last executing test programs: 2m13.491978064s ago: executing program 2 (id=5805): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) unshare(0x2c020400) r3 = socket(0x2b, 0x80801, 0x1) sendmsg$802154_raw(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000680)={&(0x7f0000000640)="081e5c2ddf0db8c04a68dbe39bc7d67e8ab0c8914e1a68b842fb788d88206dec41737b3105a140fad22b203225b3b58f1227bb5c", 0xffffffffffffff61}}, 0x400c004) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@struct={0xd, 0x2, 0x0, 0x4, 0x1, 0x109, [{0x4, 0x5, 0x5}, {0x7, 0x2, 0x1}]}]}, {0x0, [0x61, 0x0, 0x30, 0x5f]}}, 0x0, 0x42, 0x0, 0x6, 0x9}, 0x28) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = socket(0xa, 0x3, 0x3a) r5 = socket$netlink(0x10, 0x3, 0xb) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) r7 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f00000004c0)=@broute={'broute\x00', 0x20, 0x3, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000002c0], 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000080000000000ffffffff0000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000003000000fcffffff000000000000000000ec00000000000000"]}, 0xfa) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000200)={0x4, 0x0, 0x0, r6}, 0xc) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x1, 0x5, r6, 0xffffff93}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="580000000206010200000000000000000000000005000100070000000c0007800800120000f5ff00050004000000000005000500020000220900020073797a310000000011000300686173683a6e65742c6e6574"], 0x58}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000280)={0x5, [0x5, 0x4, 0x6, 0xffff, 0x6]}, &(0x7f00000002c0)=0xe) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000a00)={&(0x7f0000000700), 0xc, &(0x7f00000009c0)={&(0x7f0000000740)={0x244, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf3e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe21}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_NODE={0x100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "191d7dd94f7a490441fd85746a2fe587acb603325a5e"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x70f5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_ID={0x1e, 0x3, "65e65215ed95c095b4ff538fbc8797b79ac2618c68413b27d10c"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "4447b3495e001be737300a678fb39ba158ce41b4"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "4bd823e5df11784409c1cc05d908bce48f25cf57"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x4}]}, 0x244}, 0x1, 0x0, 0x0, 0x4008091}, 0x4800) r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$sock_int(r10, 0x1, 0x22, &(0x7f0000000480)=0xfffffffc, 0x4) ioctl$sock_SIOCBRDELBR(r8, 0x89a2, &(0x7f0000000000)='bridge0\x00') r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000010425bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0b56000000000000200012800b00010067656e65766500001000028004000600080011"], 0x40}, 0x1, 0x0, 0x0, 0x2004d808}, 0x24000084) setsockopt$netlink_NETLINK_NO_ENOBUFS(r11, 0x10e, 0x5, &(0x7f0000000180)=0xce, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2m13.376531847s ago: executing program 2 (id=5807): sendmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, 0x0, 0xd8}}], 0x1, 0x4000000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa0000000000000000000000000000399f000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006000000000044000500ac1414bb000000000000000000000000000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x600c010) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000016c0)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001700)={r1, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000001780)="b9ff0300600d698cff9e13f008004de7f9c764360000000100135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="080008000600090000001400000045"], 0xfce) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000017c0)={0x40000000, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40019}, 0x0) 2m10.23944496s ago: executing program 4 (id=5813): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0xaf79ed0c19eccc5c, &(0x7f0000000240)=""/171, &(0x7f0000000300)=0xab) (async) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0xaf79ed0c19eccc5c, &(0x7f0000000240)=""/171, &(0x7f0000000300)=0xab) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000004700), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000004740)={0x0, 0x0, &(0x7f0000004780)={&(0x7f0000000680)=ANY=[@ANYBLOB="40000000127a369252647505bd483616010a773ce5af256e84d0321e45bb323ae77b914fafdefc010b43722de283c86b1b61a5cd50a3838c0c70daf7585690a2596e03", @ANYRES16=r7, @ANYBLOB="010028bd70004000000005000000080009000200000008000c00a80a0000060001000800000008000b00020000000c0016000800000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x4) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000004740)={0x0, 0x0, &(0x7f0000004780)={&(0x7f0000000680)=ANY=[@ANYBLOB="40000000127a369252647505bd483616010a773ce5af256e84d0321e45bb323ae77b914fafdefc010b43722de283c86b1b61a5cd50a3838c0c70daf7585690a2596e03", @ANYRES16=r7, @ANYBLOB="010028bd70004000000005000000080009000200000008000c00a80a0000060001000800000008000b00020000000c0016000800000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f00000046c0), r6) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000046c0), r6) socket(0x11, 0x3, 0x0) (async) r8 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'gre0\x00', 0x0}) bind$packet(r8, &(0x7f0000000600)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x14) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000780)=0xe9, 0x4) (async) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000780)=0xe9, 0x4) sendmsg$NFT_BATCH(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={0x0, 0x74}}, 0x8000040) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r10, &(0x7f0000004800)={0x2, 0x15, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) write(r10, &(0x7f00000004c0)='PASV\r\n', 0x6) r11 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000540)) sendto$packet(r11, 0x0, 0x0, 0x800, 0x0, 0x0) r12 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x180000) write(r12, 0x0, 0x0) sendmsg$inet(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001640)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f00000015c0)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000001800)="f3547090800abbef3961e95540fb659133ca1470611e417e417f94fdef97974e838cba952f36afde853b88dcef8c1f73316d0390c1dcabff17b0f15758fe1204b04bac34e8a505f455c7ea83d794a5e5d07d14b051ee636458a88143942f803c7856c0914fe6420d645eeac0b12b8b4037bddd950f957e758705194d1dbf7a91aa89fb48b218394d5dff3af8f8a8f711b337a1a49e87c4f774cb0ec1bafcd448051b8e1bf204f17642592cb3a8d17fddac439529d0bba954d7622cd61032d9fd70171e1a9c9b4b20d72e660b63bb4e0d26e15c1375efd694b0368549953dd4efca", 0xe1}, {&(0x7f00000007c0)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000001900)="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", 0xcb3}], 0x5, &(0x7f0000000640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xc1}}], 0x18}, 0x0) recvmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000004840)=""/4109, 0x100d}], 0x1}, 0x40002302) (async) recvmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000004840)=""/4109, 0x100d}], 0x1}, 0x40002302) sendmsg$inet(r2, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002640)=[{&(0x7f00000026c0)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000002780)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000002800)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000002840)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000002900)="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", 0xcb3}], 0x5, &(0x7f00000035c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5e) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000003600), 0x0) recvmsg$unix(r3, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000036c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000000706010100000000000000000500000108000640000000fa0500010007000000090002010000003000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4004055}, 0x24000840) 2m9.825063098s ago: executing program 2 (id=5817): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000ac0)={0xa, 0x4e22, 0x2, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000b00)=[@rthdr_2292={{0x18, 0x29, 0x5, {0x6, 0x0, 0x2, 0x1}}}], 0x18}, 0x0) getsockname$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c) 2m9.673769207s ago: executing program 2 (id=5819): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0xffffffffffffffff) (async) r2 = socket(0x28, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f00000003c0)='GPL\x00', 0x5, 0x29e, &(0x7f0000000400)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r3, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000080), 0x4) (async) bind$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r2, 0x4) (async) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x8001]}, &(0x7f0000000280)=0x6) (async) sendto$inet6(r1, &(0x7f0000000040)="8b", 0x34000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) poll(&(0x7f0000000100)=[{r1, 0x10}], 0x1, 0xfffff800) setsockopt(r1, 0x1, 0x7, &(0x7f0000000140)="c04bfa0a", 0x4) (async) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000680)="2e00000011008188040f4676f2ffffffffffff122c000000e3bd012a128748b429021627e305dd2b7a106efb4400", 0x2e}, {&(0x7f00000006c0)="b7658636732b7522d9697355b35c2a448b637a4de9a8d18ec503d6f0ac4c2e9b7c5c1679afb2307e58552af9d6b202401c454a74f1faecc64224a4ae9b01a8291b805429f0282e69f892cefb1a400459b777554bf02f22200672d50c6fd83536525c50849e2ad3b2a508ed1097fbe61f4e39704432f6c3ae983005d1b76ca46e1e52961a1ddf2fb8fded0729cbcb9b41e8a4eccebeea", 0x96}, {&(0x7f0000000780)="64768b09b34c09d00306dbff2ebe42cb292bd32c0425361b45c42de6b85609b385ff6cb5ceab5b0090260637c9b2e5dc970a96ae2049b5df39f518f539898e0c8d9aa4a37f6083ae62f51ce20e663d5beb89b7a714988f5be5d42a26e857066d0fa9675d5339e714bd9bdedf77ad379885d2d74a3339cbdc776df4bcdea95354e669fdfa6d8ac9df70e749b779edab8e4e6596167a512bd88cef79bb1de41aeb7058", 0xa2}], 0x3}, 0x0) 2m8.749070654s ago: executing program 4 (id=5824): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffff9}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000100)=[{0x4d, 0x1, 0x3, 0xcb8}, {0x60, 0x8}, {}, {0x2}, {0x6, 0x0, 0xfe, 0x10000000}]}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="740000002000010327bd7000ffdbdf25020000ff000000001e00000008000100ffffffff0c001400", @ANYRES32], 0x74}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000a00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbf, {0x0, 0x0, 0x0, r7, {0x5, 0xffe0}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x2}, {{0x1, 0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x1}, {0x9, 0x0, 0x7, 0x2, 0x5, 0x1, 0x2}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045081}, 0x20004004) sendmsg$kcm(r5, &(0x7f0000000c00)={&(0x7f0000000c40)=@xdp={0x2c, 0x7, r7, 0x3d}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000d00)="5b9d6d112901364495", 0x9}], 0x1}, 0x5) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000dc0)={0x0, 0xffffff62}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x5, &(0x7f0000000f00)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0xe, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000010c0)={{r1, 0xffffffffffffffff}, &(0x7f0000001040), &(0x7f0000001080)}, 0x20) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001100)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x16, 0x10, &(0x7f0000001240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000012c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001300)={0x0, 0x5, 0x8}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000013c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001340), &(0x7f0000001380)}, 0x20) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001400)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r15, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000001800)={{r3, &(0x7f0000001440)='\x00', 0x10000, &(0x7f0000001480)={@_ha_fsid={[0xc0000000, 0xd8]}, {0xb1, 0x1, 0xffffffc0, 0x8}}, 0x80, &(0x7f00000014c0), &(0x7f0000001500)=0x1000}, 0x2, &(0x7f00000017c0)=[{0x2, 0x81, &(0x7f0000001540)='hash:net,port\x00', &(0x7f0000001580)="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", 0xfa, 0x22}, {0x3, 0x5, &(0x7f0000001680)='{\\%!!(:&}\'J\\#\x00', &(0x7f00000016c0)="ac249d2bb35783573ad8a87928a9de092b7ff54c2fd60fdb71f6666c1d823b811197a427a38c6f5e0385e858928817c5ecaec91251455f61175d4644192dfebd0c58233bb141fea2aa3b3fe372041f34154093b627ddcdc96cb5073f736d107b069fa492c883799fb9ea9bfcd38f349c12e6ba0e8694d1d998c270781bc76d0562ea910674ecefdb87a7fb54963018b3ad18ad4ad37e874a06320b8bacab36f28c7eca514ab23393dc8fded96b09c3e2033f0aee2116bcca3f31b0cd4ea9c62a9a0eb5d890c32c65049cea1809b089d0715522155e53d8", 0xd7}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x2c, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x505d, 0x0, 0x0, 0x0, 0x96}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x76}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x1}, @alu={0x4, 0x1, 0x3, 0x1, 0x0, 0xffffffffffffffc0, 0xffffffffffffffff}, @tail_call, @map_fd={0x18, 0x82f818d816d357ca}, @exit, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x76}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000008c0)='GPL\x00', 0x5, 0xda, &(0x7f0000000900)=""/218, 0x40f00, 0x43, '\x00', r7, 0x0, r2, 0x8, &(0x7f0000000d40)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000d80)={0x5, 0xf, 0x9, 0x200}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001880)=[r8, r9, r11, r12, r13, r14, r15, r16], &(0x7f00000018c0)=[{0x5, 0x5, 0xc, 0x8}, {0x5, 0x2, 0xe, 0x8}]}, 0x94) 2m8.525602031s ago: executing program 2 (id=5827): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000070000000200000007"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x10, &(0x7f00000003c0)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000004c0)=r5, 0x4) ioctl$F2FS_IOC_COMPRESS_FILE(r5, 0xf518, 0x0) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'gretap0\x00', &(0x7f0000000580)={'gretap0\x00', 0x0, 0x80, 0x10, 0x3, 0x2, {{0x11, 0x4, 0x2, 0x0, 0x44, 0x68, 0x0, 0x0, 0x2f, 0x0, @private=0xa010100, @broadcast, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x28, 0x21, 0x0, 0x4, [0x0, 0x0, 0x8fa6, 0x3, 0x1, 0x6, 0x5, 0x10000, 0x2]}, @ra={0x94, 0x4, 0x1}]}}}}}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000640)={0xffffffffffffffff, 0x8, 0xc, 0x0, @vifc_lcl_ifindex=r6, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r7 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000000000)=0x400, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0x8}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x5}, @IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}]}}}]}, 0x5c}}, 0x0) 2m8.346009256s ago: executing program 2 (id=5828): sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xac, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c3ce3a012f303ad76d2cc590970e32f7"}]}, @NL802154_ATTR_SEC_KEY={0x74, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0105e1370e9cddf866317c41d15ed46a"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "30e2844cf8a83dd7dcfc415042f12632"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "d44e65c80e8cd060fd8e83fd9c14210fa2d88aabd1499a5c1784bac3fefd7548"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8b981b71200b9ba0bafd52bfbebf1cf6c6a88b05c34f6fbc34eb0c3dc060ab75"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x80) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000002c0)={r0, 0x6, 0x100000001, 0xffffffffffffffff}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000002c0)={r0, 0x6, 0x100000001, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x83}, 0x4801) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000500)={@loopback, @empty, 0x0}, &(0x7f0000000540)=0xc) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, r3, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x74f}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008040}, 0x48001) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000b40)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r6, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xbe7013201fc114ee}, 0x10) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000b40)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r6, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xbe7013201fc114ee}, 0x10) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r1, r4, 0x25, 0x0, @val=@tracing={0xffffffffffffffff, 0x8}}, 0x20) ioctl$XFS_IOC_SCRUB_METADATA(r8, 0xc040583c, &(0x7f00000006c0)={0x19, 0x10, 0x7, 0x3, 0x400}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xc800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, 0x0, 0x8, 0x70bd25, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x17}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf24}]}, 0x30}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x104, 0x1, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xc2}, @CTA_EXPECT_MASK={0x90, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_EXPECT_ID={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7fffffff}]}, 0x104}, 0x1, 0x0, 0x0, 0x20004044}, 0x40c4) (async) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x104, 0x1, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xc2}, @CTA_EXPECT_MASK={0x90, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_EXPECT_ID={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7fffffff}]}, 0x104}, 0x1, 0x0, 0x0, 0x20004044}, 0x40c4) 2m6.936387021s ago: executing program 4 (id=5831): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x23, 0x4, 0x8, 0xbc0, 0x1d, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) (fail_nth: 15) 2m6.453062s ago: executing program 4 (id=5834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 2m6.428723728s ago: executing program 4 (id=5836): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x1d, &(0x7f00000005c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x80000081}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xfffffffd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xfffffffd}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @generic={0x81, 0x6, 0x4, 0xb}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x1000000}, 0x94) 2m6.30887258s ago: executing program 4 (id=5837): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000340)={0x2, 0x4, 0x5, 0x5, 0xc, 0x1000, 0x8000, 0x684}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c0000000206010200000000000000000000000005000100070000000900020073797a300000000005000500020000001400078005001500210000000800124000000000050004000000000010010300686173683a69702c6d616300"], 0x5c}, 0x1, 0x0, 0x0, 0xc040}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="11000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000080002872a23d1b72dcd9000000000000000000000000aa1312d0628a5132bfac16fdd58d91d688dff7bab7c51d2f1e7ccce3cc0b22ba7c69f281e752fba21395e38470d3e3ecf2ecf40a985b0dcf83df1f0eec7312aec7f4491848bc90f08b55645c05e46c3c612c02b87d6ab964aa785f5e97e35da637f954a4f72c7b1b64a8f8b32c911e00a5f307000000000000001590fa9af0e853bb86b28601aaa0c2d7489d110ca8fa7b853b064048d3c5aecf1e797f0000000000726591d2e348a1c4cd1e3bbab450c25217ec9251e79cf583fd3503998035b0c5571ed381a6cf33d0a0b3ee0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r0], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r5, 0x84, 0x7d, &(0x7f0000000480)="aa8e0cf56164be5b", 0x8) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000500)={@local, 0x28}) bind(r2, &(0x7f00000006c0)=@in6={0xa, 0x4e20, 0x5, @remote, 0x7f}, 0x80) r6 = socket(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r4, &(0x7f0000000480), &(0x7f00000004c0)=@tcp=r6, 0x2}, 