][ T8187] netlink: 32 bytes leftover after parsing attributes in process `syz.2.527'. [ 175.436852][ T8193] netlink: 'syz.0.528': attribute type 1 has an invalid length. [ 175.571856][ T8193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.528'. [ 176.011213][ T8198] batman_adv: batadv0: Adding interface: dummy0 [ 176.011232][ T8198] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.011261][ T8198] batman_adv: batadv0: Interface activated: dummy0 [ 176.074226][ T8169] tipc: Resetting bearer [ 176.293984][ T8169] tipc: Disabling bearer [ 176.574770][ T8193] batadv0: mtu less than device minimum [ 176.576366][ T8193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.577878][ T8193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.579431][ T8193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.580944][ T8193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.582413][ T8193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.583907][ T8193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.585370][ T8193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.586995][ T8193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.850731][ T1242] tipc: Node number set to 1254418647 [ 177.010476][ T8202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.531'. [ 177.142425][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.531'. [ 177.463245][ T8217] sit0: left promiscuous mode [ 177.463909][ T8217] netlink: 'syz.1.533': attribute type 3 has an invalid length. [ 177.549629][ T8217] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 177.701000][ T5635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 177.714080][ T5635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 177.722649][ T5635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 177.732535][ T5635] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 177.735559][ T5635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 177.920475][ T8227] netlink: 24 bytes leftover after parsing attributes in process `syz.2.536'. [ 178.066559][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.537'. [ 178.070327][ T8232] Bluetooth: hci0: invalid len left 17, exp >= 193 [ 178.531419][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.540'. [ 178.541425][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.540'. [ 178.605016][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.540'. [ 178.727179][ T8247] netlink: 16 bytes leftover after parsing attributes in process `syz.0.539'. [ 178.727219][ T8247] netlink: 16 bytes leftover after parsing attributes in process `syz.0.539'. [ 178.760441][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.540'. [ 178.872750][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.540'. [ 179.776232][ T5634] Bluetooth: hci5: command tx timeout [ 181.386364][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 181.856244][ T5635] Bluetooth: hci5: command tx timeout [ 182.081980][ T8318] Bluetooth: hci0: invalid len left 17, exp >= 193 [ 182.147129][ T8224] rxe_eth0 speed is unknown, defaulting to 1000 [ 182.322934][ T8322] __nla_validate_parse: 11 callbacks suppressed [ 182.322955][ T8322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.550'. [ 183.936760][ T5635] Bluetooth: hci5: command tx timeout [ 186.046340][ T5635] Bluetooth: hci5: command tx timeout [ 186.552854][ T8377] bond5 (unregistering): Released all slaves [ 187.102030][ T8376] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 189.640910][ T8224] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.653262][ T8224] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.741496][ T8224] bridge_slave_0: entered allmulticast mode [ 189.842668][ T8224] bridge_slave_0: entered promiscuous mode [ 190.007492][ T8224] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.012812][ T8224] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.013163][ T8224] bridge_slave_1: entered allmulticast mode [ 190.021487][ T8224] bridge_slave_1: entered promiscuous mode [ 190.139763][ T8421] netlink: 20 bytes leftover after parsing attributes in process `syz.0.571'. [ 190.290488][ T8224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.336150][ T8224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.337314][ T8423] netlink: 32 bytes leftover after parsing attributes in process `syz.1.569'. [ 190.764832][ T8224] team0: Port device team_slave_0 added [ 190.811569][ T8224] team0: Port device team_slave_1 added [ 191.383068][ T8224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.383086][ T8224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.383109][ T8224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.451383][ T8224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.451399][ T8224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.451422][ T8224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.821176][ T8224] hsr_slave_0: entered promiscuous mode [ 191.834346][ T8224] hsr_slave_1: entered promiscuous mode [ 192.342379][ T8446] net_ratelimit: 11 callbacks suppressed [ 192.342396][ T8446] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 193.027533][ T8464] netlink: 28 bytes leftover after parsing attributes in process `syz.1.579'. [ 193.267997][ T8472] netlink: 28 bytes leftover after parsing attributes in process `syz.1.579'. [ 193.289321][ T8224] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 193.354537][ T8224] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 193.370620][ T8224] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 193.423200][ T8224] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 193.448606][ T8224] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 193.499796][ T8224] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 193.502075][ T8224] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 193.541388][ T8224] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 194.053880][ T8487] netlink: 'syz.4.580': attribute type 2 has an invalid length. [ 194.186182][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.186378][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.984177][ T8493] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 195.964126][ T8463] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 196.267064][ T54] Bluetooth: hci2: command 0x0401 tx timeout [ 196.267101][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 196.267123][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 196.485400][ T8224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.748264][ T8224] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.911476][ T6779] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.911586][ T6779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.073058][ T6796] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.073165][ T6796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.363571][ T8224] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.441178][ T8524] xt_hashlimit: size too large, truncated to 1048576 [ 198.441406][ T8524] xt_hashlimit: max too large, truncated to 1048576 [ 198.445310][ T8524] netlink: 16 bytes leftover after parsing attributes in process `syz.4.588'. [ 198.656876][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 199.651633][ T8534] x_tables: duplicate underflow at hook 1 [ 200.061544][ T8544] netlink: 20 bytes leftover after parsing attributes in process `syz.2.593'. [ 200.782569][ T8547] syzkaller0: left promiscuous mode [ 200.800975][ T8547] ipip0: left promiscuous mode [ 201.143738][ T8547] bond4: left promiscuous mode [ 201.148682][ T8547] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 201.208375][ T8224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.033343][ T8562] netlink: 'syz.1.596': attribute type 7 has an invalid length. [ 202.041253][ T8561] netlink: 40 bytes leftover after parsing attributes in process `syz.2.597'. [ 202.269008][ T8564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.598'. [ 202.441181][ T8569] netlink: 'syz.2.599': attribute type 2 has an invalid length. [ 202.445980][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.598'. [ 203.102340][ T8224] veth0_vlan: entered promiscuous mode [ 203.163077][ T8224] veth1_vlan: entered promiscuous mode [ 203.365537][ T8224] veth0_macvtap: entered promiscuous mode [ 203.417805][ T8224] veth1_macvtap: entered promiscuous mode [ 203.543132][ T8588] 8021q: adding VLAN 0 to HW filter on device bond3 [ 203.582055][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.602'. [ 203.582080][ T8584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'. [ 203.584045][ T8588] netlink: 'syz.1.602': attribute type 4 has an invalid length. [ 203.584063][ T8588] netlink: 152 bytes leftover after parsing attributes in process `syz.1.602'. [ 203.649652][ T8224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.946202][ T8588] .`: renamed from bond0 [ 204.412054][ T8224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.568171][ T6797] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.570832][ T6782] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.570873][ T6782] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.570908][ T6782] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.372037][ T8601] syzkaller0: MTU not usable for tipc bearer [ 205.372078][ T8601] tipc: Enabling of bearer rejected, failed to enable media [ 206.401672][ T6782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.401693][ T6782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.895905][ T6797] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.976034][ T6797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.334002][ T5634] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 207.339927][ T5634] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 207.346083][ T5634] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 207.347945][ T5634] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 207.349203][ T5634] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 208.609515][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.5.534'. [ 208.692620][ T8652] netlink: 24 bytes leftover after parsing attributes in process `syz.1.616'. [ 208.849117][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.617'. [ 209.135920][ T8653] workqueue: name exceeds WQ_NAME_LEN. Truncating to: )¾ƒ°7\9û­h|:Ô}Âáy=¬*Xý@°ØrFíW� [ 209.211149][ T8657] netlink: 'syz.2.617': attribute type 10 has an invalid length. [ 209.456589][ T4949] Bluetooth: hci6: command tx timeout [ 209.759854][ T8625] rxe_eth0 speed is unknown, defaulting to 1000 [ 210.936875][ T8683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.624'. [ 211.541235][ T4949] Bluetooth: hci6: command tx timeout [ 211.603546][ T8679] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 211.672086][ T8695] netlink: 16 bytes leftover after parsing attributes in process `syz.5.627'. [ 211.784873][ T8695] xt_REDIRECT: bad MAP_IPS. [ 211.874839][ T8699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.628'. [ 212.276391][ T8690] netlink: 16 bytes leftover after parsing attributes in process `syz.1.626'. [ 212.701556][ T8710] netlink: 132 bytes leftover after parsing attributes in process `syz.2.629'. [ 212.941540][ T8711] batadv_slave_1: entered promiscuous mode [ 213.134794][ T8707] batadv_slave_1: left promiscuous mode [ 213.627964][ T4949] Bluetooth: hci6: command tx timeout [ 214.260176][ T8741] veth0_to_bridge: entered promiscuous mode [ 214.272917][ T8741] macvtap0: entered allmulticast mode [ 214.272938][ T8741] veth0_to_bridge: entered allmulticast mode [ 215.697499][ T4949] Bluetooth: hci6: command tx timeout [ 215.837129][ T8741] veth0_to_bridge: left allmulticast mode [ 215.837488][ T8741] veth0_to_bridge: left promiscuous mode [ 216.919819][ T8757] netlink: 44 bytes leftover after parsing attributes in process `syz.2.635'. [ 217.756446][ T8755] bond0 (unregistering): Released all slaves [ 219.083741][ T8625] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.091578][ T8625] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.091923][ T8625] bridge_slave_0: entered allmulticast mode [ 219.159753][ T8625] bridge_slave_0: entered promiscuous mode [ 219.210810][ T8625] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.213613][ T8625] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.213966][ T8625] bridge_slave_1: entered allmulticast mode [ 219.259276][ T8625] bridge_slave_1: entered promiscuous mode [ 219.633291][ T8625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.682637][ T8625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.017472][ T8625] team0: Port device team_slave_0 added [ 220.035384][ T8625] team0: Port device team_slave_1 added [ 220.177231][ T8806] ip_tables: iptables: counters copy to user failed while replacing table [ 220.266567][ T8625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.266586][ T8625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.267324][ T8625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.532246][ T8625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.532263][ T8625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.532286][ T8625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.881557][ T8625] hsr_slave_0: entered promiscuous mode [ 220.896626][ T8625] hsr_slave_1: entered promiscuous mode [ 220.901214][ T8625] debugfs: 'hsr0' already exists in 'hsr' [ 220.901244][ T8625] Cannot create hsr debugfs directory [ 221.933709][ T8841] netlink: 36 bytes leftover after parsing attributes in process `syz.1.651'. [ 222.061219][ T8843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.651'. [ 