last executing test programs: 13m6.375819622s ago: executing program 3 (id=4417): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x43, 0x4, 0x3}, 0x10) close(r0) (async) close(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000007c0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x7ff, @ipv4={'\x00', '\xff\xff', @empty}, 0x2ef}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="500000000000000029000000040000007f060000000000000730000000000a060300090000000000000001000000000000000600000000000000020000000000000007000000000000000000000000002400000000000000290000003200000000000000000000000000ffff"], 0x78}}], 0x1, 0x4) (async) sendmmsg$inet6(r1, &(0x7f00000007c0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x7ff, @ipv4={'\x00', '\xff\xff', @empty}, 0x2ef}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="500000000000000029000000040000007f060000000000000730000000000a060300090000000000000001000000000000000600000000000000020000000000000007000000000000000000000000002400000000000000290000003200000000000000000000000000ffff"], 0x78}}], 0x1, 0x4) 13m6.326309552s ago: executing program 3 (id=4420): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000010800000000fd03000000", @ANYRES32=0x0, @ANYBLOB="ed131600048a000014002b8008000100", @ANYRES32, @ANYBLOB="08000300190000001400030076657468305f766972745f7769666900"], 0x48}}, 0x400c040) syz_emit_ethernet(0x1a, &(0x7f00000004c0)={@multicast, @remote, @val={@void, {0x8100, 0x7}}, {@mpls_mc={0x8848, {[], @llc={@snap={0x0, 0xaa, "f9", '\x00', 0xf6}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x1, 0x803, 0x0) connect$bt_sco(r3, &(0x7f00000000c0), 0x8) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000180)=ANY=[@ANYBLOB="6800000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="e400050040000000340012800c0001006d6163766c616e00240002807cd2e2276e2e2a37ce1065805f077208000100100000000800030003000000100005800a000400aaaaaaaaaabb0000140035006d6163766c616e30000000bbb8315e210000000000"], 0x68}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) 13m5.347796884s ago: executing program 3 (id=4434): close(0xffffffffffffffff) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000006000000080000000800000040000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000bd00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x48) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 13m5.279888172s ago: executing program 3 (id=4436): accept(0xffffffffffffffff, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2000}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x30}}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x7d}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r4, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x60}, 0x1, 0x0, 0x0, 0x40840}, 0x1) 13m4.96367088s ago: executing program 3 (id=4441): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x1, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0xb}}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x34, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf25040117800c00"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000280)={0x0, 0x6}, &(0x7f00000002c0)=0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xe4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) syz_emit_ethernet(0x3e, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 13m4.301876987s ago: executing program 3 (id=4445): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r3, &(0x7f00000013c0)=[{&(0x7f00000014c0)=""/4075, 0xfeb}, {&(0x7f00000000c0)=""/4092, 0xffc}, {&(0x7f00000010c0)=""/242, 0xf2}], 0x3, 0x5, 0x45) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000001400)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9, 0xffffffff, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x8, 0x80000001, 0x11, 0x0, 0x0, 0x2, 0x0, {0x0, 0x3, 0x1, 0x40, 0x7}}}}]}, 0x78}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000024c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000180000000000000060eb7bc685089af863cf98b03958dacdaa65e9daa5ff8ab87550293f921f22dbeb78f84954194b4daea73d316cf7df3c9a6f31a1fb6241065598fafcb394cd0522b41d9d5d825c3dd992edf66854f407bd8521187d14b207d1b4e809c4ac8f75c057a59358bad2eadf6c09e4e776a226c2ad48c9a9fa15bb20f8ff78efbfcaeae2b91cde42ce67f3b6631d67d0554f766ffaa6bc", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000080), &(0x7f00000000c0)=r6}, 0x20) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000003fc0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00040000"], 0x8) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000011"], 0x128}, 0x24004004) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x40004240) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r11, 0x400448ca, 0x0) bind$bt_hci(r11, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r11, &(0x7f0000000440)=ANY=[@ANYRES8=r10], 0xa) r12 = syz_genetlink_get_family_id$smc(&(0x7f00000025c0), 0xffffffffffffffff) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) sendmsg$SMC_PNETID_DEL(r10, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r12, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x800) connect$inet6(r4, &(0x7f0000001380)={0xa, 0x4e22, 0x7, @private2, 0xffffffff}, 0x1c) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x5, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000011c0)={@local, @empty, @val={@val={0x88a8, 0x2, 0x1, 0x4}, {0x8100, 0x5, 0x1, 0x102}}, {@ipv4={0x800, @tcp={{0x14, 0x4, 0x2, 0x9, 0x64, 0x64, 0x0, 0x7, 0x6, 0x0, @private=0xa010100, @remote, {[@timestamp_prespec={0x44, 0x3c, 0xbd, 0x3, 0x8, [{@rand_addr=0x64010101, 0x8}, {@loopback, 0x2}, {@private=0xa010101, 0xffffffff}, {@remote, 0x2}, {@private=0xa010102, 0xc54}, {@loopback, 0x9}, {@rand_addr=0x64010101, 0xff}]}]}}, {{0x4e22, 0x4e22, r14, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x5, 0x0, 0xe7}}}}}}, 0x0) 12m51.029839673s ago: executing program 2 (id=4569): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 64) ioctl$SIOCRSGCAUSE(r4, 0x89e0, &(0x7f0000000000)) (async, rerun: 64) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffe, 0xc, 0x0, 0x3}, 0x8) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) (async) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000000), 0x4) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000021c0), r8) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000002240)={'wpan0\x00', 0x0}) (rerun: 32) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002280)={0x24, r9, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044040}, 0x4040) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r6, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r3, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) 12m50.694799918s ago: executing program 2 (id=4571): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x70bd29, 0x400000, {0x0, 0x0, 0x0, 0x0, 0x100, 0x66f31}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x2000000) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x5, 0x0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000700000006"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffbfff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x11) r5 = socket(0x2d, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f2", @ANYRES8=r6], 0xfc}}, 0x4080800) unshare(0x22020600) connect$can_bcm(r5, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002340)={0xffffffffffffffff, 0x20, &(0x7f0000002300)={&(0x7f0000000200)=""/84, 0x54, 0x0, &(0x7f0000001300)=""/4096, 0x1000}}, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa100012}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6e2fbdb62754456e}, 0x4000010) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000020101080000003930a58f10cbe7790a0c0019800800028014"], 0x38}, 0x1, 0x0, 0x0, 0x4000191}, 0x48080) 12m50.2260639s ago: executing program 2 (id=4573): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000003000000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000000)) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000006000020410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="054000000400"/21], 0x50) r1 = socket(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa2ac0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000240)=0x4) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r1, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x4, 0x1, 0x1, {0xa, 0x4e22, 0xf, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff8}}}, 0x32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x4) r3 = socket$kcm(0x10, 0x400000002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write(r1, &(0x7f0000000480)="c513ff000999000000000000000097f02680c531027b838f8861f94aa50aaf7b6f1779596fd6e65c31250eab68fc919802485d96e822ef1670217d3d4ab3184f9e5b8a5351625980cf25d397", 0x4c) recvmmsg(r1, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1d) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a03000000000000000000010000000900030073797a32000000000900010073797a30000000004c000000060a01040000000000000000010000052400048020000180080001006e617400140002800800054000000017080001400000000408000b40000000000900010073797a30"], 0xc0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@gettaction={0x0, 0x32, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@action_dump_flags, @action_gd=@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x4}}, {0x0, 0x30, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'csum\x00'}}, {0x0, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'skbedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x0, 0x4, 0x7a2}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x0, 0x4, 0x1000}]}, 0x38c8}, 0x1, 0x0, 0x0, 0x4008001}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000faffffff0000000001000000850000000e0000008500007d000000950000e1225ef8000004aba80351ccda75d2e7b0a056b3675e08c30fc2d3074895a3272ffb80e06f38a8b9daa39ac1f799d2d5e480e2aacf527b2f7bebdaa2a326bf88d1d11407e74ec3e7e6d28b84bc414a65d102734dc5f6e06163b5935e0363"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000000c0)="3b7ec34f0db3f893ad29dbe7f66cb369c67bc9b55c24f7489b26d02b67a9985c049d5ed44db5f93fd278ba53d6552ec8133e46843126ab73b29c8af1b2bbcd299b8cb834f63f8ab61b5a0f641308ee03854ba7cf90bb33b79f6f8ad2f1fa765eca53c6d953b5709bf47e0378243f33e9761b796b", 0x74}, {&(0x7f00000001c0)="80854aed8a8b09eead0565d0ed825597ee15550a04adaa0c527583601e50248794f924bfaae67fed7684b684ca3d", 0x2e}, {&(0x7f0000000640)="9a110f2265799c629327153c95506f47ebd24653e2d684719912d1cdc87cec1d493185ff31b1319a5c802fca675c26f8b2fddc61b13d7aa61ed4a652efd8b9c233dc98730687151b3d87c9a85259515d1dbecd90ab33dbb33f8c97863f3cf66696266ac936fb9f6a7f2eecfe2b52b2e2a17eff931df687c49ecc0e5cc8b594e691a310283536be987326b90f0e579ebfa4c271136cf8b49b0dc37f76251febb6da5f99b1828ca831bf4de0f08ba18830f00b59b6e1f5d9ef6595fbdf4340b71d9afc93275ca71c308af1cacf44422b1b2ca00808d8ef4ef00d02e4375c9b3153c6d494034b23b29a50256d09ec", 0xed}, {&(0x7f0000000740)="867117d9b5b80504e9a07faf58f280cfa004a66161bf76cb864ecd9bcf002d34e0ebee3ed011e290d970c6b6db37e933a9210409e89ef8922bc2ac28ede1ef060be65b0d83336a9953828c88c88dffafeac774c675b00b647ba8c0de7a72461cfe211ad509168bfba3a02bb947653f90677756f38c3343d9", 0x78}, {&(0x7f00000007c0)="f90c9980c9cced08acb54623fb77758a082c70dab6ad42973651e70c8b38d94bd2abd6698c793fcceb0f2ba2720139a282c56b7b960740e8423fd3a14cf81261de4a73d4e4f6add7540559e2d7f9d38b2674bdc734a3a3a7e4a794b0a7180021b4143a7f42d3b656a28c6faf0a340f3d719fd4fe5fd3cc1093dacae9c44ed755aa10b051a1efbb53987b6f62e683c741e674a3d1f6f80bbc056341c2f4b2ef064f9cdb48", 0xa4}, {&(0x7f0000000880)="59b0650f69821efcd22dba1f25b5c9d910aee8b791d0065e274a8118fbf85f3a3a85ad22878704cbaa5af487f67dc9e1ac94656b87f8152b4d2f71746f45063144405dbf5f98d17e91c621b45fe02e0e437f4fa5791f23b9ddc009b7ac2b63adca38c911a4ddec02b86d75f8b6cafb52ec395ee7e1807ba640f16553688cb389a34973cc8e2b60de2b3baa65999d6812b2d3732446dff9cae2f4db16c99854d4d194751a86e1d88f99a01b41d96b0a60770e50a4c4", 0xb5}, {&(0x7f0000000940)="d1b77827a069b2a336c4da2f584f74275cea69a82011e5e3de8cd84a082231ed1f4cc83e93a32144e07c8b8f65f788ce4e7bc9fb662c00896cd62424a0223363b7cd87fcd3c20152c29dfa3d302889aecf499054f8e31451ddb6578240f374e8cc1670e63b5255d1e2e89d37a79ed2eb9583e6b26cc1cdf33e85a860bdd7ad71d49630bc007deee1bb614d6b70719895daa622f1441049ac93a6ffd38be6e79e1961c64fe940cc1d4c14913136528fe970b8f8f3ea554c67b7b3d7c2a3cfa0982aa54f64ffc2b0575f6f", 0xca}, {&(0x7f0000000f40)="bce9fe20ea7f24842a591ba73010abc75ec7b8f4b8cb7d89a5399b0ba659120c2c55739f3bd790eefe2852dd4dac4ad988ace7ba9128bff908c1d3359950b2cfeeb77bbc0a5cd370e4b744d49be30a871f502cdb5e09e9ad99ee9ee05cd9d8dd722f07fc99f5bf8a2c8a4f307665a9366a31abe44928ab62e3841096cc996bf46926068d7403b15a6beb6e450e1f6564bdb287fcf5762895a53337545b7c208bb9f40a46419fef57483a01b3f988abe61ea2105f22619fe476826b0902c5a35cf9b66956aae2bacbd480ec04b21adccb35cb22023db0b734f2d1f3eb4a9087ec64d65e4aa89b4a", 0xe7}], 0x8, &(0x7f0000001100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x1e}, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffc}}], 0x38}, 0xc1) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)) 12m49.249838627s ago: executing program 32 (id=4445): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r3, &(0x7f00000013c0)=[{&(0x7f00000014c0)=""/4075, 0xfeb}, {&(0x7f00000000c0)=""/4092, 0xffc}, {&(0x7f00000010c0)=""/242, 0xf2}], 0x3, 0x5, 0x45) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000001400)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9, 0xffffffff, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x8, 0x80000001, 0x11, 0x0, 0x0, 0x2, 0x0, {0x0, 0x3, 0x1, 0x40, 0x7}}}}]}, 0x78}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000024c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000180000000000000060eb7bc685089af863cf98b03958dacdaa65e9daa5ff8ab87550293f921f22dbeb78f84954194b4daea73d316cf7df3c9a6f31a1fb6241065598fafcb394cd0522b41d9d5d825c3dd992edf66854f407bd8521187d14b207d1b4e809c4ac8f75c057a59358bad2eadf6c09e4e776a226c2ad48c9a9fa15bb20f8ff78efbfcaeae2b91cde42ce67f3b6631d67d0554f766ffaa6bc", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000080), &(0x7f00000000c0)=r6}, 0x20) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000003fc0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00040000"], 0x8) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000011"], 0x128}, 0x24004004) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x40004240) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r11, 0x400448ca, 0x0) bind$bt_hci(r11, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r11, &(0x7f0000000440)=ANY=[@ANYRES8=r10], 0xa) r12 = syz_genetlink_get_family_id$smc(&(0x7f00000025c0), 0xffffffffffffffff) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) sendmsg$SMC_PNETID_DEL(r10, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r12, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x800) connect$inet6(r4, &(0x7f0000001380)={0xa, 0x4e22, 0x7, @private2, 0xffffffff}, 0x1c) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x5, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000011c0)={@local, @empty, @val={@val={0x88a8, 0x2, 0x1, 0x4}, {0x8100, 0x5, 0x1, 0x102}}, {@ipv4={0x800, @tcp={{0x14, 0x4, 0x2, 0x9, 0x64, 0x64, 0x0, 0x7, 0x6, 0x0, @private=0xa010100, @remote, {[@timestamp_prespec={0x44, 0x3c, 0xbd, 0x3, 0x8, [{@rand_addr=0x64010101, 0x8}, {@loopback, 0x2}, {@private=0xa010101, 0xffffffff}, {@remote, 0x2}, {@private=0xa010102, 0xc54}, {@loopback, 0x9}, {@rand_addr=0x64010101, 0xff}]}]}}, {{0x4e22, 0x4e22, r14, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x5, 0x0, 0xe7}}}}}}, 0x0) 12m46.275453361s ago: executing program 2 (id=4592): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x5, 0x1, 0x4, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000080)=""/35, &(0x7f00000000c0)=0x23) 12m46.100983256s ago: executing program 2 (id=4594): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f481561a648a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b010000000900010073797a31000000001c800000090a030000000000000000000a00000208000c40040000891400000011000100000000000000000001"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r5], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x8, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x145a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) splice(r0, 0x0, r2, 0x0, 0x80000025a5, 0x0) close(0x3) close(0x4) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) recvmmsg(r10, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x10042, 0x0) r11 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) close(r11) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000002c0)=0x30) 12m45.907096111s ago: executing program 2 (id=4597): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xb, &(0x7f0000000480)=ANY=[@ANYRES64], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x10, @private=0xa010101}]}, &(0x7f0000000180)=0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x4040080) (async) ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) (async) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0xfffffcc7}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x128}, 0x800) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="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", 0x21f}], 0x1, 0x0, 0x0, 0x24004844}, 0x0) close(r8) (async) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) 12m30.712878853s ago: executing program 33 (id=4597): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xb, &(0x7f0000000480)=ANY=[@ANYRES64], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x10, @private=0xa010101}]}, &(0x7f0000000180)=0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x4040080) (async) ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) (async) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0xfffffcc7}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x128}, 0x800) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="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", 0x21f}], 0x1, 0x0, 0x0, 0x24004844}, 0x0) close(r8) (async) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) 3.424834943s ago: executing program 0 (id=10251): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r1, 0x0) mmap(&(0x7f0000492000/0xf000)=nil, 0xf000, 0x1000002, 0x12, r0, 0x0) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f000092a000/0x2000)=nil, 0x2000, 0xc, 0x10, 0xffffffffffffffff, 0x0) 3.28752451s ago: executing program 0 (id=10252): socket(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @mcast1}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@gettfilter={0x64, 0x2e, 0x0, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x2, 0xffff}, {0x6, 0x3}, {0x0, 0xffff}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xc3}, {0x8, 0xb, 0x7fff}, {0x8, 0xb, 0x516}, {0x8, 0xb, 0x321}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x24040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x7, 0x7f, 0x9, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x14028010}, 0x20004000) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0xfff1, 0x8}, {0x8}, {0x4, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_emit_ethernet(0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaa04aaaaaaaa24ea9a17f50d41f0e400"/31], 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000100)={{0x1, @loopback, 0x4e20, 0x3, 'dh\x00', 0x13, 0x9, 0x6c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x2000, 0x3c8, 0xa000, 0x9}}, 0x44) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') 2.876244536s ago: executing program 1 (id=10258): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socket$kcm(0x23, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r6 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c", 0x6}], 0x1}], 0x1, 0x881) close(0x4) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000240), 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000700)=@deltaction={0xf0, 0x31, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe02}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 5) 2.694298687s ago: executing program 5 (id=10260): socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc800) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) close(0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="ada80008457fc5"], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0xf0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.248108631s ago: executing program 4 (id=10263): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="09000000180000000800000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x3, r0, 0x4}, 0xffffffffffffff80) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe880000000000000000000000000001ff01000000000000000000000000000100000000000000820000000033000000", @ANYRES32=0x0, @ANYRES16, @ANYBLOB="fe8800000000000000000000000000010000000033000000ff"], 0xf8}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) sendto$inet6(r2, 0x0, 0x0, 0x2404c804, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 2.171885365s ago: executing program 5 (id=10264): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) accept4(r0, 0x0, &(0x7f0000000000), 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x2, 0xf9, 0x1, 0x50, @remote, @loopback={0x0, 0xffff888101827518}, 0x80f, 0x20, 0x1, 0xfffffff8}}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000e40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r3}, 0xc) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000004580)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1a8, 0xffffffff, 0xffffffff, 0x1a8, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0xff, 0xffffff00, 'team0\x00', 'veth0\x00', {}, {0xff}, 0x11, 0x2, 0x8ec61fc4e1c84de4}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x5, 0xa, [0x2, 0xc, 0x3e, 0x2a, 0x24, 0x18, 0x3d, 0x38, 0xc, 0xf, 0x33, 0x2d, 0x0, 0x29, 0x3f, 0x27], 0x2, 0x2, 0x9}}}, {{@ip={@empty, @empty, 0xff000000, 0xff, 'ip6_vti0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x21, 0x2, 0x40}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x1, 0x5, 0x3, 'syz0\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001a0000072dbdf000fcdbdf2500000000fea206adec53102a804e99dfd9e2dbbbd71a6a3cd73632f28d6a868250b5e0ad62dab34a9d1e78d0aa6aa097db049ff1af9466f37d03d3e7d4c9003db2f6137e39909b8c96772cad435bb5ce828a12780ede64f5b2191ca58fa1c975e3bbefb40b729145f246bca847e6dad2c55fc0ed41eaafd0c3ef5a0267f62bced80610d88f0b8ff337227cd499ecf830d34c5adcbba921b51a758f1bdbe52f6233ec1483323211655514d61dacf77d71284768d6dfd90e79df037ec1f2"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20044000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff0000", 0x26}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000580)=ANY=[], 0xfe33) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x28) r8 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r8, 0x10f, 0x88) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000d00)={'caif0\x00', &(0x7f0000000c00)=@ethtool_gfeatures={0x3a, 0x4, [{}, {}, {}, {}]}}) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB="740000001000030427bd70000000000000000000", @ANYRES32, @ANYBLOB="adffa888ef00000008000a00", @ANYRES32=r10, @ANYBLOB="44001280090001007866726d00000000340002800800020001000000080001000200000008000200020000000800177ab6ae680c37f9020001000000080002000300000008000200", @ANYRES32=r1, @ANYBLOB], 0x74}}, 0x8000) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000000)) r12 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r9) sendmsg$SEG6_CMD_SET_TUNSRC(r9, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="000226bd7000fbdbdf25030000000800020040000000050006000f00000014000100ff02000000000000000000000000000114000100fe8000000005000000000000000000bb0800030007000000"], 0x54}, 0x1, 0x0, 0x0, 0x20044080}, 0xc041) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r13, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x9, 0x10000}}) 2.055090262s ago: executing program 6 (id=10266): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f00000034c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003480)={&(0x7f0000000100)={0x3344, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x5c}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x7e}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x3a8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x1cc, 0x4, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}]}, {0x1bc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xaf, 0x1, "1b5046fc75bab22079fc58f7e9a463b76cd55f4adcab2f10ad671c2bef983c208b4073f77af079c44b403a723ba05d132037cf69bffb1c4c6270207fc24e7a62f08c8043098070199eb327e3f29923dd69ccde3ccbcbb93747f4ed0a5a410a12513cb13d0e37b8e026ea6df9149b4480addc105c632c72244ead356301666756d6cf9425ac2a02df3bb0266b97028e80c6d086b2bb49926ca6d5f86ee7bd351aae276ac717b91be9f8da4c"}, @NL80211_PKTPAT_MASK={0xb2, 0x1, "7383e8d6cea802015e05ec150f633d468f4091cbf502f57ca7f140ee5c32fb9ad54221893bfeebcb25289bb040945997cae09019fe96c735aa4a56b5e18c78e33a58dc593392922ea4f3da228d3059db85047b832351a45530c71c6852517963d7ce5444d81c08100a2b0c5c9cf76ef48f187cd6b95afd05686b6b36bb481bc0c924e1f7bb597be8bfedf64595da20fa5626388ac2d06af83ac2de2fd3bef588d9eac8b332ad66ff5201b52b5355"}, @NL80211_PKTPAT_PATTERN={0x51, 