0x20) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$XFS_IOC_START_COMMIT(r7, 0x80585882, &(0x7f0000000640)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000280)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x1, 0x401}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x1, 0x0, 0x7fffffff}, 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000380)="4000000005000140000000", 0xb) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x801, &(0x7f000005ffe4)={0xa, 0x4f23, 0x0, @loopback}, 0x1c) 1m53.16956641s ago: executing program 32 (id=5828): sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xac, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c3ce3a012f303ad76d2cc590970e32f7"}]}, @NL802154_ATTR_SEC_KEY={0x74, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0105e1370e9cddf866317c41d15ed46a"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "30e2844cf8a83dd7dcfc415042f12632"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "d44e65c80e8cd060fd8e83fd9c14210fa2d88aabd1499a5c1784bac3fefd7548"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8b981b71200b9ba0bafd52bfbebf1cf6c6a88b05c34f6fbc34eb0c3dc060ab75"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x80) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000002c0)={r0, 0x6, 0x100000001, 0xffffffffffffffff}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000002c0)={r0, 0x6, 0x100000001, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x83}, 0x4801) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000500)={@loopback, @empty, 0x0}, &(0x7f0000000540)=0xc) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, r3, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x74f}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008040}, 0x48001) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000b40)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r6, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xbe7013201fc114ee}, 0x10) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000b40)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r6, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xbe7013201fc114ee}, 0x10) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r1, r4, 0x25, 0x0, @val=@tracing={0xffffffffffffffff, 0x8}}, 0x20) ioctl$XFS_IOC_SCRUB_METADATA(r8, 0xc040583c, &(0x7f00000006c0)={0x19, 0x10, 0x7, 0x3, 0x400}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xc800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, 0x0, 0x8, 0x70bd25, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x17}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf24}]}, 0x30}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x104, 0x1, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xc2}, @CTA_EXPECT_MASK={0x90, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_EXPECT_ID={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7fffffff}]}, 0x104}, 0x1, 0x0, 0x0, 0x20004044}, 0x40c4) (async) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x104, 0x1, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xc2}, @CTA_EXPECT_MASK={0x90, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_EXPECT_ID={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7fffffff}]}, 0x104}, 0x1, 0x0, 0x0, 0x20004044}, 0x40c4) 1m51.258860315s ago: executing program 33 (id=5837): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000340)={0x2, 0x4, 0x5, 0x5, 0xc, 0x1000, 0x8000, 0x684}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c0000000206010200000000000000000000000005000100070000000900020073797a300000000005000500020000001400078005001500210000000800124000000000050004000000000010010300686173683a69702c6d616300"], 0x5c}, 0x1, 0x0, 0x0, 0xc040}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="11000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000080002872a23d1b72dcd9000000000000000000000000aa1312d0628a5132bfac16fdd58d91d688dff7bab7c51d2f1e7ccce3cc0b22ba7c69f281e752fba21395e38470d3e3ecf2ecf40a985b0dcf83df1f0eec7312aec7f4491848bc90f08b55645c05e46c3c612c02b87d6ab964aa785f5e97e35da637f954a4f72c7b1b64a8f8b32c911e00a5f307000000000000001590fa9af0e853bb86b28601aaa0c2d7489d110ca8fa7b853b064048d3c5aecf1e797f0000000000726591d2e348a1c4cd1e3bbab450c25217ec9251e79cf583fd3503998035b0c5571ed381a6cf33d0a0b3ee0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r0], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r5, 0x84, 0x7d, &(0x7f0000000480)="aa8e0cf56164be5b", 0x8) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000500)={@local, 0x28}) bind(r2, &(0x7f00000006c0)=@in6={0xa, 0x4e20, 0x5, @remote, 0x7f}, 0x80) r6 = socket(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r4, &(0x7f0000000480), &(0x7f00000004c0)=@tcp=r6, 0x2}, 0x20) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$XFS_IOC_START_COMMIT(r7, 0x80585882, &(0x7f0000000640)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000280)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x1, 0x401}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x1, 0x0, 0x7fffffff}, 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000380)="4000000005000140000000", 0xb) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x801, &(0x7f000005ffe4)={0xa, 0x4f23, 0x0, @loopback}, 0x1c) 4.16761105s ago: executing program 6 (id=6593): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="030000000000000000d55b00000000000000e700049e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000001300"/28], 0x50) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @multicast1}, 0xa}}, 0x26) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x88, 0x30, 0xb, 0x5, 0x0, {}, [{0x74, 0x1, [@m_ct={0x70, 0x1, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x7ff, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private1}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8890}, 0x40) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r4, &(0x7f0000000600)=0x8, 0x12) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000640)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$netlink(0x10, 0x3, 0x8) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001d00)=@raw={'raw\x00', 0x8, 0x3, 0x440, 0x0, 0x11, 0x148, 0x0, 0x0, 0x3e8, 0x2a8, 0x2a8, 0x3e8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2c8, 0x2f0, 0x0, {}, [@inet=@rpfilter={{}, {0xf}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file1\x00', {0x5}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x49, 'CLUSTERIP\x00', 0x0, {0x7ff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xd, 0x8, [0x7, 0x16, 0xe, 0x36, 0x23, 0x6, 0x2f, 0x30, 0x13, 0x10, 0x33, 0x27, 0x30, 0x2a, 0x13, 0x6], 0x1, 0x5, 0x3e}}}], {{'\x00', 0x0, 0x70, 0xf7}, {0x28}}}}, 0x4a2) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000002200)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000027c0)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) close(r4) ioctl$XFS_IOC_BULKSTAT(r4, 0x8040587f, 0x0) splice(r3, 0x0, r4, &(0x7f0000002880)=0x87ffffe, 0x6, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000002940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01090000000000000000070000010900010073797a30000000003c0b0000000a010400000000000000000700fffd08000a40000000000900020073797a31000000000900010073797a300000000000000540000000212c0000001e0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000140000001000010000000000000000000084000a"], 0xb0}}, 0x40000) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000002a00)={r8, &(0x7f0000002a40)='s\x00\x00\x00\x00', 0x4441, &(0x7f0000002a80)={@align=0x64dd, {0x64b, 0x1ff, 0x7fff, 0x49}}, 0x40040, &(0x7f0000002ac0)={@_ha_fsid}, &(0x7f0000002b00)=0x4692}) 3.989672378s ago: executing program 1 (id=6594): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x5, &(0x7f0000000180)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x8000000a}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffe}, @generic={0xbf, 0x3, 0x4}, @generic={0x95, 0x0, 0x0, 0x4}], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x38}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) 3.969403033s ago: executing program 0 (id=6595): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x1c, &(0x7f0000000980), &(0x7f00000009c0)=0xc) r1 = epoll_create(0x3ff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000840)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@ipv4_newaddr={0x34, 0x14, 0x503, 0x70bd29, 0x25dfdbfd, {0x2, 0x1f, 0x48, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LABEL={0x14, 0x3, 'xfrm0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000940)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) syz_emit_ethernet(0xfef3, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010020641100fe8000000000000000000002000000bbfe8000000000000000000000000000aa4e200e2200", @ANYRES32], 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000400)={{0xffffffffffffffff, 0x0, 0x86400, 0x0, 0x9, 0x0, 0x0}, 0x1, &(0x7f0000000480)=[{0x2, 0x10, 0x0, &(0x7f00000004c0)="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", 0x295, 0x2e}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x18, 0x40, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000c40), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1e, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x80000080}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = epoll_create1(0x80000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x38111}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x19}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r8, &(0x7f0000000000)={0xa0000000}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)={0x24, 0x41, 0x107, 0x70bd27, 0xfffffdfe, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r8, &(0x7f0000000040)={0x2000000}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000ac0)={r9}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r11, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000002400)={0x14, r12, 0x301, 0x0, 0x0, {0x17}}, 0x14}, 0x1, 0x0, 0x0, 0x34000804}, 0x0) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b40), r10) sendmsg$TIPC_CMD_SET_NETID(r10, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, r13, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x9}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x8) 3.829015397s ago: executing program 5 (id=6597): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xc, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000e40)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e80)={r0, 0xffff0000, 0xf0, 0xe200, &(0x7f0000000f00)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x700, 0x7800, 0xe3a, 0xfffffffc, {{0x11, 0x4, 0x1, 0x4, 0x44, 0x66, 0x0, 0xb, 0x8b7035cc30e9ac7a, 0x0, @private=0xa010102, @remote, {[@noop, @rr={0x7, 0x7, 0x95, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x27, 0xf4, [@dev={0xac, 0x14, 0x14, 0x38}, @multicast1, @multicast1, @broadcast, @multicast2, @multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010100]}]}}}}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000500)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x1}], &(0x7f0000000540)='syzkaller\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000580)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x18}, 0xc) (async) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x18}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xa, &(0x7f00000000c0)=@raw=[@jmp={0x5, 0x0, 0x8, 0x4, 0x6, 0x80}, @call={0x85, 0x0, 0x0, 0x9b}, @alu={0x7, 0x1, 0xc, 0x4, 0x9, 0xfffffffffffffffe, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x3}], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x6a, &(0x7f0000000180)=""/106, 0x40f00, 0x4, '\x00', r1, 0x25, r2, 0x8, &(0x7f00000005c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0xd, 0xfffffffd, 0x7}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000680)=[r3], &(0x7f00000006c0)=[{0x4, 0x4, 0x6}, {0x4, 0x4, 0x6, 0x1}, {0x0, 0x4, 0x5, 0x6}, {0x2, 0x1, 0x4, 0x2}, {0x4, 0x3, 0xa, 0x6}], 0x10, 0x2f63}, 0x94) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xa, &(0x7f00000000c0)=@raw=[@jmp={0x5, 0x0, 0x8, 0x4, 0x6, 0x80}, @call={0x85, 0x0, 0x0, 0x9b}, @alu={0x7, 0x1, 0xc, 0x4, 0x9, 0xfffffffffffffffe, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x3}], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x6a, &(0x7f0000000180)=""/106, 0x40f00, 0x4, '\x00', r1, 0x25, r2, 0x8, &(0x7f00000005c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0xd, 0xfffffffd, 0x7}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000680)=[r3], &(0x7f00000006c0)=[{0x4, 0x4, 0x6}, {0x4, 0x4, 0x6, 0x1}, {0x0, 0x4, 0x5, 0x6}, {0x2, 0x1, 0x4, 0x2}, {0x4, 0x3, 0xa, 0x6}], 0x10, 0x2f63}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000009c0)={0xb, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1f, 0x10, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8bd}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@func], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000880)='GPL\x00', 0x81, 0x7b, &(0x7f00000008c0)=""/123, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x23, r2, 0x8, &(0x7f0000000940)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0x8, 0x3, 0x2}, 0x10, r6, r4, 0x7, &(0x7f0000000a00)=[r3], &(0x7f0000000a40)=[{0x0, 0x4, 0x3, 0x5}, {0x1, 0x2, 0xa, 0xe03b50f19ebfa344}, {0x1, 0x3, 0xf}, {0x5, 0x4, 0x3, 0x7}, {0x0, 0x4, 0x8, 0x1}, {0x5, 0x2, 0xe, 0xb}, {0x7, 0x2, 0x10, 0x5}], 0x10, 0x2570af6a}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1f, 0x10, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8bd}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@func], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000880)='GPL\x00', 0x81, 0x7b, &(0x7f00000008c0)=""/123, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x23, r2, 0x8, &(0x7f0000000940)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0x8, 0x3, 0x2}, 0x10, r6, r4, 0x7, &(0x7f0000000a00)=[r3], &(0x7f0000000a40)=[{0x0, 0x4, 0x3, 0x5}, {0x1, 0x2, 0xa, 0xe03b50f19ebfa344}, {0x1, 0x3, 0xf}, {0x5, 0x4, 0x3, 0x7}, {0x0, 0x4, 0x8, 0x1}, {0x5, 0x2, 0xe, 0xb}, {0x7, 0x2, 0x10, 0x5}], 0x10, 0x2570af6a}, 0x94) 3.796703143s ago: executing program 1 (id=6598): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4e22c}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x6}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x3f}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040814}, 0x854) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 3.590099778s ago: executing program 0 (id=6600): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x40) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x40) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x40) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x40) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x40) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x44}}, 0x40) 3.346802151s ago: executing program 1 (id=6601): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x2c, 0x20000000000000f0}}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x17, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000500000073019f000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.345215521s ago: executing program 5 (id=6602): r0 = socket$inet(0xa, 0x801, 0x84) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000680)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000006c0)=0x1, 0x4) socket$inet(0x2, 0x5, 0x0) close(0x3) socket$inet_tcp(0x2, 0x1, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(r3, &(0x7f0000000700)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000740)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000940)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000000980)="cf", 0x1}, {&(0x7f00000009c0)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000a00)="8a", 0x1}, {&(0x7f0000000a40)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b80)="ce90bfdb", 0x4}, {&(0x7f0000000bc0)="f2e659", 0x3}, {&(0x7f0000000c00)="d4", 0x1}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000f40)="87", 0x1}, {&(0x7f0000000f80)="11e09017", 0x4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000fc0)=0x7fffffff, 0x4) connect$pppoe(r2, &(0x7f0000001000)={0x18, 0x0, {0x1, @empty, 'veth0\x00'}}, 0x1e) r4 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x3d, 0x0, 0x0) connect$pppoe(r4, &(0x7f0000001040)={0x18, 0x0, {0x1, @multicast, 'ip_vti0\x00'}}, 0x1e) close(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='syzkaller\x00', 0x6, 0xd, &(0x7f0000000580)=""/13, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6f4}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01040000000000000000050000000900010073797a3000000000080002400000000154000000030a03000000000000000000050000000900010073797a30000000000900030073797a30000000002800048008000240000000120800014000000000140003"], 0xa4}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) listen(r0, 0x8) pselect6(0x40, &(0x7f0000000280)={0x4, 0x8, 0x833, 0x1, 0x6, 0x2, 0xd, 0x7}, 0x0, &(0x7f00000002c0)={0xc, 0x7, 0x7ffffffd, 0x3, 0x3, 0xfffffffffffffffd, 0x2, 0x2}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.211380432s ago: executing program 0 (id=6603): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40090}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@getchain={0x24, 0x66, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x1, 0xffe0}, {0xb, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.077550871s ago: executing program 1 (id=6604): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x6536d5ef40a93735}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x7}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x40007, 0x3, 0x4100000000000000, 0xfffffffffffffffd, 0xfdb1, 0x0, 0x7, 0x2}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="034886dd120000e40000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 3.051285371s ago: executing program 5 (id=6606): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x23, 0x4, 0x8, 0xbc0, 0x1d, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x3, 0x0, 0xb00}, 0x50) 2.993765408s ago: executing program 6 (id=6607): socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000740)={@in6={{0xa, 0x4e24, 0xffffffb8, @loopback, 0x9}}, 0x0, 0x0, 0x39, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8) sendmmsg$inet6(r1, &(0x7f0000000840)=[{{&(0x7f0000000880)={0xa, 0x4e20, 0x2, @empty, 0xfe5}, 0x1c, 0x0}}], 0x1, 0x200880d8) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1, 0x0, 0x0, 0x44800}, 0x4004810) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@bridge_delneigh={0x1c, 0x1c, 0x1, 0x4, 0x0, {0x7, 0x0, 0x0, 0x0, 0x2, 0xf2, 0x4}}, 0x1c}, 0x1, 0x1000000}, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001f40)={0x11, 0x2, &(0x7f0000002000)=ANY=[@ANYBLOB="17010000a4fc8a000500feff"], &(0x7f0000002040)='GPL\x00', 0x3, 0x3, &(0x7f0000002080)=""/125, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11}, 0x94) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000002100)=[{&(0x7f0000002140)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000002180)=[{&(0x7f00000021c0)="fc06", 0x2}], 0x1, &(0x7f0000002200)=[@init={0x18, 0x84, 0x0, {0xa051, 0xe, 0x1, 0xffff}}], 0x18}], 0x1, 0x4000004) getpeername$packet(r4, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20000800, &(0x7f0000002240)={0x2, 0x3, @remote}, 0x10) (async, rerun: 64) syz_emit_ethernet(0x110, &(0x7f0000002280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x5, 0x0, 0x1}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @generic={{0x17, 0x4, 0x3, 0x0, 0xfa, 0x64, 0x0, 0x2, 0xff, 0x0, @local, @broadcast, {[@timestamp_addr={0x44, 0x24, 0x1a, 0x1, 0x3, [{@broadcast, 0xc1}, {@private=0xa010101, 0x1}, {@empty, 0x7fffffff}, {@multicast2, 0x9}]}, @rr={0x7, 0x1f, 0xce, [@rand_addr=0x64010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x2d}, @remote, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101]}, @noop, @ra={0x94, 