222.364594][ T8846] netlink: 104 bytes leftover after parsing attributes in process `syz.5.652'. [ 222.490520][ T30] audit: type=1804 audit(1792884504.132:3): pid=8848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.653" name="/newroot/153/cgroup.controllers" dev="tmpfs" ino=801 res=1 errno=0 [ 222.549462][ T30] audit: type=1800 audit(1792884504.142:4): pid=8848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.653" name="cgroup.controllers" dev="tmpfs" ino=801 res=0 errno=-22 [ 223.334932][ T8854] netlink: 24 bytes leftover after parsing attributes in process `syz.1.655'. [ 223.500750][ T8862] netlink: 24 bytes leftover after parsing attributes in process `syz.1.655'. [ 223.502088][ T8625] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 223.570096][ T8625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 223.587590][ T8625] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 223.616768][ C1] af_packet: tpacket_rcv: packet too big, clamped from 70 to 4294967286. macoff=82 [ 223.638391][ T8625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 224.290099][ T8625] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 224.321457][ T8625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 224.650492][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'. [ 224.651852][ T8625] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 224.746640][ T8625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 225.544077][ T8625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.644269][ T8625] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.771008][ T6797] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.771117][ T6797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.788170][ T6797] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.788272][ T6797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.895646][ T8901] netlink: 4496 bytes leftover after parsing attributes in process `syz.1.665'. [ 226.058056][ T8902] netlink: 'syz.2.664': attribute type 1 has an invalid length. [ 226.265364][ T8902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.466557][ T8910] bond0: (slave geneve2): making interface the new active one [ 226.488647][ T8910] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 226.696368][ T8922] netlink: 64 bytes leftover after parsing attributes in process `syz.1.670'. [ 227.897135][ T8933] Bluetooth: hci0: invalid len left 17, exp >= 193 [ 229.230838][ T8931] netlink: 'syz.1.673': attribute type 14 has an invalid length. [ 230.132399][ T8945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.675'. [ 231.090839][ T8951] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 231.150429][ T8962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.681'. [ 232.335867][ T8978] batman_adv: batadv0: Adding interface: veth0 [ 232.335884][ T8978] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.358285][ T8978] batman_adv: batadv0: Interface activated: veth0 [ 233.216406][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 233.583647][ T8990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.686'. [ 233.939270][ T8625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.432348][ T9000] syzkaller1: entered promiscuous mode [ 234.432535][ T9000] syzkaller1: entered allmulticast mode [ 235.446678][ T9015] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 235.460091][ T9015] bridge_slave_0: left allmulticast mode [ 235.461123][ T9015] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.613741][ T9015] bridge_slave_1: left allmulticast mode [ 235.627583][ T9015] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.941449][ T9015] .`: (slave bond_slave_0): Releasing backup interface [ 236.017655][ T9015] .`: (slave bond_slave_1): Releasing backup interface [ 236.069338][ T9015] team0: Port device team_slave_0 removed [ 236.094526][ T9015] team0: Port device team_slave_1 removed [ 236.104112][ T9015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.125795][ T9015] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 236.155956][ T9018] team0: Device xfrm0 is of different type [ 236.326379][ T9019] tipc: Enabled bearer , priority 0 [ 236.653252][ T8625] veth0_vlan: entered promiscuous mode [ 236.784806][ T8625] veth1_vlan: entered promiscuous mode [ 237.112061][ T8625] veth0_macvtap: entered promiscuous mode [ 237.138977][ T8625] veth1_macvtap: entered promiscuous mode [ 237.363923][ T8625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.762456][ T8625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.147015][ T6774] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.148615][ T6774] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.150023][ T6774] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.151484][ T6774] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.646758][ T9056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.699'. [ 239.589811][ T6774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.589833][ T6774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.956469][ T6796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.956492][ T6796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.163459][ T9080] netlink: 60 bytes leftover after parsing attributes in process `syz.2.703'. [ 241.164414][ T9081] netlink: 60 bytes leftover after parsing attributes in process `syz.2.703'. [ 242.665008][ T9111] ip_tables: iptables: counters copy to user failed while replacing table [ 242.713932][ T9111] netlink: 20 bytes leftover after parsing attributes in process `syz.6.609'. [ 244.808368][ T9133] ksmbd: Unknown IPC event: 8, ignore. [ 246.495286][ T5634] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 246.511258][ T5634] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 246.512453][ T5634] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 246.514396][ T5634] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 246.515853][ T5634] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 247.960613][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.722'. [ 248.351433][ T9197] netlink: 12 bytes leftover after parsing attributes in process `syz.6.721'. [ 248.414899][ T9197] netlink: 32 bytes leftover after parsing attributes in process `syz.6.721'. [ 248.577089][ T4949] Bluetooth: hci7: command tx timeout [ 248.960070][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.724'. [ 250.012629][ T9209] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 250.412458][ T30] audit: type=1800 audit(1792884532.052:5): pid=9219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.727" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=-4 [ 250.491366][ T9157] rxe_eth0 speed is unknown, defaulting to 1000 [ 250.493921][ T9219] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 250.493961][ T9219] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 250.493979][ T9219] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 250.657056][ T4949] Bluetooth: hci7: command tx timeout [ 252.733629][ T9219] syz.6.727 (9219) used greatest stack depth: 18280 bytes left [ 252.743650][ T4949] Bluetooth: hci7: command tx timeout [ 254.823784][ T4949] Bluetooth: hci7: command tx timeout [ 255.658361][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.658582][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.506983][ T9253] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 256.769095][ T9256] netlink: 24 bytes leftover after parsing attributes in process `syz.2.735'. [ 257.163390][ T9260] netlink: 'syz.6.736': attribute type 322 has an invalid length. [ 257.645897][ T9265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.737'. [ 259.441037][ T9287] xt_hashlimit: size too large, truncated to 1048576 [ 259.709989][ T9157] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.710432][ T9157] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.710765][ T9157] bridge_slave_0: entered allmulticast mode [ 259.716836][ T9294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.740'. [ 259.760616][ T9157] bridge_slave_0: entered promiscuous mode [ 260.219290][ T9157] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.219749][ T9157] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.220071][ T9157] bridge_slave_1: entered allmulticast mode [ 260.308609][ T9157] bridge_slave_1: entered promiscuous mode [ 260.680816][ T9157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.718349][ T9157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.371562][ T6791] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.737274][ T9309] netlink: 64 bytes leftover after parsing attributes in process `syz.6.742'. [ 261.963180][ T9157] team0: Port device team_slave_0 added [ 262.261731][ T6791] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.293514][ T9312] x_tables: duplicate underflow at hook 2 [ 262.299018][ T9157] team0: Port device team_slave_1 added [ 262.476573][ T9319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.608214][ T9319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.042776][ T9322] netlink: 20 bytes leftover after parsing attributes in process `syz.1.747'. [ 263.577980][ T6791] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.633266][ T9157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.633284][ T9157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.633307][ T9157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.860005][ T9157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.860023][ T9157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.860048][ T9157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.524944][ T6791] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.905903][ T9157] hsr_slave_0: entered promiscuous mode [ 264.915752][ T9157] hsr_slave_1: entered promiscuous mode [ 264.922421][ T9157] debugfs: 'hsr0' already exists in 'hsr' [ 264.922443][ T9157] Cannot create hsr debugfs directory [ 265.094126][ T9349] Bluetooth: hci0: invalid len left 17, exp >= 193 [ 265.503007][ T9350] syzkaller0: entered promiscuous mode [ 265.979295][ T9357] netlink: 28 bytes leftover after parsing attributes in process `syz.2.756'. [ 266.395800][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.6.755'. [ 267.749570][ T6791] bridge_slave_1: left allmulticast mode [ 267.749998][ T6791] bridge_slave_1: left promiscuous mode [ 267.751396][ T6791] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.850324][ T6791] bridge_slave_0: left allmulticast mode [ 267.850705][ T6791] bridge_slave_0: left promiscuous mode [ 267.865033][ T6791] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.927163][ T9387] netlink: 32 bytes leftover after parsing attributes in process `syz.2.762'. [ 268.029557][ T9393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.763'. [ 268.029592][ T9393] netlink: 'syz.1.763': attribute type 10 has an invalid length. [ 268.029607][ T9393] netlink: 'syz.1.763': attribute type 5 has an invalid length. [ 268.029618][ T9393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.763'. [ 268.283574][ T9397] Bluetooth: hci0: invalid len left 17, exp >= 193 [ 270.830858][ T6791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.969176][ T6791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.046726][ T6791] bond0 (unregistering): Released all slaves [ 271.164907][ T9393] geneve3: entered promiscuous mode [ 271.165097][ T9393] geneve3: entered allmulticast mode [ 271.252814][ T6782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 41201 - 0 [ 271.615337][ T6798] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 41201 - 0 [ 271.615383][ T6798] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 41201 - 0 [ 271.647241][ T6779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 41201 - 0 [ 273.248837][ T9423] block nbd1: server does not support multiple connections per device. [ 273.249403][ T9423] block nbd1: shutting down sockets [ 274.940628][ T9427] ip6gre1: entered promiscuous mode [ 275.949283][ T9157] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 276.126889][ T9157] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 276.142331][ T9157] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 276.423252][ T9157] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 276.472636][ T9157] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 276.561744][ T9157] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 276.590825][ T9157] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 276.678903][ T9451] Bluetooth: hci0: invalid len left 17, exp >= 193 [ 276.893364][ T9157] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 278.895646][ T9486] netlink: 16 bytes leftover after parsing attributes in process `syz.6.781'. [ 279.028184][ T6800] IPVS: starting estimator thread 0... [ 279.118941][ T9498] IPVS: using max 28 ests per chain, 67200 per kthread [ 279.139943][ T9499] netlink: 'syz.1.778': attribute type 1 has an invalid length. [ 279.825543][ T9496] syz.4.780 (9496) used greatest stack depth: 18056 bytes left [ 280.045339][ T9478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.314915][ T6791] hsr_slave_0: left promiscuous mode [ 281.414798][ T6791] hsr_slave_1: left promiscuous mode [ 281.417303][ T6791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.417510][ T6791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.442035][ T6791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.442228][ T6791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.870534][ T6791] veth1_macvtap: left promiscuous mode [ 281.871169][ T6791] veth0_macvtap: left promiscuous mode [ 283.296316][ T5634] Bluetooth: hci4: command 0x0405 tx timeout [ 283.494994][ T9515] netlink: 'syz.6.783': attribute type 10 has an invalid length. [ 286.278387][ T6791] team0 (unregistering): Port device team_slave_1 removed [ 286.548502][ T6791] team0 (unregistering): Port device team_slave_0 removed [ 288.957788][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 289.124495][ T9515] team0: Port device dummy0 added [ 289.438375][ T9157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.558451][ T9157] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.668608][ T6798] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.668719][ T6798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.712079][ T6798] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.712189][ T6798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.200854][ T9535] Bluetooth: hci0: invalid len left 17, exp >= 193 [ 291.724497][ T9542] netlink: 100 bytes leftover after parsing attributes in process `syz.6.791'. [ 293.026081][ T9565] syzkaller0: mtu less than device minimum [ 293.078181][ T9568] netlink: 36 bytes leftover after parsing attributes in process `syz.6.797'. [ 293.795302][ T9584] xt_TCPMSS: Only works on TCP SYN packets [ 294.057689][ T9583] netlink: 'syz.2.799': attribute type 1 has an invalid length. [ 294.163297][ T9583] 8021q: adding VLAN 0 to HW filter on device bond1 [ 295.554606][ T9615] netlink: 'syz.2.804': attribute type 10 has an invalid length. [ 295.782367][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 295.796793][ T9157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.979073][ T9584] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 296.003437][ T9584] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 297.371369][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.809'. [ 297.466488][ T9638] bridge_slave_1: left allmulticast mode [ 297.466849][ T9638] bridge_slave_1: left promiscuous mode [ 297.467752][ T9638] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.767504][ T9638] bridge_slave_0: left allmulticast mode [ 297.767872][ T9638] bridge_slave_0: left promiscuous mode [ 297.775628][ T9638] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.388087][ T9661] netlink: 20 bytes leftover after parsing attributes in process `syz.6.811'. [ 298.697171][ T9663] netlink: 12 bytes leftover after parsing attributes in process `syz.6.811'. [ 298.748226][ T9661] netlink: 20 bytes leftover after parsing attributes in process `syz.6.811'. [ 298.807619][ T9661] netlink: 20 bytes leftover after parsing attributes in process `syz.6.811'. [ 298.926904][ T9661] netlink: 20 bytes leftover after parsing attributes in process `syz.6.811'. [ 299.008312][ T9661] netlink: 20 bytes leftover after parsing attributes in process `syz.6.811'. [ 299.009680][ T9661] netlink: 20 bytes leftover after parsing attributes in process `syz.6.811'. [ 299.010968][ T9661] netlink: 20 bytes leftover after parsing attributes in process `syz.6.811'. [ 299.120230][ T9661] netlink: 20 bytes leftover after parsing attributes in process `syz.6.811'. [ 299.512684][ T9677] ip_tables: iptables: counters copy to user failed while replacing table [ 300.596430][ T9157] veth0_vlan: entered promiscuous mode [ 301.259732][ T9157] veth1_vlan: entered promiscuous mode [ 301.673773][ T9157] veth0_macvtap: entered promiscuous mode [ 301.764506][ T9157] veth1_macvtap: entered promiscuous mode [ 301.935363][ T9157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.156305][ T5294] 8021q: adding VLAN 0 to HW filter on device eth3 [ 302.186943][ T9157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.587426][ T6800] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.798179][ T6800] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.950548][ T6791] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.985364][ T6798] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.666875][ T9721] netlink: 'syz.6.818': attribute type 10 has an invalid length. [ 303.779875][ T9721] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.780530][ T9721] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.987439][ T9721] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.987570][ T9721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.987884][ T9721] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.988014][ T9721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.089501][ T9721] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 305.243246][ T6765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.243269][ T6765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.399433][ T9746] __nla_validate_parse: 15 callbacks suppressed [ 305.399454][ T9746] netlink: 68 bytes leftover after parsing attributes in process `syz.6.821'. [ 305.399491][ T9746] netlink: 16 bytes leftover after parsing attributes in process `syz.6.821'. [ 305.399689][ T9746] netlink: 8 bytes leftover after parsing attributes in process `syz.6.821'. [ 305.872223][ T9739] netlink: 12 bytes leftover after parsing attributes in process `syz.6.821'. [ 305.935363][ T6768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.935383][ T6768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.816673][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 307.339446][ T5634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 307.342235][ T5634] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 307.345411][ T5634] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 307.362089][ T5634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 307.377577][ T5634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 307.551408][ T9768] bond2: option mode: invalid value (7) [ 307.618203][ T9768] bond2 (unregistering): Released all slaves [ 308.390344][ T9788] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.830'. [ 309.456892][ T4949] Bluetooth: hci5: command tx timeout [ 310.094865][ T9804] veth2: entered allmulticast mode [ 310.384648][ T5294] 8021q: adding VLAN 0 to HW filter on device eth4 [ 311.054525][ T6774] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.156361][ T9810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.835'. [ 311.536297][ T4949] Bluetooth: hci5: command tx timeout [ 311.669962][ T6774] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.237989][ T9840] netlink: 20 bytes leftover after parsing attributes in process `syz.6.840'. [ 312.485734][ T6774] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.616134][ T4949] Bluetooth: hci5: command tx timeout [ 313.710365][ T9840] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.710587][ T9840] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.696188][ T4949] Bluetooth: hci5: command tx timeout [ 316.384365][ T9840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.630532][ T9840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.663171][ T9887] Bluetooth: hci0: invalid len left 17, exp >= 193 [ 317.061207][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.061419][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.126256][ T6791] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.152773][ T9777] rxe_eth0 speed is unknown, defaulting to 1000 [ 319.179988][ T9845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.842'. [ 319.180030][ T9845] netlink: 44 bytes leftover after parsing attributes in process `syz.4.842'. [ 319.180898][ T6791] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.186352][ T6775] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.186398][ T6775] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.385999][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.850'. [ 319.390335][ T9890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.850'. [ 319.390356][ T9890] netlink: 24 bytes leftover after parsing attributes in process `syz.1.850'. [ 320.169816][ T9903] ip_tables: iptables: counters copy to user failed while replacing table [ 320.187624][ T9906] ip_tables: iptables: counters copy to user failed while replacing table [ 320.189039][ T6774] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.649775][ T9909] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 320.781931][ T9909] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 322.189881][ T9914] ip_tables: iptables: counters copy to user failed while replacing table [ 324.024569][ T9926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.856'. [ 325.000292][ T9939] Bluetooth: hci0: invalid len left 17, exp >= 193 [ 325.628514][ T6774] bridge_slave_1: left allmulticast mode [ 325.628883][ T6774] bridge_slave_1: left promiscuous mode [ 325.632239][ T6774] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.633742][ T9943] netlink: 32 bytes leftover after parsing attributes in process `syz.6.861'. [ 325.718938][ T6774] bridge_slave_0: left allmulticast mode [ 325.719325][ T6774] bridge_slave_0: left promiscuous mode [ 325.732110][ T6774] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.883951][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.863'. [ 326.600098][ T9958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.851537][ T9970] netlink: 8 bytes leftover after parsing attributes in process `syz.6.866'. [ 329.632641][ T6774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.767878][ T6774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.840002][ T6774] bond0 (unregistering): Released all slaves [ 331.241767][T10004] Bluetooth: hci0: invalid len left 17, exp >= 193 [ 331.520360][T10007] ip_tables: iptables: counters copy to user failed while replacing table [ 331.887404][T10015] netlink: 16 bytes leftover after parsing attributes in process `syz.2.873'. [ 331.892661][ T5294] 8021q: adding VLAN 0 to HW filter on device eth5 [ 332.365072][T10007] bond3: (slave veth0_to_bond): Releasing backup interface [ 332.801279][T10007] bond0: (slave bond_slave_0): Releasing backup interface [ 333.054627][T10007] bond0: (slave bond_slave_1): Releasing backup interface [ 333.239031][T10007] team0: Port device team_slave_0 removed [ 333.341918][T10007] team0: Port device team_slave_1 removed [ 333.357985][T10007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.358184][T10007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.405358][T10007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.405550][T10007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.611803][T10007] bond2: (slave gretap1): Releasing active interface [ 333.862773][T10007] batman_adv: batadv0: Interface deactivated: vlan2 [ 333.862966][T10007] batman_adv: batadv0: Removing interface: vlan2 [ 333.992059][T10015] rxe_eth0 speed is unknown, defaulting to 1000 [ 334.212041][T10045] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 334.357355][T10050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.879'. [ 334.497385][T10050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.408014][T10068] Bluetooth: hci0: invalid len left 17, exp >= 193 [ 336.162989][ T9777] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.163455][ T9777] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.183859][ T9777] bridge_slave_0: entered allmulticast mode [ 336.223757][ T9777] bridge_slave_0: entered promiscuous mode [ 336.375733][ T9777] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.386277][ T9777] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.386620][ T9777] bridge_slave_1: entered allmulticast mode [ 336.424757][ T9777] bridge_slave_1: entered promiscuous mode [ 336.620792][ T6774] hsr_slave_0: left promiscuous mode [ 336.632120][ T6774] hsr_slave_1: left promiscuous mode [ 336.634215][ T6774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.634424][ T6774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.664246][ T6774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.664438][ T6774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.790426][ T6774] veth1_macvtap: left promiscuous mode [ 336.790973][ T6774] veth0_macvtap: left promiscuous mode [ 336.792043][ T6774] veth1_vlan: left promiscuous mode [ 336.802772][ T6774] veth0_vlan: left promiscuous mode [ 337.321399][T10086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.886'. [ 337.912084][T10093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.886'. [ 342.135416][T10115] netlink: 'syz.1.891': attribute type 1 has an invalid length. [ 342.227671][T10116] netlink: 'syz.1.891': attribute type 16 has an invalid length. [ 342.227695][T10116] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.891'. [ 342.233981][T10116] netlink: 44 bytes leftover after parsing attributes in process `syz.1.891'. [ 343.092722][ T6774] team0 (unregistering): Port device team_slave_1 removed [ 343.348215][ T6774] team0 (unregistering): Port device team_slave_0 removed [ 344.312287][T10123] netlink: 'syz.6.892': attribute type 2 has an invalid length. [ 344.720457][T10126] netlink: 'syz.6.892': attribute type 2 has an invalid length. [ 346.168734][T10086] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 346.171933][T10093] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 346.408478][T10134] Bluetooth: hci0: invalid len left 17, exp >= 193 [ 347.915663][ T5294] 8021q: adding VLAN 0 to HW filter on device eth6 [ 347.945876][T10115] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 348.479014][ T9777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.557426][ T9777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.764015][T10147] netlink: 132 bytes leftover after parsing attributes in process `syz.4.897'. [ 348.849309][ T9777] team0: Port device team_slave_0 added [ 348.871098][ T9777] team0: Port device