0x2, "6af418f031b328c4050c78ac8d1b3122d237f3ccf9bd70f54e978d2ad1773915e0df19fff60262c80dd7bb419cb94b7c9d4695364818d3da53ce45eca75014bc450634dddc4b15489bd6f83298"}]}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x1c4, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x9}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x2}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x5, 0x8}}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x198, 0x84, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x21, 0x1, @random="15fc693fc0689ffd6021cd03e86c9658b2a926fa4a90e33baf259415db"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}]}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x2d}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x2}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x2}, @NL80211_BAND_LC={0x8, 0x5, 0x10}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4}, @NL80211_BAND_LC={0x8, 0x5, 0x2}]}]}, {0x90, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x21, 0x1, @random="1bdf757c4d29cae6a55753ae2734e4d5490ff62a48cb074eb8ae900e79"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x52}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x10000}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xe}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xffffff01}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8001}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xa6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x6}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x68ad}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xd7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xd17}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfffffffb}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}]}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x2f60, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x470, 0x4, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0x35, 0x2, "86d48e6d7eddf3abaa63cb5ab54f16f81c46e9f74189774307451d384b9f70f2eefbfcc07b0b5aa9d3410f500391e7dc20"}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xc2e4}]}, {0x134, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x18, 0x2, "21e6b49d191a2f5f8c108bf58fcac368d8f553a4"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}, @NL80211_PKTPAT_MASK={0x12, 0x1, "a919074e4cdd4b0ab8eecf109dd6"}, @NL80211_PKTPAT_PATTERN={0xf2, 0x2, "1da61b4b819414f0c48bcae8ea5b54d3a30c3977860efd4e37a7bbaaa5942741aa66d931cc76f74e5417565e66664b4268fc1f540eb97ee6c40383609bce250e274f5f211eaaf7cdcd202c2a30e6c3224244cc0cf5f3dc21197f12d77c70639106f1d11f0835e7d939b259b469e259b717487ec877920efa49a1b60e81356ee8698444f40231fbad01750f7bda80b3acd0fb857a3be53893b3c81dfdad81879669fde23287d5a5241b3d86e0f1cf0bec43095712e354b3c9d7b4fb5cd7fa7cef0b94e50f5f47ddd410b62c3d25432e627cdd4905bbfdac0f44772b945e43a420d83d910fd262c0ed4791071d4c23"}]}, {0x160, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xaa, 0x1, "bb93b61a2531a695a51fb834ad07509ea501294175043e9adc6b1fe02652a192e38072ad2c2753718518b6ee116ee4a1b2263e464bb7498064bfc5b9a0d880b214b7d0e566dda51e2a8221f3e8f599d79d1b8bc1f8b64d79cf5e179fd305ac76019923292a0cc39a2b08b9d40ee23c4a580f27010ad84dfbcb5a7d325e85a3ed92d08fdd60bfca0644faf992ec91caae68add3457328bdc0e669d5eb026468c328827ffbf46d"}, @NL80211_PKTPAT_PATTERN={0x67, 0x2, "7bb836b4aa320a3ffb5d0f720ac50cce644dceabc140b9d3de96687a243cab899d774b2d1c8ded467030593ea56e0c989d90ceb1637e340a30d0ee912ed792991bb419f3f93cb9b40ba24ae93d1189307fc550bce9080d1377f5f63bf129adc9ac89d9"}, @NL80211_PKTPAT_PATTERN={0x2e, 0x2, "160d0268e89ae4320c9bb9a11840c71885d2f3affd51d47e3f6dd0f27090fda3bcf216da5e0d09931bf3"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5865}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x80000000}]}, {0x17c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x10}, @NL80211_PKTPAT_PATTERN={0xe7, 0x2, "0c3173f114b9cd96321af861a48b4aa855d3f805e82ef643ac023203634f074b6a778fb1ec0e6e149836e40f458af395f93136e455acafe2b790220096c2515657da5033bd0a87b05eee1563dbe514034c27075e1af523b5384e80c3a305221cac7195ced39c6f7cde18c3c3ea620fca993dcf2772f90f8ae47dbe8cb451ce7e5447ccbb173966369339b3e71f43100625e96cfa70e8ffe282e13a45493b911e5f52b14a541517a0a60618964df8f92c10e1ac6fce55650a46e84ed1f9030dd12a4fb2481e04ef4147dccb546b6de06c54083a82a7f6dfbdcfbb5b381953bab4becf87"}, @NL80211_PKTPAT_MASK={0x4}, @NL80211_PKTPAT_PATTERN={0x3e, 0x2, "e03257ab38d75f40625f1281d63fccd0ebd57ad8f17579af35d8f0657e5d5391aec7ade49a305a0584e0b27fb7275e2c232908e8afd6cd94d4e8"}, @NL80211_PKTPAT_MASK={0x3c, 0x1, "fce54114aa3dad06256112064227e55df9426f33d0087ed7bca552bb2aba6ad13492a2325f5bbf1460fd5aba70e10e439aa73ab9d7edf755"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}]}]}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x2ae8, 0x4, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xd9, 0x2, "6473325d6652a66ded7d6aa04775e817cd86b508f2ffc65735c446054379f4eea85ed4d1abadb343c7964bfd0677f0d3d9096a8c6f3e379b8547fae5ac87a3e69589fbc2442aa4d88636f9d8172664921fc1ea1e49ee01d30f918b3019dcdd9beda5bc10f2428fbb6ed4b40bad84e6e300448e54284084ef3602b9a86cbaac99dd477cecf8c3799e78c53452c27f28134a1059a66d4882731c6b28efcac48c67e6ada2b84dbc2dcb2fdf076e940dc5235655efda9bd97650cc0300dac6a242fd39f1011cef32749bce7ec9cd31f2ecc01945eeb372"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xc7}]}, {0x2f8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x59, 0x1, "467af6bb5efc2bb7996d9f3fa105e43b02e5b342f6c9c3815c2a760cc651102da8ce1dae45b78c6b5da56941bbff5650a50d8ca1dd373a6e2561053baf094d0794b35b691e5f08f2f485dc2fc5a2d6f900e4cbc0a9"}, @NL80211_PKTPAT_PATTERN={0x103, 0x2, "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"}, @NL80211_PKTPAT_PATTERN={0xbd, 0x2, "793f78457cdf6dc5d6e05542fd5deb3e510460ea416c4d26e38c2d1c90241132cd0bfb2c4de244b9c77bfbb6a0b75d2c4fa80db90d27c84c77e43ad6bea6f324e9eebd6641c99a806bed067ed618dce38ac2b559e2a0482fc1b06d5200a09f15a297c5a9884da2f6d093a9f9f05e5c03409461d021d11f13904ba820c9b021e13e0948e78d9061c467694db8a4d51b64b519738b98152bc45b584170ce650a7a328052cacc8508cd04952d0e285a966d74cb12c617be5bea4d"}, @NL80211_PKTPAT_PATTERN={0xd3, 0x2, "feb4a58d077207137d3dbb3e2fc5663b9eb8fe93b4ab6486f3c1838d7195e542d6ff5decc74d95445b73613fd98c613e2dae01f1ea625897e7d4075bd97ebec46428fbaacbc875e33d10396ee1ba01f7fa9e2c826e0f3f60caf04dec1b930d8b940c6fb2a5a2cdd7abcc4ccde91be674b7405aacd9648751691acdb6aac0eebef1dfab112c181519bdd25314ff78959ff309b4ae67e354b91ffb6b484a5a7d304043486b4b42955077f78c992476b50309c95afc9121ba5e15ff876d09215868ffce7fad9bef0f7433a2b9560b4c58"}]}, {0x2c8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x100}, @NL80211_PKTPAT_MASK={0x8b, 0x1, "582d3d3ddb19ec83b4088aad0fc929b6a40d4d016a7d2d1084b95b9a0ff9b5680e49f8859196a02a08d0bada19ce9a174c3b67f2df29a2b5db23152762ada58aea0f022843f23b6ed855034be36f664b015e850b41341c3a0727538ead1a75b08c485fa002ad741ea8207a9d6bfa5e22a88d89f1c4c4df6589855054ba1cc7b095e8bb11ffc668"}, @NL80211_PKTPAT_MASK={0x47, 0x1, "1a4fe1cf88d0b8538478a5861823f2f96aae091109216ef65231ae324d19de9cc4df4c775c59bbb8b3ec120731bc714e193381fa2a46511a8f0051ad45a746bb8244a3"}, @NL80211_PKTPAT_PATTERN={0x37, 0x2, "0325a92a4988e7d114c586497366742590fa3e0dc07f84b7a7dc39bac3b85ceb17dc8f14b13f7d370055949c094186feae6226"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}, @NL80211_PKTPAT_PATTERN={0xcd, 0x2, "59d6b5a829c3b260ef602c5beff83b10d6097418b89e4f8e16382f1a179822e2494bd280dbbc57d8e3fedaccc9b74693f06d7ff8318c18c6181582242dec9e4b7cdfa7ba0dc616f0b916cde38ed946ca4a492f82e9fb22e68876a406bb8a4f7c4e2576b04a9b1fa0ec291b949d6f027f1d954feb8cf3721a5b65404d4204c14af6a0041cd2c143773ca91d1e1514c7e6b87e12796120a76c9ff47461b855cb5a8d88b00cdd43c5bf891840d23cf8c8ec5bf4c233b46bed46b5ef0a6aa71b0added6d405332dac7f1f7"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}, @NL80211_PKTPAT_MASK={0xc5, 0x1, "9eebd1c5cf8ef247a5fffc7f706462b90851d0dd752f3f2cdc08aa513386ecaebd77f0c2618269f7ad805c142b6639276e22d01dfd6529637d4d6bac338d0c5c8081e7ba05f7c37de02bcd80b76ccf3cb2283f8f4a3adb3854972bcfed54853322a5df5e8a12ee9bba7cbf5e2afa9f1f4553c00046d921ff856954cad7efcc94c764cf4e0b06564e03a5ca91e3b08bf4d16e2998522b7a851edf50c9193536ec27910e74c612b75a41ab764e3998fc056b686990354030224ba34fff42288e799a"}, @NL80211_PKTPAT_MASK={0x6, 0x1, "eddf"}]}, {0x1350, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x18, 0x2, "6466c9ea02ad024d77d8a1e86817a1329600d82e"}, @NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}, @NL80211_PKTPAT_MASK={0x9d, 0x1, "0176829bf57bf9ea793d7f0579be828772866aed65e71af5106194eda026f1c0fd38f5eda623634654cd7f9b1387241d813fb14075516b137392eb61134b167656cdc0a3c9a199ad5a43acb020d67b6d951e02123d9badf8f08953d0a48db997135c99e0af0d1246ef1ddeb780ad1b0d194566490325bd6845628c7e846a22c968c2c4d4f0f1ce7e7d74f36077799e5a7cbac7dc7c98baacd3"}, @NL80211_PKTPAT_MASK={0x83, 0x1, "610d8dfca1bf497a7eb3828830ecb1352f374c044356fdac1aaf2cc7f560858650e5808bdec1a1bb87b3703f031eaac8224646ba8f2f4eefacac201c9a5627431972b6794ebd14ebcbdd314663b5b271104820095553dcec1a2e41811184406013e7728aaab2b90339d11b73da7a5bc967f322a8cf78201b8c572a67a008a7"}, @NL80211_PKTPAT_MASK={0xd9, 0x1, "44cfa073c9a4c4e5b5605b2ac5fe62ec6bc41976a5309f3ebe252f326eb26e6ff88b5ed5861bf932e1f24a86ed21d1fb7c708ad1528f79d7e2927eb9f86ea0f5755d94f78221359fdfdec2f8236519c89d9866c15ad1d7086dd3626a71df22f8da472c56173b716172b7693954f6418de16d66ee394e12fb96b47ebd10a4850e4cf575710650f29e011cca7f11425de4dd5eb8abe815a9a6c87819fa363e035d02e59f942fed66cb2ca1a95a24781df479363e57a5549a20d66b0565253d1d1c02b60f17bf36715dc315e0863e4648e9e83da3e863"}, @NL80211_PKTPAT_PATTERN={0x63, 0x2, "97da01fc3abfff614a976b563f1729a8269aff58d65fdf67edfb50ad69184bc924e7ba683a4fd4c22b8fdd9cf72063792e540f3d5a9f20b20c1f2f667f8fee754fe1bc510babcc943871e99474a12fd23eeaaf3b13b67397848a097361f651"}, @NL80211_PKTPAT_MASK={0xca, 0x1, "77755a040ed294f296651af040625b06dd8f53a558160ed6c5d09ec0311853bfec00dfba8fd96dea9091f1e3aa221f984a465aa0e9029c84ac892dbf0615990b2e7b1ac131e5fe32d1112114dc13b7c2a9f9ee65fb5a20972bbab4dddbab220cf1efa4a8c8c7cc2a54e48632409c880683c04de5f7bb6cea364f6a121de84d0de647b4bbcc99b4129a74c68120ed1999b4bd62e2694754410a4277ee133ae8083363bb576beb8dedd28ef697e4df4453386b1910775e60b6c59e7a8da725de1a771a671b5d3a"}]}, {0x10ec, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x9b, 0x2, "883e816e4cab78f21e637cece5cd5efa6f8aec903e65921c3200febe70ea11a5e898e7c279f3fa18b50142bab07559edccbaac69a0fde4eebcc0b97f6fa53f35e79302b22e75729d9ac564e3a1fe389fd57d031d491dfcc33620fb63be9305bf84057784ea2e182b10bfc45f9618921724a91ce0bce2357d76f70f1be0d710167cb94c6d50abbce1c550cb1a827c092c203ef0718731f9"}, @NL80211_PKTPAT_MASK={0x47, 0x1, "f574c0a458b1ff79a0cf3afeb64ef7126395634db0176420681cdfa29f88bf085e752f7a4c36ed09df944bc61932d626a5fb668f2a2e69325ce6555ed4c28931701fc5"}, @NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}]}, 0x3344}, 0x1, 0x0, 0x0, 0x8000}, 0x40004) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000003540), r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000036c0)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003680)={&(0x7f0000003580)={0xd0, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4004}, 0x4008) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f00000037c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)={0x20, r2, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0xf}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x408d4}, 0x200000c0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003840), r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003b40)={r0, 0xe0, &(0x7f0000003a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f00000038c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000003900)=[0x0, 0x0, 0x0], 0x0, 0x3b, &(0x7f0000003940)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000003980), &(0x7f00000039c0), 0x8, 0xe, 0x8, 0x8, &(0x7f0000003a00)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000003c00)={'gre0\x00', &(0x7f0000003b80)={'syztnl0\x00', 0x0, 0x8000, 0x7800, 0x9, 0x88f, {{0x10, 0x4, 0x3, 0x38, 0x40, 0x67, 0x0, 0x6, 0x4, 0x0, @multicast2, @multicast1, {[@lsrr={0x83, 0x7, 0xc7, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @rr={0x7, 0xf, 0xc1, [@multicast1, @loopback, @broadcast]}, @ra={0x94, 0x4}, @generic={0x44, 0x11, "7a4600c25820cfa1b1958c77af2f49"}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000003d00)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003c40)={0x78, r5, 0x4, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x200480f0}, 0x20000005) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003d80), r0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000004080)={&(0x7f0000003d40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004040)={&(0x7f0000003dc0)={0x264, r8, 0xc, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x4}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x5}, @NL80211_ATTR_PEER_MEASUREMENTS={0x240, 0x111, 0x0, 0x1, {0x23c, 0x5, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28a}]}]}, {0x1fc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ab}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x158, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe8e5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xfc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4a5cc143}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x172}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x11f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}}]}, 0x264}, 0x1, 0x0, 0x0, 0x4000000}, 0x88) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x1010, r9, 0x6eae3000) sendmsg$nl_route_sched_retired(r1, &(0x7f00000042c0)={&(0x7f00000040c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000004280)={&(0x7f0000004100)=@delqdisc={0x16c, 0x25, 0x10, 0xfff, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xe, 0x6}, {0xfff2, 0xfff1}, {0x10}}, [@q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x6}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfff}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9a9}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x19}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1ff}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x12}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}]}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4}, 0x4008010) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000004300)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000004400)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000004440)={{{@in=@private=0xa010102, @in=@rand_addr=0x64010101, 0x4e21, 0x6, 0x4e21, 0x2, 0xa, 0x80, 0x0, 0x6c, r6, r10}, {0x3, 0x200, 0x1000, 0x6, 0x10001, 0xffffffffffffffff, 0xffff, 0xc}, {0x4, 0x8000, 0x1ff}, 0x5, 0x6e6bba, 0x1, 0x1, 0x1, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0xd}, 0x7, 0xff}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x3507, 0x3, 0x3, 0x4, 0xcdf, 0xffff, 0x4}}, 0xe8) ioctl$int_in(r9, 0x5421, &(0x7f0000004540)=0x8) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r11, &(0x7f0000004680)={&(0x7f0000004580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004640)={&(0x7f00000045c0)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4094) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000002, 0x100010, r0, 0x7c4ca000) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004700), r11) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000004740)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000004780)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r11, &(0x7f0000004840)={&(0x7f00000046c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004800)={&(0x7f00000047c0)={0x24, r13, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) setsockopt$sock_int(r12, 0x1, 0x27, &(0x7f0000004880)=0xfffff801, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000048c0)={'wg2\x00'}) connect$inet(r1, &(0x7f0000004900)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) 2.051881622s ago: executing program 0 (id=10267): r0 = socket(0x2, 0x80805, 0x0) r1 = epoll_create(0x7) r2 = epoll_create1(0x0) r3 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) (async) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)) (async) r5 = epoll_create1(0x0) (async) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000001c0)={0x300d}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)) (async) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x24040800) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r8, 0x1}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) 1.915220427s ago: executing program 5 (id=10268): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)=',8Zz', 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="64ecf9eaf0400ea33689d9ebcb3c37b33924a19c7f217525314ad3ef1c5f128defdcb64ace5639d1e1", 0x29) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800010301000d00000000000a410000ff0300060000000014000100fe80"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r9}, 0xc) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0008000680a6fffcff07ff000000000000000084b0ba9033acd50c14eb8154d0cded307d62ba47b1a70400000000000000e0772a2d27e652", @ANYRESDEC=r8, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060008000700ac1414bb08000a00000000000000000400000000000000000000dae1549287a6ddb089fc397ef643990e4ac2d394e23f69410feb9606a17ed204c59de25cbec8dd489a6f28f0cec8dc6ecf63b1a1e2e090396bd7b6f10b80fd7335cdce88082c3f26b25f9b8facd37ef42723718294617c627c", @ANYRES32=r10], 0x5c}}, 0x40) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9ed90000001cc00000001c0012800c0001006d6163766c61fb8f1daafe243a25ad6e100c0002a008", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB], 0x4c}}, 0x884) 1.881664849s ago: executing program 6 (id=10269): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_emit_ethernet(0x3e, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd605ad3af00080000fe8000000000000000000000000000aaff020000000000000000000000000001730001"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765", @ANYRES8=0x0, @ANYRESOCT=r0, @ANYBLOB="371d1c65fb68dffcb59e1ec50b49e35f5dcd9f58449c9bacf954804a5f16dcd1055ea9aae54ccbf66aeb6bc75a439d0edddd6c58f5a0e97a65067eba88dc5bd51c50b6e57c7ede22c5fa80f5", @ANYRES64=0x0], 0x3c}, 0x1, 0x0, 0x0, 0xc004}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000021c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x10800ff}, 0x38) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04000000", @ANYRES16=0x0, @ANYBLOB="010026bd5000f8dbdf2555000000080001004f00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0x24008004) unshare(0x20400) r5 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40088a01, &(0x7f0000000000)=0x100) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000230400"/20, @ANYRES32=0x0, @ANYBLOB="adffa888ef000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x44}}, 0x8000) 1.880160284s ago: executing program 4 (id=10270): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [0xff, 0x0, 0xffffffff, 0xffffffff], [0xff000000, 0xffffff00, 0xffffff00], 'macvtap0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x3b, 0x5, 0x0, 0x25}, 0x0, 0xd8, 0xf8, 0x60030000, {0x0, 0xff000000}, [@common=@frag={{0x30}, {[0x800, 0x1], 0x3, 0x10, 0x2}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'pim6reg0\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x208, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x4, 0x2, 0x1, 0x7}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1, 0x4}, {0x0, 0xb, 0x6}, {0xffffffffffffffff, 0x1, 0x6}, 0x400ce, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) recvmsg(r0, &(0x7f0000006d00)={&(0x7f0000006880)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000006c80)=[{&(0x7f0000006900)=""/36, 0x24}, {&(0x7f0000006940)=""/164, 0xa4}, {&(0x7f0000006a00)=""/246, 0xf6}, {&(0x7f0000006b00)=""/143, 0x8f}, {&(0x7f0000006bc0)=""/168, 0xa8}], 0x5}, 0x20102) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000002c0)={0x0, 0x0}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006600)=[{{&(0x7f0000000440)=@abs, 0x6e, &(0x7f00000008c0)=[{&(0x7f00000004c0)}, {&(0x7f0000000500)=""/215, 0xd7}, {&(0x7f0000000600)=""/190, 0xbe}, {&(0x7f0000000700)=""/241, 0xf1}, {&(0x7f0000000800)=""/132, 0x84}], 0x5, &(0x7f0000000940)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000000980), 0x6e, &(0x7f0000000a00), 0x0, &(0x7f0000000a40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000000b00), 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000b80)=""/167, 0xa7}, {&(0x7f0000000c40)=""/230, 0xe6}, {&(0x7f0000000d40)=""/62, 0x3e}], 0x3, &(0x7f0000000dc0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000000e40), 0x6e, &(0x7f0000002140)=[{&(0x7f0000000ec0)=""/237, 0xed}, {&(0x7f0000000fc0)=""/134, 0x86}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000002080)=""/145, 0x91}], 0x4}}, {{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000002180)=""/4096, 0x1000}], 0x1, &(0x7f00000031c0)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f00000032c0)=""/168, 0xa8}, {&(0x7f0000003380)=""/8, 0x8}, {&(0x7f00000033c0)=""/53, 0x35}, {&(0x7f0000003400)=""/99, 0x63}], 0x4, &(0x7f00000034c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f00000035c0), 0x6e, &(0x7f0000004940)=[{&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)=""/78, 0x4e}, {&(0x7f00000046c0)=""/177, 0xb1}, {&(0x7f0000004780)=""/38, 0x26}, {0x0}, {&(0x7f0000004800)=""/244, 0xf4}, {0xfffffffffffffffe}, {&(0x7f0000004900)=""/45, 0x2d}], 0x8, &(0x7f0000006d40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000004a40), 0x6e, &(0x7f0000004d00)=[{&(0x7f0000006dc0)=""/266, 0x10a}, {&(0x7f0000004bc0)=""/62, 0x3e}, {&(0x7f0000004c00)=""/16, 0x10}, {&(0x7f0000004c40)=""/54, 0x36}, {&(0x7f0000004c80)=""/77, 0x4d}], 0x5, &(0x7f0000004d80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000004e00)=@abs, 0x6e, &(0x7f0000006540)=[{&(0x7f0000004e80)=""/179, 0xb3}, {&(0x7f0000004f40)=""/4096, 0x1000}, {&(0x7f0000005f40)=""/1, 0x1}, {&(0x7f0000005f80)=""/230, 0xe6}, {&(0x7f0000006080)=""/240, 0xf0}, {&(0x7f0000006180)=""/243, 0xf3}, {&(0x7f0000006280)=""/166, 0xa6}, {&(0x7f0000006340)=""/189, 0xbd}, {&(0x7f0000006400)=""/71, 0x47}, {&(0x7f0000006480)=""/186, 0xba}], 0xa}}], 0x9, 0x2100, &(0x7f0000006840)={0x77359400}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="08000000010000", 0x7) socket$nl_xfrm(0x10, 0x3, 0x6) 1.803482753s ago: executing program 1 (id=10271): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xcc, 0xc}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2ffffff90000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.776797004s ago: executing program 0 (id=10272): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x7ff, 0x0, 0xb3550aa4ba878396}, 0x9c) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x294) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_emit_ethernet(0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa0011aaab63f876a76c0cee145e4c67651dca2c"], 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') unshare(0x6a040000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x2e, 0x5, 0x72}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) unshare(0x2010100) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r3, @ANYRES32=0x0, @ANYBLOB="001280ee000100626f6e64000000001c0002800500010004002000080020000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 1.772831483s ago: executing program 1 (id=10273): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x198, 0x200, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x10, 'fsm\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x0, {0x80000}}}, @common=@frag={{0x30}, {[0x6, 0x3], 0x3, 0x2, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0xc0000000, 'pptp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00', [0xff, 0xffffff00, 0xff000000, 0xff], [0xff, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0xa, [@restrict={0x0, 0x0, 0x0, 0xb, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x1c}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0xe}}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x7}, {0x3}, {0xa, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000940)=""/53, 0x82, 0x35, 0x1}, 0x20) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01000000080000000800030075b5148f09ee90f7189c87c2b0c65e5fdee8fae96bad6725d066220c49000000000000", @ANYRES32=r1, @ANYBLOB="4b6e67252bba646b6193d4b15d647d0b23b75e3a1352b097bc373d60e0fb601d358043d92fd89117686e681447988226552daa057684709eee8c9185c52b445b99623920c538774a7cd00c345447018865d3f10533ac44bd0e173043533d94d57a6938c2a365a358cf695bc75e9660446c1b55617629ced2505fb8462a655fff7b116b2d860157964a62e32eedd171127d5d3a0fc0a63b07a52f6f09fb5479f3e19bd1cfa6d8683f5c929729a0130e1fcd1e11d423fd7d9f46d391c179db8d"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 1.693094712s ago: executing program 1 (id=10274): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000000), &(0x7f0000000200)='%ps \x00'}, 0x20) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0xfe41, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0x0, 