0x4, 0x1}]}}, "61bc9b0aa497b0f4a215ba67f29a4a414d58ce65148cde826073afe6342ef0de18d088460b7078a51abdb20fd2f820a7b06f6f7c8be47c6db93e4f3b8a3b07d69dd0634a7c50035c32706d4ad9d6081b3e1fd0b7122ca2752a6698b457218b49159195d36ced73846dbad7a4b0832ee68571ce9130b3daf8b02cf47a726b6df8008ac5a737dfa1aef68784332b96dd04b53d47223ad05cccbda0a1ff1826"}}}}, 0x0) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002440)={0x30, 0x41, 0x107, 0x2, 0xfffffffb, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x3, 0x0, 0x1, [@generic="52e4ff46"]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c010}, 0xc000) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000002480)=@assoc_value={0x0}, &(0x7f00000024c0)=0x8) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000002500)={'batadv0\x00', 0x0}) sendto$packet(r8, 0x0, 0x0, 0x4, &(0x7f0000002540)={0x11, 0x5, r9, 0x1, 0x48, 0x6, @link_local}, 0x14) (async) r10 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r10, 0x84, 0x19, &(0x7f0000002580)={r7, 0x9}, 0x8) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f00000025c0)=0x1, 0x4) unshare(0x8000400) (async) pipe(&(0x7f0000002600)) 2.983341149s ago: executing program 0 (id=6608): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYRESHEX=r3, @ANYRESDEC=r3], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r4}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x1, 0x3}], "44942d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "9a"}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x44, 0x0, 0x1}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00018008000100", @ANYRES32=r9], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) socket$inet6(0xa, 0x5, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x4412c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x4040) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r11, 0x6, 0x2, &(0x7f0000000600)=0x3, 0x4) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="40010000", @ANYRES16=r14, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r14, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) sendmsg$NL80211_CMD_SET_STATION(r10, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r12, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x37}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}]}, 0x67}, 0x1, 0x0, 0x0, 0x4000020}, 0x40040) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x1}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000480)={r15, 0xb}, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/145, 0x91}, {&(0x7f0000003800)=""/4133, 0x1025}, {&(0x7f0000000040)=""/185, 0xb9}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f0000000a40)=""/4093, 0xffd}, {&(0x7f0000000280)=""/65, 0x41}, {&(0x7f0000000300)=""/22, 0x16}], 0x7}, 0xd}, {{0x0, 0x0, 0x0}, 0xffff}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0x7}], 0x4, 0x40000102, 0x0) 2.839793837s ago: executing program 3 (id=6609): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x1e, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcb, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffd8a}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0xb6, 0x0, &(0x7f0000000300), 0x41100, 0x29, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x2, 0x100, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000400)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000440)=[{0x4, 0x4, 0xf, 0x8}, {0x2, 0x1, 0xa, 0xa}, {0x4, 0x2, 0x4, 0xc}, {0x3, 0x5, 0xd, 0x1}, {0x0, 0x1, 0x5, 0x5}, {0x0, 0x3, 0x3, 0xc}], 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYRES8=r0], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0xffffff00, 0x8, 0x4, 0x7}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000380)="0000000000000000000000000000fbfff0e5", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.786248078s ago: executing program 5 (id=6610): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x16, &(0x7f00000001c0)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'wg1\x00', {0x2}, 0x108}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f0000000100)=0xf543, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000840), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000880)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "8799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x81) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000900)="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", 0x641}], 0x1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000001540)={0x500, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)=ANY=[@ANYRES16=r0], 0x70}}, 0x2008c085) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0xb, 0x0, &(0x7f0000001640)) socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x0, 0xc, &(0x7f0000001740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0xa, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000000240)={0x3, 0x6, "be5f21", 0x9, 0x4}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001f00)={0x6, 0x7, &(0x7f0000001480)=ANY=[@ANYBLOB="18440000f9ffffff00e000000000000028390000020000000000000000000000182a0000", @ANYRES32=r4, @ANYBLOB="000000000400000021461800ffffffff"], &(0x7f00000014c0)='syzkaller\x00', 0x83, 0x43, &(0x7f0000001d40)=""/67, 0x41100, 0x5f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001e40)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000001e80)={0x3, 0xe, 0x1, 0x8001}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000001ec0)=[{0x4, 0x2, 0x4, 0x3}, {0x1, 0x4, 0x10, 0xa}, {0x5, 0x3, 0xb, 0xb}], 0x10, 0x8b}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001940)={0x18, 0x5, &(0x7f0000001a00)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0xe, 0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1a, 0xc, &(0x7f0000001dc0)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0xa, '\x00', 0x0, @fallback=0x4, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c80)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000001d00)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000180)={0x0, 'bridge_slave_0\x00', {0x4}, 0xf1ee}) syz_80211_inject_frame(&(0x7f0000000f80)=@broadcast, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x4a6) 2.741697015s ago: executing program 3 (id=6611): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000000540)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000600)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000700), 0x366, 0x10, &(0x7f0000000740), 0x1dd}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x2b8, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x390, 0x3a8, 0x3a8, 0x390, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x290, 0x2b8, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0x8, 0x6, 0x33, 0x871004, 0x20000a, 0x80001, 0x7fffffff, 0x0, 0x0, 0xe0}}}, @common=@srh1={{0x90}, {0x32, 0x4, 0x1, 0x8, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private1, [0xff, 0x0, 0xffffffff, 0xffffff00], [0x0, 0xffffff00, 0xff, 0xff000000], [0xff000000, 0x0, 0xffffffff], 0x800, 0x18}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ipv6={@private1, @mcast2, [0x0, 0xffff00, 0x0, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xffffffff], 'lo\x00', 'sit0\x00', {}, {}, 0x67, 0xb7, 0x1}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x5, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000007c0)={r0, r2, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) bpf$LINK_DETACH(0x22, &(0x7f0000000800)=r3, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000840)={0x4, 0x0}, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0a00000005c2000070165231a742125c3b9a1479", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0), &(0x7f0000000a00), 0x75, r5}, 0x38) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000880)=r4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={r6, 0x0, 0x0}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r2}, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r8, &(0x7f00000009c0)={&(0x7f0000000a00)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xd}, 0x1c, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="280000000000000029000000390000003b02020100000000000000000000000000000001"], 0x28}, 0x3400c8d4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) accept4(r7, &(0x7f0000000000), &(0x7f0000000080)=0x80, 0x80800) r10 = socket$rds(0x15, 0x5, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r10, 0x4018f514, &(0x7f00000001c0)={0x9, 0x9, 0x1}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) ioctl$TUNGETDEVNETNS(r11, 0x54e3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x401, 0x2000, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=@newtfilter={0x68, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x1, 0x9}, {0xffff, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1002, 0x5}, {0x1004}}}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_VAR="bf2f05090c14ac91"]}]}}]}]}]}}]}, 0x68}}, 0x0) 2.663250105s ago: executing program 1 (id=6612): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000840)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newpolicy={0xfc, 0x13, 0x101, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in=@rand_addr=0x64010102, 0x100, 0xd, 0x4e22, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}, [@tmpl={0x44, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x2b}, 0xa, @in=@private=0xa010101, 0x0, 0x2, 0x1, 0x3, 0x0, 0x2, 0x6}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000b40)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) write$tun(r1, &(0x7f0000000bc0)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2.410644927s ago: executing program 3 (id=6613): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@ipv4_getnexthop={0x40, 0x6a, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040010}, 0x24004004) 2.3418855s ago: executing program 3 (id=6614): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x11, &(0x7f00000004c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="142000101000010000000000000000000300000a14000000110001170000000000000000030000c2"], 0x28}, 0x1, 0x0, 0x0, 0x4004011}, 0x800) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000008c0)={&(0x7f0000000600)="cb46d02f81f22dfe5e38101e3639806ea3e4539e77a2f4898e86e9b22b3c81b72dc05b07cc5d18657ba60140a0c95207a0ff9abe8947adc6212c928679f4f6dceb812decdbc9f06a0d3122f98a46daff7ebb138b66d5495db0792c36305b32ab3a39ede058f565f02ada2ecb57f60266e2d6ccbb7725e4ad0e9adb744fb4630cc3534e5f495c557e", &(0x7f00000006c0)=""/133, &(0x7f0000000780)="89913d379ca845773b98a533a377ed282b886b19cc8f0551ed0690e4ea5aba6c585e", &(0x7f00000007c0)="946cc023aa914e1fff055579ec60c6801f0aa5d3aa123ad3a80b6f1694170c253f24af30efbd7662e06a6020625458827343bfe4e532fde6f3c8eadafdb6f57e40545b24957bc21c2a7a8245a1de9ac1396cd695bd0615e0f69c531773b21c605b093e413be50faef6cadbc9f233a9c8dd7108810631fb044df323eb6cb5c1b77d7b30cae8dc39588c115da38a26ddf91d68b6e4f71cc2ee21d563984af0abd743035334fc83ef0c8d07f476cdb1ff05cbaba62528f185f479888148f0051cb75b85ad7d1c1d46f95cc7e5b4db22569b53193a80af7bebc9d00d11f652de8f1590248d", 0x2, r2}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r3}, 0xc) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000340)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000017c0)=@newchain={0x2884, 0x64, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x10, 0x7}, {0xc}, {0xffe0, 0xe}}, [@filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r1}, @TCA_ROUTE4_TO={0x8, 0x2, 0xa0}, @TCA_ROUTE4_TO={0x8, 0x2, 0x5d}]}}, @TCA_CHAIN={0x8, 0xb, 0x4df}, @TCA_RATE={0x6, 0x5, {0x8, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x3, 0x8}}, @TCA_RATE={0x6, 0x5, {0x40, 0x7e}}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x48, 0xb}}, @filter_kind_options=@f_route={{0xa}, {0x27e8, 0x2, [@TCA_ROUTE4_POLICE={0x874, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0x400, 0x6, 0xcc, 0x2, 0xffffdd86, 0x401, 0x9, 0x0, 0x2, 0x7, 0x3, 0x9, 0x7, 0xfffffffe, 0x6ed, 0xa0, 0x1, 0x1, 0x4, 0x1, 0x3, 0x7, 0x7f8, 0x0, 0xb6, 0xffff6fc4, 0x8, 0x0, 0x8000, 0x8, 0x8, 0x5, 0x8000, 0x6, 0x2, 0x401, 0x4, 0x40, 0x90, 0x3, 0x5a6, 0x7, 0xfffff604, 0xfd0c, 0x2, 0x8, 0x8b, 0x5, 0xfffffffa, 0xb3, 0x4a48, 0x1, 0x7, 0xfffffffd, 0x800, 0xfffffff9, 0x1a1, 0x7, 0x1, 0xd0, 0xe, 0x8000, 0x10000, 0x6, 0xfffffff7, 0x5, 0x6, 0xa, 0x383, 0x4, 0x7, 0x8, 0x7, 0xa, 0x4, 0xffffffff, 0xfffffffb, 0x58, 0x9, 0x10000, 0x8000000, 0x1000, 0xcdb, 0x372, 0x1e, 0x3, 0xffffffff, 0x7, 0x2, 0x1, 0x7, 0x2edb4886, 0x9, 0x1, 0x3, 0xef12, 0x946, 0xfff, 0x9c1d99ca, 0x2, 0x14be551d, 0x0, 0x9, 0x4, 0x8b00, 0x4, 0x3, 0x1, 0x0, 0x1, 0x6, 0x6, 0xbf4, 0xfffffffd, 0x9d6a, 0x6, 0x7, 0x1, 0x8, 0x2, 0x4, 0x8, 0xd, 0x8, 0x8001, 0x1, 0xffff, 0x6, 0xad, 0x35, 0x6, 0x8, 0x7ff, 0xffffffff, 0x7f, 0x9, 0x2, 0x100, 0x6, 0x3, 0x3, 0x9, 0x7, 0x7ba9, 0xa5, 0x8, 0x2, 0x7ff, 0xd, 0x10, 0x800, 0x101, 0x8, 0xf1, 0x3, 0x1000, 0x1, 0x7f, 0x8, 0x1, 0xfffffff8, 0xc794, 0x8, 0x80000000, 0x3, 0x254, 0xfff, 0x25, 0xd95, 0x7f, 0x5, 0x0, 0x7, 0xf, 0xf, 0xd665, 0x95, 0xfffffff9, 0x9, 0x2, 0x8, 0x5, 0x2, 0xa, 0x3, 0x10001, 0x8558, 0x5, 0x7ff00, 0x4, 0x6, 0x4, 0x1, 0x3, 0x0, 0x5, 0x80, 0xf, 0x3, 0x47, 0x4, 0x8, 0x6, 0x9, 0x2, 0x7, 0x8, 0x6, 0x1, 0x101, 0xb, 0x1, 0xa4, 0x7, 0x9, 0x400, 0x2, 0x7, 0x7, 0x18, 0x0, 0x4, 0x4, 0x6, 0x0, 0x10001, 0x589, 0x2, 0x79df, 0x2, 0x4, 0x7, 0x7fff, 0xd4, 0x7, 0x5, 0x0, 0x6, 0x7, 0x6, 0x1, 0x5, 0x2000, 0x8, 0x0, 0x2, 0x1, 0xc, 0x8, 0xb, 0x7, 0x0, 0x0, 0xbf0]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7ff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x6, 0x4, 0x5, {0x71, 0x1, 0xd57d, 0x9, 0x6, 0x2}, {0xb, 0x0, 0x4, 0x60, 0x5, 0x6}, 0x9, 0x8, 0x4}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x2, 0x6, 0x80, 0xfff, 0x6, 0x5, 0x2, 0x10, 0x4, 0x0, 0x6, 0x5, 0x2, 0x9, 0x0, 0x5, 0x8f, 0x80, 0x0, 0x6, 0x401, 0x8, 0x5, 0x1, 0xfffffbc8, 0x3, 0x6, 0x401, 0x3, 0xf8, 0x6, 0x9, 0x10001, 0x88, 0x7f, 0xb2, 0x9, 0x8001, 0x8, 0x2, 0x5, 0xdedf, 0x5b6, 0xfffffff3, 0x736, 0x1, 0x7, 0x8, 0x7ff, 0x4, 0x3045b2a7, 0x2f, 0xfffffff0, 0x4a30, 0x10000, 0x6, 0x0, 0xa0, 0x5, 0x958, 0xb, 0x3, 0x5, 0x7, 0x7, 0x80, 0x2, 0xfff, 0x8000, 0x8001, 0x3, 0x3, 0x6, 0x87, 0x8, 0x6, 0xb, 0xfffffffd, 0x1d4, 0x16, 0x7, 0x7fff, 0x7ff, 0x0, 0x614e, 0x10, 0x6, 0xd61102a, 0x7, 0x7, 0x800, 0x2, 0x2434, 0x2b, 0x2, 0x401, 0x80000001, 0x0, 0x6, 0x7, 0x2557, 0xbef5, 0x9, 0x8, 0x8000, 0xd3d, 0x73b69d7a, 0x6, 0x7, 0x3, 0x1b1, 0x6, 0x2, 0x6, 0x7, 0xc, 0xe76, 0x8, 0x5, 0x7e16, 0x3, 0x3, 0x4, 0xf3, 0xa, 0x6, 0x5, 0xffffff73, 0x4, 0x400, 0x1, 0x5, 0x2, 0x6177, 0x6, 0x7, 0x2, 0x6, 0x0, 0x0, 0x7, 0x1, 0x6c98, 0x3, 0x5b3, 0x1000, 0xdcd, 0x2f, 0x3e, 0x0, 0xffffffff, 0x2, 0x400, 0x5, 0x6, 0x5, 0x7, 0x1, 0xcf, 0x0, 0x3, 0x4, 0x400, 0xf745, 0x1, 0x7f, 0x7, 0x4, 0x6, 0x1, 0xfffff001, 0x9, 0x100, 0x4, 0x0, 0x4, 0x256, 0x1, 0x7, 0x3f, 0x8b7, 0x8000, 0x4, 0x3, 0x58, 0x8, 0xc, 0x4, 0x6, 0x8, 0x8, 0x4a8, 0x8, 0x2, 0x10000, 0x0, 0x800, 0x101, 0x2, 0x7, 0x81, 0xe, 0x0, 0x80000001, 0x9, 0x93a5, 0x400, 0x81, 0x800, 0x3ec, 0x4, 0x8, 0x4, 0x1, 0x0, 0x3, 0xf6, 0xffff1498, 0x8, 0x3, 0x7, 0x0, 0x4, 0xffffffff, 0xffffffff, 0x7fff, 0x6, 0x9, 0x2, 0x2, 0x400, 0x200, 0x3, 0xfffff801, 0x9f, 0x4, 0x80, 0x10, 0x7fffffff, 0xfff, 0x8, 0xfffffff8, 0x6, 0x9, 0x81, 0x10000, 0x769, 0x4, 0x7, 0x8, 0x3, 0x8, 0x2, 0x8, 0xa]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x5, 0xa}}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x7a}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x5e}, @TCA_ROUTE4_POLICE={0xc64, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xffffffff, 0x6, 0x7ff, 0x3, 0x8, 0x56, 0x7, 0x3b, 0xffff, 0x8, 0x2, 0xfffffff4, 0x8, 0x997a, 0x7, 0x6, 0xd80c, 0xba, 0x2b54f443, 0x1, 0x4, 0x8001, 0x2, 0x8, 0x0, 0x4, 0x5, 0xfffffffa, 0x4, 0xdc, 0x2, 0x0, 0x6, 0x6, 0x0, 0x9, 0x8001, 0x2, 0x1, 0x8000, 0x9, 0x10000, 0x10, 0x5, 0xffff, 0x10001, 0x1ab, 0x8, 0x4, 0x4, 0xa, 0x762, 0x3c3, 0x2b6, 0x5, 0x122141c4, 0x4, 0x0, 0x267, 0xae, 0x84a, 0x6, 0x6, 0xc8, 0x0, 0xffffffff, 0x9, 0x9, 0x12, 0x7, 0x5b, 0x8, 0xb428, 0x1ff, 0x1, 0x7fff, 0x2, 0x0, 0x1b94, 0x4, 0x5, 0x1, 0x5, 0x1800, 0x8001, 0x6, 0x9, 0x10001, 0xb, 0x0, 0xd972, 0x7, 0x2, 0x6a8000, 0xc8, 0x5, 0x2f, 0x8a, 0x6, 0x5, 0x80, 0x5, 0x2, 0x3bd80000, 0x5, 0x5, 0x1, 0x4, 0xf, 0xf, 0x5, 0xfdd94dc, 0x1, 0x80000001, 0x6, 0xbe66, 0x6, 0x10000, 0x7, 0x0, 0x80, 0x4, 0x0, 0x868f, 0x8, 0x3, 0x101, 0x0, 0x7fffffff, 0xb30, 0x8, 0x5, 0x7fff, 0x7, 0x5, 0x51df, 0x8000, 0x10001, 0x4744, 0x5, 0x1, 0x60000000, 0x60, 0x8000, 0x800, 0x7f, 0x7ff, 0xfc6, 0x0, 0xff58, 0x80, 0x3072, 0x1, 0x7, 0x7, 0x2, 0x8, 0xfffff98b, 0x5, 0x1, 0x4, 0x9, 0x739f, 0x0, 0x8, 0xc, 0xfffffbff, 0x0, 0x615c, 0x8000, 0xc, 0xfffffff7, 0x1, 0x9, 0xa, 0x5, 0x1, 0x2, 0x2, 0x9, 0x0, 0x9906, 0x200, 0x5, 0x4, 0x5, 0x200, 0x5, 0x3b5ef4, 0x1000, 0x10, 0xf9a, 0x5, 0x8, 0x6, 0x5, 0xc, 0x1ff, 0x9, 0x6, 0x70b, 0xf, 0x1000, 0x7f, 0x5, 0x6, 0x0, 0x8, 0x87f, 0x8, 0x9, 0xfff, 0x3ff, 0xa9, 0x8000, 0x6c, 0x2, 0x7f, 0x9, 0x26, 0x6, 0x8, 0x7fff, 0x3ff, 0x2, 0xc, 0x40, 0xfffff63a, 0x86b, 0x5ef6, 0xa, 0x8, 0x9, 0x40, 0x6, 0x4, 0x7, 0x6, 0x7ff, 0xed, 0x1, 0x7, 0x2, 0x2, 0xd060, 0x2, 0x1, 0x7fff, 0xfffffff8, 0x3, 0x8, 0xaf6, 0x51, 0xfff, 0x21da]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc, 0x8, 0x22750be7, 0xe4, 0x2, 0x1, 0x200, 0x8e6f, 0xff, 0xfffffff8, 0xf71, 0x6, 0x2, 0x9fc, 0x1, 0x59a, 0xfffff000, 0x7ff, 0x8, 0x8, 0x73d, 0x2b, 0x4, 0x0, 0x2, 0x1, 0xa92, 0x2b, 0xff, 0x0, 0x5b, 0x7fff, 0x40, 0x7fff, 0x3, 0x2, 0x4, 0xf, 0x8001, 0x2c, 0x7fffffff, 0x1000, 0x2, 0xfffffffd, 0x4, 0x10, 0x4, 0x5a, 0x3df, 0xffffffff, 0x8, 0xf, 0x8001, 0x2, 0x9, 0x0, 0xfffffff8, 0x200, 0x9a, 0x2, 0x7, 0x80, 0x4, 0x80000001, 0x6, 0x7, 0x200, 0x2, 0x3c7, 0x67, 0xc49b, 0x5, 0x7, 0x8f, 0x8000, 0xd03, 0x3, 0x1172, 0xffffffff, 0x5, 0x8001, 0x8, 0xd, 0x5aea5570, 0x10001, 0x10000, 0x10001, 0x2, 0x1ffe0000, 0x200, 0x10, 0xffffffff, 0xd, 0x7, 0x0, 0xe72, 0x3, 0x7ae, 0x0, 0x6, 0x5, 0xef, 0x6, 0x5d, 0x0, 0x7, 0x1ff, 0x34, 0xff, 0x3, 0x8, 0x5, 0x2, 0xfffffffa, 0x57, 0x2, 0x80000001, 0x6309, 0x2, 0x587b, 0x2, 0xf, 0x800, 0x7, 0x7, 0xc61, 0x7, 0x80000001, 0xf, 0x8, 0x9, 0x0, 0x8, 0x3ff, 0xff, 0x2, 0xff, 0x3, 0x3, 0xffffffff, 0x0, 0x7, 0x8, 0x8f, 0x0, 0x7, 0x8, 0x99e, 0xb, 0x9, 0x3, 0x6, 0x6, 0xc2, 0xe0, 0xa4, 0x8, 0x80, 0x9, 0x2, 0x6, 0x6, 0x8001, 0x8001, 0x9a13, 0xd, 0x81, 0x2f00, 0x6, 0x401, 0xac66, 0x8b, 0x8a, 0x3, 0x20, 0xffffffff, 0x24000000, 0xfffffade, 0x0, 0x615d, 0xa86, 0x80000001, 0x6, 0x80000000, 0x7fff, 0x81, 0x6, 0x8, 0x0, 0x5, 0x363, 0x100, 0x7, 0x1, 0xf677, 0x800, 0x5, 0x1, 0x8000, 0x8001, 0x4, 0x3, 0x6, 0x0, 0x1ff, 0x2000, 0x1ea, 0x7, 0x46, 0x6, 0x3, 0x200, 0x5, 0x6, 0x9, 0x200, 0x7, 0xff, 0x8, 0xfffffff8, 0x9, 0xfe, 0x9, 0x6, 0x10000, 0x1000, 0xe487, 0x5f61cd6e, 0x8, 0x0, 0x2, 0x2, 0x7, 0xffff, 0x80000000, 0x1e0673ef, 0x1, 0xd12a, 0x7, 0xffffffff, 0x8, 0x3, 0x6, 0xe, 0x6, 0x80000000, 0x6, 0x1ff, 0x400, 0x3, 0x6, 0x1, 0x2, 0x9, 0x3, 0x6d]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x20000000, 0x7ff, 0x8001, {0x4, 0x1, 0x4000, 0x8, 0xe000, 0x9}, {0x39, 0x1, 0x200, 0xbc44, 0x4, 0x2}, 0x3, 0x4, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x10001, 0xfc79, 0xffffffff, 0x25200000, 0x1c, 0x9c, 0x10, 0x1418bdcd, 0x10000, 0x4, 0x7cb, 0x98c, 0x1, 0x2, 0x9, 0x0, 0x49, 0x200, 0x9, 0x9, 0x5a7, 0x0, 0x9, 0x1, 0x6, 0x400, 0x1, 0x800, 0x8, 0x2, 0x2, 0x3, 0x6f4, 0x1, 0x8, 0x57, 0x5, 0xc2a4, 0x9, 0x800, 0x4, 0x7, 0x8, 0x5, 0x200, 0x8, 0x89, 0x1c6, 0x2, 0x80000001, 0x9, 0xfffffffb, 0x6, 0xf9a, 0x6, 0x4, 0x5, 0x6, 0xaa, 0x7, 0x8000, 0x31, 0xb, 0x82b, 0x8001, 0x7fff, 0x8, 0x2, 0xa, 0x8, 0x1, 0x4, 0x4, 0x3, 0xc54, 0x9, 0x8f66, 0x3, 0x0, 0x830, 0xe, 0xa, 0x1, 0x2, 0xf, 0x1, 0x3, 0x8, 0x4, 0x0, 0xa, 0x4, 0xdc, 0x236, 0x1d0, 0x0, 0x7fff, 0x2, 0x1, 0xc0e, 0xff, 0x7c, 0x4, 0x0, 0x3, 0x5, 0x5, 0x1, 0x2, 0x80010000, 0x0, 0x5, 0x1, 0x0, 0x80000000, 0x5, 0x25, 0x2, 0x81, 0x6, 0x7, 0x7, 0x3, 0x9, 0x6, 0x4, 0x1, 0xdf, 0x4, 0xfff, 0xffffff81, 0x1, 0x5, 0xc1d, 0x8, 0x6, 0x3, 0xd4b, 