team_slave_1 added [ 348.981368][ T9777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.981386][ T9777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.981410][ T9777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.056019][ T9777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.056036][ T9777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.056059][ T9777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.400000][ T9777] hsr_slave_0: entered promiscuous mode [ 350.434043][ T9777] hsr_slave_1: entered promiscuous mode [ 350.815981][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.900'. [ 350.972598][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.900'. [ 350.985556][ T32] INFO: task syz.0.573:8430 blocked for more than 143 seconds. [ 350.985586][ T32] Not tainted syzkaller #0 [ 350.985596][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 350.985621][ T32] task:syz.0.573 state:D stack:27104 pid:8430 tgid:8429 ppid:5627 task_flags:0x400140 flags:0x00080002 [ 350.985986][ T32] Call Trace: [ 350.985994][ T32] [ 350.986007][ T32] __schedule+0x17dd/0x5820 [ 350.986076][ T32] ? __pfx___schedule+0x10/0x10 [ 350.986108][ T32] ? schedule+0x90/0x2b0 [ 350.986138][ T32] schedule+0x164/0x2b0 [ 350.986172][ T32] schedule_preempt_disabled+0x13/0x30 [ 350.986197][ T32] __mutex_lock+0x7c4/0x15a0 [ 350.986221][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 350.986243][ T32] ? nfsd_nl_unlock_filesystem_doit+0x2af/0x410 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 350.986276][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 350.986293][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 350.986332][ T32] nfsd_nl_unlock_filesystem_doit+0x2af/0x410 [ 350.986354][ T32] ? __nla_parse+0x40/0x60 [ 350.986381][ T32] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 351.011362][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 351.011391][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 351.011420][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 351.011466][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 351.011516][ T32] ? bpf_lsm_capable+0x9/0x20 [ 351.011537][ T32] ? security_capable+0x7e/0x2c0 [ 351.011568][ T32] genl_rcv_msg+0x614/0x7a0 [ 351.011603][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 351.011631][ T32] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 351.011660][ T32] ? __asan_memcpy+0x40/0x70 [ 351.011691][ T32] netlink_rcv_skb+0x226/0x4a0 [ 351.011717][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 351.011747][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 351.011788][ T32] ? down_read+0x2b9/0x320 [ 351.011814][ T32] genl_rcv+0x28/0x40 [ 351.011839][ T32] netlink_unicast+0x8ef/0xa80 [ 351.011880][ T32] netlink_sendmsg+0x7f0/0xb20 [ 351.011911][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.011939][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 351.011969][ T32] ? apparmor_socket_sendmsg+0x18b/0x360 [ 351.011992][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.124004][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 351.124041][ T32] ____sys_sendmsg+0x54e/0x850 [ 351.124075][ T32] ? __pfx_____sys_sendmsg+ ** replaying previous printk message ** [ 351.124075][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 351.124113][ T32] ? import_iovec+0x73/0xa0 [ 351.124142][ T32] ___sys_sendmsg+0x2a5/0x360 [ 351.124168][ T32] ? __lock_acquire+0x747/0x2de0 [ 351.124194][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.124225][ T32] ? futex_wait+0x2a2/0x390 [ 351.124277][ T32] ? __fget_files+0x3a2/0x420 [ 351.124296][ T32] ? __fget_files+0x2a/0x420 [ 351.124327][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 351.124347][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 351.124397][ T32] do_syscall_64+0x166/0x520 [ 351.124416][ T32] ? trace_irq_disable+0x3b/0x140 [ 351.124436][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.124454][ T32] ? clear_bhb_loop+0x70/0xc0 [ 351.124475][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.124489][ T32] RIP: 0033:0x7fe47079f559 [ 351.124506][ T32] RSP: 002b:00007fe4715f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.124526][ T32] RAX: ffffffffffffffda RBX: 00007fe470a25fa0 RCX: 00007fe47079f559 [ 351.124540][ T32] RDX: 0000000020000040 RSI: 0000200000000040 RDI: 0000000000000003 [ 351.124551][ T32] RBP: 00007fe470836b20 R08: 0000000000000000 R09: 0000000000000000 [ 351.124563][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.124573][ T32] R13: 00007fe470a26038 R14: 00007fe470a25fa0 R15: 00007ffc5dc16dd8 [ 351.124606][ T32] [ 351.124661][ T32] [ 351.124661][ T32] Showing all locks held in the system: [ 351.124673][ T32] locks held by pr/ttyS0/31: 2, last CPU#1: [ 351.124686][ T32] #0: ffffffff8fc33858 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 351.124741][ T32] #1: ffffffff9bda1af8 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 351.124789][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 351.124802][ T32] #0: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 351.124856][ T32] locks held by kworker/1:3/1242: 2, last CPU#1: [ 351.124868][ T32] #0: ffff88801c069d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 351.124918][ T32] #1: ffffc90005407c40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 351.124987][ T32] locks held by getty/5384: 2, on CPU#0: [ 351.124999][ T32] #0: ffff88803732e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 351.125046][ T32] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 351.125089][ T32] locks held by syz-executor/5615: 2, last CPU#0: [ 351.125102][ T32] #0: ffff888035ec5900 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 351.125146][ T32] #1: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 351.125200][ T32] locks held by kworker/u8:11/6761: 3, last CPU#0: [ 351.125213][ T32] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 351.125260][ T32] #1: ffffc900036efc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 351.125310][ T32] #2: ffff8880273a7258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 351.125365][ T32] locks held by kworker/u8:14/6765: 2, last CPU#0: [ 351.125378][ T32] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 351.125426][ T32] #1: ffffc900036afc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 351.125473][ T32] locks held by kworker/u8:15/6768: 2, last CPU#0: [ 351.125486][ T32] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 351.125533][ T32] #1: ffffc9000368fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 351.125583][ T32] locks held by kworker/u8:35/6797: 2, last CPU#0: [ 351.125596][ T32] #0: ffff888033b42948 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 351.241228][ T32] #1: ffffc90006ad7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 