0x0) close(r4) r5 = socket$packet(0x11, 0x2, 0x300) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000340), r3) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xf, 0xe}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x80000000, 0x80, 0x9, 0x591c8d42, 0x9, 0x1, 0x200, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40804) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b826, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x6691}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x2880) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, r6, 0x800, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4004050) getsockopt$packet_int(r5, 0x107, 0x15, 0x0, &(0x7f0000000e40)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) splice(r1, 0x0, r2, &(0x7f00000000c0)=0x8800001, 0x7fffffffffffffff, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000003200000226bd7000fddbdf250400000008001c00b116f1958c3c1659ae47f57f62cf03f9551b613ba25ce7c0dcbf6f757bb9894c689fe0f4c94394f1b27b406a10d1faa40a3ab55a1fa62de52f536c7e2e10b225c6881bd01b4f5c66a6a9f57902e65247b952b4a43adccb67eaaf4c969c8156435901d3f62d4a726b3d47202547af01", @ANYRES32, @ANYBLOB], 0x1c}}, 0x10) 1.483036819s ago: executing program 4 (id=10275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, 0x0, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000000080108000000000000030000090600024081000000140000020008002640ae000002e094b4c3000600"/56], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @vsock={0x28, 0x0, 0x2710}, @ethernet={0x6}, @nl=@proc={0x10, 0x0, 0x5dfdbfd, 0x8}, 0xc, 0x0, 0x0, 0x0, 0xc, &(0x7f0000000000)='veth0_virt_wifi\x00', 0xffffffffffffff80, 0x4, 0x6}) 1.482457243s ago: executing program 4 (id=10276): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000000480)={&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x4004) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000ffffffff0000000000000000000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a0000000000000000000000000030c6f58b000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c0000000a000000ac1476bb000000000000000000000000053500"], 0x1ac}}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) sendmmsg$unix(r4, &(0x7f00000003c0)=[{{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000180)="c526da4246c86a9037cc4854e99241ddd8631ac3f33e2ba87643cc943ce4596bd61fc4864ff6fb36a11d01b7316c6d3e052d1137b48f14a24f118c60850257b665eb0308ce7c5b31613db69f3cc94f1d8036f8a4353ae23d2ab7fb", 0x5b}, {&(0x7f0000000200)="0cc1014204a2fc64b58b262bc23f3ecf686b307621eb516f09286f49093b567eb1192ee95605f21eb9c91b9c187c23f093a49df46f5e7d546636a55226b034cb192f1328fefad50548317266ee053199b4eb7b5d2e3d20bd90bf3c3a8b61cf890921e4a76f63fd1de596a6271279371b4edc82b8a52ed69792a789419dfb42eaec8dd4c8cc85ec439617ab0f18123807c17a2e49a336b7917d", 0x99}, {&(0x7f00000002c0)="63bfb1ff82f2276e20fe2bbdc31786cc69d0ec14b425f406aa0e6177c3f10f80f1a3aa8a93571dd4aae582ec50a8ffcdcb36c5e608d22953ffe80ed62a2ba0787e63b006e32e3d55e3065c18fd2b34634aa7", 0x52}, {&(0x7f0000000340)="f502", 0x2}], 0x4, 0x0, 0x0, 0x800}}], 0x1, 0x24044000) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r5, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) listen(r7, 0xfffff789) r8 = accept(r7, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x992f}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x9, 0x8, 0x0, 0x0, 0xd0, 0x6, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x1000, 0x2, 0x8002, 0x103, 0xa, 0x8, 0x1}, 0x9c) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, r6, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r9, 0x604ae000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) read(r5, &(0x7f0000000000)=""/31, 0x1f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x100b0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0xb0e4}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 1.369247988s ago: executing program 5 (id=10277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000300000000000000000000000a0030"], 0xb8}}, 0x4000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x20, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1.26715238s ago: executing program 6 (id=10278): ppoll(0x0, 0x0, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)={0x48, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x90c}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2004}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000611861000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, &(0x7f00000002c0)=0x51) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000640)={&(0x7f0000000200)="fdf71dc76543a737b694a482809097ee67babebb4b85e5cd06eb2ea03e5bec1ccb216a7c8532a446df306e58a22e4971dd52b15d3674e7c54b307d7149908785d743a3d826f1cb150b6de948", &(0x7f0000000280)=""/64, &(0x7f0000000480)="defca33d7c97d53a71d2803d94e5ffcea4fbf9290f6f1571f16cc37b92fe2a4d6620dc83a02b0f3891e6b918c1546796e4506583762c11c435122676e15b4cb4c73a1c2e9461392c42f94f4db6fff48fc16e161a33810cf7882a852b2cbb19cd3463867393cb2fa70e0f9a6945062dd3cec38f2e6a066dc699", &(0x7f0000000500)="4b93aa144ec91ff4886a1dfc96325e1a678dd8adb3d72d12c544ea65d2df72aa811bfc5936da97092e7ba30c3943119b6229bbfe008305835493ed56b3f360d77e88fab87858c82af692f103e7c494de960d367b46097c4eb0c7d8f66c5116cc71e7cad9f776", 0x4, r3}, 0x38) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xe, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) ioctl$F2FS_IOC_DEFRAGMENT(r5, 0xc010f508, &(0x7f0000000000)={0x401}) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x17c, 0x10, 0x713, 0x70bd2a, 0x24dfdbfe, {{@in=@rand_addr=0x64010102, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x102, 0xa, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0x9, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2e, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @lifetime_val={0x24, 0x9, {0x4, 0x3fd, 0x1, 0x7}}, @etimer_thresh={0x8, 0xc, 0x1}]}, 0x17c}, 0x1, 0x0, 0x0, 0x40050}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x14, 0x3b, 0x2, 0x70bd2a, 0x25dfdbfd, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4840) 1.174927841s ago: executing program 1 (id=10279): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000040000000200000000000008000000000000610022f0192477e33d7ce45f3ff38e89a8"], 0x0, 0x28}, 0x28) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) (async) r2 = socket(0x15, 0x5, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000171401"], 0x20}}, 0x0) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x48, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x34, 0x11, 0x0, 0x1, [@nested={0x2e, 0xcf, 0x0, 0x1, [@generic="d478b585fcf4962925eb81095dd3d92e983e841d6ef7368187237f5e91a74d57e8aa", @typed={0x5, 0x4a, 0x0, 0x0, @str='\x00'}]}]}]}, 0x48}], 0x1}, 0x300) (async) r5 = socket(0xa, 0x5, 0x0) connect$inet(r5, 0x0, 0x0) (async) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a00001400028010000b800c00"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) (async) connect$rxrpc(r2, &(0x7f00000000c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) (async) getsockopt(r2, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500a500000000003e62782f6b62fe583a205a2a93679f78609d6ca7f05ba88e8460d0693a8e47c2857ff1c02f24ca929b6aec07a02b58cbd88131bb0d547c9bab43442e4535f88409162afd1ed8ff5a113677be48432632a733fb0c58fcdba24799f692860f292f268d00eac7dd739212a24e74fef584daca158d64b64536a0c21a0ab5a3e038038aaef7bd2ea0621eb7be6fc89005be16748d73f3a1887006e10ed1fb7d9eb609d12ae5bcfd530400e18f6ad05fe15db26a4951f34aa257313b453b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) 1.171316404s ago: executing program 5 (id=10280): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) (async, rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r3, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x1c}}, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000000)={0xea0, 0x4}) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000740)={0x0, 0x206000, 0x0, 0x3}, 0x20) (async) ioctl$NILFS_IOCTL_GET_CPINFO(r6, 0x80186e82, &(0x7f0000000080)={&(0x7f0000000580)=[{0x1, 0x0, 0x40, 0x7, 0x5, 0x10000000000d, 0xffffffffffffffbf, 0x1000000000000001}, {0x0, 0x0, 0x0, 0x10001, 0x8, 0x7f, 0x69, 0x2}, {0x0, 0x0, 0x3, 0x92, 0x9, 0x20000005, 0x5, 0xfff}, {0x3, 0x0, 0x7, 0x0, 0x8, 0x3, 0x24, 0x1}, {0x1, 0x0, 0x9, 0x0, 0x1, 0x4, 0xfffffffffffffff9, 0xac}], 0x5, 0x38, 0x0, 0x9}) 1.000856839s ago: executing program 6 (id=10281): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) pread64(r1, &(0x7f00000003c0)=""/4093, 0xffd, 0x202df) (fail_nth: 3) 966.128976ms ago: executing program 1 (id=10282): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x2f, 0x9, 0x6, 0x6, 0x14, @mcast1, @local, 0x40, 0x8, 0x200, 0x40}}) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x61d8, 0x0) 887.212852ms ago: executing program 5 (id=10283): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x2f, 0x9, 0x6, 0x6, 0x14, @mcast1, @local, 0x40, 0x8, 0x200, 0x40}}) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x61d8, 0x0) (fail_nth: 1) 612.842942ms ago: executing program 6 (id=10284): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3100000000280004800800024000000000080001400000000514000300"], 0xf4}}, 0x10) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}], 0x38, 0x40}}], 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001740)={0x0, 0x0, 0x0}, &(0x7f0000001780)=0xc) r3 = getgid() ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001cc0)={{0xffffffffffffffff, &(0x7f00000017c0)='GPL\x00', 0x2000, &(0x7f0000001800)={@_ha_fsid={[0x10001, 0x9]}, {0x8, 0xfffe, 0x81}}, 0x5, &(0x7f0000001840)={@_ha_fsid}, &(0x7f0000001880)=0x9}, 0x3, &(0x7f0000001c40)=[{0x1, 0x8, &(0x7f00000018c0)='\x00', &(0x7f0000001900)="b0985fe5f2755c4e022c11ed431103c6a7159fdff3dbce8d183ce1929b9d9f47e0f809775ca4ec5c41b9cc6dadcced2375209c20f07bea506fd6d516baf0f2b49ef2608a128449725f68a97faf2d58643bd3242b64b4e4248b1f0ee1985f1c34f91fd11fb677e291e5f8cf1f6e3e35f306d89b3ff2f14967b60a519bf411", 0x7e, 0x32}, {0x1, 0xa, &(0x7f00000001c0)='\x00', &(0x7f00000019c0)="3b4fac0f839074ea1b4f464c5bf21f563219ae7d47a6b730b9cf0ce2a3e298e72a572a94b4279308ea24425072d86199c0a952932dc8fba8cc39fca83e192199541f86710e7fb6d0c7b080639e8f0138c18348db460e5ca19bbd3ea5d41552c7f3803989196bd2612e4987d54a6279e7a068220beaee4026d67b74aee3e596561b2cffbfe67c99e17fbbb09e86b98bac473b6a7cf327a1daa736e3dfdac0aa33d850d7842925af30c9668127728c39d138fc274b4b8b23047ed6c5165d8c71ed2c83e137d6bec1f0105e6a5a10a5cb6b61aac7147307d67643265483", 0xdc, 0x10}, {0x3, 0x9, &(0x7f0000001b00)='\x00', &(0x7f0000001b40)="37ce237537dcd5955d57e396cd5c1f7270ace971da854124f67fbe414495b6866e55829db94f489bd5f89d5124af67472607cf75102d2b3236d4106cf4cf66df81785919d763d033f7339d8b393ed65e2986def83f66acd0549e6690a27fd0f2e029199512fe8c90a48874a4cf8bd7fa0a213cf6656f6f35514d1e165f3d84e49d5c8328373c7ed9a8a1bea856479b1c6b593e9075e6afd55d433c08f9ae1810a029a35d8e2f5cd0c49128d21dc956a4510e22b08b2f04a405db9035cb2e5d343a36340a356e73d2792309b22dcfe72bcdbd4fe99486303e0180528002d704a09d74b3d3998016c99a8f7e28", 0xec, 0x3a}]}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = accept4(0xffffffffffffffff, &(0x7f0000001d40)=@ieee802154={0x24, @long}, &(0x7f0000001dc0)=0x80, 0x800) r8 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000000)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast2, @in=@remote, 0x4e22, 0xa000, 0x4e23, 0xdc7f, 0x2, 0x0, 0x20, 0x5e, 0x0, r9}, {0xf36d, 0x0, 0x3, 0x8, 0x8, 0x9, 0x2, 0x7fff}, {0x8, 0x8000, 0x2, 0x5}, 0x1, 0x6e6bb9, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x32}, 0xc8a362c1fa6bcd0a, @in=@remote, 0x0, 0x1, 0x2, 0x8, 0x91cd, 0x7, 0x7fffffff}}, 0xe8) r10 = getgid() r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, 0x0, 0x0) r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r13 = accept4$inet6(r6, &(0x7f0000001e00)={0xa, 0x0, 0x0, @dev}, &(0x7f0000001e40)=0x1c, 0x800) r14 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001e80)=0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001ec0)=0x0) r17 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000001f00), 0x2, 0x0) r18 = socket$unix(0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002080)=[{{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000240)="2a09737eebb6152a33b0048e33c7e4f6c4c995edfb29731b4110e0bbf11618631dafd4e6d834e77dd7e192235649bb9218b018bbb68194efe12be6a1308c0b57073d85740d", 0x45}], 0x1, &(0x7f0000000b00)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70, 0x44}}, {{&(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000c00)="756270b7beccb1087187370da6100d8168137581724e1e150959f25b33af56a6c82696582fec2b27bfd347a0f5a8f9b0d303a73f9c495f2e27f5407385989af0df3d9d8ee323be2fe4cddf214853f282d198f3cc304bc8827042fc3b0d677a047b9e102bc89175ec2a553cd3d7cc6a69027f32d7ccaf4fdcd5c1c946f32f611948181110a257f1feb33a3ab104c7c8dbba2275e5b2e20971e2fd95e665b712b51db3366b939495257960ddd0b81b1c371bebc7ad03f66a6e8f907ed91db7ac67833b635c16ff949e69ad524361aad47ed38a778ae497", 0xd6}, {&(0x7f0000000d00)="0b705dbcaa4c8697383585bfaad932a30fdf77192144eda62636705407ec2d69b0e15bdb0a628421fa3e179a8b1ea30f481e0edf70f044dc", 0x38}], 0x2, &(0x7f0000001140)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r14, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100200002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x108, 0x20000094}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001280)="75c0e15e85f86d4c1e91801aa51d8f66ef5543328d067945646bda09bf52f4d87ad6c9a69a54053d003169c149636a22938bc174fa707cd3884a2f982a1a1784040c731d97caa7369044", 0x4a}, {&(0x7f0000001300)="e8648e1cad940fdb5dd2cf3b981f46afb44e5274dc7b892d14b05431b241cbc6e6dd9aa40067600f", 0x28}, {&(0x7f0000001340)="c70b69b6cab3ef7bc6ede014f973b0194a381ce57150059ec012ca61cf556680bea3959ff8fa", 0x26}, {&(0x7f0000001380)="6f3ea53d4b62cd1ee4ef1fe95226a6511d672757c17907b6282059ab1672a53cb34467ce89", 0x25}, {&(0x7f0000000400)="cf708350fbf7dd6e1b35271f054d2e1b1e1f84037917229169ae1885bf970f1d02af6575560d1da6fe2abbb7c8032c4f6120cf273ddb28dff8625995d864dd3d68b8c1ee651908c2a755b021d244163e159d751ad066185ce2bf4709d1f1ff8983452c9cfc5f1b2c1247e2230e775a847c81592dbf277e634af82978f33957195c65d6c59197b2236912e2d7a374cd4731a19ff09d8d72684f5fb2b093fc5b577d270f5351eba6edcfd6b49989b3ca2730af2daf64163001a8bba40d88426020134374b6bb7559e2f47ae62717", 0xcd}], 0x5, &(0x7f0000001f40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee01, r3}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4, r5, r6, r12]}}, @rights={{0x14, 0x1, 0x1, [r7]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9, r10}}}, @rights={{0x20, 0x1, 0x1, [r11, r12, r13, r14]}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r17, r18]}}], 0x118}}], 0x3, 0x4000000) r19 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fcffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a0850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r19, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r20 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r20, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000c000aac0f000bac1f00"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYRES32=r10], 0xfc}, 0x1, 0x0, 0x0, 0x44}, 0x0) r21 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r21, &(0x7f0000001ac0)={0x0, 0x1e, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYRES64=r20], 0x114}], 0x1, 0x0, 0x0, 0x4004080}, 0x0) 585.396626ms ago: executing program 4 (id=10285): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_IKEY={0x8, 0x4, 0x66}]}}}]}, 0x48}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 525.633966ms ago: executing program 0 (id=10286): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0x1f, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000010000000000009f09002318110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000c6000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000200000008500000086000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000bf91000000000000b70200000000000085000000d4000000b70000000064000095"], &(0x7f0000004380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 346.998061ms ago: executing program 4 (id=10287): r0 = socket(0x1e, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'vlan0\x00', 0x100}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="ee104f1aaea25c23255d3821604dc697a6f9d20d1615e64e311e27052c6038b638b33e05000000000000003ee41b95579bf2cede", 0x34}, {&(0x7f0000000280)="4db7c1bf3ac44b79c1892a8135b5566654df0b2c6cc66e6a402a165584f50a127ec18a924760396c1f8ccca8efd2d1b19a073f6a5eb180a255f7bf866c361221b8f646df7ee3e3666e72e29d4066a02333aa34d2e460707f4b07f99f3ccf75f53858576589c0461120aa26d7b25ae4926ddf934ffb2061fef291b415238466eab46e26c3f009c2ddc42cc068445be9c9658dc042933f1f5749ecd758647e18d3b321fd3c12154bdb0aa80fa8c7767a6a016f8f2b6e0ebb3a814b237035b67565e4", 0xc1}], 0x2}}], 0x1, 0x9200000000000000) read$alg(r0, &(0x7f0000000000)=""/106, 0x6a) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000008000004018a96b20dbb298e7b3aa017e0d97a2000100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24, @ANYRES32, @ANYBLOB], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000021850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000780)={"8e21db719ce6d4f35529ed2cd0655622", 0x0, 0x0, {0xfffffffffffffff8, 0x2}, {0x8000, 0x7}, 0x200, [0x100000000, 0x7f, 0x4, 0x7, 0xb15, 0x4e, 0x33, 0x7, 0x0, 0x4, 0x4, 0x4, 0x2, 0xf, 0x1, 0x17f]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000001d40)={{r4}, r7, 0x6, @inherit={0x60, &(0x7f0000000700)={0x0, 0x3, 0x5502, 0x1d, {0x23, 0xd, 0x4, 0x4, 0x5}, [0x6, 0x6, 0xde]}}, @devid}) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r10 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010000"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x800) splice(r8, 0x0, r10, 0x0, 0x10d00, 0x9) splice(r6, &(0x7f0000000c00), r5, &(0x7f0000001c80)=0x8000000000000000, 0x3fd, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x800) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[@ANYRESOCT=0x0], 0xe0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @empty}, &(0x7f0000000400)=0xc) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb01001800000000000000f0000000f00000000b00000000000000000000010000000062002c010c000000000000010000000051000c0203000000050000060400000009000000040000000c00000000000000080000000300000010000000080000000400000008000000020000000000000c030000000e0000000000000b000000000e00000008000004070000000800000005000000010100000200000005000000040000000500000004000000050000000b00000000000000000000000c00000001000000000000000d00000004000000090000000300000004000000080000000e00000001690000030000000d000000010000852f29000010000000050000000700000000303030615f5f5f305f00"], &(0x7f0000000a40)=""/102, 0x113, 0x66, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001cc0)=ANY=[@ANYBLOB="1e000000170000000500471400000000ca0006305900", @ANYRES32=r3, @ANYBLOB="671b00"/20, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="0200000003000000050000000e00"/28], 0x50) socket$nl_route(0x10, 0x3, 0x0) 318.782669ms ago: executing program 0 (id=10288): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000140)={'wlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r3, 0x1, 0x0, 0x25dfdbfe, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x40000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000240)={{0x62, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x0, 'lc\x00', 0x0, 0x8, 0x24}, {@broadcast, 0x4e21, 0x4, 0x1, 0xa17f, 0x3}}, 0x44) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x10000008ebc, 0x0) splice(r4, 0x0, r7, 0x0, 0x80000025a5, 0x0) close(0x3) close(0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800010301000d00000000000a410000ff0300060000000014000100fe80"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 0s ago: executing program 6 (id=10289): r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x21, 0x2, 0x2) r2 = socket(0x1, 0x803, 0x0) getsockopt$SO_COOKIE(r2, 0x1, 0x47, &(0x7f0000000080), &(0x7f0000000180)=0x8) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00', 0xfbe}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x44, 0x6, 0xc80, 0x138, 0x138, 0x9b0, 0x9b0, 0xb48, 0xbe8, 0xbe8, 0xbe8, 0xbe8, 0xbe8, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@uncond, 0x0, 0x850, 0x878, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x10, 0x3}, {0xffffffff, 0x1}, {0x1, 0x3}, {0x7, 0x2}, {0x6, 0x2}, {0x6, 0x2}, {0x1, 0x3}, {0x7, 0x2}, {0x6, 0x2}, {0x9, 0x3}, {0x9, 0x1}], [{0x6, 0x80000001}, {0xffffffc7, 0x4}, {0x7, 0x2}, {0x8, 0xffff}, {0x7, 0x81}, {0x3, 0x3}, {0x5}, {0x7, 0x3}, {0x7, 0x2}, {0x5, 0xfff}, {0x800, 0x1}], 0x9, 0x3}, {[{0x19008000}, {0x26bb, 0x2}, {0x7b3, 0x3}, {0x1}, {0xe, 0x2}, {}, {0x9, 0x2}, {0x10000, 0x1}, {0x0, 0x2}, {0x2fab, 0x1}, {0x597, 0x1}], [{0x7, 0x1}, {0x1, 0x5}, {0x7, 0x401}, {0x8, 0x9}, {0x8, 0x8}, {0x0, 0x4}, {0xfff, 0x4}, {0xd, 0x7ff}, {0x4, 0x6}, {0x3d, 0x5}, {0x942f}], 0x8, 0xa}, {[{0x5}, {0x4, 0x3}, {0x6, 0x2}, {0x0, 0x3}, {0x4, 0x3}, {0x7}, {0x4, 0x2}, {0x7, 0x2}, {0xffff, 0x1}, {0x4, 0x1}, {0xfffffff7, 0x2}], [{0xe547, 0x10000}, {0x4, 0xf78}, {0x81, 0x1c10}, {0x3}, {0x8000200, 0x5}, {0x4, 0x9}, {0x80000001, 0xffff}, {0xaf3d, 0x2}, {0x3c, 0xc}, {0x3e, 0x9}, {0x3, 0x4}], 0x0, 0x3}, {[{0x6, 0x2}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0xdeca, 0x1}, {0xfd}, {0x401, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x8, 0x2}, {0x81}], [{0x1, 0xfd0d}, {0x9, 0x4}, {0x80000001}, {0x4, 0x400}, {0x9, 0x3}, {0xa, 0xfffffff0}, {0x9, 0x4}, {0x4, 0x2}, {0x10, 0x59d}, {0x7, 0x1ff}, {0x4}], 0x8, 0xb}, {[{0xffffff11, 0x2}, {0x6, 0x2}, {0x902, 0x1}, {0xffffff00}, {0x9}, {0x1, 0x2}, {0xffff, 0x1}, {0x9, 0x3}, {0x4, 0x2}, {0x70c8}, {0x7, 0x3}], [{0x3b8a6dc3, 0x7}, {0x9, 0x2}, {0x8, 0x2}, {0xf, 0x3}, {0x5, 0xffffffff}, {0x1ff, 0xff}, {0x3, 0x96e}, {0xffffffff, 0x400}, {}, {0x3, 0x934}, {0x5, 0x7}], 0xb, 0x9}, {[{0x20c, 0x2}, {0x72, 0x1}, {0x2, 0x2}, {0x7, 0x1}, {0x7, 0x3}, {0x8, 0x1}, {0x5}, {0xffffbc3b, 0x1}, {0x7fffffff, 0x3}, {0x42, 0x2}, {0x8, 0x1}], [{0xe43}, {0xb, 0x8000}, {0x2, 0x5}, {0x3, 0xe9c0}, {0x5, 0x7f}, {0x9, 0x3}, {0x6, 0x40}, {0x11f, 0xffffffe9}, {0xc35a, 0xd16}, {0x6, 0x4}, {0x9, 0x18a}], 0x8, 0x3}, {[{0x7, 0x3}, {}, {0x9}, {0x0, 0x3}, {0x6, 0x2}, {0x6, 0x2}, {0x401, 0x2}, {0x6}, {0x9, 0x2}, {0x7c42, 0x3}, {0x40000000, 0x2}], [{0xdff, 0x4e}, {0x3, 0x7}, {0x1000, 0x1}, {0xfffffff8, 0x8001}, {0x9, 0xb34}, {0xfffffffa, 0xa}, {0xae9c, 0x7}, {0xe, 0x8}, {0x8, 0x7}, {0x6, 0x3}, {0x9, 0x92b}], 0xc, 0x7}, {[{0xfff}, {0x1, 0x2}, {0x2, 0x2}, {0xa640}, {0x0, 0x2}, {0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x80000001, 0x3}, {0x0, 0x1}, {0x8}], [{0x1, 0x73}, {0x10000, 0x9}, {0xc, 0x3}, {0x8, 0xffffffff}, {0x7, 0x5}, {0x86, 0xf}, {0x3, 0x2fc3}, {0xf65, 0xa2f}, {0x15064f6, 0xede}, {0x8a2}, {0x2, 0x6}], 0x7}, {[{0x80000001}, {0x5, 0x2}, {0x687, 0x2}, {0x20000, 0x1}, {0xab50, 0x2}, {0x0, 0x3}, {0x7}, {}, {0x5, 0x1}, {0x5}, {0x7}], [{0x64d, 0x3}, {0x7, 0x7}, {0x10001, 0x2}, {0x1, 0x6}, {0x5, 0x9}, {0x0, 0xcba}, {0x40, 0x4}, {0x2, 0x4}, {0x2ca6, 0x9}, {0x80000000, 0xc9}, {0x6, 0x7}], 0x9, 0x3}, {[{0x9, 0x1}, {0xe35, 0x1}, {0xffffffab, 0x1}, {0x401, 0x3}, {0x4, 0x2}, {0xa}, {0xfffffeff, 0x1}, {0xc9, 0x2}, {0x6, 0x1}, {0x8, 0x1}, {0x3, 0x1}], [{0xb6f2, 0x80000000}, {0x0, 0x9}, {0x65, 0x4}, {0x3, 0x982}, {0x5, 0x7f}, {0x7, 0x9}, {0x6, 0x4}, {0x3ff, 0x4}, {0x1, 0x7ff}, {0x7, 0xffff}, {0x3, 0x1}], 0x6, 0x1}, {[{0x6cd8867f, 0x1}, {0xb42}, {0x7fff}, {0x4, 0x2}, {0x65b, 0x1}, {0x61, 0x3}, {0x78a8}, {0x4, 0x3}, {0x8001, 0x2}, {0x3, 0x2}, {0x5, 0x3}], [{0x4, 0xff6}, {0x0, 0x3}, {0x4, 0xe8aa}, {0x7, 0x4}, {0x0, 0x2}, {0x5, 0x3}, {0xfffffffc, 0x3}, {0x15c, 0x80000000}, {0x9, 0x3}, {0x91, 0x80000001}, {0xfffffff6, 0xbd}], 0x0, 0x5}], 0x9, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x3}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xce0) kernel console output (not intermixed with test programs): k: 4 bytes leftover after parsing attributes in process `syz.4.8894'. [ 1224.071093][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8894'. [ 1224.377390][ T7472] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8901'. [ 1224.402084][ T7472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8901'. [ 1224.481399][ T7473] netlink: 176 bytes leftover after parsing attributes in process `syz.6.8900'. [ 1224.577595][ T7477] ip6gretap0: entered promiscuous mode [ 1224.755607][ T7488] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8904'. [ 1224.818107][ T7410] chnl_net:caif_netlink_parms(): no params data found [ 1224.890126][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8905'. [ 1224.924967][ T7490] netlink: 'syz.5.8905': attribute type 6 has an invalid length. [ 1225.007741][ T7490] syzkaller0: entered promiscuous mode [ 1225.014699][ T7490] syzkaller0: entered allmulticast mode [ 1225.024085][ T7410] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.031786][ T7410] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.039193][ T7410] bridge_slave_0: entered allmulticast mode [ 1225.048394][ T7410] bridge_slave_0: entered promiscuous mode [ 1225.141784][T20134] Bluetooth: hci0: command tx timeout [ 1225.586386][ T2124] bond0 (unregistering): Released all slaves [ 1225.596394][ T2124] bond2 (unregistering): Released all slaves [ 1225.610514][ T2124] bond1 (unregistering): (slave bond3): Releasing backup interface [ 1225.620640][ T2124] bond1 (unregistering): Released all slaves [ 1225.626778][ T7501] netlink: 'syz.6.8907': attribute type 2 has an invalid length. [ 1225.640434][ T2124] bond3 (unregistering): Released all slaves [ 1225.660811][ T2124] bond4 (unregistering): Released all slaves [ 1225.676876][ T2124] bond5 (unregistering): Released all slaves [ 1225.691429][ T2124] bond6 (unregistering): Released all slaves [ 1225.715397][ T2124] bond7 (unregistering): Released all slaves [ 1225.729732][ T2124] bond8 (unregistering): Released all slaves [ 1225.745230][ T7504] smc: removing ib device syz1 [ 1225.749325][ T2124] bond9 (unregistering): Released all slaves [ 1225.785670][ T2124] bond10 (unregistering): Released all slaves [ 1225.807469][ T2124] bond11 (unregistering): Released all slaves [ 1225.826998][ T2124] bond12 (unregistering): Released all slaves [ 1225.918019][ T2124] bond13 (unregistering): Released all slaves [ 1226.009602][ T2124] bond14 (unregistering): Released all slaves [ 1227.225975][T20134] Bluetooth: hci0: command tx timeout [ 1227.302097][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1229.306823][T20134] Bluetooth: hci0: command tx timeout [ 1230.182912][ T7410] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.192991][ T7410] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.200367][ T7410] bridge_slave_1: entered allmulticast mode [ 1230.207748][ T7410] bridge_slave_1: entered promiscuous mode [ 1230.265294][ T7501] !: entered promiscuous mode [ 1230.273271][ T2124] : left promiscuous mode [ 1230.495917][ T7410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1230.512725][ T2124] tipc: Left network mode [ 1230.524649][ T7410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1230.536606][ T7514] netlink: 'syz.4.8910': attribute type 2 has an invalid length. [ 1230.665954][ T7524] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8912'. [ 1230.683853][ T7410] team0: Port device team_slave_0 added [ 1230.702586][ T7527] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8914'. [ 1230.715912][ T7528] netlink: 178108 bytes leftover after parsing attributes in process `syz.6.8913'. [ 1230.731148][ T7410] team0: Port device team_slave_1 added [ 1230.916471][ T7523] bond10: option ad_select: invalid value (34) [ 1230.929038][ T7523] bond10 (unregistering): Released all slaves [ 1230.978837][ T7534] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8912'. [ 1231.101016][ T7410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1231.129636][ T7410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1231.144759][ T7554] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8919'. [ 1231.191821][ T7410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1231.199801][ T7554] openvswitch: netlink: Flow actions attr not present in new flow. [ 1231.212297][ T7558] netlink: 'syz.4.8918': attribute type 1 has an invalid length. [ 1231.221187][ T7557] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8920'. [ 1231.222602][ T7410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1231.250393][ T7410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1231.322665][ T7410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1231.385746][T20134] Bluetooth: hci0: command tx timeout [ 1231.630735][ T7558] bond20: entered promiscuous mode [ 1231.636167][ T7558] bond20: entered allmulticast mode [ 1231.642887][ T7558] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1231.661686][ T7559] macvlan5: entered promiscuous mode [ 1231.667142][ T7559] macvlan5: entered allmulticast mode [ 1231.708282][ T7559] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1232.165987][ T5489] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1232.370175][ T7410] hsr_slave_0: entered promiscuous mode [ 1232.395482][ T7410] hsr_slave_1: entered promiscuous mode [ 1232.424677][ T7410] debugfs: 'hsr0' already exists in 'hsr' [ 1232.444008][ T7410] Cannot create hsr debugfs directory [ 1232.503559][ T7591] netlink: 212340 bytes leftover after parsing attributes in process `syz.6.8926'. [ 1232.539606][ T2124] batman_adv: batadv0: Removing interface: macvtap2 [ 1232.562930][ T7591] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 1232.656501][ T7594] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8926'. [ 1233.241225][ T7578] RDS: rds_bind could not find a transport for fe80::3d, load rds_tcp or rds_rdma? [ 1233.331037][ T2124] hsr_slave_0: left promiscuous mode [ 1233.345026][ T2124] hsr_slave_1: left promiscuous mode [ 1233.570549][ T7627] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8930'. [ 1233.580203][ T7627] openvswitch: netlink: Flow actions attr not present in new flow. [ 1234.160960][ T7637] netlink: 'syz.6.8933': attribute type 16 has an invalid length. [ 1234.191682][ T7637] netlink: 'syz.6.8933': attribute type 3 has an invalid length. [ 1234.211953][ T7637] netlink: 64066 bytes leftover after parsing attributes in process `syz.6.8933'. [ 1234.376646][ T4842] lo speed is unknown, defaulting to 1000 [ 1234.387591][ T4842] infiniband syz2: ib_query_port failed (-19) [ 1234.397445][ T5489] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1234.515925][ T7643] x_tables: duplicate underflow at hook 1 [ 1234.612808][ T7646] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 1234.755494][ T7650] netlink: 'syz.0.8937': attribute type 1 has an invalid length. [ 1234.973161][ T7657] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1235.380166][ T7676] netlink: 'syz.5.8945': attribute type 1 has an invalid length. [ 1235.474365][ T2124] IPVS: stop unused estimator thread 0... [ 1235.559226][ T7676] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1235.743669][ T7696] __nla_validate_parse: 7 callbacks suppressed [ 1235.743695][ T7696] netlink: 212340 bytes leftover after parsing attributes in process `syz.5.8948'. [ 1235.796995][ T7696] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 1235.853061][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8948'. [ 1235.942733][ T7410] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1235.969315][ T7410] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1235.994919][ T7701] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8949'. [ 1236.002686][ T7410] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1236.043763][ T7410] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1236.073182][ T7410] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1236.106168][ T7410] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1236.120945][ T7707] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8951'. [ 1236.132520][ T7410] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1236.204615][ T7410] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1236.246127][ T7709] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8952'. [ 1236.277651][ T7709] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8952'. [ 1236.423585][ T7707] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1236.566748][ T7710] bond7: (slave veth5): Enslaving as an active interface with an up link [ 1236.600317][ T7705] infiniband syz1: set down [ 1236.617774][ T7705] infiniband syz1: added bond0 [ 1236.703652][ T7705] RDS/IB: syz1: added [ 1236.707849][ T7705] smc: adding ib device syz1 with port count 1 [ 1236.731949][ T7721] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1236.739807][ T7705] smc: ib device syz1 port 1 has no pnetid [ 1236.749172][ T7721] bond7: (slave batadv2): Enslaving as an active interface with an up link [ 1236.934712][ T7410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1237.007074][ T7410] 8021q: adding VLAN 0 to HW filter on device team0 [ 1237.033953][ T7742] netlink: 'syz.6.8956': attribute type 10 has an invalid length. [ 1237.072089][ T2150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.079546][ T2150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1237.191273][ T7742] veth0_vlan: left promiscuous mode [ 1237.233901][ T7742] veth0_vlan: entered promiscuous mode [ 1237.284505][ T7742] team0: Device veth0_vlan failed to register rx_handler [ 1237.322476][ T7745] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8956'. [ 1237.420762][ T2124] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.428734][ T2124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1237.859702][ T7763] syzkaller0: entered promiscuous mode [ 1237.881718][ T7763] syzkaller0: entered allmulticast mode [ 1239.479810][ T1295] lec:lec_start_xmit: lec0:No lecd attached [ 1241.929879][ T7410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1242.130999][ T7410] veth0_vlan: entered promiscuous mode [ 1242.193546][ T7410] veth1_vlan: entered promiscuous mode [ 1242.292297][ T7410] veth0_macvtap: entered promiscuous mode [ 1242.303474][ T7410] veth1_macvtap: entered promiscuous mode [ 1242.336699][ T7410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1242.350752][ T7410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1242.390062][ T2129] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.405359][ T2129] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.419229][ T2129] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.439690][ T2129] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.620734][ T2133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1242.629278][ T2133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1242.676801][ T2133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1242.685882][ T2133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1242.765716][ T7808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1243.381285][ T7825] netlink: 'syz.6.8962': attribute type 1 has an invalid length. [ 1243.508533][ T7825] bond10: entered promiscuous mode [ 1243.514812][ T7825] bond10: entered allmulticast mode [ 1243.520776][ T7825] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1243.569235][ T7827] macvlan2: entered promiscuous mode [ 1243.581921][ T7831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8964'. [ 1243.606130][ T7827] macvlan2: entered allmulticast mode [ 1243.614773][ T7827] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1243.651252][ T7830] 8021q: VLANs not supported on xfrm0 [ 1244.123057][ T7840] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1244.131014][ T7840] CPU: 0 UID: 0 PID: 7840 Comm: syz.1.8967 Not tainted syzkaller #0 PREEMPT(full) [ 1244.131046][ T7840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1244.131061][ T7840] Call Trace: [ 1244.131070][ T7840] [ 1244.131080][ T7840] dump_stack_lvl+0xe8/0x150 [ 1244.131122][ T7840] sysfs_warn_dup+0x8e/0xa0 [ 1244.131155][ T7840] sysfs_do_create_link_sd+0xc0/0x110 [ 1244.131192][ T7840] device_add_class_symlinks+0x1cf/0x240 [ 1244.131228][ T7840] device_add+0x475/0xb70 [ 1244.131263][ T7840] wiphy_register+0x1dc5/0x2dc0 [ 1244.131312][ T7840] ? __pfx_wiphy_register+0x10/0x10 [ 1244.131338][ T7840] ? __pfx_netdev_run_todo+0x10/0x10 [ 1244.131362][ T7840] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1244.131401][ T7840] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1244.131432][ T7840] ieee80211_register_hw+0x3d82/0x4a70 [ 1244.131459][ T7840] ? __lock_acquire+0x6b5/0x2cf0 [ 1244.131501][ T7840] ? ieee80211_register_hw+0x1911/0x4a70 [ 1244.131553][ T7840] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1244.131584][ T7840] ? __hrtimer_setup+0x181/0x200 [ 1244.131612][ T7840] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1244.131637][ T7840] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 1244.131695][ T7840] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1244.131721][ T7840] ? kstrndup+0xbf/0x160 [ 1244.131756][ T7840] hwsim_new_radio_nl+0xf6a/0x1c00 [ 1244.131820][ T7840] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1244.131859][ T7840] ? rcu_is_watching+0x15/0xb0 [ 1244.131885][ T7840] ? trace_kmalloc+0x2a/0x110 [ 1244.131911][ T7840] ? __nla_parse+0x40/0x60 [ 1244.131967][ T7840] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1244.131990][ T7840] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1244.132016][ T7840] genl_family_rcv_msg_doit+0x22a/0x330 [ 1244.132042][ T7840] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1244.132073][ T7840] ? bpf_lsm_capable+0x9/0x20 [ 1244.132098][ T7840] ? security_capable+0x7e/0x2c0 [ 1244.132128][ T7840] genl_rcv_msg+0x61c/0x7a0 [ 1244.132151][ T7840] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1244.132168][ T7840] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1244.132203][ T7840] netlink_rcv_skb+0x232/0x4b0 [ 1244.132227][ T7840] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1244.132245][ T7840] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1244.132280][ T7840] ? down_read+0x272/0x2e0 [ 1244.132300][ T7840] ? genl_rcv+0xd/0x40 [ 1244.132319][ T7840] genl_rcv+0x28/0x40 [ 1244.132334][ T7840] netlink_unicast+0x75c/0x8e0 [ 1244.132364][ T7840] netlink_sendmsg+0x813/0xb40 [ 1244.132395][ T7840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1244.132421][ T7840] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1244.132438][ T7840] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1244.132460][ T7840] ____sys_sendmsg+0x972/0x9f0 [ 1244.132484][ T7840] ? futex_unqueue+0x211/0x240 [ 1244.132511][ T7840] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1244.132542][ T7840] ? import_iovec+0x73/0xa0 [ 1244.132567][ T7840] ___sys_sendmsg+0x2a5/0x360 [ 1244.132595][ T7840] ? __pfx____sys_sendmsg+0x10/0x10 [ 1244.132625][ T7840] ? futex_wait+0x29a/0x380 [ 1244.132680][ T7840] ? __fget_files+0x2a/0x420 [ 1244.132696][ T7840] ? __fget_files+0x3a0/0x420 [ 1244.132720][ T7840] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1244.132750][ T7840] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1244.132784][ T7840] ? rcu_is_watching+0x15/0xb0 [ 1244.132823][ T7840] do_syscall_64+0x14d/0xf80 [ 1244.132843][ T7840] ? trace_irq_disable+0x3b/0x150 [ 1244.132858][ T7840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.132876][ T7840] ? clear_bhb_loop+0x40/0x90 [ 1244.132897][ T7840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.132914][ T7840] RIP: 0033:0x7f050db9c819 [ 1244.132933][ T7840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1244.132948][ T7840] RSP: 002b:00007f050ea8b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1244.132967][ T7840] RAX: ffffffffffffffda RBX: 00007f050de16090 RCX: 00007f050db9c819 [ 1244.132981][ T7840] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 1244.132992][ T7840] RBP: 00007f050dc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1244.133004][ T7840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1244.133015][ T7840] R13: 00007f050de16128 R14: 00007f050de16090 R15: 00007fff9dd442f8 [ 1244.133043][ T7840] [ 1244.583407][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5100 ms [ 1244.591961][ C1] lec:lec_tx_timeout: lec0 [ 1245.104896][ T7850] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.8971'. [ 1245.118907][ T7850] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 1245.131225][ T29] audit: type=1107 audit(1776224979.910:24): pid=7845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1245.154134][ T7847] netlink: 'syz.1.8970': attribute type 1 has an invalid length. [ 1245.171724][ T7847] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8970'. [ 1245.256245][ T7847] syzkaller0: entered promiscuous mode [ 1245.270317][ T7852] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8970'. [ 1245.280982][ T7847] syzkaller0: entered allmulticast mode [ 1245.315187][ T7852] bond0: entered promiscuous mode [ 1245.320468][ T7852] bond_slave_0: entered promiscuous mode [ 1245.352633][ T7852] bond_slave_1: entered promiscuous mode [ 1245.390032][ T7852] bond0: left promiscuous mode [ 1245.411873][ T7852] bond_slave_0: left promiscuous mode [ 1245.417686][ T7852] bond_slave_1: left promiscuous mode [ 1245.866730][ T7864] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1245.881890][ T7864] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1246.043866][ T7868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1246.075018][ T7868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1246.605699][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8979'. [ 1247.094334][ T7892] syzkaller1: entered promiscuous mode [ 1247.100198][ T7892] syzkaller1: entered allmulticast mode [ 1247.767293][ T7915] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1247.778009][ T7915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1248.054834][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8989'. [ 1248.537462][ T7947] netlink: 'syz.5.8994': attribute type 10 has an invalid length. [ 1248.563516][ T7950] bond0: (slave bond_slave_1): Releasing backup interface [ 1248.579899][ T7947] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1248.634165][ T7954] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8996'. [ 1248.715749][ T7958] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 1248.924520][ T7972] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9004'. [ 1248.928213][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9002'. [ 1248.947631][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9002'. [ 1248.961288][ T7975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9005'. [ 1249.032644][ T7975] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9005'. [ 1249.061209][ T7975] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9005'. [ 1249.585956][ T8015] bond21: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 1249.600300][ T8015] bond21: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 1249.893463][ T8026] netlink: zone id is out of range [ 1249.898840][ T8026] netlink: get zone limit has 4 unknown bytes [ 1250.479458][ T8039] bond1: option updelay: invalid value (18446744073709493611) [ 1250.488981][ T8039] bond1: option updelay: allowed values 0 - 2147483647 [ 1250.566063][ T8039] bond1 (unregistering): Released all slaves [ 1250.610786][ T8046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9026'. [ 1250.663091][ T8058] openvswitch: netlink: Actions may not be safe on all matching packets [ 1250.692503][ T8058] netlink: 52 bytes leftover after parsing attributes in process `syz.6.9027'. [ 1250.872745][ T8070] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1251.784698][ T8111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9041'. [ 1251.876056][ T8113] netlink: 'syz.6.9044': attribute type 4 has an invalid length. [ 1251.886174][ T8113] sctp: [Deprecated]: syz.6.9044 (pid 8113) Use of int in max_burst socket option. [ 1251.886174][ T8113] Use struct sctp_assoc_value instead [ 1253.433335][ T8179] : option downdelay: invalid value (18446744073709547007) [ 1253.440973][ T8179] : option downdelay: allowed values 0 - 2147483647 [ 1253.453473][ T8179]  (unregistering): Released all slaves [ 1253.580145][ T8149] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1253.694227][ T8186] __nla_validate_parse: 6 callbacks suppressed [ 1253.694253][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9063'. [ 1253.712434][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9063'. [ 1253.792186][ T8200] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9067'. [ 1254.121450][ T8204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9070'. [ 1254.288134][ T8211] IPVS: set_ctl: invalid protocol: 41 10.1.1.2:20001 [ 1254.793953][ T8213] netlink: 13 bytes leftover after parsing attributes in process `syz.5.9072'. [ 1254.809691][ T7127] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.839379][ T7127] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.857521][ T7127] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.867826][ T7127] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.891314][ T8217] 8021q: VLANs not supported on ipvlan0 [ 1255.004474][ T8227] netlink: 41 bytes leftover after parsing attributes in process `syz.0.9077'. [ 1255.021837][ T8227] netlink: 140 bytes leftover after parsing attributes in process `syz.0.9077'. [ 1255.092579][ T8222] : option downdelay: invalid value (18446744073709547007) [ 1255.101489][ T8222] : option downdelay: allowed values 0 - 2147483647 [ 1255.113589][ T8222]  (unregistering): Released all slaves [ 1255.129337][ T8227] netlink: 41 bytes leftover after parsing attributes in process `syz.0.9077'. [ 1255.281547][ T8242] netlink: 'syz.5.9082': attribute type 1 has an invalid length. [ 1255.349043][ T8249] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1255.360876][ T8249] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 1255.389954][ T8242] IPv6: Can't replace route, no match found [ 1255.404468][ T8242] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9082'. [ 1255.444547][ T9516] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1255.520947][ T8253] sctp: [Deprecated]: syz.0.9080 (pid 8253) Use of int in max_burst socket option. [ 1255.520947][ T8253] Use struct sctp_assoc_value instead [ 1255.756965][ T8258] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9085'. [ 1256.032551][ T2145] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1256.045006][ T2145] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1256.068858][ T2145] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1256.090667][ T2145] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1256.093729][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1256.469279][ T8283] : option downdelay: invalid value (18446744073709547007) [ 1256.479813][ T8283] : option downdelay: allowed values 0 - 2147483647 [ 1256.497292][ T8283]  (unregistering): Released all slaves [ 1256.664993][ T8296] netlink: 'syz.1.9097': attribute type 10 has an invalid length. [ 1256.678775][ T8296] 8021q: adding VLAN 0 to HW filter on device team0 [ 1256.688805][ T8296] bond0: (slave team0): Enslaving as an active interface with an up link [ 1256.762069][ T5932] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1256.872425][ T8308] vxcan3: entered promiscuous mode [ 1257.424337][ T5932] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1257.436011][ T8344] : option downdelay: invalid value (18446744073709547007) [ 1257.481275][ T8344] : option downdelay: allowed values 0 - 2147483647 [ 1257.526875][ T8344]  (unregistering): Released all slaves [ 1257.597225][ T8351] ipvlan2: entered promiscuous mode [ 1257.793782][ T2145] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1257.822283][ T2145] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1257.841945][ T87] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1257.870541][ T87] netdevsim netdevsim2 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1257.885543][ T87] netdevsim netdevsim3 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 1257.896409][ T87] netdevsim netdevsim3 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 1257.929822][ T87] netdevsim netdevsim3 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 1257.977331][ T87] netdevsim netdevsim3 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 1258.717242][ T8399] __nla_validate_parse: 22 callbacks suppressed [ 1258.717268][ T8399] netlink: 56 bytes leftover after parsing attributes in process `syz.6.9122'. [ 1258.721308][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9121'. [ 1258.745069][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9121'. [ 1259.104802][ T5890] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1259.125849][ T8422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1259.141109][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9127'. [ 1259.391972][ T5890] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1259.653596][ T8434] : option downdelay: invalid value (18446744073709547007) [ 1259.661319][ T8434] : option downdelay: allowed values 0 - 2147483647 [ 1259.673834][ T8434]  (unregistering): Released all slaves [ 1259.724687][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9130'. [ 1259.780595][ T8441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9131'. [ 1259.941907][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1260.374770][ T29] audit: type=1107 audit(1776224995.160:25): pid=8464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1260.458230][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9140'. [ 1260.517368][ T8468] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9140'. [ 1260.588037][ T8471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9138'. [ 1260.611771][ T8471] team0: Device vlan2 is already an upper device of the team interface [ 1260.822887][ T8485] netlink: 'syz.0.9143': attribute type 1 has an invalid length. [ 1260.874104][ T8484] team0: Port device dummy0 removed [ 1260.896561][ T8484] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1260.950090][ T8484] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9142'. [ 1260.974449][ T5890] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1261.055596][ T8485] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1261.123939][ T8491] vlan2: entered allmulticast mode [ 1261.153121][ T8491] bond1: entered allmulticast mode [ 1261.233253][ T5890] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1261.654260][ T8521] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1261.989684][ T8544] netlink: 'syz.1.9158': attribute type 9 has an invalid length. [ 1262.489521][ T8559] vlan3: entered allmulticast mode [ 1262.551191][ T8565] Cannot find del_set index 0 as target [ 1263.213778][ T8594] Bluetooth: MGMT ver 1.23 [ 1263.213929][ T8156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1263.233395][ T8156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1263.251471][ T8156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1263.272311][ T8156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1263.280365][ T8156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1263.739606][ T8612] syzkaller0: entered promiscuous mode [ 1263.758218][ T8612] syzkaller0: entered allmulticast mode [ 1263.778010][ T8616] __nla_validate_parse: 6 callbacks suppressed [ 1263.778034][ T8616] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9179'. [ 1263.802229][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9179'. [ 1263.811327][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9179'. [ 1263.823064][ T8612] tcf_pedit_act: 7 callbacks suppressed [ 1263.823083][ T8612] tc action pedit offset must be on 32 bit boundaries [ 1263.836118][ T8612] tc action pedit offset must be on 32 bit boundaries [ 1263.843057][ T8612] tc action pedit offset must be on 32 bit boundaries [ 1263.850087][ T8612] tc action pedit offset must be on 32 bit boundaries [ 1263.857200][ T8612] tc action pedit offset must be on 32 bit boundaries [ 1263.864228][ T8612] tc action pedit offset must be on 32 bit boundaries [ 1263.871049][ T8612] tc action pedit offset must be on 32 bit boundaries [ 1263.877888][ T8612] tc action pedit offset must be on 32 bit boundaries [ 1263.884746][ T8612] tc action pedit offset must be on 32 bit boundaries [ 1263.891604][ T8612] tc action pedit offset must be on 32 bit boundaries [ 1263.898417][ T8612] TC_ACT_REPEAT abuse ? [ 1264.096862][ T8596] chnl_net:caif_netlink_parms(): no params data found [ 1264.134642][ T8631] : option downdelay: invalid value (18446744073709547007) [ 1264.142576][ T8631] : option downdelay: allowed values 0 - 2147483647 [ 1264.151115][ T8631]  (unregistering): Released all slaves [ 1264.270383][ T8596] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.278198][ T8596] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.286172][ T8596] bridge_slave_0: entered allmulticast mode [ 1264.294548][ T8596] bridge_slave_0: entered promiscuous mode [ 1264.304192][ T8596] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.312002][ T8596] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.319632][ T8596] bridge_slave_1: entered allmulticast mode [ 1264.329021][ T8596] bridge_slave_1: entered promiscuous mode [ 1264.406674][ T8596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1264.429945][ T8596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1264.432821][ T8644] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1264.471779][ T8644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1264.478959][ T8596] team0: Port device team_slave_0 added [ 1264.551136][ T8596] team0: Port device team_slave_1 added [ 1265.259407][ T8596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1265.267367][ T8596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1265.294980][ T8596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1265.362809][ T8596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1265.369796][ T8596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1265.382002][T20134] Bluetooth: hci3: command tx timeout [ 1265.473833][ T8596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1265.724994][ T8596] hsr_slave_0: entered promiscuous mode [ 1265.731332][ T8678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9193'. [ 1265.743197][ T8596] hsr_slave_1: entered promiscuous mode [ 1265.978910][ T8684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9195'. [ 1266.033085][ T8684] bond0: entered promiscuous mode [ 1266.038276][ T8684] bond_slave_0: entered promiscuous mode [ 1266.082035][ T8684] team0: entered promiscuous mode [ 1266.089895][ T8684] team_slave_0: entered promiscuous mode [ 1266.108048][ T8690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9199'. [ 1266.118505][ T8684] team_slave_1: entered promiscuous mode [ 1266.133992][ T8684] batadv_slave_0: entered promiscuous mode [ 1266.141237][ T8684] batadv_slave_0: left promiscuous mode [ 1266.147884][ T8684] bond0: left promiscuous mode [ 1266.153404][ T8684] bond_slave_0: left promiscuous mode [ 1266.159261][ T8684] team0: left promiscuous mode [ 1266.164687][ T8684] team_slave_0: left promiscuous mode [ 1266.173315][ T8684] team_slave_1: left promiscuous mode [ 1266.256414][ T8694] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9196'. [ 1266.341021][ T8700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9201'. [ 1266.354720][ T8700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9201'. [ 1266.388682][ T8701] tipc: Started in network mode [ 1266.393959][ T8701] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 1266.401548][ T8701] tipc: Enabled bearer , priority 10 [ 1266.445825][ T8704] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1266.574639][ T8708] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9204'. [ 1266.736019][ T8708] gretap0: entered promiscuous mode [ 1266.742291][ T8708] vlan2: entered promiscuous mode [ 1266.828534][ T8716] : option downdelay: invalid value (18446744073709547007) [ 1266.837370][ T8716] : option downdelay: allowed values 0 - 2147483647 [ 1266.846399][ T8716]  (unregistering): Released all slaves [ 1266.940934][ T8722] xfrm1: entered promiscuous mode [ 1266.965226][ T8722] xfrm1: entered allmulticast mode [ 1267.200215][ T8735] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 1267.390158][ T8596] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1267.427848][ T8596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1267.455583][ T5932] tipc: Node number set to 10136234 [ 1267.471963][T20134] Bluetooth: hci3: command tx timeout [ 1267.472787][ T8596] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1267.540048][ T8596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1267.604085][ T8596] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1267.648878][ T8596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1267.705076][ T8596] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1267.758435][ T8596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1268.041555][ T8596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1268.115647][ T8596] 8021q: adding VLAN 0 to HW filter on device team0 [ 1268.138130][ T8797] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1268.157758][ T2143] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.174717][ T2143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1268.237002][ T2143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.244250][ T2143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1268.274141][ T8809] netlink: 'syz.5.9227': attribute type 1 has an invalid length. [ 1268.705659][ T8824] ip6gre1: entered promiscuous mode [ 1268.710945][ T8824] ip6gre1: entered allmulticast mode [ 1268.787147][ T8818] __nla_validate_parse: 18 callbacks suppressed [ 1268.787161][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9229'. [ 1269.051312][ T8838] netlink: 328 bytes leftover after parsing attributes in process `syz.1.9234'. [ 1269.112084][ T8596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1269.240378][ T8853] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20002 [ 1269.267889][ T8854] netlink: 'syz.1.9239': attribute type 3 has an invalid length. [ 1269.307762][ T8857] netlink: 'syz.0.9241': attribute type 14 has an invalid length. [ 1269.342138][ T8854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9239'. [ 1269.388694][ T8854] hsr0: entered promiscuous mode [ 1269.397370][ T8854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9239'. [ 1269.478575][ T8854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9239'. [ 1269.543048][T20134] Bluetooth: hci3: command tx timeout [ 1269.856764][ T8879] : option downdelay: invalid value (18446744073709547007) [ 1269.868210][ T8879] : option downdelay: allowed values 0 - 2147483647 [ 1269.880412][ T8882] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9245'. [ 1269.925666][ T8879]  (unregistering): Released all slaves [ 1270.093497][ T8596] veth0_vlan: entered promiscuous mode [ 1270.130626][ T8596] veth1_vlan: entered promiscuous mode [ 1270.142085][ T8887] netlink: 'syz.1.9248': attribute type 4 has an invalid length. [ 1270.154977][ T8887] netlink: 'syz.1.9248': attribute type 1 has an invalid length. [ 1270.173064][ T8887] netlink: 15506 bytes leftover after parsing attributes in process `syz.1.9248'. [ 1270.213077][ T8596] veth0_macvtap: entered promiscuous mode [ 1270.244706][ T8596] veth1_macvtap: entered promiscuous mode [ 1270.273053][ T8890] netlink: 56 bytes leftover after parsing attributes in process `syz.5.9249'. [ 1270.307367][ T8596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1270.356313][ T8596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1270.395118][ T2149] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.434721][ T2149] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.466211][ T2149] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.572447][ T2149] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.608220][ T8902] geneve2: entered promiscuous mode [ 1270.694428][ T2149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.721704][ T2149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.813253][ T8914] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9256'. [ 1270.858658][ T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.879103][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9256'. [ 1270.961344][ T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1271.663512][T20134] Bluetooth: hci3: command tx timeout [ 1271.717871][ T8923] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1271.762502][ T8931] netlink: 'syz.1.9257': attribute type 1 has an invalid length. [ 1271.979447][ T8937] netlink: 'syz.4.9169': attribute type 1 has an invalid length. [ 1271.984094][ T8938] IPv6: Can't replace route, no match found [ 1272.009717][ T8935] netlink: 'syz.5.9258': attribute type 5 has an invalid length. [ 1272.048075][ T8933] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1272.069677][ T8933] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1272.616974][ T5890] IPVS: starting estimator thread 0... [ 1272.754079][ T8973] IPVS: using max 29 ests per chain, 69600 per kthread [ 1272.775577][ T8979] netlink: 'syz.0.9264': attribute type 1 has an invalid length. [ 1272.976295][ T8979] bond2: entered promiscuous mode [ 1272.981472][ T8979] bond2: entered allmulticast mode [ 1273.095317][ T8979] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1273.690967][ T8985] macvlan2: entered promiscuous mode [ 1273.737647][ T8985] macvlan2: entered allmulticast mode [ 1273.773355][ T9014] netlink: 'syz.6.9270': attribute type 1 has an invalid length. [ 1273.775638][ T8985] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1273.907283][ T9018] lo speed is unknown, defaulting to 1000 [ 1273.949173][ T9018] lo speed is unknown, defaulting to 1000 [ 1273.973297][ T9018] lo speed is unknown, defaulting to 1000 [ 1274.157344][ T9018] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1274.333939][ T9018] lo speed is unknown, defaulting to 1000 [ 1274.348771][ T9018] lo speed is unknown, defaulting to 1000 [ 1274.366940][ T9018] lo speed is unknown, defaulting to 1000 [ 1274.387695][ T9018] lo speed is unknown, defaulting to 1000 [ 1274.409531][ T9018] lo speed is unknown, defaulting to 1000 [ 1274.428248][ T9018] lo speed is unknown, defaulting to 1000 [ 1274.447458][ T9018] lo speed is unknown, defaulting to 1000 [ 1274.479368][ T9018] lo speed is unknown, defaulting to 1000 [ 1274.509809][ T9018] lo speed is unknown, defaulting to 1000 [ 1275.104167][ T9050] netlink: 'syz.1.9281': attribute type 1 has an invalid length. [ 1275.211969][ T9052] __nla_validate_parse: 8 callbacks suppressed [ 1275.211992][ T9052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9283'. [ 1275.248499][ T9052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9283'. [ 1276.172598][ T9060] dummy0: entered promiscuous mode [ 1276.178269][ T9060] macsec1: entered allmulticast mode [ 1276.204634][ T9060] dummy0: entered allmulticast mode [ 1276.248900][ T9060] dummy0: left allmulticast mode [ 1276.255292][ T9060] dummy0: left promiscuous mode [ 1276.370368][ T9069] netlink: 'syz.6.9287': attribute type 1 has an invalid length. [ 1276.620753][ T9069] bond11: entered promiscuous mode [ 1276.626613][ T9069] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1276.635233][ T9044] lo speed is unknown, defaulting to 1000 [ 1277.350515][ T9092] syzkaller1: entered promiscuous mode [ 1277.378460][ T9092] syzkaller1: entered allmulticast mode [ 1277.397309][ T8156] Bluetooth: hci1: command 0x0406 tx timeout [ 1277.452570][ T9096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9294'. [ 1277.478382][ T9101] netlink: 56 bytes leftover after parsing attributes in process `syz.6.9296'. [ 1277.536218][ T9096] netlink: 'syz.1.9294': attribute type 11 has an invalid length. [ 1277.545360][ T9098] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.9295'. [ 1277.566554][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9297'. [ 1277.576174][ T9104] netlink: 'syz.6.9297': attribute type 15 has an invalid length. [ 1277.585009][ T9104] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9297'. [ 1277.681077][ T9106] openvswitch: netlink: Actions may not be safe on all matching packets [ 1277.938521][ T9119] bond_slave_0: entered promiscuous mode [ 1277.944736][ T9119] bond_slave_1: entered promiscuous mode [ 1277.956414][ T9119] macvlan2: entered promiscuous mode [ 1277.971758][ T9119] bond0: entered promiscuous mode [ 1277.981453][ T9119] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1277.990836][ T9119] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 1278.003904][ T9119] bond0: left promiscuous mode [ 1278.009782][ T9119] bond_slave_0: left promiscuous mode [ 1278.015503][ T9119] bond_slave_1: left promiscuous mode [ 1278.205723][ T9134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1278.220855][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9308'. [ 1278.251728][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9308'. [ 1278.253481][ T9140] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9306'. [ 1278.589553][ T2148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.607194][ T2148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.766576][ T9180] netlink: 'syz.4.9321': attribute type 1 has an invalid length. [ 1279.140686][ T9204] Bluetooth: MGMT ver 1.23 [ 1279.702545][ T9226] netlink: 'syz.6.9337': attribute type 8 has an invalid length. [ 1279.879410][ T9210] lo speed is unknown, defaulting to 1000 [ 1280.121420][ T9220] lo speed is unknown, defaulting to 1000 [ 1280.449559][ T9255] __nla_validate_parse: 9 callbacks suppressed [ 1280.449583][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9345'. [ 1280.558083][ T9255] macvlan2: entered promiscuous mode [ 1280.564442][ T9255] macvlan2: entered allmulticast mode [ 1280.570379][ T9255] veth1_to_batadv: entered allmulticast mode [ 1280.616356][ T9265] netlink: 'syz.0.9345': attribute type 10 has an invalid length. [ 1280.684187][ T9256] tipc: Enabling of bearer rejected, failed to enable media [ 1280.824851][ T9265] team0: Cannot enslave team device to itself [ 1281.410666][ T9285] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9351'. [ 1281.426275][ T9285] netlink: 'syz.4.9351': attribute type 3 has an invalid length. [ 1281.435738][ T9285] netlink: 4344 bytes leftover after parsing attributes in process `syz.4.9351'. [ 1281.446348][ T9285] netlink: 'syz.4.9351': attribute type 3 has an invalid length. [ 1281.455264][ T9285] netlink: 4344 bytes leftover after parsing attributes in process `syz.4.9351'. [ 1281.628857][ T9288] netlink: 'syz.1.9352': attribute type 16 has an invalid length. [ 1282.002125][ T9306] netlink: 248 bytes leftover after parsing attributes in process `syz.1.9358'. [ 1282.173621][ T9314] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.9361'. [ 1282.214518][ T9318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9364'. [ 1282.251701][ T9318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9364'. [ 1282.308780][ T9325] netlink: 'syz.4.9365': attribute type 3 has an invalid length. [ 1282.339114][ T9325] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9365'. [ 1282.389057][ T9325] nbd: must specify an index to disconnect [ 1282.522892][ T9333] pim6reg1: entered allmulticast mode [ 1282.900968][ T9361] netlink: 'syz.6.9378': attribute type 1 has an invalid length. [ 1282.965979][ T9363] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9377'. [ 1283.053980][ T9336] lo speed is unknown, defaulting to 1000 [ 1283.077490][ T9361] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1283.096603][ T9361] bond12: (slave vxcan3): Error -95 calling set_mac_address [ 1283.180505][ T9361] IPv6: Can't replace route, no match found [ 1283.457794][ T9394] netlink: 'syz.0.9385': attribute type 1 has an invalid length. [ 1283.595987][ T9400] openvswitch: netlink: Flow actions attr not present in new flow. [ 1284.368442][ T9394] bond3: entered promiscuous mode [ 1284.377414][ T9394] bond3: entered allmulticast mode [ 1284.393186][ T9394] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1284.437168][ T9398] macvlan3: entered promiscuous mode [ 1284.443873][ T9398] macvlan3: entered allmulticast mode [ 1284.483091][ T9398] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1285.626630][ T9458] __nla_validate_parse: 8 callbacks suppressed [ 1285.626653][ T9458] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9402'. [ 1286.525196][ T9467] lo speed is unknown, defaulting to 1000 [ 1287.054266][ T9488] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9411'. [ 1287.130908][ T9488] netlink: 'syz.5.9411': attribute type 1 has an invalid length. [ 1287.138795][ T9488] netlink: 'syz.5.9411': attribute type 1 has an invalid length. [ 1287.146683][ T9488] netlink: 9172 bytes leftover after parsing attributes in process `syz.5.9411'. [ 1287.634847][ T9499] netlink: 'syz.1.9414': attribute type 10 has an invalid length. [ 1287.662738][ T9499] netlink: 228 bytes leftover after parsing attributes in process `syz.1.9414'. [ 1288.028006][ T9491] lo speed is unknown, defaulting to 1000 [ 1288.221445][ T9518] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1288.262216][ T9525] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9418'. [ 1288.279249][ T9524] batman_adv: batadv0: Adding interface: vlan3 [ 1288.297143][ T9524] batman_adv: batadv0: The MTU of interface vlan3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1288.362210][ T9524] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 1289.072870][ T9535] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9425'. [ 1289.159842][ T9536] vlan3: entered allmulticast mode [ 1289.165680][ T9536] bond0: entered allmulticast mode [ 1289.171187][ T9536] bond_slave_0: entered allmulticast mode [ 1289.177751][ T9536] bond_slave_1: entered allmulticast mode [ 1289.253828][ T9535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1289.262154][ T9547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9428'. [ 1289.283217][ T9535] bond_slave_0: left allmulticast mode [ 1289.297957][ T9535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1289.312614][ T9535] bond_slave_1: left allmulticast mode [ 1289.330651][ T9535] bond0 (unregistering): Released all slaves [ 1289.555800][ T9547] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1289.588552][ T9547] bond2: (slave bond3): Enslaving as an active interface with an up link [ 1289.598110][ T9548] bond2: (slave bond3): Error -95 calling ndo_bpf [ 1289.615300][ T9563] tap0: tun_chr_ioctl cmd 1074025677 [ 1289.635863][ T9563] tap0: linktype set to 773 [ 1289.775116][ T9569] netlink: 'syz.1.9433': attribute type 1 has an invalid length. [ 1289.860705][ T9574] netlink: 268 bytes leftover after parsing attributes in process `syz.0.9434'. [ 1289.891993][ T9574] netlink: 136 bytes leftover after parsing attributes in process `syz.0.9434'. [ 1289.921851][ T9574] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9434'. [ 1290.489773][ T9618] "syz.4.9447" (9618) uses obsolete ecb(arc4) skcipher [ 1290.524128][ T9627] netlink: 'syz.1.9449': attribute type 4 has an invalid length. [ 1290.604729][ T9629] syzkaller1: entered promiscuous mode [ 1290.622191][ T9629] syzkaller1: entered allmulticast mode [ 1290.717123][ T9629] : entered promiscuous mode [ 1291.340011][ T9669] netlink: 'syz.6.9460': attribute type 1 has an invalid length. [ 1291.352247][ T9669] netlink: 'syz.6.9460': attribute type 2 has an invalid length. [ 1291.367295][ T9669] __nla_validate_parse: 1 callbacks suppressed [ 1291.367321][ T9669] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9460'. [ 1291.433070][ T9672] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1291.487580][ T9672] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.496486][ T9672] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.614309][ T9678] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9462'. [ 1291.638273][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9462'. [ 1291.654447][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9462'. [ 1291.761824][ T9680] FAULT_INJECTION: forcing a failure. [ 1291.761824][ T9680] name failslab, interval 1, probability 0, space 0, times 0 [ 1291.795893][ T9680] CPU: 1 UID: 0 PID: 9680 Comm: syz.6.9463 Not tainted syzkaller #0 PREEMPT(full) [ 1291.795923][ T9680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1291.795936][ T9680] Call Trace: [ 1291.795944][ T9680] [ 1291.795953][ T9680] dump_stack_lvl+0xe8/0x150 [ 1291.795988][ T9680] should_fail_ex+0x412/0x560 [ 1291.796022][ T9680] should_failslab+0xa8/0x100 [ 1291.796050][ T9680] __kmalloc_noprof+0xe8/0x760 [ 1291.796073][ T9680] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1291.796101][ T9680] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1291.796131][ T9680] ? tomoyo_path_number_perm+0x219/0x630 [ 1291.796166][ T9680] tomoyo_path_number_perm+0x246/0x630 [ 1291.796194][ T9680] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1291.796222][ T9680] ? __lock_acquire+0x6b5/0x2cf0 [ 1291.796256][ T9680] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1291.796300][ T9680] ? __fget_files+0x2a/0x420 [ 1291.796321][ T9680] ? __fget_files+0x2a/0x420 [ 1291.796337][ T9680] ? __fget_files+0x3a0/0x420 [ 1291.796352][ T9680] ? __fget_files+0x2a/0x420 [ 1291.796374][ T9680] security_file_ioctl+0xc3/0x2a0 [ 1291.796401][ T9680] __se_sys_ioctl+0x47/0x170 [ 1291.796427][ T9680] do_syscall_64+0x14d/0xf80 [ 1291.796450][ T9680] ? trace_irq_disable+0x3b/0x150 [ 1291.796466][ T9680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.796485][ T9680] ? clear_bhb_loop+0x40/0x90 [ 1291.796508][ T9680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.796530][ T9680] RIP: 0033:0x7fb746f9c819 [ 1291.796549][ T9680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1291.796565][ T9680] RSP: 002b:00007fb747dea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1291.796586][ T9680] RAX: ffffffffffffffda RBX: 00007fb747215fa0 RCX: 00007fb746f9c819 [ 1291.796600][ T9680] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 1291.796611][ T9680] RBP: 00007fb747dea090 R08: 0000000000000000 R09: 0000000000000000 [ 1291.796622][ T9680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1291.796633][ T9680] R13: 00007fb747216038 R14: 00007fb747215fa0 R15: 00007ffd8def6bc8 [ 1291.796662][ T9680] [ 1291.797923][ T9680] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1292.274378][ T9692] netlink: 92 bytes leftover after parsing attributes in process `syz.0.9465'. [ 1292.477647][ T9697] netlink: 44 bytes leftover after parsing attributes in process `syz.6.9468'. [ 1292.488189][ T9697] netlink: 43 bytes leftover after parsing attributes in process `syz.6.9468'. [ 1292.498341][ T9697] netlink: 'syz.6.9468': attribute type 5 has an invalid length. [ 1292.506577][ T9697] netlink: 43 bytes leftover after parsing attributes in process `syz.6.9468'. [ 1292.529482][ T9697] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9468'. [ 1292.549050][ T9697] netlink: 260 bytes leftover after parsing attributes in process `syz.6.9468'. [ 1292.578144][ T9697] netlink: 'syz.6.9468': attribute type 