0x5, 0xbe, 0xe2b, 0x906, 0x6, 0x6, 0x800, 0xfffffffe, 0x9, 0x6, 0xfffffff9, 0x10, 0x7fff, 0x1, 0x2, 0x401, 0x1, 0x1ff, 0x3, 0x2, 0x2, 0x5dce, 0x5, 0xc43, 0x7, 0x1, 0x238a2d1c, 0x7, 0xfffffffe, 0x7f, 0x0, 0x43ff, 0x3, 0x9, 0x9, 0x1, 0x3, 0x1, 0x4, 0x4, 0x6, 0x2, 0x2, 0x9, 0xffffffff, 0x9, 0x4, 0x38, 0x6, 0x81, 0x7, 0xffffff01, 0xfe, 0x3, 0x0, 0x9, 0xffffffff, 0xfffffe5d, 0x7, 0x6, 0x3, 0x9, 0x2, 0x1, 0x1, 0x75, 0xffffffff, 0x1, 0xff, 0xd6e0, 0x0, 0x100, 0x4e71, 0x4, 0x40, 0x18, 0xfffffd5a, 0x1ff, 0x7, 0x1, 0x0, 0x4, 0x101, 0xb02, 0x3, 0x0, 0x5, 0x61d0, 0x9, 0x0, 0x8, 0x411, 0x7, 0x10001, 0x6, 0xb, 0x7, 0x7fffffff, 0x8, 0x3, 0x3, 0x3, 0x0, 0x5, 0x3a000, 0x1, 0xe, 0x4, 0xa, 0x3, 0x1, 0x140, 0x4, 0x9, 0x2ebeeae8, 0xfffffffd, 0xc, 0x66]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xaa}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x93}, @TCA_ROUTE4_ACT={0x12dc, 0x6, [@m_simple={0x1068, 0x17, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x3, 0x4, 0x5, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0xc0eb, 0x3, 0x2, 0x8, 0x3ff}}, @TCA_DEF_DATA={0x8, 0x3, ')&:\x00'}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0xd4, 0x15, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x81, 0x10000000, 0x8, 0x9}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0xb}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xf1c}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0xa}}]}, {0x75, 0x6, "a4976867934c02c4bbd9ccf33001a416bc55a53668438388c0b8e6c6d3acb3eeee773158412f1e49ab1f58d523ff7d4899274cdb4062470df2f6b6f92380c5e9d01ab26a1005320926c280d277b2214604f0581d44cda5b994b2668d094f3023254f16dcaabf1251b3cb4c78707f5527e1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_nat={0x19c, 0x5, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x3, 0x8, 0x2, 0x8}, @multicast2, @loopback, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x8, 0x4, 0x10000}, @remote, @multicast1, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x6, 0x8, 0x3}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x700000, 0x3, 0x6, 0x8000}, @broadcast, @remote, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x200, 0x2, 0x5, 0x7}, @local, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x2, 0x7, 0xfff}, @multicast1, @loopback, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x6, 0x6, 0x6, 0x147}, @empty, @multicast1, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xdf, 0x8, 0x4, 0x5f3, 0x61b40449}, @empty, @broadcast}}]}, {0x31, 0x6, "85a7579a8fa216c5975522d822bb65e2bb81a8088ec3997aec9b2be32f653b8e22c603e77a4e042c2a78425692"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x77}]}}]}, 0x2884}, 0x1, 0x0, 0x0, 0xc015}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000000)=0x0) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000000040)=r8) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001680)=@newsa={0x10c, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e32, 0x0, 0x0, 0x60, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@encap={0x1c, 0x4, {0x0, 0x4e23, 0x4e20, @in6=@private1}}]}, 0x10c}}, 0x0) 2.278018994s ago: executing program 0 (id=6615): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000a40)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000001080)=ANY=[@ANYBLOB="fc0000001900010027bd70000000000000000000000000000000000000000001fc02000000000000000000000000000000010000000000000a00000000000000f15550079be61a9083acc08742a089fd5b9dabdc36417643633a5f0e7cdabaa5b7f9ae8aaf83a7943aa444a74ecc4ba9d6c273ef03c52d0baf8da8fdfcf6d817a5bffb4e4e02655bb385255d83e05c2b0e3e1e7b0f3af39f1cfb6f43e60f7c32", @ANYRESOCT=r0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000080000000000000000000000000000003c00000000000000ffffffffffffffff00000000002000000000000000000000abcd0000000000002f0000000000000005000000000000000200000000000008010000000000000001000300000000004400050000000000000000000000000000000000000000003c00000002000000fe80000000000000000000000000003a06000000040100"/180], 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedbdf250b00000008000300", @ANYRES32=r5, @ANYBLOB='\x00'/12], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000c00)={&(0x7f0000000c40)={0xa, 0x4e24, 0x6, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="6000000000000000290000000400"], 0x60}, 0x44000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r6, 0x10f, 0x84, &(0x7f0000000d00), &(0x7f0000000080)=0xfffffffffffffe23) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f00000000c0)='%pI4 \x00'}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="bbad8b030a000200bb"], 0x28}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$WPAN_WANTACK(r11, 0x0, 0x0, &(0x7f00000006c0), &(0x7f0000000700)=0xfffffd47) vmsplice(r13, &(0x7f0000000340)=[{&(0x7f0000000480)="0dd2e7", 0x3}], 0x1, 0x0) tee(r11, r13, 0xfffffffffffffffd, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x7a05, 0x1700) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r11) sendmsg$NL80211_CMD_AUTHENTICATE(r12, &(0x7f0000000940)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000780)=ANY=[@ANYBLOB="50010000", @ANYRES16=r15, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x200d8001}, 0x8004005) write$cgroup_int(r14, &(0x7f0000000580), 0x806000) 1.663808096s ago: executing program 6 (id=6616): r0 = socket$inet(0xa, 0x801, 0x84) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000680)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000006c0)=0x1, 0x4) socket$inet(0x2, 0x5, 0x0) close(0x3) socket$inet_tcp(0x2, 0x1, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(r3, &(0x7f0000000700)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000740)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000940)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000000980)="cf", 0x1}, {&(0x7f00000009c0)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000a00)="8a", 0x1}, {&(0x7f0000000a40)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b80)="ce90bfdb", 0x4}, {&(0x7f0000000bc0)="f2e659", 0x3}, {&(0x7f0000000c00)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c40)}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000f40)="87", 0x1}, {&(0x7f0000000f80)="11e09017", 0x4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000fc0)=0x7fffffff, 0x4) connect$pppoe(r2, &(0x7f0000001000)={0x18, 0x0, {0x1, @empty, 'veth0\x00'}}, 0x1e) r4 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x3d, 0x0, 0x0) connect$pppoe(r4, &(0x7f0000001040)={0x18, 0x0, {0x1, @multicast, 'ip_vti0\x00'}}, 0x1e) close(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='syzkaller\x00', 0x6, 0xd, &(0x7f0000000580)=""/13, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6f4}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01040000000000000000050000000900010073797a3000000000080002400000000154000000030a03000000000000000000050000000900010073797a30000000000900030073797a30000000002800048008000240000000120800014000000000140003"], 0xa4}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) listen(r0, 0x8) pselect6(0x40, &(0x7f0000000280)={0x4, 0x8, 0x833, 0x1, 0x6, 0x2, 0xd, 0x7}, 0x0, &(0x7f00000002c0)={0xc, 0x7, 0x7ffffffd, 0x3, 0x3, 0xfffffffffffffffd, 0x2, 0x2}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.451452582s ago: executing program 6 (id=6617): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1, 0x0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4) socket(0x18, 0x3, 0x0) unshare(0x20000400) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x0, 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000c00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) bind$inet(r2, &(0x7f0000001040)={0x2, 0x4e61, @local}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) write(r5, &(0x7f0000000200)="240000002a00010302000000000000000000000001000000000000000004000000000000", 0x24) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r6, @ANYRES32=r2, @ANYRESHEX=r4], 0x54}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x0, &(0x7f0000000300)=0x2, 0xffffffffffffff2d) connect$inet6(r7, &(0x7f0000000340)={0xa, 0x4e22, 0x7c8b3c38, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x20040084) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000380), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r8, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0)=""/119, 0x77}, 0xff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002240)=""/255, 0xff}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002340)=""/201, 0xc9}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/144, 0x90}, 0x8000}], 0x6, 0x40000002, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "ee56b3d487e25b32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) shutdown(r7, 0x0) ppoll(&(0x7f0000000400)=[{r7, 0xc0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x28, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0xb, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{0x0, 0x2, 0x20d, 0xb}], 0x10, 0xfffffffb}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 622.079674ms ago: executing program 5 (id=6618): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40090}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@getchain={0x24, 0x66, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x1, 0xffe0}, {0xb, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 501.201996ms ago: executing program 3 (id=6619): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x2}, 0x8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0xe29, 0x7, 0x3, 0xfffffffd}, {0x7, 0x9, 0xed}, {0x8000, 0x5, 0xe, 0x6}, {0xf89e, 0x0, 0x0, 0x4}]}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000600)=0x5d6c, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, 0x100001}}, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x4, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4044840) 492.116001ms ago: executing program 1 (id=6620): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000003740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c0002800800110001"], 0x50}}, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000001040)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001100)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000036c0), 0x40000000000009f, 0x0) 442.050743ms ago: executing program 6 (id=6621): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x23, 0x4, 0x8, 0xbc0, 0x1d, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x3, 0x0, 0xbc0}, 0x50) 441.39623ms ago: executing program 0 (id=6622): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)={0x14, r3, 0x7, 0x0, 0x2}, 0x14}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x401, 0x0, 0x0, 0x100, 0x40, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f00000001c0)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b400000000000000006400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="480200000d0a010300000000000000000a007aefe29437000428020380200200801c02018044000280080003400000000308000180fffffffd080003400000000108000340000000030900020073797a300000000008000180fffffffc0900020073797a3100000000380002800900020073797a320000000008000180fffffffc080003400000000108000180fffffffb08000180fffffffe08000180fffffffb5800028008000180fffffffd08000180ffffffff0900020073797a3000000000080003400000000408000340000000010800034000000003080003400000000408000180fffffffb08000340000000010800034079510004f3000100f52bb8dfccfa51293feafae3f8c30f8ceabfe81a45f256f742a0db8be11d381279f04bc9bc269895d6eb3faa2b04d16e0dfd8318d71913591a554461636fa5fba3e2627bf657d00430267af88fa43f6c8b91e79be5bc0df1fe194ff233d8884bc4fecd39951bdcae945b36b95690072a94a1d9120820431582ed9776e77f405ed6c7474917cf674a842df22b360a238d5813fd9b4139d641ba653010808d15be314ed596caf81e6349109d0618aa127a816de4e1e875075cc65d18a59300d9d6316bc16927e22082a082d0362da80214acebbeec1a9ac669fcc0e2670491e50caad420df290204efd1"], 0x248}, 0x1, 0x0, 0x0, 0x20044090}, 0x200488c4) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xf}, 0x7fe}, 0xfffffffffffffd42) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b70000008ed00000bca31000000000002403000030feffff720af0ff9007008091a4f0ff000000001f030090000000002e140200000000002604fdffa4ffffff14010000000300001d130000000000007a0a00fe0020001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb150c537bf2085651d6dd6ce9bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf0134c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4136dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91ff073e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baaa244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b7025488316241f64c851a7fe7396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30c1675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010fcdb9913823333a70c2a4ab000000000000003f8dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc090000000000000061563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9901010000b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba435926b61c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0aa81192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e5789c6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06eef98aee88ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06ee0ff698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e913ac1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e495295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000060000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c97552606ffff97e86dc995604346262a177b06c634969a31b5717c416f8224662f4dd46d6081cb96dd6"], &(0x7f00000018c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000001900)={0x0, 0x2}, 0xffffffffffffff97, 0x10, &(0x7f0000001940), 0xfffffffffffffe3f}, 0x48) sendmsg$nl_route(r6, &(0x7f0000000480)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4814}, 0xa0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x10000014}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket(0x3, 0x5, 0xfffffffd) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="200029bd7000fedbdf250700000014000200ff020000000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x24000800}, 0x4840) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r8, 0x400442c9, &(0x7f0000000080)={0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}) write(0xffffffffffffffff, &(0x7f0000000740)="73626efb7a0e4183e13210dbfa25254175a8243ed8493b8f3191bc7556739a9d32ea8672959912f3ad9ea69226d783a775a717ef0b7060808c80db3224cf0b6cd886e9ee92c401c6d6129febd8e78211888914b4b9ff215b4cd570dda25baa3f959b89f7d76583e636431f4a00a908f4762ec6254f7d3a1c496dd64b0a20c004a84d9e9138d6589db7d504ed9be953b9cf5fec4411c21a280e6d22c0322498a23e25a7c33b7748f52ca6f7fdeb44b17fc74ca44e2206147531dff39da3922f988b3817c589d83793226cd13eca7ba1ff8e02ce5388cc9d72287ee55380880cd2b1d4b57657e107d91846aea7b77f", 0xee) 58.542393ms ago: executing program 3 (id=6623): r0 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00C'], 0x28}}], 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x49}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) socket$netlink(0x10, 0x3, 0x1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000380)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8a35e4275461c863}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0x68, r2, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x69}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x399}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x27b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x68}}, 0x24000000) (async) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="0a00180003030303030300004ffff691c440273a7de8f85899c4822be7882007b1c951180f0ad531127346693d80892808d4c583f30e49eb2b43d64fe642c3dcfea2944e"], 0x28}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xd0}}, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x83, &(0x7f0000000c40)={0x21, 0x0, 0x1, 0x1}, &(0x7f0000000c80)=0x10) (async) bind$inet(r5, &(0x7f0000000cc0)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r5, &(0x7f0000000d00)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, 0x0, 0xfffffffffffffd6a) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000d40)={0x1f, 0xffff, 0x3}, 0x1e) (async) write(r6, &(0x7f0000000140)="0b000300010001", 0x2) (async) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) (async) sendto$inet(r5, &(0x7f0000000dc0), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async) recvfrom$inet(r5, &(0x7f0000000e00)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x6, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="b7020000000df100bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f00000011c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000001200), 0x3a, 0x10, &(0x7f0000001240), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001280)={r8, 0x0, 0xe, 0x0, &(0x7f0000001300)="1d5fe8317ca952a2ba4bfee0f003", 0x0, 0x200020fe, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) 7.709829ms ago: executing program 6 (id=6624): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac05, 0x4]}]]}, 0x34}}, 0x0) 0s ago: executing program 5 (id=6625): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x18, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB="8510000004000000950080000000000018000003000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) kernel console output (not intermixed with test programs): 5676'. [ 949.572425][T29250] mac80211_hwsim hwsim28 syzkaller0: entered promiscuous mode [ 949.572457][T29250] mac80211_hwsim hwsim28 syzkaller0: entered allmulticast mode [ 949.592424][T29256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5677'. [ 949.674337][T29258] syzkaller1: entered promiscuous mode [ 949.674365][T29258] syzkaller1: entered allmulticast mode [ 949.707976][T29258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5679'. [ 949.732536][T29258] netlink: 'syz.3.5679': attribute type 322 has an invalid length. [ 949.957389][T29275] SET target dimension over the limit! [ 949.958835][T29275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5680'. [ 950.652492][T24208] net_ratelimit: 6 callbacks suppressed [ 950.652515][T24208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.652884][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.659153][T29212] lo speed is unknown, defaulting to 1000 [ 950.667845][T29298] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5688'. [ 950.883964][T29308] netlink: 'syz.4.5690': attribute type 1 has an invalid length. [ 951.186143][T29303] __nla_validate_parse: 1 callbacks suppressed [ 951.186169][T29303] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5690'. [ 951.187304][T29308] bond8: entered promiscuous mode [ 951.189426][T29308] 8021q: adding VLAN 0 to HW filter on device bond8 [ 951.285690][T29321] bond10: entered allmulticast mode [ 951.286127][T29303] bond8: entered allmulticast mode [ 951.326843][T29321] netlink: 'syz.1.5693': attribute type 11 has an invalid length. [ 951.372009][T10441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.435675][T29321] macvlan3: entered promiscuous mode [ 951.435704][T29321] macvlan3: entered allmulticast mode [ 951.445167][T29321] bond10: entered promiscuous mode [ 951.472120][T29321] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 951.493625][T29321] bond10: left promiscuous mode [ 951.536610][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.537035][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.561825][T29333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5694'. [ 951.561926][T29333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5694'. [ 951.677108][T29333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5694'. [ 951.677137][T29333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5694'. [ 951.693732][T10451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.694141][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.111200][T29343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5695'. [ 