351.241280][ T32] locks held by kworker/u8:38/6800: 3, last CPU#0: [ 351.241294][ T32] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 351.241342][ T32] #1: ffffc90006b07c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 351.241392][ T32] #2: ffff88807c782258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 351.241450][ T32] locks held by syz.3.472/7938: 2, on CPU#0: [ 351.241462][ T32] #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 351.241512][ T32] #1: ffffffff9009e720 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 351.241557][ T32] locks held by syz.0.573/8430: 2, on CPU#0: [ 351.241570][ T32] #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 351.241622][ T32] #1: ffffffff9009e720 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_filesystem_doit+0x2af/0x410 [ 351.241670][ T32] locks held by syz-executor/9777: 2, last CPU#0: [ 351.241683][ T32] #0: ffffffff917df128 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 351.241729][ T32] #1: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 351.241809][ T32] locks held by syz.1.899/10156: 2, last CPU#1: [ 351.241822][ T32] #0: ffff888076fcd880 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 351.241871][ T32] #1: ffffffff912d9148 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 351.241916][ T32] locks held by syz.4.900/10157: 2, last CPU#0: [ 351.241928][ T32] #0: ffff888068d38800 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 351.241985][ T32] #1: ffffffff912d9148 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 351.242028][ T32] locks held by syz.6.901/10159: 2, on CPU#0: [ 351.242041][ T32] #0: ffff888076e38800 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 351.242089][ T32] #1: ffffffff8fd60328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2cb/0x760 [ 351.242141][ T32] locks held by dhcpcd-run-hook/10171: 1, last CPU#0: [ 351.242154][ T32] #0: ffffffff904f5a78 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 351.242201][ T32] [ 351.242206][ T32] ============================================= [ 351.242206][ T32] [ 351.242236][ T32] NMI backtrace for cpu 0 [ 351.242250][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 351.242270][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 351.242281][ T32] Call Trace: [ 351.242288][ T32] [ 351.242296][ T32] dump_stack_lvl+0xe8/0x150 [ 351.242323][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 351.242348][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 351.242370][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 351.242398][ T32] sys_info+0x135/0x170 [ 351.242419][ T32] watchdog+0xfd2/0x1030 [ 351.242448][ T32] ? watchdog+0x1c7/0x1030 [ 351.242475][ T32] kthread+0x38b/0x480 [ 351.242493][ T32] ? __pfx_watchdog+0x10/0x10 [ 351.242512][ T32] ? __pfx_kthread+0x10/0x10 [ 351.242530][ T32] ret_from_fork+0x514/0xb70 [ 351.242552][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 351.242571][ T32] ? __switch_to+0xc78/0x1410 [ 351.242599][ T32] ? __pfx_kthread+0x10/0x10 [ 351.242618][ T32] ret_from_fork_asm+0x1a/0x30 [ 351.242651][ T32] [ 351.242659][ T32] Sending NMI from CPU 0 to CPUs 1: [ 351.242698][ C1] NMI backtrace for cpu 1 [ 351.242711][ C1] CPU: 1 UID: 0 PID: 31 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 351.242732][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 351.242744][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 351.242765][ C1] Code: e8 1e 1c 50 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 af 13 c1 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 351.242780][ C1] RSP: 0018:ffffc90000a778b8 EFLAGS: 00000002 [ 351.242797][ C1] RAX: 1ffffffff37b4300 RBX: 00000000000003fd RCX: 0000000000000000 [ 351.242810][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 351.242822][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 351.242835][ C1] R10: dffffc0000000000 R11: ffffffff857849b0 R12: dffffc0000000000 [ 351.242850][ C1] R13: 0000000000000000 R14: ffffffff9bda1b20 R15: 0000000000000000 [ 351.242862][ C1] FS: 0000000000000000(0000) GS:ffff888123b6b000(0000) knlGS:0000000000000000 [ 351.242879][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 351.242892][ C1] CR2: 00007f5e1ce27dac CR3: 0000000064086000 CR4: 00000000003526f0 [ 351.242909][ C1] Call Trace: [ 351.242916][ C1] [ 351.242924][ C1] wait_for_lsr+0x184/0x2f0 [ 351.242955][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 351.242984][ C1] serial8250_console_write+0xa7e/0x1200 [ 351.243013][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 351.243037][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 351.243065][ C1] ? __schedule+0x17f3/0x5820 [ 351.243102][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 351.243133][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 351.243160][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 351.243192][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 351.243221][ C1] nbcon_kthread_func+0x6d9/0x8d0 [ 351.243246][ C1] ? nbcon_kthread_func+0x163/0x8d0 [ 351.243267][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 351.243293][ C1] ? __kthread_parkme+0x71/0x1f0 [ 351.243321][ C1] ? __kthread_parkme+0x199/0x1f0 [ 351.243351][ C1] kthread+0x38b/0x480 [ 351.243369][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 351.243390][ C1] ? __pfx_kthread+0x10/0x10 [ 351.243409][ C1] ret_from_fork+0x514/0xb70 [ 351.243430][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 351.243482][ C1] ? __switch_to+0xc78/0x1410 [ 351.243512][ C1] ? __pfx_kthread+0x10/0x10 [ 351.243530][ C1] ret_from_fork_asm+0x1a/0x30 [ 351.243558][ C1] [ 351.243693][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 352.232539][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 352.241653][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 352.251733][ T32] Call Trace: [ 352.255021][ T32] [ 352.257960][ T32] vpanic+0x56d/0xa60 [ 352.261962][ T32] ? __pfx_vpanic+0x10/0x10 [ 352.266475][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 352.272029][ T32] panic+0xc5/0xd0 [ 352.275768][ T32] ? __pfx_panic+0x10/0x10 [ 352.280203][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 352.285236][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 352.291399][ T32] watchdog+0x102b/0x1030 [ 352.295758][ T32] ? watchdog+0x1c7/0x1030 [ 352.300187][ T32] kthread+0x38b/0x480 [ 352.304259][ T32] ? __pfx_watchdog+0x10/0x10 [ 352.308936][ T32] ? __pfx_kthread+0x10/0x10 [ 352.313527][ T32] ret_from_fork+0x514/0xb70 [ 352.318136][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 352.323253][ T32] ? __switch_to+0xc78/0x1410 [ 352.327949][ T32] ? __pfx_kthread+0x10/0x10 [ 352.332577][ T32] ret_from_fork_asm+0x1a/0x30 [ 352.337359][ T32] [ 352.340542][ T32] Kernel Offset: disabled [ 352.344874][ T32] Rebooting in 86400 seconds..