1 has an invalid length. [ 1292.736539][ T9708] netlink: 'syz.1.9472': attribute type 30 has an invalid length. [ 1292.837509][ T9708] netlink: 'syz.1.9472': attribute type 30 has an invalid length. [ 1292.955051][ T9722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1292.963724][ T9722] batadv_slave_0: entered promiscuous mode [ 1292.969828][ T9722] batadv_slave_0: entered allmulticast mode [ 1293.005786][ T9722] Bluetooth: MGMT ver 1.23 [ 1293.084223][ T9726] FAULT_INJECTION: forcing a failure. [ 1293.084223][ T9726] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.106739][ T9726] CPU: 0 UID: 0 PID: 9726 Comm: syz.1.9477 Not tainted syzkaller #0 PREEMPT(full) [ 1293.106771][ T9726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1293.106783][ T9726] Call Trace: [ 1293.106791][ T9726] [ 1293.106800][ T9726] dump_stack_lvl+0xe8/0x150 [ 1293.106834][ T9726] should_fail_ex+0x412/0x560 [ 1293.106869][ T9726] should_failslab+0xa8/0x100 [ 1293.106897][ T9726] __kmalloc_noprof+0xe8/0x760 [ 1293.106919][ T9726] ? tomoyo_encode+0x28b/0x550 [ 1293.106943][ T9726] tomoyo_encode+0x28b/0x550 [ 1293.106968][ T9726] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1293.106998][ T9726] ? tomoyo_path_number_perm+0x219/0x630 [ 1293.107024][ T9726] tomoyo_path_number_perm+0x246/0x630 [ 1293.107052][ T9726] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1293.107088][ T9726] ? __lock_acquire+0x6b5/0x2cf0 [ 1293.107120][ T9726] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1293.107161][ T9726] ? __fget_files+0x2a/0x420 [ 1293.107181][ T9726] ? __fget_files+0x2a/0x420 [ 1293.107198][ T9726] ? __fget_files+0x3a0/0x420 [ 1293.107213][ T9726] ? __fget_files+0x2a/0x420 [ 1293.107233][ T9726] security_file_ioctl+0xc3/0x2a0 [ 1293.107259][ T9726] __se_sys_ioctl+0x47/0x170 [ 1293.107285][ T9726] do_syscall_64+0x14d/0xf80 [ 1293.107306][ T9726] ? trace_irq_disable+0x3b/0x150 [ 1293.107322][ T9726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.107341][ T9726] ? clear_bhb_loop+0x40/0x90 [ 1293.107364][ T9726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.107383][ T9726] RIP: 0033:0x7f050db9c819 [ 1293.107400][ T9726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1293.107414][ T9726] RSP: 002b:00007f050eaac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1293.107434][ T9726] RAX: ffffffffffffffda RBX: 00007f050de15fa0 RCX: 00007f050db9c819 [ 1293.107446][ T9726] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 1293.107455][ T9726] RBP: 00007f050eaac090 R08: 0000000000000000 R09: 0000000000000000 [ 1293.107465][ T9726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1293.107475][ T9726] R13: 00007f050de16038 R14: 00007f050de15fa0 R15: 00007fff9dd442f8 [ 1293.107503][ T9726] [ 1293.107525][ T9726] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1293.549319][ T9748] netlink: 'syz.5.9484': attribute type 1 has an invalid length. [ 1293.659706][ T9757] IPv6: Can't replace route, no match found [ 1293.832671][ T9738] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.840412][ T9738] bridge0: port 1(bridge_slave_0) entered disabled state [ 1294.134025][ T9738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1294.174119][ T9738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1294.649518][ T9748] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1294.692977][ T9739] bridge_slave_0 (unregistering): left allmulticast mode [ 1294.719866][ T9739] bridge_slave_0 (unregistering): left promiscuous mode [ 1294.740206][ T9739] bridge0: port 1(bridge_slave_0) entered disabled state [ 1294.804133][ T9767] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 1294.807846][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.843754][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.890042][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.900277][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.931210][ T9784] netlink: 'syz.1.9494': attribute type 1 has an invalid length. [ 1295.127921][ T9799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1295.954214][ T9815] block nbd3: server does not support multiple connections per device. [ 1295.973294][ T9815] block nbd3: shutting down sockets [ 1295.990622][ T9820] netlink: 'syz.4.9501': attribute type 1 has an invalid length. [ 1296.019678][ T9818] bond10: entered promiscuous mode [ 1296.033051][ T9818] bond10: entered allmulticast mode [ 1296.158757][ T9822] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1296.167533][ T9820] IPv6: Can't replace route, no match found [ 1296.245866][ T9824] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1296.259703][ T9824] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1296.425404][ T9844] IPVS: fo: FWM 3 0x00000003 - no destination available [ 1296.608895][ T9849] __nla_validate_parse: 7 callbacks suppressed [ 1296.608920][ T9849] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9508'. [ 1296.794091][ T9858] netlink: 'syz.0.9511': attribute type 1 has an invalid length. [ 1296.871884][ T9833] lo speed is unknown, defaulting to 1000 [ 1296.886174][ T9860] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1296.904172][ T9860] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 1296.935563][ T9858] IPv6: Can't replace route, no match found [ 1296.954000][ T9858] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9511'. [ 1297.143681][ T9874] netlink: 'syz.0.9515': attribute type 1 has an invalid length. [ 1297.612287][ T9842] lo speed is unknown, defaulting to 1000 [ 1297.619287][ T9900] xt_ecn: cannot match TCP bits for non-tcp packets [ 1297.656463][ T9901] netlink: 244 bytes leftover after parsing attributes in process `syz.0.9520'. [ 1298.246824][ T9923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9530'. [ 1298.289222][ T9927] netlink: 'syz.1.9531': attribute type 8 has an invalid length. [ 1298.333030][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9531'. [ 1298.403703][ T9927] netlink: 'syz.1.9531': attribute type 3 has an invalid length. [ 1298.461378][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9531'. [ 1298.586367][ T9926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9529'. [ 1299.003682][ T9954] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9537'. [ 1299.066752][ T9965] netlink: 'syz.1.9540': attribute type 1 has an invalid length. [ 1299.136927][ T9962] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9538'. [ 1299.170385][ T9968] dvmrp0: entered allmulticast mode [ 1299.177389][ T9965] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1299.353719][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9535'. [ 1299.640369][ T9978] netlink: 'syz.5.9543': attribute type 4 has an invalid length. [ 1299.686599][ T9978] netlink: 'syz.5.9543': attribute type 4 has an invalid length. [ 1300.596147][ T9992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1300.836477][ T9992] tipc: Resetting bearer [ 1300.912243][ T1295] lec:lec_start_xmit: lec0:No lecd attached [ 1301.135152][ T2151] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1301.172882][ T2151] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.197353][ T2151] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1301.214344][ T2151] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.243371][ T2151] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1301.268819][ T2151] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.289161][ T2151] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1301.319762][ T2151] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.568774][T10007] lo speed is unknown, defaulting to 1000 [ 1301.686532][T10045] netlink: 'syz.1.9559': attribute type 1 has an invalid length. [ 1301.809631][T10045] IPv6: Can't replace route, no match found [ 1301.819585][T10045] __nla_validate_parse: 5 callbacks suppressed [ 1301.819607][T10045] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9559'. [ 1301.854022][T10049] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1301.865490][T10049] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 1301.895662][T10023] lo speed is unknown, defaulting to 1000 [ 1301.946751][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9561'. [ 1302.338521][T10051] netlink: 'syz.4.9561': attribute type 1 has an invalid length. [ 1303.135987][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9570'. [ 1303.145790][T10092] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9570'. [ 1303.180543][T10092] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9570'. [ 1303.259525][ T2146] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1303.279228][ T2146] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1303.312514][ T2146] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1303.339032][ T2146] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1303.379145][T10070] lo speed is unknown, defaulting to 1000 [ 1303.732949][T10114] netlink: 'syz.0.9577': attribute type 1 has an invalid length. [ 1303.764137][T10091] lo speed is unknown, defaulting to 1000 [ 1303.895753][T10114] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1303.972036][T10121] netlink: 'syz.4.9578': attribute type 1 has an invalid length. [ 1304.044134][T10127] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9580'. [ 1304.252579][T10121] bond2: entered promiscuous mode [ 1304.257832][T10121] bond2: entered allmulticast mode [ 1304.264980][T10121] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1304.398941][T10136] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 1304.697486][T10131] macvlan2: entered promiscuous mode [ 1304.713004][T10131] macvlan2: entered allmulticast mode [ 1304.728996][T10131] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1305.126343][T10154] netlink: 'syz.5.9586': attribute type 1 has an invalid length. [ 1305.134936][T10155] netlink: 'syz.5.9586': attribute type 1 has an invalid length. [ 1305.188761][T10158] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9588'. [ 1305.237032][T10154] bond11: entered promiscuous mode [ 1305.264897][T10154] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1305.355484][T10158] netlink: 'syz.0.9588': attribute type 11 has an invalid length. [ 1305.403932][T10172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9591'. [ 1305.426929][T10170] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9590'. [ 1305.488120][T10170] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1305.555302][T10177] bond12: (slave geneve3): Enslaving as an active interface with an up link [ 1305.589175][T10181] IPVS: Error connecting to the multicast addr [ 1305.607352][T10182] IPVS: Error connecting to the multicast addr [ 1305.635832][T10183] sctp: [Deprecated]: syz.6.9593 (pid 10183) Use of int in max_burst socket option deprecated. [ 1305.635832][T10183] Use struct sctp_assoc_value instead [ 1305.802791][T10188] netlink: 'syz.5.9595': attribute type 1 has an invalid length. [ 1305.853045][T10188] bond13: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1305.866680][T10188] bond13: (slave vxcan1): Error -95 calling set_mac_address [ 1305.902486][T10190] IPv6: Can't replace route, no match found [ 1305.911527][T10190] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9595'. [ 1306.581628][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5670 ms [ 1306.590008][ C1] lec:lec_tx_timeout: lec0 [ 1306.768604][T10225] IPVS: fo: FWM 3 0x00000003 - no destination available [ 1307.114592][T10221] lo speed is unknown, defaulting to 1000 [ 1307.710821][T10274] netlink: 'syz.1.9617': attribute type 29 has an invalid length. [ 1308.033525][T10281] syzkaller1: entered promiscuous mode [ 1308.039078][T10281] syzkaller1: entered allmulticast mode [ 1308.102147][T20134] Bluetooth: hci5: command 0x0405 tx timeout [ 1308.373087][T10292] netlink: 'syz.0.9622': attribute type 1 has an invalid length. [ 1308.431904][T10267] lo speed is unknown, defaulting to 1000 [ 1308.459292][T10293] __nla_validate_parse: 1 callbacks suppressed [ 1308.459316][T10293] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9622'. [ 1308.530168][T10292] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1308.649592][T10308] netlink: 'syz.0.9626': attribute type 1 has an invalid length. [ 1308.786037][T10309] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1308.792432][T10308] IPv6: Can't replace route, no match found [ 1308.819355][T10308] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9626'. [ 1308.848629][T10309] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 1309.049885][T10323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1309.220668][T10302] lo speed is unknown, defaulting to 1000 [ 1309.257212][T10332] xt_connbytes: Forcing CT accounting to be enabled [ 1309.705421][T10346] pim6reg1: entered promiscuous mode [ 1309.710786][T10346] pim6reg1: entered allmulticast mode [ 1309.793005][T10306] lo speed is unknown, defaulting to 1000 [ 1309.831667][T10354] netlink: 'syz.0.9637': attribute type 12 has an invalid length. [ 1309.852734][T10354] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9637'. [ 1310.019853][T10358] netlink: 'syz.0.9639': attribute type 1 has an invalid length. [ 1310.045217][T10356] netlink: 'syz.1.9638': attribute type 11 has an invalid length. [ 1310.052914][T10360] netlink: 3 bytes leftover after parsing attributes in process `syz.5.9640'. [ 1310.072668][T10360] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9640'. [ 1310.082351][T10360] netlink: 3 bytes leftover after parsing attributes in process `syz.5.9640'. [ 1310.092955][T10360] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9640'. [ 1310.125810][T10360] netlink: 3 bytes leftover after parsing attributes in process `syz.5.9640'. [ 1310.183240][T10365] IPv6: Can't replace route, no match found [ 1310.192429][T10365] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9639'. [ 1310.223147][T10358] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1310.235379][T10358] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 1310.272007][T10367] veth0: entered promiscuous mode [ 1310.278278][T10367] bond0: entered promiscuous mode [ 1310.283956][T10367] mac80211_hwsim hwsim95 wlan1: entered promiscuous mode [ 1310.329794][T10367] bond0: left promiscuous mode [ 1310.382454][T10367] mac80211_hwsim hwsim95 wlan1: left promiscuous mode [ 1310.395196][T10367] veth0: left promiscuous mode [ 1310.528457][T10373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1310.692948][T10382] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.9645'. [ 1310.714902][T10382] ksmbd: Unknown IPC event: 1, ignore. [ 1310.845900][T10390] bridge_slave_1: left promiscuous mode [ 1310.869226][T10390] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.002080][T10403] erspan0: entered promiscuous mode [ 1311.013388][T10403] macsec1: entered promiscuous mode [ 1311.043068][T10403] erspan0: left promiscuous mode [ 1311.133136][T10410] netlink: 'syz.5.9654': attribute type 11 has an invalid length. [ 1311.133166][T10408] syzkaller0: entered promiscuous mode [ 1311.154492][T10408] syzkaller0: entered allmulticast mode [ 1311.375165][T10421] netlink: 'syz.0.9658': attribute type 10 has an invalid length. [ 1311.458446][T10429] vlan4: entered promiscuous mode [ 1311.473540][T10429] bridge0: entered promiscuous mode [ 1311.697285][T10429] netlink: 'syz.6.9659': attribute type 11 has an invalid length. [ 1311.739286][T10447] bridge_slave_1: left allmulticast mode [ 1311.782924][T10447] vlan2: left allmulticast mode [ 1311.799984][T10447] bond1: left allmulticast mode [ 1311.822079][T10447] ip6gre1: left promiscuous mode [ 1311.833966][T10447] ip6gre1: left allmulticast mode [ 1311.846575][T10447] bond2: left promiscuous mode [ 1311.859595][T10447] bond2: left allmulticast mode [ 1311.891499][T10447] macvlan2: left promiscuous mode [ 1311.908897][T10447] macvlan2: left allmulticast mode [ 1311.921492][T10447] bond3: left promiscuous mode [ 1311.928707][T10447] bond3: left allmulticast mode [ 1312.018547][T10434] lo speed is unknown, defaulting to 1000 [ 1312.472200][T10483] netlink: 'syz.0.9673': attribute type 29 has an invalid length. [ 1312.526454][T10483] netlink: 'syz.0.9673': attribute type 1 has an invalid length. [ 1312.544069][T10481] netlink: 'syz.1.9672': attribute type 1 has an invalid length. [ 1312.613607][T10491] netlink: 'syz.1.9672': attribute type 8 has an invalid length. [ 1312.678682][T10493] netlink: 'syz.4.9675': attribute type 1 has an invalid length. [ 1312.692911][T10493] nbd: error processing sock list [ 1312.712313][T10419] lo speed is unknown, defaulting to 1000 [ 1312.746397][T10493] netlink: 'syz.4.9675': attribute type 1 has an invalid length. [ 1312.754903][T10493] nbd: error processing sock list [ 1312.817964][T10493] nbd: error processing sock list [ 1312.866143][T10493] nbd: error processing sock list [ 1312.908790][T10493] nbd: error processing sock list [ 1312.917593][T10493] nbd: error processing sock list [ 1312.933891][T10493] nbd: error processing sock list [ 1313.005227][T10493] nbd: error processing sock list [ 1313.020978][T10493] nbd: error processing sock list [ 1313.046603][T10493] nbd: error processing sock list [ 1313.067352][T10493] nbd: error processing sock list [ 1313.090371][T10493] nbd: error processing sock list [ 1313.146392][T10493] nbd: error processing sock list [ 1313.166952][T10493] nbd: error processing sock list [ 1313.193301][T10493] nbd: error processing sock list [ 1313.437568][T10493] nbd: error processing sock list [ 1313.443769][T10493] nbd: error processing sock list [ 1313.449487][T10493] nbd: error processing sock list [ 1313.454904][T10493] nbd: error processing sock list [ 1313.482972][T10493] nbd: error processing sock list [ 1313.496333][T10493] nbd: error processing sock list [ 1313.821642][T10527] xt_hashlimit: size too large, truncated to 1048576 [ 1313.903823][T10534] __nla_validate_parse: 12 callbacks suppressed [ 1313.903846][T10534] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9684'. [ 1314.341317][T10557] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.9690'. [ 1314.373351][T10560] netlink: 57 bytes leftover after parsing attributes in process `syz.1.9691'. [ 1314.383331][T10557] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.9690'. [ 1314.401874][T10560] netlink: 140 bytes leftover after parsing attributes in process `syz.1.9691'. [ 1314.421740][T10560] netlink: 57 bytes leftover after parsing attributes in process `syz.1.9691'. [ 1314.573247][T10571] team0: Port device syz_tun added [ 1314.629103][T10571] team0: Port device syz_tun removed [ 1314.653105][T10571] bond0: (slave team0): Releasing backup interface [ 1314.680321][T10571] bridge_slave_0: left allmulticast mode [ 1314.708148][T10571] bridge_slave_0: left promiscuous mode [ 1314.717017][T10571] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.735034][T10571] bridge_slave_1: left allmulticast mode [ 1314.753011][T10571] bridge_slave_1: left promiscuous mode [ 1314.761363][T10571] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.795178][T10571] bond0: (slave bond_slave_0): Releasing backup interface [ 1314.806344][T10571] team0: Port device team_slave_0 removed [ 1314.823326][T10571] team0: Port device team_slave_1 removed [ 1314.830060][T10571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1314.846688][T10571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1314.864319][T10571] bond2: (slave bond3): Releasing backup interface [ 1315.096065][T10590] syzkaller0: entered promiscuous mode [ 1315.106736][T10590] syzkaller0: entered allmulticast mode [ 1315.148275][T10590] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9699'. [ 1315.339101][T10603] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9704'. [ 1315.596351][T10618] syzkaller0: entered promiscuous mode [ 1315.612920][T10618] syzkaller0: entered allmulticast mode [ 1315.627211][T10624] tipc: Started in network mode [ 1315.645619][T10618] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9707'. [ 1315.661919][T10624] tipc: Node identity 3efa060ca215, cluster identity 4711 [ 1315.700824][T10624] tipc: Enabled bearer , priority 0 [ 1315.757798][T10616] tipc: Resetting bearer [ 1315.860208][T10616] tipc: Disabling bearer [ 1315.870635][T10644] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9710'. [ 1316.457682][T10660] lo speed is unknown, defaulting to 1000 [ 1316.530777][T10677] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20001 [ 1316.820540][T10681] validate_nla: 24 callbacks suppressed [ 1316.835242][T10681] netlink: 'syz.4.9723': attribute type 1 has an invalid length. [ 1316.988186][T10691] netlink: 'syz.6.9728': attribute type 10 has an invalid length. [ 1317.225841][T10707] xt_bpf: check failed: parse error [ 1317.721304][T10715] netlink: 'syz.4.9735': attribute type 1 has an invalid length. [ 1317.771525][T10715] bond3: entered promiscuous mode [ 1317.778911][T10715] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1318.052694][T10745] block nbd3: server does not support multiple connections per device. [ 1318.081915][T10745] block nbd3: shutting down sockets [ 1318.315030][T10772] xt_TCPMSS: Only works on TCP SYN packets [ 1318.386509][T10779] netlink: 'syz.4.9753': attribute type 1 has an invalid length. [ 1318.584165][T10782] bond8: entered promiscuous mode [ 1318.635296][T10782] bond8: entered allmulticast mode [ 1318.652137][T10782] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1318.916261][T10803] geneve3: entered promiscuous mode [ 1318.948639][T10807] vlan0: entered promiscuous mode [ 1318.954669][T10807] team0: entered promiscuous mode [ 1318.959977][T10807] team_slave_0: entered promiscuous mode [ 1318.966605][T10807] team_slave_1: entered promiscuous mode [ 1319.213456][T10818] __nla_validate_parse: 10 callbacks suppressed [ 1319.213486][T10818] netlink: 108 bytes leftover after parsing attributes in process `syz.5.9765'. [ 1319.343063][T10829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9771'. [ 1319.582609][T10846] vlan4: entered promiscuous mode [ 1319.587971][T10846] geneve1: entered promiscuous mode [ 1319.594337][T10846] vlan4: entered allmulticast mode [ 1319.599849][T10846] geneve1: entered allmulticast mode [ 1319.880529][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9778'. [ 1320.101391][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9787'. [ 1320.116561][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9787'. [ 1320.752984][T10897] netlink: 'syz.0.9793': attribute type 16 has an invalid length. [ 1320.784087][T10897] netlink: 'syz.0.9793': attribute type 17 has an invalid length. [ 1320.958536][T10897] 8021q: adding VLAN 0 to HW filter on device team0 [ 1320.978933][T10897] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1321.004244][T10879] lo speed is unknown, defaulting to 1000 [ 1321.024034][T10900] netlink: 'syz.5.9796': attribute type 1 has an invalid length. [ 1321.079009][T10894] lo speed is unknown, defaulting to 1000 [ 1321.144013][T10900] IPv6: Can't replace route, no match found [ 1321.197821][T10900] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9796'. [ 1321.248608][T10903] bond14: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1321.296504][T10903] bond14: (slave vxcan1): Error -95 calling set_mac_address [ 1321.497804][T10919] netlink: 'syz.4.9799': attribute type 11 has an invalid length. [ 1321.521216][T10919] netlink: 'syz.4.9799': attribute type 23 has an invalid length. [ 1321.536474][T10922] openvswitch: netlink: Tunnel attr 4 has unexpected len 0 expected 1 [ 1321.550734][T10919] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9799'. [ 1321.579418][T10922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1321.596092][T10925] netlink: 'syz.0.9801': attribute type 1 has an invalid length. [ 1321.626640][T10922] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9800'. [ 1321.697020][T10919] netlink: 'syz.4.9799': attribute type 1 has an invalid length. [ 1321.911405][ T9516] IPVS: starting estimator thread 0... [ 1321.918607][T10941] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9803'. [ 1322.006275][T10941] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9803'. [ 1322.021735][T10942] IPVS: using max 31 ests per chain, 74400 per kthread [ 1322.617150][T10965] netlink: 'syz.6.9810': attribute type 1 has an invalid length. [ 1322.665369][T10965] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1322.678695][T10965] bond13: (slave vxcan3): Error -95 calling set_mac_address [ 1322.724342][T10967] IPv6: Can't replace route, no match found [ 1322.830011][T10936] lo speed is unknown, defaulting to 1000 [ 1323.110067][T10988] netlink: 'syz.4.9815': attribute type 1 has an invalid length. [ 1323.403537][T10988] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1323.439662][T10993] vlan2: entered allmulticast mode [ 1323.446559][T10993] bond4: entered allmulticast mode [ 1323.468724][T10996] bond4: (slave geneve2): making interface the new active one [ 1323.476359][T10996] geneve2: entered allmulticast mode [ 1323.484351][T10996] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 1323.541147][ T2128] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1323.568420][ T2128] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1323.592735][ T2128] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1323.615136][ T2128] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1323.880076][T11013] bridge0: port 3(bond0) entered blocking state [ 1323.890060][T11013] bridge0: port 3(bond0) entered disabled state [ 1323.897504][T11013] bond0: entered allmulticast mode [ 1323.904166][T11013] bond_slave_0: entered allmulticast mode [ 1323.910046][T11013] bond_slave_1: entered allmulticast mode [ 1323.923450][T11013] bond0: entered promiscuous mode [ 1323.928593][T11013] bond_slave_0: entered promiscuous mode [ 1323.943194][T11013] bond_slave_1: entered promiscuous mode [ 1323.958063][T11013] bridge0: port 3(bond0) entered blocking state [ 1323.965418][T11013] bridge0: port 3(bond0) entered forwarding state [ 1324.171992][T11033] netlink: 'syz.0.9824': attribute type 3 has an invalid length. [ 1324.270342][T11052] __nla_validate_parse: 7 callbacks suppressed [ 1324.270364][T11052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9829'. [ 1324.292721][T11052] ipvlan2: entered allmulticast mode [ 1324.298187][T11052] syz_tun: entered allmulticast mode [ 1324.325905][T11053] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9828'. [ 1324.504223][T11056] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9829'. [ 1324.514249][T11056] openvswitch: netlink: Flow key attr not present in new flow. [ 1325.898506][T10983] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1326.186621][T11083] m1Ie5nè‹Ò: entered promiscuous mode [ 1326.502286][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1327.288385][T11148] x_tables: duplicate underflow at hook 3 [ 1327.539760][T11162] netlink: 'syz.4.9858': attribute type 1 has an invalid length. [ 1327.595689][T11168] "syz.0.9860" (11168) uses obsolete ecb(arc4) skcipher [ 1327.595742][T11171] netlink: 49 bytes leftover after parsing attributes in process `syz.5.9861'. [ 1327.623122][T11171] netlink: 140 bytes leftover after parsing attributes in process `syz.5.9861'. [ 1327.668354][T11171] netlink: 49 bytes leftover after parsing attributes in process `syz.5.9861'. [ 1327.951414][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9873'. [ 1327.964732][T11193] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9871'. [ 1328.091868][T11205] bond14: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 1328.120667][T11214] netlink: 'syz.0.9875': attribute type 1 has an invalid length. [ 1328.227994][T11211] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.9876'. [ 1328.263356][T11219] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1328.263777][ T9516] IPVS: starting estimator thread 0... [ 1328.371711][T11222] IPVS: using max 37 ests per chain, 88800 per kthread [ 1328.373204][T11218] bond9: entered promiscuous mode [ 1328.404022][T11218] bond9: entered allmulticast mode [ 1328.408077][T11228] netlink: 'syz.6.9878': attribute type 1 has an invalid length. [ 1328.409807][T11218] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1328.427242][T11214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9875'. [ 1328.514632][T11228] bond15: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1328.526215][T11228] bond15: (slave vxcan3): Error -95 calling set_mac_address [ 1328.550916][T11233] IPv6: Can't replace route, no match found [ 1328.680502][T11248] netlink: 'syz.4.9884': attribute type 28 has an invalid length. [ 1328.913261][T11260] sctp: [Deprecated]: syz.4.9886 (pid 11260) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1328.913261][T11260] Use struct sctp_sack_info instead [ 1329.660855][T11318] __nla_validate_parse: 7 callbacks suppressed [ 1329.660879][T11318] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9901'. [ 1329.966885][T11339] : entered promiscuous mode [ 1329.979898][T11337] syzkaller0: entered promiscuous mode [ 1329.986218][T11337] syzkaller0: entered allmulticast mode [ 1330.081857][T11342] netlink: 'syz.5.9906': attribute type 3 has an invalid length. [ 1330.930238][T11365] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9911'. [ 1331.325763][T11369] netlink: 'syz.6.9913': attribute type 12 has an invalid length. [ 1332.455309][T11299] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1332.649510][T11386] netlink: 'syz.5.9920': attribute type 2 has an invalid length. [ 1332.734958][T11383] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9917'. [ 1332.794574][T11391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9921'. [ 1332.803666][T11391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9921'. [ 1332.818321][T11391] netlink: 'syz.1.9921': attribute type 7 has an invalid length. [ 1332.836850][T11391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9921'. [ 1332.855574][T11391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9921'. [ 1332.870141][T11391] netlink: 'syz.1.9921': attribute type 7 has an invalid length. [ 1332.903816][T11400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9924'. [ 1332.914417][T11400] openvswitch: netlink: Invalid VLAN frame [ 1333.763619][T11446] lo speed is unknown, defaulting to 1000 [ 1334.053093][T11447] lo speed is unknown, defaulting to 1000 [ 1335.847674][T11400] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1335.860310][T11460] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9932'. [ 1335.987826][T11471] netlink: 'syz.0.9937': attribute type 1 has an invalid length. [ 1336.096860][T11471] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1336.110159][T11471] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 1336.168931][T11484] syzkaller0: entered promiscuous mode [ 1336.174800][T11484] syzkaller0: entered allmulticast mode [ 1336.183491][T11484] 0: reclassify loop, rule prio 0, protocol 700 [ 1336.194910][T11483] IPv6: Can't replace route, no match found [ 1336.204732][T11483] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9937'. [ 1336.261951][T11487] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9942'. [ 1336.320555][T11487] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9942'. [ 1336.346122][T11494] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1336.478299][T11480] lo speed is unknown, defaulting to 1000 [ 1336.555016][T11502] netlink: 'syz.5.9947': attribute type 1 has an invalid length. [ 1336.590082][T11505] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9948'. [ 1336.959193][T11516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9951'. [ 1337.283388][T11527] netlink: 'syz.5.9954': attribute type 1 has an invalid length. [ 1337.387243][T11533] IPv6: Can't replace route, no match found [ 1337.397291][T11533] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9954'. [ 1337.538997][T11531] bond15: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1337.555922][T11531] bond15: (slave vxcan1): Error -95 calling set_mac_address [ 1337.695803][T11549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9960'. [ 1337.794121][T11541] netlink: 176 bytes leftover after parsing attributes in process `syz.6.9956'. [ 1338.133038][T11576] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9967'. [ 1338.153362][T11575] bridge_slave_1: mtu less than device minimum [ 1338.275070][T11586] FAULT_INJECTION: forcing a failure. [ 1338.275070][T11586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1338.289173][T11586] CPU: 1 UID: 0 PID: 11586 Comm: syz.4.9971 Not tainted syzkaller #0 PREEMPT(full) [ 1338.289208][T11586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1338.289220][T11586] Call Trace: [ 1338.289228][T11586] [ 1338.289235][T11586] dump_stack_lvl+0xe8/0x150 [ 1338.289268][T11586] should_fail_ex+0x412/0x560 [ 1338.289299][T11586] _copy_to_user+0x31/0xb0 [ 1338.289320][T11586] simple_read_from_buffer+0xe1/0x170 [ 1338.289349][T11586] proc_fail_nth_read+0x1bb/0x230 [ 1338.289377][T11586] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1338.289402][T11586] ? rw_verify_area+0x2a6/0x4d0 [ 1338.289423][T11586] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1338.289446][T11586] vfs_read+0x20c/0xa70 [ 1338.289471][T11586] ? __pfx_vfs_read+0x10/0x10 [ 1338.289487][T11586] ? aa_sk_perm+0x6d5/0x900 [ 1338.289516][T11586] ? fd_install+0x94/0x3d0 [ 1338.289542][T11586] ? __pfx_aa_sk_perm+0x10/0x10 [ 1338.289570][T11586] ksys_read+0x150/0x270 [ 1338.289591][T11586] ? __pfx_ksys_read+0x10/0x10 [ 1338.289616][T11586] do_syscall_64+0x14d/0xf80 [ 1338.289637][T11586] ? trace_irq_disable+0x3b/0x150 [ 1338.289651][T11586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.289669][T11586] ? clear_bhb_loop+0x40/0x90 [ 1338.289688][T11586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.289704][T11586] RIP: 0033:0x7f8c7e35d04e [ 1338.289722][T11586] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1338.289738][T11586] RSP: 002b:00007f8c7f240fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1338.289758][T11586] RAX: ffffffffffffffda RBX: 00007f8c7f2416c0 RCX: 00007f8c7e35d04e [ 1338.289769][T11586] RDX: 000000000000000f RSI: 00007f8c7f2410a0 RDI: 0000000000000004 [ 1338.289779][T11586] RBP: 00007f8c7f241090 R08: 0000000000000000 R09: 0000000000000000 [ 1338.289788][T11586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1338.289798][T11586] R13: 00007f8c7e616038 R14: 00007f8c7e615fa0 R15: 00007ffc2cf7d1e8 [ 1338.289828][T11586] [ 1338.619215][T11595] netlink: 'syz.4.9974': attribute type 1 has an invalid length. [ 1338.677706][T11598] netlink: 'syz.1.9975': attribute type 7 has an invalid length. [ 1338.696062][T11598] netlink: 'syz.1.9975': attribute type 7 has an invalid length. [ 1338.718823][T11598] bridge0: port 1(erspan0) entered blocking state [ 1338.727132][T11598] bridge0: port 1(erspan0) entered disabled state [ 1338.734841][T11598] erspan0: entered allmulticast mode [ 1338.742787][T11598] erspan0: entered promiscuous mode [ 1338.758291][T11598] erspan0: left allmulticast mode [ 1338.763672][T11598] erspan0: left promiscuous mode [ 1338.769329][T11598] bridge0: port 1(erspan0) entered disabled state [ 1338.773301][T11601] IPv6: Can't replace route, no match found [ 1338.844643][T11039] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1338.855764][T11039] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1338.879334][T11597] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1338.891341][T11597] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 1338.918662][T11039] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1338.984159][T11608] netlink: 'syz.0.9978': attribute type 1 has an invalid length. [ 1338.992048][T11039] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1339.176591][T11620] netlink: 'syz.1.9979': attribute type 10 has an invalid length. [ 1339.195839][T11620] batadv0: entered promiscuous mode [ 1339.206334][T11620] batadv0: entered allmulticast mode [ 1339.257271][T11620] bridge0: port 1(batadv0) entered blocking state [ 1339.276636][T11620] bridge0: port 1(batadv0) entered disabled state [ 1339.615053][T11645] netlink: 'syz.4.9990': attribute type 7 has an invalid length. [ 1339.630853][T11647] netlink: 'syz.5.9987': attribute type 1 has an invalid length. [ 1339.647275][T11039] batman_adv: batadv0: IGMP Querier appeared [ 1339.653432][T11039] batman_adv: batadv0: MLD Querier appeared [ 1339.753605][T11647] bond16: entered promiscuous mode [ 1339.775939][T11647] bond16: entered allmulticast mode [ 1339.789681][T11647] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1339.808040][ T2134] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1339.832458][T11653] macvlan4: entered promiscuous mode [ 1339.839321][T11653] macvlan4: entered allmulticast mode [ 1339.853250][T11653] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1339.995128][T11652] bridge0: port 4(erspan0) entered blocking state [ 1340.026632][T11652] bridge0: port 4(erspan0) entered disabled state [ 1340.034176][T11652] erspan0: entered allmulticast mode [ 1340.042020][T11652] erspan0: entered promiscuous mode [ 1340.048861][T11652] bridge0: port 4(erspan0) entered blocking state [ 1340.055770][T11652] bridge0: port 4(erspan0) entered forwarding state [ 1340.075757][ T2134] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1340.110230][ T2134] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1340.135200][T11660] erspan0: left allmulticast mode [ 1340.140390][T11660] erspan0: left promiscuous mode [ 1340.163190][T11660] bridge0: port 4(erspan0) entered disabled state [ 1340.207209][ T2134] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1340.414804][T11672] bond16: entered promiscuous mode [ 1340.421033][T11672] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1340.460454][T11676] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1340.471348][T11676] bond16: (slave vti0): The slave device specified does not support setting the MAC address [ 1340.483127][T11676] bond16: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1340.517523][T11676] bond16: (slave vti0): making interface the new active one [ 1340.541767][T11676] vti0: entered promiscuous mode [ 1340.563078][T11676] bond16: (slave vti0): Enslaving as an active interface with an up link [ 1340.660148][T11657] lo speed is unknown, defaulting to 1000 [ 1340.735371][ T9516] IPVS: starting estimator thread 0... [ 1340.833399][T11688] syzkaller0: entered promiscuous mode [ 1340.839544][T11688] syzkaller0: entered allmulticast mode [ 1340.852679][T11691] IPVS: using max 35 ests per chain, 84000 per kthread [ 1345.472178][T11722] validate_nla: 3 callbacks suppressed [ 1345.472199][T11722] netlink: 'syz.4.10007': attribute type 10 has an invalid length. [ 1345.538131][T11722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1345.569968][T11722] batadv0: entered promiscuous mode [ 1345.596786][T11722] batadv0: entered allmulticast mode [ 1345.608483][T11722] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1345.817307][T11747] __nla_validate_parse: 4 callbacks suppressed [ 1345.817332][T11747] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.10012'. [ 1345.824329][T11039] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1345.843775][T11039] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1345.861476][T11748] tipc: Enabling of bearer rejected, media not registered [ 1346.033657][T11762] netlink: 'syz.4.10015': attribute type 1 has an invalid length. [ 1346.276517][T11762] bond6: entered promiscuous mode [ 1346.282769][T11762] bond6: entered allmulticast mode [ 1346.292116][T11762] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1346.307016][T11771] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10018'. [ 1346.461087][T11765] macvlan2: entered promiscuous mode [ 1346.467724][T11765] macvlan2: entered allmulticast mode [ 1346.515518][T11765] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1347.120508][T11813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10027'. [ 1347.133906][T11814] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10026'. [ 1347.269916][T11813] veth9: entered allmulticast mode [ 1347.320758][T11813] bond11: (slave veth9): Enslaving as an active interface with an up link [ 1347.379843][T11817] bond11 (unregistering): (slave veth9): Releasing backup interface [ 1347.414484][T11817] bond11 (unregistering): Released all slaves [ 1347.469111][T11826] netlink: 'syz.1.10029': attribute type 1 has an invalid length. [ 1347.574475][T11831] IPv6: Can't replace route, no match found [ 1347.598827][T11831] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10029'. [ 1347.710497][T11828] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1347.740678][T11828] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 1348.127059][T11852] netlink: 'syz.6.10033': attribute type 10 has an invalid length. [ 1348.141068][T11853] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10033'. [ 1348.169996][T11854] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1348.417221][T11861] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10034'. [ 1348.684933][T11880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10040'. [ 1348.722678][T11880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1348.894486][T11889] syzkaller0: entered promiscuous mode [ 1348.909097][T11889] syzkaller0: entered allmulticast mode [ 1349.465101][T11904] netlink: 'syz.6.10046': attribute type 1 has an invalid length. [ 1349.583109][T11909] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10048'. [ 1349.689815][T11909] bond17: entered promiscuous mode [ 1349.713062][T11909] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1349.904721][T11915] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1349.925738][T11915] bond18: entered promiscuous mode [ 1349.963077][T11915] bond17: (slave bond18): Enslaving as an active interface with an up link [ 1349.998825][T11925] x_tables: duplicate underflow at hook 3 [ 1350.272998][T11914] lo speed is unknown, defaulting to 1000 [ 1350.279901][T11934] openvswitch: netlink: nsh attribute has 5 unknown bytes. [ 1350.719483][T11942] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10055'. [ 1350.822916][T11942] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1351.049107][T11953] netlink: 'syz.6.10057': attribute type 1 has an invalid length. [ 1351.195733][T11958] netlink: 'syz.1.10058': attribute type 13 has an invalid length. [ 1351.207508][T11958] netlink: 'syz.1.10058': attribute type 17 has an invalid length. [ 1351.320442][T11965] Cannot find add_set index 2 as target [ 1351.385830][T11958] 8021q: adding VLAN 0 to HW filter on device team0 [ 1351.412982][T11958] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1351.520884][T11037] batman_adv: batadv0: MLD Querier disappeared - multicast optimizations disabled [ 1351.901007][T11992] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1351.965061][T12008] netlink: 'syz.6.10070': attribute type 1 has an invalid length. [ 1352.182466][T12015] Cannot find add_set index 2 as target [ 1352.239679][T12016] xt_cluster: node mask cannot exceed total number of nodes [ 1352.423448][T12031] netlink: 'syz.5.10074': attribute type 1 has an invalid length. [ 1352.706417][T12031] bond19: entered promiscuous mode [ 1352.712204][T12031] bond19: entered allmulticast mode [ 1352.718722][T12031] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1352.739470][T12035] macvlan4: entered promiscuous mode [ 1352.747068][T12035] macvlan4: entered allmulticast mode [ 1352.754674][T12035] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1353.240039][T12046] sctp: [Deprecated]: syz.1.10081 (pid 12046) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1353.240039][T12046] Use struct sctp_sack_info instead [ 1353.681831][T12077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10087'. [ 1353.906337][T12081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10089'. [ 1353.924607][T12081] macvtap1: entered promiscuous mode [ 1353.930341][T12081] macvtap1: entered allmulticast mode [ 1353.942805][T12081] team0: entered allmulticast mode [ 1353.954759][T12081] team_slave_0: entered allmulticast mode [ 1353.972735][T12081] team_slave_1: entered allmulticast mode [ 1353.985548][T12082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10089'. [ 1354.012118][T12081] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1354.022920][T12058] lo speed is unknown, defaulting to 1000 [ 1354.320254][T12095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10091'. [ 1354.347929][T12095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10091'. [ 1354.534701][T12091] sit1: entered allmulticast mode [ 1354.774501][T12056] lo speed is unknown, defaulting to 1000 [ 1355.047395][T12117] netlink: 'syz.1.10099': attribute type 1 has an invalid length. [ 1355.083707][T12114] syzkaller0: entered promiscuous mode [ 1355.096246][T12114] syzkaller0: entered allmulticast mode [ 1355.162760][T12121] IPv6: Can't replace route, no match found [ 1355.174321][T12121] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10099'. [ 1355.236317][T12118] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1355.292956][T12118] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 1355.627846][T12128] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10100'. [ 1355.810279][T12132] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10100'. [ 1356.282784][T12147] syzkaller1: entered promiscuous mode [ 1356.288554][T12147] syzkaller1: entered allmulticast mode [ 1356.436434][T12154] netlink: 252 bytes leftover after parsing attributes in process `syz.6.10108'. [ 1356.454427][T12149] syzkaller0: entered promiscuous mode [ 1356.460323][T12149] syzkaller0: entered allmulticast mode [ 1356.664385][T12160] netlink: 100 bytes leftover after parsing attributes in process `syz.6.10110'. [ 1357.298770][T12196] netlink: 'syz.1.10123': attribute type 1 has an invalid length. [ 1357.369086][T12196] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1357.381287][T12196] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 1357.421008][T12199] IPv6: Can't replace route, no match found [ 1357.679100][T12213] netlink: 'syz.1.10128': attribute type 1 has an invalid length. [ 1357.819190][T12213] bond8: entered promiscuous mode [ 1357.832067][T12221] Cannot find add_set index 2 as target [ 1357.852353][T12213] bond8: entered allmulticast mode [ 1357.858162][T12213] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1357.970845][T12213] veth5: entered promiscuous mode [ 1357.985217][T12213] veth5: entered allmulticast mode [ 1358.004401][T12213] bond8: (slave veth5): Enslaving as a backup interface with a down link [ 1358.493714][T12259] Cannot find add_set index 2 as target [ 1358.631908][T12263] netlink: 'syz.4.10146': attribute type 5 has an invalid length. [ 1358.688885][T12266] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 1358.911435][T12278] netlink: 'syz.6.10152': attribute type 1 has an invalid length. [ 1358.911667][T12282] __nla_validate_parse: 24 callbacks suppressed [ 1358.911684][T12282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10151'. [ 1358.947918][T12248] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10141'. [ 1358.957560][T12248] openvswitch: netlink: Flow key attr not present in new flow. [ 1358.974218][T12282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10151'. [ 1359.344719][T12299] netlink: 'syz.4.10157': attribute type 1 has an invalid length. [ 1359.358719][T12306] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10158'. [ 1359.388055][T12306] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10158'. [ 1359.420792][T12309] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1359.433630][T12306] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10158'. [ 1359.457467][T12299] IPv6: Can't replace route, no match found [ 1359.468085][T12299] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10157'. [ 1359.489151][T12309] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 1362.347413][ T1295] lec:lec_start_xmit: lec0:No lecd attached [ 1367.541658][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms [ 1367.549804][ C1] lec:lec_tx_timeout: lec0 [ 1390.025142][ T8156] Bluetooth: hci3: command 0x0406 tx timeout [ 1410.470242][T12326] netlink: 'syz.6.10164': attribute type 1 has an invalid length. [ 1410.642525][T12341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10168'. [ 1410.689450][T12339] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10170'. [ 1410.724771][T12339] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10170'. [ 1410.782444][T12350] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10172'. [ 1410.808144][T12350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10172'. [ 1410.839717][T12350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10172'. [ 1410.916483][T12358] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10173'. [ 1410.934253][T12360] netlink: 'syz.6.10174': attribute type 1 has an invalid length. [ 1411.048564][T12360] IPv6: Can't replace route, no match found [ 1411.062380][T12360] netlink: 44 bytes leftover after parsing attributes in process `syz.6.10174'. [ 1411.074342][T12364] bond18: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1411.102205][T12364] bond18: (slave vxcan3): Error -95 calling set_mac_address [ 1411.305370][T12374] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10177'. [ 1411.381854][T12369] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1411.518046][T12384] netlink: 'syz.4.10179': attribute type 1 has an invalid length. [ 1411.527866][T12387] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10182'. [ 1411.604066][T12389] team0: Device vlan0 is already an upper device of the team interface [ 1411.974611][T12410] FAULT_INJECTION: forcing a failure. [ 1411.974611][T12410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1411.988810][T12410] CPU: 1 UID: 0 PID: 12410 Comm: syz.0.10186 Not tainted syzkaller #0 PREEMPT(full) [ 1411.988846][T12410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1411.988859][T12410] Call Trace: [ 1411.988870][T12410] [ 1411.988879][T12410] dump_stack_lvl+0xe8/0x150 [ 1411.988913][T12410] should_fail_ex+0x412/0x560 [ 1411.988948][T12410] _copy_from_user+0x2d/0xb0 [ 1411.988973][T12410] ___sys_sendmsg+0x1c6/0x360 [ 1411.989008][T12410] ? __pfx____sys_sendmsg+0x10/0x10 [ 1411.989040][T12410] ? kstrtouint+0x6e/0xe0 [ 1411.989086][T12410] ? __fget_files+0x2a/0x420 [ 1411.989100][T12410] ? __fget_files+0x3a0/0x420 [ 1411.989121][T12410] __sys_sendmmsg+0x27c/0x4e0 [ 1411.989142][T12410] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1411.989159][T12410] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1411.989208][T12410] ? ksys_write+0x242/0x270 [ 1411.989233][T12410] ? __pfx_ksys_write+0x10/0x10 [ 1411.989260][T12410] __x64_sys_sendmmsg+0xa0/0xc0 [ 1411.989281][T12410] do_syscall_64+0x14d/0xf80 [ 1411.989303][T12410] ? trace_irq_disable+0x3b/0x150 [ 1411.989320][T12410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1411.989340][T12410] ? clear_bhb_loop+0x40/0x90 [ 1411.989362][T12410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1411.989382][T12410] RIP: 0033:0x7f6806f9c819 [ 1411.989397][T12410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1411.989411][T12410] RSP: 002b:00007f6807daf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1411.989430][T12410] RAX: ffffffffffffffda RBX: 00007f6807216090 RCX: 00007f6806f9c819 [ 1411.989444][T12410] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 000000000000000b [ 1411.989457][T12410] RBP: 00007f6807daf090 R08: 0000000000000000 R09: 0000000000000000 [ 1411.989469][T12410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1411.989480][T12410] R13: 00007f6807216128 R14: 00007f6807216090 R15: 00007ffd7e9e2198 [ 1411.989510][T12410] [ 1412.290896][T12388] lo speed is unknown, defaulting to 1000 [ 1412.486460][T12421] netlink: 'syz.5.10190': attribute type 1 has an invalid length. [ 1412.569885][T12421] bond20: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1412.582804][T12421] bond20: (slave vxcan1): Error -95 calling set_mac_address [ 1412.595698][T12423] IPv6: Can't replace route, no match found [ 1412.810767][T12430] Cannot find add_set index 2 as target [ 1412.908364][T12432] netlink: 'syz.0.10194': attribute type 1 has an invalid length. [ 1412.934407][T12432] bond11: entered promiscuous mode [ 1412.940265][T12432] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1412.965387][T12394] mpoa:mpoad_close: (lec0) going down [ 1412.974059][T12432] macvtap2: entered promiscuous mode [ 1412.979875][T12432] macvtap2: entered allmulticast mode [ 1412.986970][T12432] veth1_vlan: entered allmulticast mode [ 1413.006144][T12432] vlan0: entered allmulticast mode [ 1413.012224][T12432] bond11: entered allmulticast mode [ 1413.036159][T12432] bond11: (slave bridge0): making interface the new active one [ 1413.044655][T12432] bridge0: entered promiscuous mode [ 1413.050534][T12432] bridge0: entered allmulticast mode [ 1413.059290][T12432] bond11: (slave bridge0): Enslaving as an active interface with an up link [ 1413.107892][T12440] ip6gretap1: entered promiscuous mode [ 1413.113896][T12440] ip6gretap1: entered allmulticast mode [ 1413.286477][T12453] veth0: entered allmulticast mode [ 1413.379965][ T9516] lo speed is unknown, defaulting to 1000 [ 1413.438093][T12461] netlink: 'syz.0.10203': attribute type 1 has an invalid length. [ 1413.537385][T12464] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1413.558753][T12464] bond12: (slave vxcan3): Error -95 calling set_mac_address [ 1413.572532][T12461] IPv6: Can't replace route, no match found [ 1413.691173][T12448] lo speed is unknown, defaulting to 1000 [ 1413.845563][T12468] syzkaller0: entered promiscuous mode [ 1413.851259][T12468] syzkaller0: entered allmulticast mode [ 1413.920124][T12473] netlink: 'syz.5.10207': attribute type 1 has an invalid length. [ 1414.779039][T12508] netlink: 'syz.0.10218': attribute type 1 has an invalid length. [ 1414.981348][T12484] mpoa:mpoad_close: (lec0) going down [ 1415.688772][T12529] __nla_validate_parse: 10 callbacks suppressed [ 1415.688797][T12529] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10225'. [ 1415.893321][T12538] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10228'. [ 1416.020916][T12545] Cannot find add_set index 2 as target [ 1416.039113][T12540] netlink: 'syz.6.10227': attribute type 1 has an invalid length. [ 1416.084898][T12543] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10229'. [ 1416.143172][T12548] netlink: 'syz.5.10231': attribute type 1 has an invalid length. [ 1416.193630][T12551] smc: net device wlan0 applied user defined pnetid SYZ0 [ 1416.357821][T12558] netlink: 'syz.0.10235': attribute type 1 has an invalid length. [ 1416.413529][T12540] netlink: 'syz.6.10227': attribute type 21 has an invalid length. [ 1416.448567][T12540] netlink: 'syz.6.10227': attribute type 6 has an invalid length. [ 1416.458239][T12540] netlink: 132 bytes leftover after parsing attributes in process `syz.6.10227'. [ 1416.555009][T12567] IPv6: Can't replace route, no match found [ 1416.564764][T12567] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10235'. [ 1416.567552][T12558] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1416.596996][T12569] netlink: 'syz.4.10236': attribute type 1 has an invalid length. [ 1416.627606][T12558] bond13: (slave vxcan3): Error -95 calling set_mac_address [ 1416.709296][T12572] IPv6: Can't replace route, no match found [ 1416.720323][T12572] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10236'. [ 1416.723990][T12553] mpoa:mpoad_close: (lec0) going down [ 1416.839779][T12570] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1416.903299][T12570] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 1417.390195][T12595] Cannot find add_set index 2 as target [ 1417.466671][T12600] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10244'. [ 1417.509490][T12605] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10246'. [ 1417.525556][T12605] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10246'. [ 1417.536125][T12605] netlink: 'syz.5.10246': attribute type 12 has an invalid length. [ 1417.548569][T12605] netlink: 'syz.5.10246': attribute type 11 has an invalid length. [ 1417.616618][T12610] netlink: 'syz.1.10248': attribute type 1 has an invalid length. [ 1417.693447][T12617] FAULT_INJECTION: forcing a failure. [ 1417.693447][T12617] name failslab, interval 1, probability 0, space 0, times 0 [ 1417.721698][T12614] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1417.733464][T12617] CPU: 0 UID: 0 PID: 12617 Comm: syz.5.10250 Not tainted syzkaller #0 PREEMPT(full) [ 1417.733493][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1417.733505][T12617] Call Trace: [ 1417.733514][T12617] [ 1417.733523][T12617] dump_stack_lvl+0xe8/0x150 [ 1417.733558][T12617] should_fail_ex+0x412/0x560 [ 1417.733598][T12617] should_failslab+0xa8/0x100 [ 1417.733625][T12617] __kvmalloc_node_noprof+0x178/0x8a0 [ 1417.733650][T12617] ? traverse+0xde/0x580 [ 1417.733681][T12617] traverse+0xde/0x580 [ 1417.733701][T12617] ? get_pid_task+0x20/0x1f0 [ 1417.733731][T12617] seq_read_iter+0xd08/0xe10 [ 1417.733755][T12617] ? apparmor_file_permission+0x1f4/0x300 [ 1417.733792][T12617] vfs_read+0x582/0xa70 [ 1417.733813][T12617] ? ksys_write+0x1e6/0x270 [ 1417.733840][T12617] ? __pfx_vfs_read+0x10/0x10 [ 1417.733870][T12617] ? __fget_files+0x2a/0x420 [ 1417.733896][T12617] __x64_sys_pread64+0x199/0x230 [ 1417.733920][T12617] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1417.733953][T12617] do_syscall_64+0x14d/0xf80 [ 1417.733975][T12617] ? trace_irq_disable+0x3b/0x150 [ 1417.733991][T12617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.734010][T12617] ? clear_bhb_loop+0x40/0x90 [ 1417.734032][T12617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.734051][T12617] RIP: 0033:0x7f4a3399c819 [ 1417.734070][T12617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1417.734086][T12617] RSP: 002b:00007f4a3486a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1417.734107][T12617] RAX: ffffffffffffffda RBX: 00007f4a33c15fa0 RCX: 00007f4a3399c819 [ 1417.734120][T12617] RDX: 0000000000000ffd RSI: 00002000000003c0 RDI: 0000000000000004 [ 1417.734132][T12617] RBP: 00007f4a3486a090 R08: 0000000000000000 R09: 0000000000000000 [ 1417.734143][T12617] R10: 00000000000202df R11: 0000000000000246 R12: 0000000000000001 [ 1417.734154][T12617] R13: 00007f4a33c16038 R14: 00007f4a33c15fa0 R15: 00007ffd3117e8a8 [ 1417.734182][T12617] [ 1417.778550][T12614] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 1417.854197][T12610] IPv6: Can't replace route, no match found [ 1417.873901][T12624] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10248'. [ 1417.975218][T12623] netlink: 'syz.5.10253': attribute type 1 has an invalid length. [ 1418.151447][ T29] audit: type=1800 audit(1776225152.930:26): pid=12634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.10255" name=20202020202020203B206672616D65313A2052313D307832303230323030303235373832303230205231303D6670302066702D383D3078323032303230303032353738323032300A31333A2028626629207231203D207231302020202020202020202020202020202020202020203B206672616D65313A2052313D667030205231303D6670300A31343A2028303729207231202B3D202D382020202020202020202020202020202020202020203B206672616D65313A2052313D66702D380A3135 dev="tmpfs" ino=2524 res=0 errno=0 [ 1418.248101][ T29] audit: type=1804 audit(1776225153.030:27): pid=12634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.10255" name=2F6E6577726F6F742F3439322F20202020202020203B206672616D65313A2052313D307832303230323030303235373832303230205231303D6670302066702D383D3078323032303230303032353738323032300A31333A2028626629207231203D207231302020202020202020202020202020202020202020203B206672616D65313A2052313D667030205231303D6670300A31343A2028303729207231202B3D202D382020202020202020202020202020202020202020203B206672616D65313A2052313D66702D380A3135 dev="tmpfs" ino=2524 res=1 errno=0 [ 1418.305530][T12625] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20000 [ 1418.444884][T12654] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1418.456921][T12658] FAULT_INJECTION: forcing a failure. [ 1418.456921][T12658] name failslab, interval 1, probability 0, space 0, times 0 [ 1418.470071][T12658] CPU: 0 UID: 0 PID: 12658 Comm: syz.1.10258 Not tainted syzkaller #0 PREEMPT(full) [ 1418.470101][T12658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1418.470112][T12658] Call Trace: [ 1418.470120][T12658] [ 1418.470129][T12658] dump_stack_lvl+0xe8/0x150 [ 1418.470162][T12658] should_fail_ex+0x412/0x560 [ 1418.470197][T12658] should_failslab+0xa8/0x100 [ 1418.470222][T12658] ? skb_clone+0x212/0x3a0 [ 1418.470241][T12658] kmem_cache_alloc_noprof+0x87/0x650 [ 1418.470262][T12658] ? lock_acquire+0xf0/0x2e0 [ 1418.470290][T12658] skb_clone+0x212/0x3a0 [ 1418.470305][T12658] ? dev_queue_xmit_nit+0x268/0xad0 [ 1418.470334][T12658] dev_queue_xmit_nit+0x29a/0xad0 [ 1418.470358][T12658] ? dev_queue_xmit_nit+0x2d/0xad0 [ 1418.470393][T12658] dev_hard_start_xmit+0x1cf/0x870 [ 1418.470437][T12658] __dev_queue_xmit+0x14d9/0x3980 [ 1418.470464][T12658] ? __sys_sendmmsg+0x27c/0x4e0 [ 1418.470489][T12658] ? __dev_queue_xmit+0x2b6/0x3980 [ 1418.470522][T12658] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1418.470551][T12658] ? __copy_skb_header+0xa3/0x4a0 [ 1418.470606][T12658] ? skb_clone+0x246/0x3a0 [ 1418.470627][T12658] __netlink_deliver_tap+0x5ad/0x850 [ 1418.470667][T12658] ? netlink_deliver_tap+0x2e/0x1b0 [ 1418.470694][T12658] netlink_deliver_tap+0x19c/0x1b0 [ 1418.470720][T12658] netlink_unicast+0x730/0x8e0 [ 1418.470756][T12658] netlink_sendmsg+0x813/0xb40 [ 1418.470789][T12658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1418.470818][T12658] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1418.470838][T12658] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1418.470863][T12658] ____sys_sendmsg+0x972/0x9f0 [ 1418.470889][T12658] ? __lock_acquire+0x6b5/0x2cf0 [ 1418.470919][T12658] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1418.470960][T12658] ? import_iovec+0x73/0xa0 [ 1418.470993][T12658] ___sys_sendmsg+0x2a5/0x360 [ 1418.471026][T12658] ? __pfx____sys_sendmsg+0x10/0x10 [ 1418.471056][T12658] ? kstrtouint+0x6e/0xe0 [ 1418.471102][T12658] ? __fget_files+0x2a/0x420 [ 1418.471119][T12658] ? __fget_files+0x3a0/0x420 [ 1418.471147][T12658] __sys_sendmmsg+0x27c/0x4e0 [ 1418.471175][T12658] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1418.471188][T12658] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1418.471236][T12658] ? ksys_write+0x242/0x270 [ 1418.471257][T12658] ? __pfx_ksys_write+0x10/0x10 [ 1418.471300][T12658] __x64_sys_sendmmsg+0xa0/0xc0 [ 1418.471318][T12658] do_syscall_64+0x14d/0xf80 [ 1418.471338][T12658] ? trace_irq_disable+0x3b/0x150 [ 1418.471352][T12658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1418.471369][T12658] ? clear_bhb_loop+0x40/0x90 [ 1418.471392][T12658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1418.471409][T12658] RIP: 0033:0x7f050db9c819 [ 1418.471429][T12658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1418.471444][T12658] RSP: 002b:00007f050ea8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1418.471465][T12658] RAX: ffffffffffffffda RBX: 00007f050de16090 RCX: 00007f050db9c819 [ 1418.471478][T12658] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 000000000000000b [ 1418.471489][T12658] RBP: 00007f050ea8b090 R08: 0000000000000000 R09: 0000000000000000 [ 1418.471503][T12658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1418.471512][T12658] R13: 00007f050de16128 R14: 00007f050de16090 R15: 00007fff9dd442f8 [ 1418.471538][T12658] [ 1418.916713][T12658] tipc: Resetting bearer [ 1418.924695][T12658] tipc: Resetting bearer [ 1419.304638][T12686] Cannot find add_set index 2 as target [ 1419.332982][T12684] bond21: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1419.364537][T12676] IPv6: Can't replace route, no match found [ 1419.412443][T12684] bond21: (slave vxcan1): Error -95 calling set_mac_address [ 1419.499934][T12690] bridge2: entered promiscuous mode [ 1419.525100][T12690] bridge2: port 1(macvtap1) entered blocking state [ 1419.543062][T12690] bridge2: port 1(macvtap1) entered disabled state [ 1419.551413][T12690] macvtap1: entered allmulticast mode [ 1419.561962][T12690] bridge2: entered allmulticast mode [ 1419.569983][T12690] macvtap1: left allmulticast mode [ 1419.575940][T12690] bridge2: left allmulticast mode [ 1419.590209][T12690] bridge2: left promiscuous mode [ 1419.910533][T12701] lo speed is unknown, defaulting to 1000 [ 1420.160402][T12729] FAULT_INJECTION: forcing a failure. [ 1420.160402][T12729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1420.206463][T12729] CPU: 1 UID: 0 PID: 12729 Comm: syz.6.10281 Not tainted syzkaller #0 PREEMPT(full) [ 1420.206494][T12729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1420.206506][T12729] Call Trace: [ 1420.206515][T12729] [ 1420.206523][T12729] dump_stack_lvl+0xe8/0x150 [ 1420.206559][T12729] should_fail_ex+0x412/0x560 [ 1420.206591][T12729] _copy_to_user+0x31/0xb0 [ 1420.206618][T12729] simple_read_from_buffer+0xe1/0x170 [ 1420.206649][T12729] proc_fail_nth_read+0x1bb/0x230 [ 1420.206679][T12729] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1420.206703][T12729] ? rw_verify_area+0x2a6/0x4d0 [ 1420.206723][T12729] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1420.206749][T12729] vfs_read+0x20c/0xa70 [ 1420.206767][T12729] ? fdget_pos+0x246/0x320 [ 1420.206783][T12729] ? ksys_write+0x1e6/0x270 [ 1420.206807][T12729] ? __pfx___mutex_lock+0x10/0x10 [ 1420.206832][T12729] ? __pfx_vfs_read+0x10/0x10 [ 1420.206851][T12729] ? __fget_files+0x2a/0x420 [ 1420.206871][T12729] ? __fget_files+0x3a0/0x420 [ 1420.206886][T12729] ? __fget_files+0x2a/0x420 [ 1420.206910][T12729] ksys_read+0x150/0x270 [ 1420.206934][T12729] ? __pfx_ksys_read+0x10/0x10 [ 1420.206964][T12729] do_syscall_64+0x14d/0xf80 [ 1420.206985][T12729] ? trace_irq_disable+0x3b/0x150 [ 1420.207002][T12729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1420.207021][T12729] ? clear_bhb_loop+0x40/0x90 [ 1420.207043][T12729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1420.207061][T12729] RIP: 0033:0x7fb746f5d04e [ 1420.207079][T12729] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1420.207094][T12729] RSP: 002b:00007fb747de9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1420.207115][T12729] RAX: ffffffffffffffda RBX: 00007fb747dea6c0 RCX: 00007fb746f5d04e [ 1420.207129][T12729] RDX: 000000000000000f RSI: 00007fb747dea0a0 RDI: 0000000000000005 [ 1420.207141][T12729] RBP: 00007fb747dea090 R08: 0000000000000000 R09: 0000000000000000 [ 1420.207152][T12729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1420.207163][T12729] R13: 00007fb747216038 R14: 00007fb747215fa0 R15: 00007ffd8def6bc8 [ 1420.207207][T12729] [ 1420.877511][T12752] mac80211_hwsim hwsim102 ªªªªª;: renamed from wlan0 [ 1420.912122][T12749] __nla_validate_parse: 6 callbacks suppressed [ 1420.912148][T12749] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10287'. [ 1420.928270][T12752] tipc: Enabled bearer , priority 26 [ 1421.019492][T12730] ------------[ cut here ]------------ [ 1421.025790][T12730] refcount_t: decrement hit 0; leaking memory. [ 1421.032434][T12730] WARNING: lib/refcount.c:31 at refcount_warn_saturate+0x70/0x110, CPU#0: syz.1.10282/12730 [ 1421.042966][T12730] Modules linked in: [ 1421.048036][T12730] CPU: 0 UID: 0 PID: 12730 Comm: syz.1.10282 Not tainted syzkaller #0 PREEMPT(full) [ 1421.058675][T12730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1421.071628][T12730] RIP: 0010:refcount_warn_saturate+0x70/0x110 [ 1421.078167][T12730] Code: c6 20 34 f0 8e e8 60 38 16 fd 83 fb 01 7e 22 83 fb 02 74 39 83 fb 03 74 47 83 fb 04 75 68 e8 c7 32 16 fd 48 8d 3d 90 20 6d 0b <67> 48 0f b9 3a eb 66 85 db 74 3e 83 fb 01 75 4c e8 ab 32 16 fd 48 [ 1421.100683][T12730] RSP: 0018:ffffc90010e8fae8 EFLAGS: 00010293 [ 1421.107709][T12730] RAX: ffffffff84af7d29 RBX: 0000000000000004 RCX: ffff8880b1c0bd00 [ 1421.117492][T12730] RDX: 0000000000000000 RSI: ffffffff8ef03420 RDI: ffffffff901c9dc0 [ 1421.126650][T12730] RBP: ffffc90010e8fc40 R08: ffff8880b1c0bd00 R09: 0000000000000005 [ 1421.135361][T12730] R10: 0000000000000004 R11: 0000000000000000 R12: f8f8f8f8f8f8f8f8 [ 1421.143879][T12730] R13: dffffc0000000000 R14: ffff8880a0c00668 R15: 0000000000000001 [ 1421.152329][T12730] FS: 0000555589d79500(0000) GS:ffff888125447000(0000) knlGS:0000000000000000 [ 1421.163221][T12730] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1421.170807][T12730] CR2: 0000001b33a16000 CR3: 000000005c59e000 CR4: 00000000003526f0 [ 1421.179818][T12730] Call Trace: [ 1421.183820][T12730] [ 1421.184051][T12761] IPv6: Can't replace route, no match found [ 1421.187039][T12730] ref_tracker_free+0x6fc/0x840 [ 1421.187082][T12730] ? __pfx_ref_tracker_free+0x10/0x10 [ 1421.187103][T12730] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1421.210079][T12730] ? do_raw_spin_lock+0x12b/0x2f0 [ 1421.215573][T12730] ? lock_acquire+0xf0/0x2e0 [ 1421.220308][T12730] ? vcc_release+0x54/0x580 [ 1421.225104][T12730] mpoad_close+0x1fc/0x3e0 [ 1421.229694][T12730] ? __pfx_mpoad_close+0x10/0x10 [ 1421.235070][T12730] vcc_release+0x10f/0x580 [ 1421.239652][T12730] svc_release+0x6c/0xd0 [ 1421.244089][T12730] sock_close+0xc3/0x240 [ 1421.248533][T12730] ? __pfx_sock_close+0x10/0x10 [ 1421.254234][T12730] __fput+0x44f/0xa70 [ 1421.259216][T12730] task_work_run+0x1d9/0x270 [ 1421.264225][T12730] ? __pfx_task_work_run+0x10/0x10 [ 1421.269665][T12730] exit_to_user_mode_loop+0xed/0x480 [ 1421.275642][T12730] ? rcu_is_watching+0x15/0xb0 [ 1421.280538][T12730] do_syscall_64+0x32d/0xf80 [ 1421.285666][T12730] ? trace_irq_disable+0x3b/0x150 [ 1421.292100][T12730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1421.298623][T12730] ? clear_bhb_loop+0x40/0x90 [ 1421.303718][T12730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1421.309994][T12730] RIP: 0033:0x7f050db9c819 [ 1421.314902][T12730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1421.326400][T12735] FAULT_INJECTION: forcing a failure. [ 1421.326400][T12735] name failslab, interval 1, probability 0, space 0, times 0 [ 1421.334822][T12730] RSP: 002b:00007fff9dd44458 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1421.334852][T12730] RAX: 0000000000000000 RBX: 00007f050de17da0 RCX: 00007f050db9c819 [ 1421.334864][T12730] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1421.334876][T12730] RBP: 00007f050de17da0 R08: 0000000000000006 R09: 0000000000000000 [ 1421.334888][T12730] R10: 00007f050de17cb0 R11: 0000000000000246 R12: 000000000015aea9 [ 1421.334900][T12730] R13: 00007f050de15fac R14: 000000000015ad27 R15: 00007fff9dd44560 [ 1421.334938][T12730] [ 1421.334962][T12730] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1421.334979][T12730] CPU: 0 UID: 0 PID: 12730 Comm: syz.1.10282 Not tainted syzkaller #0 PREEMPT(full) [ 1421.335000][T12730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1421.335012][T12730] Call Trace: [ 1421.335021][T12730] [ 1421.335029][T12730] vpanic+0x56c/0xa60 [ 1421.335060][T12730] ? __pfx__printk+0x10/0x10 [ 1421.335079][T12730] ? __pfx_vpanic+0x10/0x10 [ 1421.335112][T12730] ? is_bpf_text_address+0x292/0x2b0 [ 1421.335134][T12730] ? is_bpf_text_address+0x26/0x2b0 [ 1421.335162][T12730] panic+0xc5/0xd0 [ 1421.335195][T12730] ? __pfx_panic+0x10/0x10 [ 1421.335236][T12730] __warn+0x315/0x4f0 [ 1421.335259][T12730] ? refcount_warn_saturate+0x70/0x110 [ 1421.335285][T12730] ? refcount_warn_saturate+0x70/0x110 [ 1421.335308][T12730] __report_bug+0x29a/0x540 [ 1421.335344][T12730] ? refcount_warn_saturate+0x70/0x110 [ 1421.335366][T12730] ? __pfx___report_bug+0x10/0x10 [ 1421.335394][T12730] ? page_table_check_set+0x148/0x610 [ 1421.335418][T12730] ? look_up_lock_class+0x57/0x110 [ 1421.335441][T12730] ? register_lock_class+0x31/0x2e0 [ 1421.335463][T12730] ? task_work_add+0xb6/0x440 [ 1421.335481][T12730] ? __fput_deferred+0x143/0x380 [ 1421.335511][T12730] report_bug_entry+0x19a/0x290 [ 1421.335533][T12730] ? refcount_warn_saturate+0x70/0x110 [ 1421.335553][T12730] ? refcount_warn_saturate+0x75/0x110 [ 1421.335573][T12730] handle_bug+0xce/0x200 [ 1421.335598][T12730] exc_invalid_op+0x1a/0x50 [ 1421.335622][T12730] asm_exc_invalid_op+0x1a/0x20 [ 1421.335641][T12730] RIP: 0010:refcount_warn_saturate+0x70/0x110 [ 1421.335663][T12730] Code: c6 20 34 f0 8e e8 60 38 16 fd 83 fb 01 7e 22 83 fb 02 74 39 83 fb 03 74 47 83 fb 04 75 68 e8 c7 32 16 fd 48 8d 3d 90 20 6d 0b <67> 48 0f b9 3a eb 66 85 db 74 3e 83 fb 01 75 4c e8 ab 32 16 fd 48 [ 1421.335679][T12730] RSP: 0018:ffffc90010e8fae8 EFLAGS: 00010293 [ 1421.335696][T12730] RAX: ffffffff84af7d29 RBX: 0000000000000004 RCX: ffff8880b1c0bd00 [ 1421.335709][T12730] RDX: 0000000000000000 RSI: ffffffff8ef03420 RDI: ffffffff901c9dc0 [ 1421.335723][T12730] RBP: ffffc90010e8fc40 R08: ffff8880b1c0bd00 R09: 0000000000000005 [ 1421.335736][T12730] R10: 0000000000000004 R11: 0000000000000000 R12: f8f8f8f8f8f8f8f8 [ 1421.335748][T12730] R13: dffffc0000000000 R14: ffff8880a0c00668 R15: 0000000000000001 [ 1421.335768][T12730] ? refcount_warn_saturate+0x69/0x110 [ 1421.335796][T12730] ? refcount_warn_saturate+0x69/0x110 [ 1421.335817][T12730] ref_tracker_free+0x6fc/0x840 [ 1421.335842][T12730] ? __pfx_ref_tracker_free+0x10/0x10 [ 1421.335862][T12730] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1421.335888][T12730] ? do_raw_spin_lock+0x12b/0x2f0 [ 1421.335907][T12730] ? lock_acquire+0xf0/0x2e0 [ 1421.335938][T12730] ? vcc_release+0x54/0x580 [ 1421.335964][T12730] mpoad_close+0x1fc/0x3e0 [ 1421.335990][T12730] ? __pfx_mpoad_close+0x10/0x10 [ 1421.336015][T12730] vcc_release+0x10f/0x580 [ 1421.336044][T12730] svc_release+0x6c/0xd0 [ 1421.336067][T12730] sock_close+0xc3/0x240 [ 1421.336094][T12730] ? __pfx_sock_close+0x10/0x10 [ 1421.336115][T12730] __fput+0x44f/0xa70 [ 1421.336153][T12730] task_work_run+0x1d9/0x270 [ 1421.336176][T12730] ? __pfx_task_work_run+0x10/0x10 [ 1421.336206][T12730] exit_to_user_mode_loop+0xed/0x480 [ 1421.336229][T12730] ? rcu_is_watching+0x15/0xb0 [ 1421.336260][T12730] do_syscall_64+0x32d/0xf80 [ 1421.336279][T12730] ? trace_irq_disable+0x3b/0x150 [ 1421.336296][T12730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1421.336319][T12730] ? clear_bhb_loop+0x40/0x90 [ 1421.336342][T12730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1421.336360][T12730] RIP: 0033:0x7f050db9c819 [ 1421.336379][T12730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1421.336394][T12730] RSP: 002b:00007fff9dd44458 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1421.336412][T12730] RAX: 0000000000000000 RBX: 00007f050de17da0 RCX: 00007f050db9c819 [ 1421.336425][T12730] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1421.336436][T12730] RBP: 00007f050de17da0 R08: 0000000000000006 R09: 0000000000000000 [ 1421.336449][T12730] R10: 00007f050de17cb0 R11: 0000000000000246 R12: 000000000015aea9 [ 1421.336462][T12730] R13: 00007f050de15fac R14: 000000000015ad27 R15: 00007fff9dd44560 [ 1421.336491][T12730] [ 1421.347817][T12730] Kernel Offset: disabled