952.113307][T29343] openvswitch: netlink: Message has 4 unknown bytes. [ 952.255665][T29349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5698'. [ 952.560181][T29363] ip_tables: iptables: counters copy to user failed while replacing table [ 952.735248][T24208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.987047][T29375] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5705'. [ 953.156956][T29381] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 953.255691][T29382] netlink: 'syz.0.5707': attribute type 1 has an invalid length. [ 953.290540][T29382] 8021q: adding VLAN 0 to HW filter on device bond14 [ 953.711967][T29413] syzkaller0: left promiscuous mode [ 953.711996][T29413] syzkaller0: left allmulticast mode [ 953.790952][T29416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5716'. [ 954.021007][T29430] netlink: 'syz.2.5720': attribute type 27 has an invalid length. [ 954.023005][T29430] netlink: 'syz.2.5720': attribute type 27 has an invalid length. [ 954.023219][T29430] netlink: 'syz.2.5720': attribute type 27 has an invalid length. [ 954.023423][T29430] netlink: 'syz.2.5720': attribute type 27 has an invalid length. [ 954.023636][T29430] netlink: 'syz.2.5720': attribute type 27 has an invalid length. [ 954.023842][T29430] netlink: 'syz.2.5720': attribute type 27 has an invalid length. [ 955.569358][T29515] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 955.852871][ T5737] net_ratelimit: 9 callbacks suppressed [ 955.852894][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.853294][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.928106][T29531] validate_nla: 59 callbacks suppressed [ 955.928132][T29531] netlink: 'syz.2.5741': attribute type 1 has an invalid length. [ 956.189487][T29546] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5744'. [ 956.257137][T29549] netlink: 'syz.0.5747': attribute type 1 has an invalid length. [ 956.258696][T29550] netlink: 'syz.3.5744': attribute type 1 has an invalid length. [ 956.332949][T29554] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5747'. [ 956.369357][T29554] 8021q: adding VLAN 0 to HW filter on device bond15 [ 956.444238][T29559] gre3: entered promiscuous mode [ 956.659979][T29573] tc_dump_action: action bad kind [ 956.918413][T29586] netlink: 'syz.2.5759': attribute type 30 has an invalid length. [ 956.976223][T24208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.976644][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.016287][T29587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5758'. [ 957.109742][T29596] FAULT_INJECTION: forcing a failure. [ 957.109742][T29596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 957.109782][T29596] CPU: 1 UID: 0 PID: 29596 Comm: syz.4.5762 Not tainted syzkaller #0 PREEMPT(full) [ 957.109812][T29596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 957.109826][T29596] Call Trace: [ 957.109835][T29596] [ 957.109846][T29596] dump_stack_lvl+0xe8/0x150 [ 957.109889][T29596] should_fail_ex+0x410/0x560 [ 957.109928][T29596] _copy_from_user+0x2d/0xb0 [ 957.109965][T29596] ___sys_sendmsg+0x1c6/0x360 [ 957.109999][T29596] ? __lock_acquire+0x747/0x2de0 [ 957.110032][T29596] ? __pfx____sys_sendmsg+0x10/0x10 [ 957.110071][T29596] ? kstrtouint+0x6e/0xe0 [ 957.110129][T29596] ? __fget_files+0x2a/0x420 [ 957.110165][T29596] ? __fget_files+0x3a2/0x420 [ 957.110211][T29596] __sys_sendmmsg+0x273/0x4d0 [ 957.110251][T29596] ? __pfx___sys_sendmmsg+0x10/0x10 [ 957.110303][T29596] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 957.110356][T29596] ? ksys_write+0x242/0x270 [ 957.110383][T29596] ? __pfx_ksys_write+0x10/0x10 [ 957.110415][T29596] __x64_sys_sendmmsg+0xa0/0xc0 [ 957.110450][T29596] do_syscall_64+0x166/0x520 [ 957.110483][T29596] ? trace_irq_disable+0x3b/0x140 [ 957.110509][T29596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.110534][T29596] ? clear_bhb_loop+0x70/0xc0 [ 957.110564][T29596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.110587][T29596] RIP: 0033:0x7f735279f559 [ 957.110610][T29596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.110630][T29596] RSP: 002b:00007f73536e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 957.110655][T29596] RAX: ffffffffffffffda RBX: 00007f7352a25fa0 RCX: 00007f735279f559 [ 957.110673][T29596] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 957.110690][T29596] RBP: 00007f73536e8090 R08: 0000000000000000 R09: 0000000000000000 [ 957.110705][T29596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 957.110720][T29596] R13: 00007f7352a26038 R14: 00007f7352a25fa0 R15: 00007ffd7c559b88 [ 957.110759][T29596] [ 957.318073][T27901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.321055][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.424075][T29586] bond8: option arp_missed_max: invalid value (0) [ 957.424103][T29586] bond8: option arp_missed_max: allowed values 1 - 255 [ 957.455044][T10440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.463807][T29586] bond8 (unregistering): Released all slaves [ 957.619701][T29587] bond11: entered promiscuous mode [ 957.620216][T29587] 8021q: adding VLAN 0 to HW filter on device bond11 [ 957.645529][T29605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5764'. [ 957.724447][T29614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5767'. [ 957.724501][T29614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5767'. [ 957.756109][T29614] ip6gre2: entered promiscuous mode [ 957.756137][T29614] ip6gre2: entered allmulticast mode [ 957.757820][ T61] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 957.758084][ T61] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 957.782738][T10441] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 957.996388][T10440] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 958.012732][T24208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.013103][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.080997][T29621] netlink: 'syz.2.5769': attribute type 1 has an invalid length. [ 958.187035][T29621] bond8: entered promiscuous mode [ 958.187637][T29621] 8021q: adding VLAN 0 to HW filter on device bond8 [ 958.392794][T29621] 8021q: adding VLAN 0 to HW filter on device bond8 [ 958.400555][T29621] bond8: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 958.400584][T29621] bond8: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 958.469234][T29621] bond8: (slave ip6gre3): making interface the new active one [ 958.469267][T29621] ip6gre3: entered promiscuous mode [ 958.486405][T29621] bond8: (slave ip6gre3): Enslaving as an active interface with an up link [ 958.492971][T10440] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 958.524837][T29625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 958.606443][T10440] lo speed is unknown, defaulting to 1000 [ 958.606473][T10440] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 959.288999][T29664] netlink: 'syz.3.5781': attribute type 11 has an invalid length. [ 959.311830][T29663] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5780'. [ 959.416765][T29670] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5783'. [ 959.426104][T29666] tipc: Resetting bearer [ 959.497288][T29666] bond6: (slave veth0_to_bond): Releasing active interface [ 959.689498][T29686] FAULT_INJECTION: forcing a failure. [ 959.689498][T29686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 959.689538][T29686] CPU: 0 UID: 0 PID: 29686 Comm: syz.1.5788 Not tainted syzkaller #0 PREEMPT(full) [ 959.689565][T29686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 959.689579][T29686] Call Trace: [ 959.689589][T29686] [ 959.689601][T29686] dump_stack_lvl+0xe8/0x150 [ 959.689639][T29686] should_fail_ex+0x410/0x560 [ 959.689676][T29686] _copy_from_iter+0x1d3/0x1660 [ 959.689719][T29686] ? __alloc_skb+0x27a/0x7a0 [ 959.689751][T29686] ? __alloc_skb+0x27a/0x7a0 [ 959.689780][T29686] ? __alloc_skb+0x27a/0x7a0 [ 959.689809][T29686] ? __pfx__copy_from_iter+0x10/0x10 [ 959.689838][T29686] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 959.689863][T29686] ? __alloc_skb+0x27a/0x7a0 [ 959.689889][T29686] ? __alloc_skb+0x27a/0x7a0 [ 959.689924][T29686] ? netlink_sendmsg+0x650/0xb40 [ 959.689951][T29686] ? skb_put+0x112/0x210 [ 959.689983][T29686] netlink_sendmsg+0x6c0/0xb40 [ 959.690017][T29686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 959.690051][T29686] ? apparmor_socket_sendmsg+0x98/0x360 [ 959.690084][T29686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 959.690109][T29686] sock_sendmsg_nosec+0x14e/0x190 [ 959.690137][T29686] ____sys_sendmsg+0x54e/0x850 [ 959.690175][T29686] ? __pfx_____sys_sendmsg+0x10/0x10 [ 959.690215][T29686] ? import_iovec+0x73/0xa0 [ 959.690254][T29686] ___sys_sendmsg+0x2a5/0x360 [ 959.690283][T29686] ? __lock_acquire+0x747/0x2de0 [ 959.690314][T29686] ? __pfx____sys_sendmsg+0x10/0x10 [ 959.690358][T29686] ? kstrtouint+0x6e/0xe0 [ 959.690416][T29686] ? __fget_files+0x2a/0x420 [ 959.690451][T29686] ? __fget_files+0x3a2/0x420 [ 959.690497][T29686] __sys_sendmmsg+0x273/0x4d0 [ 959.690537][T29686] ? __pfx___sys_sendmmsg+0x10/0x10 [ 959.690579][T29686] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 959.690630][T29686] ? ksys_write+0x242/0x270 [ 959.690657][T29686] ? __pfx_ksys_write+0x10/0x10 [ 959.690697][T29686] __x64_sys_sendmmsg+0xa0/0xc0 [ 959.690733][T29686] do_syscall_64+0x166/0x520 [ 959.690765][T29686] ? trace_irq_disable+0x3b/0x140 [ 959.690790][T29686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.690814][T29686] ? clear_bhb_loop+0x70/0xc0 [ 959.690843][T29686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.690866][T29686] RIP: 0033:0x7f352079f559 [ 959.690889][T29686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 959.690909][T29686] RSP: 002b:00007f35215c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 959.690935][T29686] RAX: ffffffffffffffda RBX: 00007f3520a25fa0 RCX: 00007f352079f559 [ 959.690953][T29686] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 959.690970][T29686] RBP: 00007f35215c5090 R08: 0000000000000000 R09: 0000000000000000 [ 959.690984][T29686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 959.690998][T29686] R13: 00007f3520a26038 R14: 00007f3520a25fa0 R15: 00007fff3affa6e8 [ 959.691036][T29686] [ 959.966173][T29683] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5787'. [ 960.327992][T29704] tunl0: Caught tx_queue_len zero misconfig [ 960.408232][T29708] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5794'. [ 960.750531][T29722] rxe_eth0 speed is unknown, defaulting to 1000 [ 960.846993][T29727] netlink: 'syz.2.5800': attribute type 11 has an invalid length. [ 960.870910][T29731] netlink: 'syz.1.5801': attribute type 10 has an invalid length. [ 960.883086][T29734] netlink: 'syz.1.5801': attribute type 1 has an invalid length. [ 961.132013][T24208] net_ratelimit: 8 callbacks suppressed [ 961.132036][T24208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.132420][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.617739][T29765] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 962.172557][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.173072][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.412230][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 963.053108][T27900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.053756][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.212338][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.212807][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.531813][T10440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.253339][T27900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.156541][T29815] sctp: [Deprecated]: syz.2.5819 (pid 29815) Use of int in maxseg socket option. [ 965.156541][T29815] Use struct sctp_assoc_value instead [ 965.233699][T29817] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5819'. [ 965.428735][T29817] hsr_slave_0 (unregistering): left promiscuous mode [ 965.543495][T29722] lo speed is unknown, defaulting to 1000 [ 966.058454][T29838] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5824'. [ 967.465583][T10441] net_ratelimit: 1 callbacks suppressed [ 967.465608][T10441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.727607][T29866] IPVS: Scheduler module ip_vs_mh not found [ 967.830314][T24208] lo speed is unknown, defaulting to 1000 [ 967.830365][T24208] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE [ 967.845918][T29876] FAULT_INJECTION: forcing a failure. [ 967.845918][T29876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 967.845953][T29876] CPU: 1 UID: 0 PID: 29876 Comm: syz.4.5831 Not tainted syzkaller #0 PREEMPT(full) [ 967.845978][T29876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 967.845993][T29876] Call Trace: [ 967.846002][T29876] [ 967.846013][T29876] dump_stack_lvl+0xe8/0x150 [ 967.846051][T29876] should_fail_ex+0x410/0x560 [ 967.846087][T29876] _copy_to_user+0x31/0xb0 [ 967.846125][T29876] simple_read_from_buffer+0xe1/0x170 [ 967.846167][T29876] proc_fail_nth_read+0x1bb/0x230 [ 967.846214][T29876] ? common_file_perm+0x20e/0x2b0 [ 967.846250][T29876] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 967.846280][T29876] ? rw_verify_area+0x24a/0x4c0 [ 967.846304][T29876] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 967.846329][T29876] vfs_read+0x213/0xa80 [ 967.846358][T29876] ? __pfx___mutex_lock+0x10/0x10 [ 967.846400][T29876] ? __pfx_vfs_read+0x10/0x10 [ 967.846426][T29876] ? __fget_files+0x2a/0x420 [ 967.846463][T29876] ? __fget_files+0x3a2/0x420 [ 967.846497][T29876] ? __fget_files+0x2a/0x420 [ 967.846542][T29876] ksys_read+0x150/0x270 [ 967.846569][T29876] ? __pfx_ksys_read+0x10/0x10 [ 967.846606][T29876] do_syscall_64+0x166/0x520 [ 967.846638][T29876] ? trace_irq_disable+0x3b/0x140 [ 967.846663][T29876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.846687][T29876] ? clear_bhb_loop+0x70/0xc0 [ 967.846716][T29876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.846739][T29876] RIP: 0033:0x7f735275fd8e [ 967.846761][T29876] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 967.846779][T29876] RSP: 002b:00007f73536e7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 967.846804][T29876] RAX: ffffffffffffffda RBX: 00007f73536e86c0 RCX: 00007f735275fd8e [ 967.846821][T29876] RDX: 000000000000000f RSI: 00007f73536e80a0 RDI: 0000000000000004 [ 967.846835][T29876] RBP: 00007f73536e8090 R08: 0000000000000000 R09: 0000000000000000 [ 967.846848][T29876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 967.846862][T29876] R13: 00007f7352a26038 R14: 00007f7352a25fa0 R15: 00007ffd7c559b88 [ 967.846902][T29876] [ 968.106585][T27900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.106889][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.332657][T29885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5833'. [ 968.400248][T29891] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5837'. [ 968.476155][T29885] bond12: entered promiscuous mode [ 968.478490][T29885] 8021q: adding VLAN 0 to HW filter on device bond12 [ 968.502551][T29885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5833'. [ 968.605505][T29885] bond13: entered promiscuous mode [ 968.606785][T29885] 8021q: adding VLAN 0 to HW filter on device bond13 [ 968.628516][T29885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5833'. [ 968.674761][T29885] bond14: entered promiscuous mode [ 968.675235][T29885] 8021q: adding VLAN 0 to HW filter on device bond14 [ 968.677890][T29885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5833'. [ 968.728894][T29885] bond15: entered promiscuous mode [ 968.729326][T29885] 8021q: adding VLAN 0 to HW filter on device bond15 [ 968.730415][T29885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5833'. [ 968.853144][T29900] ip6tnl0: Caught tx_queue_len zero misconfig [ 968.910887][T29885] bond16: entered promiscuous mode [ 968.914421][T29885] 8021q: adding VLAN 0 to HW filter on device bond16 [ 968.925641][T29885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5833'. [ 968.997539][T29885] bond17: entered promiscuous mode [ 968.999128][T29885] 8021q: adding VLAN 0 to HW filter on device bond17 [ 969.006326][T29885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5833'. [ 969.102475][T29885] bond18: entered promiscuous mode [ 969.103000][T29885] 8021q: adding VLAN 0 to HW filter on device bond18 [ 969.165600][T29885] bond19: entered promiscuous mode [ 969.166461][T29885] 8021q: adding VLAN 0 to HW filter on device bond19 [ 969.298269][ T8897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.298676][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.230907][T29934] netlink: 'syz.1.5848': attribute type 58 has an invalid length. [ 970.469370][T29943] mac80211_hwsim hwsim28 syzkaller0: left promiscuous mode [ 970.469402][T29943] mac80211_hwsim hwsim28 syzkaller0: left allmulticast mode [ 970.503504][T10440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.731587][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 971.183096][T29949] vcan1: entered allmulticast mode [ 971.233023][T29950] __nla_validate_parse: 4 callbacks suppressed [ 971.233048][T29950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5852'. [ 971.258604][T29950] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5852'. [ 971.989665][T29962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5857'. [ 972.346823][T29975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5860'. [ 972.346851][T29975] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5860'. [ 972.562427][T29978] syzkaller0: left promiscuous mode [ 972.562453][T29978] syzkaller0: left allmulticast mode [ 973.070377][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 973.085782][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 973.086851][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 973.090535][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 973.099113][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 973.295796][ T8899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.296207][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.532671][T10438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.810100][ T61] smc: removing ib device syz1 [ 973.836610][T10440] infiniband syz1: ib_query_port failed (-19) [ 973.943407][ T61] smbdirect: ib_dev[syz1] removed [ 974.274560][T29986] rxe_eth0 speed is unknown, defaulting to 1000 [ 974.572754][T27900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.573166][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.187113][T30015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5868'. [ 975.211792][ T4937] Bluetooth: hci3: command tx timeout [ 975.778732][T30020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5869'. [ 975.960061][T30020] bond20: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 975.985216][T30020] bond20 (unregistering): Released all slaves [ 976.571827][T10440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.808604][T29986] lo speed is unknown, defaulting to 1000 [ 977.291851][ T4937] Bluetooth: hci3: command tx timeout [ 978.334404][T27903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.334910][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.834993][T30059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5878'. [ 978.912601][T29986] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.914353][T29986] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.914570][T29986] bridge_slave_0: entered allmulticast mode [ 978.918060][T29986] bridge_slave_0: entered promiscuous mode [ 978.987249][T29986] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.987454][T29986] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.987637][T29986] bridge_slave_1: entered allmulticast mode [ 978.989692][T29986] bridge_slave_1: entered promiscuous mode [ 979.058922][T29986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 979.073406][T29986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 979.121048][T29986] team0: Port device team_slave_0 added [ 979.130587][T29986] team0: Port device team_slave_1 added [ 979.172415][T29986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 979.172436][T29986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 979.172464][T29986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 979.174778][T29986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 979.174795][T29986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 979.174824][T29986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 979.373303][ T4937] Bluetooth: hci3: command tx timeout [ 979.518275][T29986] hsr_slave_0: entered promiscuous mode [ 979.528145][T29986] hsr_slave_1: entered promiscuous mode [ 979.543352][T29986] debugfs: 'hsr0' already exists in 'hsr' [ 979.543381][T29986] Cannot create hsr debugfs directory [ 979.626345][T10440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.723461][T30073] vlan3: entered promiscuous mode [ 979.723487][T30073] bridge0: entered promiscuous mode [ 980.291990][T29986] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 980.292031][T29986] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 980.337032][ T8899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.337455][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.535944][T29986] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 980.535987][T29986] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 980.681618][T29986] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 980.681659][T29986] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 980.799617][T29986] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 980.799659][T29986] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 981.245213][T29986] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 981.262849][T29986] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 981.264395][T29986] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 981.293644][T29986] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 981.295140][T29986] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 981.325079][T30089] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 981.325541][T30087] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 981.328348][T30090] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 981.334081][T29986] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 981.359508][T29986] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 981.390393][T29986] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 981.452268][ T4937] Bluetooth: hci3: command tx timeout [ 981.671485][T30110] openvswitch: netlink: Actions may not be safe on all matching packets [ 981.842335][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 981.860738][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 981.870807][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 981.895843][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 981.901693][T29986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 981.920461][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 981.985773][T29986] 8021q: adding VLAN 0 to HW filter on device team0 [ 982.016651][T27903] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.016770][T27903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 982.051149][T27903] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.051253][T27903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 982.450375][T30123] tc_dump_action: action bad kind [ 982.653010][T10438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.059185][T30141] syzkaller0: entered promiscuous mode [ 983.059212][T30141] syzkaller0: entered allmulticast mode [ 983.392151][T30113] rxe_eth0 speed is unknown, defaulting to 1000 [ 983.533264][T27902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.533618][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.666119][T29986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 983.862771][T29986] veth0_vlan: entered promiscuous mode [ 983.932474][T29986] veth1_vlan: entered promiscuous mode [ 984.012276][ T4937] Bluetooth: hci5: command tx timeout [ 984.195779][T29986] veth0_macvtap: entered promiscuous mode [ 984.216780][T30159] syzkaller1: entered promiscuous mode [ 984.216811][T30159] syzkaller1: entered allmulticast mode [ 984.275121][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 984.276155][T29986] veth1_macvtap: entered promiscuous mode [ 984.299690][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 984.309081][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 984.310733][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 984.327040][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 984.650084][T27902] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.727448][T29857] tipc: Resetting bearer [ 984.811186][T29857] tipc: Disabling bearer [ 984.900286][T27902] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.142489][T29986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 985.216696][T29986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 985.221248][T27902] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.373822][T27901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.374206][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.409478][T27901] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.409544][T27901] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.409584][T27901] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.409621][T27901] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.655680][T27902] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.695000][ T9580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.937352][T30113] lo speed is unknown, defaulting to 1000 [ 985.973462][T30184] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5904'. [ 985.997232][ T8897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.997258][ T8897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.092759][ T4937] Bluetooth: hci5: command tx timeout [ 986.156993][T30158] rxe_eth0 speed is unknown, defaulting to 1000 [ 986.393963][T30186] ip6gre2: entered allmulticast mode [ 986.493696][ T52] Bluetooth: hci4: command tx timeout [ 986.819593][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 986.819620][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.393486][T27902] bridge0: port 3(batadv0) entered disabled state [ 987.413768][T27902] team0: left allmulticast mode [ 987.413795][T27902] team_slave_0: left allmulticast mode [ 987.413816][T27902] team_slave_1: left allmulticast mode [ 987.460803][T27902] team0: left promiscuous mode [ 987.460831][T27902] team_slave_0: left promiscuous mode [ 987.461048][T27902] team_slave_1: left promiscuous mode [ 987.480405][T27902] bridge0: port 1(team0) entered disabled state [ 987.504147][T27902] bridge_slave_1: left allmulticast mode [ 987.505781][T27902] bridge_slave_1: left promiscuous mode [ 987.506033][T27902] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.636498][T30222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5906'. [ 987.875894][T27902] pim6reg: left allmulticast mode [ 987.876024][T27902] bridge0: left allmulticast mode [ 987.876740][T27902] bond3: left allmulticast mode [ 988.012228][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 988.172831][ T52] Bluetooth: hci5: command tx timeout [ 988.574169][ T4937] Bluetooth: hci4: command tx timeout [ 988.751685][T24219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.773291][T27902] bond4 (unregistering): (slave gretap1): Releasing active interface [ 988.915025][T30238] netlink: 'syz.1.5911': attribute type 1 has an invalid length. [ 988.950936][T27902] team0: Port device bridge4 removed [ 988.968720][T27902] team0: Port device bridge5 removed [ 989.017469][T30240] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5911'. [ 989.061447][T27902] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 989.067090][T27902] bond0 (unregistering): Released all slaves [ 989.089831][T27902] bond1 (unregistering): Released all slaves [ 989.106754][T27902] bond2 (unregistering): Released all slaves [ 989.128729][T27902] bond3 (unregistering): Released all slaves [ 989.174058][T27902] bond4 (unregistering): Released all slaves [ 989.189912][T27902] bond5 (unregistering): Released all slaves [ 989.209452][T27902] bond6 (unregistering): Released all slaves [ 989.230874][T27902] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 989.230906][T27902] veth0_to_bond: left promiscuous mode [ 989.231078][T27902] veth0_to_bond: left allmulticast mode [ 989.258133][T27902] bond7 (unregistering): Released all slaves [ 989.278646][T27902] bond8 (unregistering): Released all slaves [ 989.293302][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.293598][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.368607][T30219] geneve1: entered promiscuous mode [ 989.478467][T30221] syzkaller1: entered promiscuous mode [ 989.478494][T30221] syzkaller1: entered allmulticast mode [ 989.485318][T30158] lo speed is unknown, defaulting to 1000 [ 989.623622][T30239] 8021q: adding VLAN 0 to HW filter on device bond21 [ 989.625815][T30239] bond20: (slave bond21): making interface the new active one [ 989.626342][T30239] bond20: (slave bond21): Enslaving as an active interface with an up link [ 989.657664][T30241] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 990.255366][ T52] Bluetooth: hci5: command tx timeout [ 990.325833][T30268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5914'. [ 990.651665][ T52] Bluetooth: hci4: command tx timeout [ 990.688343][T30285] set match dimension is over the limit! [ 990.688488][T30285] set match dimension is over the limit! [ 990.688617][T30285] set match dimension is over the limit! [ 990.688747][T30285] set match dimension is over the limit! [ 990.688875][T30285] set match dimension is over the limit! [ 990.689012][T30285] set match dimension is over the limit! [ 990.689141][T30285] set match dimension is over the limit! [ 990.689278][T30285] set match dimension is over the limit! [ 990.689407][T30285] set match dimension is over the limit! [ 990.689534][T30285] set match dimension is over the limit! [ 990.802166][T30288] team0: entered allmulticast mode [ 990.802197][T30288] team_slave_1: entered allmulticast mode [ 990.802945][T30288] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 990.870660][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 990.943452][T30302] tipc: New replicast peer: 127.0.0.1 [ 990.960808][T30302] tipc: Enabled bearer , priority 10 [ 991.008146][T30297] ipip0: entered promiscuous mode [ 991.213174][T22746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.213649][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.241405][T30113] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.241533][T30113] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.241731][T30113] bridge_slave_0: entered allmulticast mode [ 991.274402][T30113] bridge_slave_0: entered promiscuous mode [ 991.300121][T30113] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.300239][T30113] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.300408][T30113] bridge_slave_1: entered allmulticast mode [ 991.329964][T30113] bridge_slave_1: entered promiscuous mode [ 991.713325][T30113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 991.779262][ T9580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.910468][T30113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 992.417199][T30113] team0: Port device team_slave_0 added [ 992.474919][T30113] team0: Port device team_slave_1 added [ 992.544368][T30357] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5926'. [ 992.731643][ T52] Bluetooth: hci4: command tx timeout [ 993.046908][ T5281] 8021q: adding VLAN 0 to HW filter on device eth4 [ 993.051263][T30113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 993.056398][T30113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 993.056491][T30113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 993.068015][T30113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 993.068066][T30113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 993.068163][T30113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 993.174606][T27902] hsr_slave_0: left promiscuous mode [ 993.175415][T27902] hsr_slave_1: left promiscuous mode [ 993.176328][T27902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 993.176349][T27902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 993.219633][T27902] veth1_vlan: left promiscuous mode [ 993.219750][T27902] veth0_vlan: left promiscuous mode [ 993.381594][T30380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5932'. [ 993.663448][T30389] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20001 [ 993.776813][T27902] team0 (unregistering): Port device team_slave_1 removed [ 993.799629][T27902] team0 (unregistering): Port device team_slave_0 removed [ 994.089100][T30113] hsr_slave_0: entered promiscuous mode [ 994.090502][T30113] hsr_slave_1: entered promiscuous mode [ 994.099013][T30113] debugfs: 'hsr0' already exists in 'hsr' [ 994.099085][T30113] Cannot create hsr debugfs directory [ 994.199946][T30158] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.200106][T30158] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.232693][T30158] bridge_slave_0: entered allmulticast mode [ 994.237313][T30158] bridge_slave_0: entered promiscuous mode [ 994.319938][T30158] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.320058][T30158] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.320302][T30158] bridge_slave_1: entered allmulticast mode [ 994.338646][T27901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.339745][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.366217][T30158] bridge_slave_1: entered promiscuous mode [ 994.479277][T30413] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5938'. [ 994.809968][T30414] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 994.811954][T10440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.838051][T30414] bond1 (unregistering): Released all slaves [ 994.980512][T30158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 995.050840][T30158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 995.307880][T30158] team0: Port device team_slave_0 added [ 995.390773][T30158] team0: Port device team_slave_1 added [ 995.480651][T27902] IPVS: stop unused estimator thread 0... [ 995.524083][T30430] rxe_eth0 speed is unknown, defaulting to 1000 [ 995.529369][T30158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 995.529394][T30158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 995.529416][T30158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 995.554774][T30438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5942'. [ 995.554848][T30438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5942'. [ 995.575684][T30439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5942'. [ 995.575775][T30439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5942'. [ 995.656325][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5 [ 995.660938][T30158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 995.660961][T30158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 995.660997][T30158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 995.784429][T30447] syzkaller0: entered promiscuous mode [ 995.784461][T30447] syzkaller0: entered allmulticast mode [ 996.092217][T30158] hsr_slave_0: entered promiscuous mode [ 996.093473][T30158] hsr_slave_1: entered promiscuous mode [ 996.113070][T30158] debugfs: 'hsr0' already exists in 'hsr' [ 996.113096][T30158] Cannot create hsr debugfs directory [ 996.187626][T27903] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 996.187669][T27903] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.517053][T30463] FAULT_INJECTION: forcing a failure. [ 996.517053][T30463] name failslab, interval 1, probability 0, space 0, times 0 [ 996.517091][T30463] CPU: 0 UID: 0 PID: 30463 Comm: syz.3.5946 Not tainted syzkaller #0 PREEMPT(full) [ 996.517118][T30463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 996.517132][T30463] Call Trace: [ 996.517143][T30463] [ 996.517153][T30463] dump_stack_lvl+0xe8/0x150 [ 996.517194][T30463] should_fail_ex+0x410/0x560 [ 996.517234][T30463] should_failslab+0xa8/0x100 [ 996.517270][T30463] __kmalloc_cache_noprof+0xa3/0x600 [ 996.517296][T30463] ? trace_kmalloc+0x2a/0xf0 [ 996.517321][T30463] ? nft_trans_rule_add+0x59/0x440 [ 996.517464][T30463] ? nft_trans_rule_add+0x59/0x440 [ 996.517492][T30463] ? __kmalloc_noprof+0x38c/0x720 [ 996.517522][T30463] nft_trans_rule_add+0x59/0x440 [ 996.517549][T30463] ? nft_parse_register_store+0x2f0/0x370 [ 996.517588][T30463] nf_tables_newrule+0x1b50/0x28a0 [ 996.517632][T30463] ? __pfx_nf_tables_newrule+0x10/0x10 [ 996.517655][T30463] ? lock_acquire+0x115/0x350 [ 996.517681][T30463] ? nfnl_pernet+0x23/0x240 [ 996.517734][T30463] ? __nla_parse+0x40/0x60 [ 996.517774][T30463] nfnetlink_rcv+0x1288/0x28c0 [ 996.517840][T30463] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 996.517921][T30463] ? lock_acquire+0x115/0x350 [ 996.517958][T30463] ? netlink_deliver_tap+0x2e/0x1b0 [ 996.517984][T30463] ? netlink_deliver_tap+0x2e/0x1b0 [ 996.518018][T30463] netlink_unicast+0x8ef/0xa80 [ 996.518070][T30463] netlink_sendmsg+0x813/0xb40 [ 996.518109][T30463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 996.518146][T30463] ? apparmor_socket_sendmsg+0x18b/0x360 [ 996.518180][T30463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 996.518207][T30463] sock_sendmsg_nosec+0x14e/0x190 [ 996.518237][T30463] ____sys_sendmsg+0x54e/0x850 [ 996.518278][T30463] ? __pfx_____sys_sendmsg+0x10/0x10 [ 996.518320][T30463] ? import_iovec+0x73/0xa0 [ 996.518361][T30463] ___sys_sendmsg+0x2a5/0x360 [ 996.518392][T30463] ? __lock_acquire+0x747/0x2de0 [ 996.518423][T30463] ? __pfx____sys_sendmsg+0x10/0x10 [ 996.518493][T30463] ? __fget_files+0x2a/0x420 [ 996.518526][T30463] ? __fget_files+0x3a2/0x420 [ 996.518573][T30463] __x64_sys_sendmsg+0x1b1/0x290 [ 996.518608][T30463] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 996.518681][T30463] do_syscall_64+0x166/0x520 [ 996.518711][T30463] ? trace_irq_disable+0x3b/0x140 [ 996.518735][T30463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.518758][T30463] ? clear_bhb_loop+0x70/0xc0 [ 996.518785][T30463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.518806][T30463] RIP: 0033:0x7f88c919f559 [ 996.518828][T30463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 996.518847][T30463] RSP: 002b:00007f88c9f8b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 996.518872][T30463] RAX: ffffffffffffffda RBX: 00007f88c9425fa0 RCX: 00007f88c919f559 [ 996.518889][T30463] RDX: 0000000024000840 RSI: 0000200000000480 RDI: 0000000000000003 [ 996.518904][T30463] RBP: 00007f88c9f8b090 R08: 0000000000000000 R09: 0000000000000000 [ 996.518919][T30463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 996.518933][T30463] R13: 00007f88c9426038 R14: 00007f88c9425fa0 R15: 00007ffe932881b8 [ 996.518971][T30463] [ 996.973049][T27902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.973287][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.085969][T27903] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 997.086011][T27903] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.433883][T27903] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 997.433926][T27903] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.711143][ T5281] 8021q: adding VLAN 0 to HW filter on device eth6 [ 997.723765][T27903] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 997.723808][T27903] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.854485][ T9580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.009259][T30430] lo speed is unknown, defaulting to 1000 [ 998.028458][T30113] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 998.036389][T30113] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 998.159466][T30113] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 998.178236][T30113] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 998.235728][T30113] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 998.300967][T30113] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 998.432783][T30113] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 998.458220][T30113] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 998.499382][T30519] netlink: 'syz.3.5953': attribute type 11 has an invalid length. [ 998.499413][T30519] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5953'. [ 998.628584][T30521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5955'. [ 998.715532][T30528] x_tables: duplicate underflow at hook 1 [ 999.283730][T27903] bridge_slave_0: left allmulticast mode [ 999.283763][T27903] bridge_slave_0: left promiscuous mode [ 999.283998][T27903] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.397431][T30537] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5958'. [ 999.423766][T27903] bridge0: left allmulticast mode [ 999.423875][T27903] pim6reg: left allmulticast mode [ 999.464298][T27903] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 999.700135][T27903] bond8 (unregistering): (slave ip6gre3): Releasing backup interface [ 999.700167][T27903] ip6gre3 (unregistering): left promiscuous mode [ 999.875790][T27903] bond0 (unregistering): (slave gretap1): Releasing active interface [ 999.983088][T27903] batman_adv: batadv0: Removing interface: syzkaller0 [ 999.988815][T27903] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 999.988845][T27903] bridge1 (unregistering): left promiscuous mode [ 1000.056489][T27903] team0: Port device bridge4 removed [ 1000.079968][T27903] bond1 (unregistering): Released all slaves [ 1000.099961][T27903] bond2 (unregistering): Released all slaves [ 1000.123225][T27903] bond3 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1000.124768][T27903] bond3 (unregistering): Released all slaves [ 1000.160425][T27903] bond4 (unregistering): Released all slaves [ 1000.187894][T27903] bond5 (unregistering): Released all slaves [ 1000.206133][T27903] bond6 (unregistering): Released all slaves [ 1000.230223][T27903] bond7 (unregistering): Released all slaves [ 1000.248518][T27903] bond0 (unregistering): Released all slaves [ 1000.266691][T27903] bond8 (unregistering): Released all slaves [ 1000.519224][T30551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5961'. [ 1000.547687][T30552] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5960'. [ 1000.578707][T27903] : left promiscuous mode [ 1000.618938][T30158] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1000.640370][T30158] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1000.653847][T30158] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1000.661191][T30158] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1000.675229][T30158] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1000.743846][T30158] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1000.964895][T27903] ovs0: left promiscuous mode [ 1001.009535][T30158] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1001.026681][T30158] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1001.049196][T27903] ovs-dp0: left promiscuous mode [ 1001.197989][T27903] tipc: Disabling bearer [ 1001.210989][T27903] tipc: Left network mode [ 1001.251000][T30113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1001.271830][T30113] 8021q: adding VLAN 0 to HW filter on device team0 [ 1001.320313][T27902] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.320404][T27902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1001.349573][T27902] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.349696][T27902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1001.490206][T30113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1001.575800][T30581] bond0: entered allmulticast mode [ 1001.575829][T30581] bond_slave_0: entered allmulticast mode [ 1001.575849][T30581] bond_slave_1: entered allmulticast mode [ 1001.716378][T30592] netlink: 'syz.3.5964': attribute type 12 has an invalid length. [ 1001.745021][T30588] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5964'. [ 1001.796613][T30584] syzkaller0: entered promiscuous mode [ 1001.796633][T30584] syzkaller0: entered allmulticast mode [ 1002.174987][ T5281] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1002.379825][T30614] openvswitch: netlink: Multiple metadata blocks provided [ 1002.447265][T30596] syzkaller0: entered promiscuous mode [ 1002.447295][T30596] syzkaller0: entered allmulticast mode [ 1006.556559][T30624] mac80211_hwsim hwsim28 syzkaller0: entered promiscuous mode [ 1006.556610][T30624] mac80211_hwsim hwsim28 syzkaller0: entered allmulticast mode [ 1006.610180][T27903] hsr_slave_1: left promiscuous mode [ 1006.626647][T27903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1006.626684][T27903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1006.723879][T30631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5972'. [ 1006.827734][T30637] sctp: [Deprecated]: syz.1.5973 (pid 30637) Use of int in max_burst socket option. [ 1006.827734][T30637] Use struct sctp_assoc_value instead [ 1007.172414][T27903] team0 (unregistering): Port device team_slave_1 removed [ 1007.192527][T27903] team0 (unregistering): Port device team_slave_0 removed [ 1007.360205][T27903] team0 (unregistering): Port device dummy0 removed [ 1007.874762][T30158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1007.910782][T27903] IPVS: stop unused estimator thread 0... [ 1007.977325][T30158] 8021q: adding VLAN 0 to HW filter on device team0 [ 1007.999627][ T8897] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.999756][ T8897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1008.001234][T30655] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1008.095936][T27902] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.096050][T27902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1008.457169][T30677] syzkaller0: entered promiscuous mode [ 1008.457197][T30677] syzkaller0: entered allmulticast mode [ 1008.491870][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1008.692051][T30687] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5981'. [ 1008.864062][T30695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5982'. [ 1011.404604][ T5281] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1011.584050][T30720] Bluetooth: hci0: too big key_count value 38657 [ 1011.638026][T30113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1012.676314][T30113] veth0_vlan: entered promiscuous mode [ 1012.708450][T30113] veth1_vlan: entered promiscuous mode [ 1012.799428][T30158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1013.000883][T30113] veth0_macvtap: entered promiscuous mode [ 1013.027973][T30113] veth1_macvtap: entered promiscuous mode [ 1013.135996][T30113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1013.177072][T30113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1013.222122][T22747] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.222404][T22747] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.222764][T22747] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.222806][T22747] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.328540][T30791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5992'. [ 1013.463081][T30797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5993'. [ 1013.510098][T30794] bond7: entered promiscuous mode [ 1013.510129][T30794] bond7: entered allmulticast mode [ 1013.848795][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.848819][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.920941][ T5281] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1013.967590][T27902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.967616][T27902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.119408][T30811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5996'. [ 1014.151509][T30811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5996'. [ 1014.154874][T30158] veth0_vlan: entered promiscuous mode [ 1014.226785][T30158] veth1_vlan: entered promiscuous mode [ 1014.434897][T30158] veth0_macvtap: entered promiscuous mode [ 1014.470195][T30158] veth1_macvtap: entered promiscuous mode [ 1014.604905][T30158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1014.759224][T30158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1014.895082][T27900] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.895495][T27900] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.895677][T27900] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.922406][ T61] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.964030][T30846] syzkaller0: entered promiscuous mode [ 1014.964058][T30846] syzkaller0: entered allmulticast mode [ 1015.379830][ T5281] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1015.529567][T27900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1015.529593][T27900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1015.720891][T30874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6006'. [ 1015.815835][ T8897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1015.815859][ T8897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1015.923788][T30881] sctp: [Deprecated]: syz.3.6008 (pid 30881) Use of int in max_burst socket option. [ 1015.923788][T30881] Use struct sctp_assoc_value instead [ 1016.201785][T30886] syzkaller0: entered promiscuous mode [ 1016.201811][T30886] syzkaller0: entered allmulticast mode [ 1016.255994][T30886] tipc: Started in network mode [ 1016.256033][T30886] tipc: Node identity 9e63588a4462, cluster identity 4711 [ 1016.256669][T30886] tipc: Enabled bearer , priority 0 [ 1016.345876][T30888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6009'. [ 1016.345970][T30888] bridge_slave_1: left allmulticast mode [ 1016.345995][T30888] bridge_slave_1: left promiscuous mode [ 1016.346272][T30888] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.347744][T30894] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5897'. [ 1016.400753][T30888] bridge_slave_0: left allmulticast mode [ 1016.400776][T30888] bridge_slave_0: left promiscuous mode [ 1016.400956][T30888] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.663391][T30904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6011'. [ 1016.804922][T30908] ip6tnl5: entered allmulticast mode [ 1016.842890][T30885] tipc: Resetting bearer [ 1016.928647][T30885] tipc: Disabling bearer [ 1016.994527][T30922] mac80211_hwsim hwsim28 syzkaller0: left promiscuous mode [ 1016.994560][T30922] mac80211_hwsim hwsim28 syzkaller0: left allmulticast mode [ 1016.999406][T30926] Cannot find add_set index 0 as target [ 1017.063235][ T61] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1017.072388][ T61] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1017.093747][T24208] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1017.492393][T30943] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6021'. [ 1017.493101][T10446] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1017.743164][ T4937] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1017.753757][ T4937] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1017.770060][ T4937] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1017.784758][ T4937] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1017.786401][ T4937] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1018.093830][T10446] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1018.158513][T30960] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6025'. [ 1018.563740][ T30] audit: type=1804 audit(1792677516.354:16): pid=30976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.6028" name="/newroot/9/cgroup.controllers" dev="tmpfs" ino=65 res=1 errno=0 [ 1018.563805][ T30] audit: type=1800 audit(1792677516.354:17): pid=30976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6028" name="cgroup.controllers" dev="tmpfs" ino=65 res=0 errno=0 [ 1018.818890][T30986] openvswitch: netlink: Message has 16 unknown bytes. [ 1019.025295][T30947] rxe_eth0 speed is unknown, defaulting to 1000 [ 1019.118128][T30992] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 1019.560840][T31008] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6033'. [ 1019.851903][ T52] Bluetooth: hci2: command tx timeout [ 1020.088456][T31025] netlink: 'syz.6.6038': attribute type 2 has an invalid length. [ 1020.168578][T31027] netlink: 260 bytes leftover after parsing attributes in process `syz.5.6037'. [ 1020.186792][T31027] netlink: 'syz.5.6037': attribute type 1 has an invalid length. [ 1020.204926][T31025] : entered promiscuous mode [ 1020.226479][T31025] netlink: 'syz.6.6038': attribute type 2 has an invalid length. [ 1020.527480][T31033] ipvlan2: entered allmulticast mode [ 1020.527506][T31033] batadv_slave_0: entered allmulticast mode [ 1020.567398][T31037] netlink: set zone limit has 4 unknown bytes [ 1020.821501][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1020.860884][T31053] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6041'. [ 1021.097480][T30947] lo speed is unknown, defaulting to 1000 [ 1021.416045][T31062] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6042'. [ 1021.537403][T31069] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 1021.836745][T31084] syzkaller1: entered promiscuous mode [ 1021.836773][T31084] syzkaller1: entered allmulticast mode [ 1021.932705][ T52] Bluetooth: hci2: command tx timeout [ 1022.087889][T31090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6046'. [ 1022.516481][T30947] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.516710][T30947] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.516869][T30947] bridge_slave_0: entered allmulticast mode [ 1022.532935][T30947] bridge_slave_0: entered promiscuous mode [ 1022.547132][T30947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.547465][T30947] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.549880][T30947] bridge_slave_1: entered allmulticast mode [ 1022.564731][T30947] bridge_slave_1: entered promiscuous mode [ 1022.718637][T31118] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6051'. [ 1022.856139][T30947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1022.887256][T30947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1023.230270][T30947] team0: Port device team_slave_0 added [ 1023.250348][T30947] team0: Port device team_slave_1 added [ 1023.263270][T31132] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6055'. [ 1023.526393][T30947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1023.526415][T30947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1023.526445][T30947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1023.606369][T31148] sctp: [Deprecated]: syz.6.6056 (pid 31148) Use of int in max_burst socket option. [ 1023.606369][T31148] Use struct sctp_assoc_value instead [ 1023.630382][T30947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1023.630402][T30947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1023.630432][T30947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1023.929822][T31157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6057'. [ 1024.011685][ T52] Bluetooth: hci2: command tx timeout [ 1024.039345][T30947] hsr_slave_0: entered promiscuous mode [ 1024.040507][T30947] hsr_slave_1: entered promiscuous mode [ 1024.053779][T30947] debugfs: 'hsr0' already exists in 'hsr' [ 1024.053806][T30947] Cannot create hsr debugfs directory [ 1024.272409][T31165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6059'. [ 1024.525904][T31178] ip_tables: iptables: counters copy to user failed while replacing table [ 1025.232596][T31202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1025.258323][T31202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1025.349321][T31206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1025.364441][T31206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1025.383832][T30947] team0: Port device netdevsim1 removed [ 1025.424036][T31206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1025.430014][T31206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1025.456176][T31206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1025.461139][T31206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1025.478237][T31206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1025.559184][T31211] sock: sock_timestamping_bind_phc: sock not bind to device [ 1025.755143][T31222] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6071'. [ 1026.000213][T31231] tipc: Enabling of bearer rejected, failed to enable media [ 1026.087926][T31235] tipc: Enabling of bearer rejected, failed to enable media [ 1026.102334][ T52] Bluetooth: hci2: command tx timeout [ 1026.152059][T30947] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1026.207104][T30947] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1026.208102][T30947] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1026.231413][T30947] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1026.232489][T30947] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1026.239302][T31242] x_tables: duplicate underflow at hook 1 [ 1026.239431][T31241] x_tables: duplicate underflow at hook 1 [ 1026.270977][T30947] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1026.280628][T30947] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1026.297112][T30947] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1026.608156][T30947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.679989][T30947] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.743976][T22746] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.744102][T22746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.785668][T27903] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.785782][T27903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1027.030794][T31279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6081'. [ 1027.313618][T31288] x_tables: duplicate underflow at hook 2 [ 1027.407686][T31294] netlink: 'syz.1.6085': attribute type 1 has an invalid length. [ 1027.473844][T31294] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1027.490272][T31298] tipc: Enabling of bearer rejected, failed to enable media [ 1027.689235][T31299] bond22: (slave veth5): Enslaving as an active interface with a down link [ 1027.733067][T31305] bond22: (slave macvlan0): making interface the new active one [ 1027.755879][T31305] bond22: (slave macvlan0): Enslaving as an active interface with an up link [ 1027.758631][T31308] ±ÿ: renamed from lo (while UP) [ 1027.967597][T31315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1028.331507][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1028.863200][T31350] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6100'. [ 1028.890867][T31350] netlink: 'syz.5.6100': attribute type 1 has an invalid length. [ 1028.902445][T30947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1028.950344][T31354] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1028.950386][T31354] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1028.950429][T31354] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1029.118911][T31355] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6102'. [ 1029.383922][T10441] infiniband syz1: ib_query_port failed (-19) [ 1029.445593][ T61] smbdirect: ib_dev[syz1] removed [ 1029.490726][T31354] siw: device registration error -19 [ 1029.615150][T30947] veth0_vlan: entered promiscuous mode [ 1029.655274][T30947] veth1_vlan: entered promiscuous mode [ 1029.745252][T30947] veth0_macvtap: entered promiscuous mode [ 1029.761026][T30947] veth1_macvtap: entered promiscuous mode [ 1029.784008][T30947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1029.802368][T30947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1029.871639][T27900] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.927023][ T61] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.928837][T22746] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.993095][ T8897] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.358117][ T8897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1030.358142][ T8897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1030.381894][T31400] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6109'. [ 1030.578441][T31400] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1030.645132][T31403] bond1: (slave batadv1): Opening slave failed [ 1030.785845][T31409] netlink: 'syz.5.6111': attribute type 15 has an invalid length. [ 1030.804252][ T8897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1030.804275][ T8897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1031.006467][T31421] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6113'. [ 1031.350778][T31443] x_tables: duplicate underflow at hook 2 [ 1031.442400][T31445] netlink: 'syz.6.6118': attribute type 12 has an invalid length. [ 1031.538642][T31445] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6118'. [ 1031.666309][T31456] v: renamed from vlan1 (while UP) [ 1031.719120][T31457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6122'. [ 1032.306086][T31484] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6133'. [ 1032.354406][T31485] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6133'. [ 1032.457940][T31492] dummy0: entered allmulticast mode [ 1032.662461][T31499] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6137'. [ 1033.272216][T31529] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6144'. [ 1033.277090][T31529] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6144'. [ 1033.563897][T31533] mac80211_hwsim hwsim28 syzkaller0: entered promiscuous mode [ 1033.563966][T31533] mac80211_hwsim hwsim28 syzkaller0: entered allmulticast mode [ 1033.569029][T31533] team0: entered promiscuous mode [ 1033.569270][T31533] team_slave_1: entered promiscuous mode [ 1034.062684][T31539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6147'. [ 1035.257807][T31595] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6158'. [ 1035.380726][T31589] syz_tun: entered promiscuous mode [ 1035.380926][T31589] macvlan2: entered allmulticast mode [ 1035.380965][T31589] syz_tun: entered allmulticast mode [ 1035.421772][T31599] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1035.568486][T31605] syzkaller0: entered promiscuous mode [ 1035.568517][T31605] syzkaller0: entered allmulticast mode [ 1035.901233][T31610] netlink: 'syz.1.6163': attribute type 1 has an invalid length. [ 1036.128921][T31625] netlink: 'syz.1.6169': attribute type 1 has an invalid length. [ 1036.128950][T31625] netlink: 'syz.1.6169': attribute type 2 has an invalid length. [ 1036.128966][T31625] __nla_validate_parse: 7 callbacks suppressed [ 1036.128980][T31625] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6169'. [ 1036.176974][T31625] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6169'. [ 1036.805328][T31655] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6176'. [ 1037.420604][T31682] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6184'. [ 1037.524913][T31694] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6185'. [ 1037.613304][T31683] veth3: entered allmulticast mode [ 1037.635821][T31683] bond2: (slave veth3): Enslaving as an active interface with an up link [ 1038.670259][ T30] audit: type=1804 audit(1792677536.454:18): pid=31723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6192" name="/newroot/14/cgroup.controllers" dev="tmpfs" ino=91 res=1 errno=0 [ 1038.690392][ T30] audit: type=1800 audit(1792677536.464:19): pid=31723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6192" name="cgroup.controllers" dev="tmpfs" ino=91 res=0 errno=0 [ 1038.874413][T31723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6192'. [ 1039.624875][T31759] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 1039.645412][T31759] syzkaller1: entered promiscuous mode [ 1039.645437][T31759] syzkaller1: entered allmulticast mode [ 1039.680550][T31746] syzkaller1: entered promiscuous mode [ 1039.680577][T31746] syzkaller1: entered allmulticast mode [ 1040.116353][T31775] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6202'. [ 1040.404704][T31786] netlink: 'syz.0.6205': attribute type 1 has an invalid length. [ 1040.580511][T31796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6205'. [ 1040.598435][T31786] bond1: entered promiscuous mode [ 1040.606753][T31786] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1040.808878][T31790] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1040.810680][T31790] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 1040.810708][T31790] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1040.880906][T31790] bond1: (slave gre1): making interface the new active one [ 1040.880941][T31790] gre1: entered promiscuous mode [ 1040.915989][T31790] bond1: (slave gre1): Enslaving as an active interface with an up link [ 1041.069416][T31796] bond1 (unregistering): (slave gre1): Releasing backup interface [ 1041.069449][T31796] gre1: left promiscuous mode [ 1041.106363][T31796] bond1 (unregistering): Released all slaves [ 1041.781772][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1041.992344][T31857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6214'. [ 1042.252665][T31861] netlink: 'syz.1.6215': attribute type 1 has an invalid length. [ 1042.416763][T31861] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1042.524767][T31866] bridge_slave_0: left allmulticast mode [ 1042.524802][T31866] bridge_slave_0: left promiscuous mode [ 1042.525057][T31866] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.606086][T31866] bridge_slave_1: left allmulticast mode [ 1042.606121][T31866] bridge_slave_1: left promiscuous mode [ 1042.606420][T31866] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.694185][T31866] bond0: (slave bond_slave_0): Releasing backup interface [ 1042.738830][T31866] bond0: (slave bond_slave_1): Releasing backup interface [ 1042.808245][T31866] team0: Port device team_slave_0 removed [ 1042.826100][T31866] team_slave_1: left promiscuous mode [ 1042.826317][T31866] team_slave_1: left allmulticast mode [ 1042.864987][T31866] team0: Port device team_slave_1 removed [ 1042.870469][T31866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1042.870503][T31866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1042.895299][T31866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1042.895332][T31866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1042.922553][T31866] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1042.954332][T31885] netlink: 'syz.5.6218': attribute type 16 has an invalid length. [ 1042.954360][T31885] netlink: 'syz.5.6218': attribute type 17 has an invalid length. [ 1043.324377][T31883] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.334190][T31883] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.436383][T31900] netlink: 'syz.3.6220': attribute type 16 has an invalid length. [ 1043.436410][T31900] netlink: 'syz.3.6220': attribute type 17 has an invalid length. [ 1043.542736][T31904] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6222'. [ 1043.568174][T31885] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.568284][T31885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1043.570523][T31885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.570646][T31885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1043.739039][T31889] tun0: tun_chr_ioctl cmd 1074025675 [ 1043.739067][T31889] tun0: persist enabled [ 1043.739172][T31878] tun0: tun_chr_ioctl cmd 1074025684 [ 1044.152722][T31916] syzkaller0: entered promiscuous mode [ 1044.152749][T31916] syzkaller0: entered allmulticast mode [ 1044.193829][T10441] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1044.528188][T31936] netlink: 'syz.1.6230': attribute type 2 has an invalid length. [ 1044.528215][T31936] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6230'. [ 1044.530392][T31936] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6230'. [ 1044.685988][ T9996] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1044.786232][T31946] syzkaller0: entered promiscuous mode [ 1044.786260][T31946] syzkaller0: entered allmulticast mode [ 1044.807086][T31946] tipc: Started in network mode [ 1044.807125][T31946] tipc: Node identity 86c20dcc1003, cluster identity 4711 [ 1044.807440][T31946] tipc: Enabled bearer , priority 0 [ 1044.845973][T31946] tipc: Resetting bearer [ 1044.864358][T31945] tipc: Resetting bearer [ 1044.935212][T31945] tipc: Disabling bearer [ 1045.133312][T10440] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1045.245261][T31967] ip_tables: iptables: counters copy to user failed while replacing table [ 1045.528083][T31977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6239'. [ 1045.529340][T31977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6239'. [ 1045.552555][T31976] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6241'. [ 1045.552836][T31976] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6241'. [ 1046.976255][ T1215] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1046.990876][ T1215] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1047.116322][T31993] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6247'. [ 1047.116352][T31993] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6247'. [ 1047.217014][T31989] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6245'. [ 1047.217046][T31989] netlink: 'syz.5.6245': attribute type 1 has an invalid length. [ 1047.273658][T31999] netlink: 'syz.6.6247': attribute type 4 has an invalid length. [ 1047.609887][T32013] batadv_slave_1: entered promiscuous mode [ 1047.729679][T32022] tipc: Enabled bearer , priority 10 [ 1047.788469][T32024] ip_tables: iptables: counters copy to user failed while replacing table [ 1047.804724][T32026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1047.987326][T32031] netlink: 'syz.3.6256': attribute type 1 has an invalid length. [ 1047.989085][T32029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1048.014016][T24208] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1048.145753][T32031] bond1: option mode: invalid value (7) [ 1048.160613][T32031] bond1 (unregistering): Released all slaves [ 1049.138677][T32009] batadv_slave_1: left promiscuous mode [ 1049.524652][T10449] tipc: Node number set to 2529234380 [ 1049.824728][T32078] syzkaller0: entered promiscuous mode [ 1049.824754][T32078] syzkaller0: entered allmulticast mode [ 1050.408983][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1050.427374][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1050.429298][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1050.449606][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1050.450425][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1050.484659][T32104] netlink: 'syz.5.6281': attribute type 10 has an invalid length. [ 1050.689313][T32104] team0 (unregistering): Port device team_slave_0 removed [ 1050.787355][T32104] team0 (unregistering): Port device team_slave_1 removed [ 1050.787942][T32110] netlink: 332 bytes leftover after parsing attributes in process `syz.3.6282'. [ 1050.787997][T32110] netlink: 'syz.3.6282': attribute type 9 has an invalid length. [ 1050.788013][T32110] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6282'. [ 1050.788030][T32110] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6282'. [ 1050.939680][T32113] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 1050.996314][T32116] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20004 [ 1051.166524][T32118] TC_ACT_REPEAT abuse ? [ 1051.372362][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1051.426621][T32134] netlink: 'syz.0.6289': attribute type 11 has an invalid length. [ 1051.426860][T32135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6288'. [ 1051.476540][T32139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6289'. [ 1051.493075][T32129] Bluetooth: MGMT ver 1.23 [ 1051.493517][T32134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6289'. [ 1051.687203][T32145] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6292'. [ 1051.724036][T32100] rxe_eth0 speed is unknown, defaulting to 1000 [ 1051.751021][ T9996] IPVS: starting estimator thread 0... [ 1051.842236][T32147] IPVS: using max 28 ests per chain, 67200 per kthread [ 1051.896967][T32143] x_tables: unsorted entry at hook 2 [ 1052.084111][T32175] openvswitch: netlink: Tunnel attr 4 has unexpected len 0 expected 1 [ 1052.492288][ T52] Bluetooth: hci0: command tx timeout [ 1052.758171][T32157] workqueue: Failed to create a rescuer kthread for wq "nfc22_nci_cmd_wq": -EINTR [ 1053.413548][T32188] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6298'. [ 1053.413576][T32188] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6298'. [ 1053.413594][T32188] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6298'. [ 1053.477527][T32260] sctp: [Deprecated]: syz.3.6302 (pid 32260) Use of int in max_burst socket option. [ 1053.477527][T32260] Use struct sctp_assoc_value instead [ 1053.824465][T32100] lo speed is unknown, defaulting to 1000 [ 1054.304157][T32271] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:0000:0000 with DS=0x2 [ 1054.424864][T32274] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6306'. [ 1054.456913][T32279] ip_tables: iptables: counters copy to user failed while replacing table [ 1054.457515][T32271] syzkaller0: entered promiscuous mode [ 1054.457542][T32271] syzkaller0: entered allmulticast mode [ 1054.574219][ T52] Bluetooth: hci0: command tx timeout [ 1054.627490][T32285] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6309'. [ 1054.972397][T22749] wlan0: Trigger new scan to find an IBSS to join [ 1056.666192][ T52] Bluetooth: hci0: command tx timeout [ 1058.766075][ T52] Bluetooth: hci0: command tx timeout [ 1059.885893][T32279] ipvlan2: entered promiscuous mode [ 1059.896092][T32279] team0: Device ipvlan2 failed to register rx_handler [ 1060.012089][T22750] wlan0: Trigger new scan to find an IBSS to join [ 1060.012995][T32294] veth0_to_bridge: entered promiscuous mode [ 1060.015033][T32294] macvtap1: entered allmulticast mode [ 1060.015055][T32294] veth0_to_bridge: entered allmulticast mode [ 1060.072567][T32294] veth0_to_bridge: left allmulticast mode [ 1060.072609][T32294] veth0_to_bridge: left promiscuous mode [ 1060.466986][T32303] syzkaller0: entered promiscuous mode [ 1060.467013][T32303] syzkaller0: entered allmulticast mode [ 1060.563526][T32100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.565247][T32100] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.565426][T32100] bridge_slave_0: entered allmulticast mode [ 1060.591740][T32100] bridge_slave_0: entered promiscuous mode [ 1060.604591][T32100] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.604787][T32100] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.604958][T32100] bridge_slave_1: entered allmulticast mode [ 1060.609647][T32100] bridge_slave_1: entered promiscuous mode [ 1060.853522][T32330] FAULT_INJECTION: forcing a failure. [ 1060.853522][T32330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1060.853564][T32330] CPU: 1 UID: 0 PID: 32330 Comm: syz.6.6322 Not tainted syzkaller #0 PREEMPT(full) [ 1060.853589][T32330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1060.853603][T32330] Call Trace: [ 1060.853612][T32330] [ 1060.853623][T32330] dump_stack_lvl+0xe8/0x150 [ 1060.853673][T32330] should_fail_ex+0x410/0x560 [ 1060.853711][T32330] _copy_from_user+0x2d/0xb0 [ 1060.853749][T32330] ___sys_sendmsg+0x1c6/0x360 [ 1060.853782][T32330] ? __lock_acquire+0x747/0x2de0 [ 1060.853812][T32330] ? __pfx____sys_sendmsg+0x10/0x10 [ 1060.853852][T32330] ? kstrtouint+0x6e/0xe0 [ 1060.853911][T32330] ? __fget_files+0x2a/0x420 [ 1060.853945][T32330] ? __fget_files+0x3a2/0x420 [ 1060.853993][T32330] __sys_sendmmsg+0x273/0x4d0 [ 1060.854033][T32330] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1060.854078][T32330] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1060.854129][T32330] ? ksys_write+0x242/0x270 [ 1060.854156][T32330] ? __pfx_ksys_write+0x10/0x10 [ 1060.854189][T32330] __x64_sys_sendmmsg+0xa0/0xc0 [ 1060.854226][T32330] do_syscall_64+0x166/0x520 [ 1060.854258][T32330] ? trace_irq_disable+0x3b/0x140 [ 1060.854283][T32330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.854307][T32330] ? clear_bhb_loop+0x70/0xc0 [ 1060.854336][T32330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.854360][T32330] RIP: 0033:0x7f95e579f559 [ 1060.854382][T32330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1060.854403][T32330] RSP: 002b:00007f95e39f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1060.854427][T32330] RAX: ffffffffffffffda RBX: 00007f95e5a25fa0 RCX: 00007f95e579f559 [ 1060.854444][T32330] RDX: 000000000000000d RSI: 0000200000000140 RDI: 0000000000000003 [ 1060.854460][T32330] RBP: 00007f95e39f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1060.854475][T32330] R10: 0000000004000800 R11: 0000000000000246 R12: 0000000000000001 [ 1060.854489][T32330] R13: 00007f95e5a26038 R14: 00007f95e5a25fa0 R15: 00007ffd350bf198 [ 1060.854527][T32330] [ 1060.982247][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1061.247648][T32333] netlink: 7 bytes leftover after parsing attributes in process `syz.6.6323'. [ 1061.288553][T32100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1061.339573][T32100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1061.536540][T32100] team0: Port device team_slave_0 added [ 1061.551955][T32100] team0: Port device team_slave_1 added [ 1061.587372][T32344] netlink: 288 bytes leftover after parsing attributes in process `syz.6.6325'. [ 1061.698024][T32100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.698045][T32100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.698074][T32100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1061.741171][T32100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1061.741190][T32100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.741214][T32100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1061.876431][T32358] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6328'. [ 1062.045545][T32364] FAULT_INJECTION: forcing a failure. [ 1062.045545][T32364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1062.045575][T32364] CPU: 0 UID: 0 PID: 32364 Comm: syz.6.6332 Not tainted syzkaller #0 PREEMPT(full) [ 1062.045593][T32364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1062.045603][T32364] Call Trace: [ 1062.045610][T32364] [ 1062.045618][T32364] dump_stack_lvl+0xe8/0x150 [ 1062.045647][T32364] should_fail_ex+0x410/0x560 [ 1062.045675][T32364] _copy_from_user+0x2d/0xb0 [ 1062.045701][T32364] __copy_msghdr+0x390/0x590 [ 1062.045730][T32364] ___sys_sendmsg+0x213/0x360 [ 1062.045753][T32364] ? __lock_acquire+0x747/0x2de0 [ 1062.045775][T32364] ? __pfx____sys_sendmsg+0x10/0x10 [ 1062.045803][T32364] ? kstrtouint+0x6e/0xe0 [ 1062.045843][T32364] ? __fget_files+0x2a/0x420 [ 1062.045868][T32364] ? __fget_files+0x3a2/0x420 [ 1062.045900][T32364] __sys_sendmmsg+0x273/0x4d0 [ 1062.045929][T32364] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1062.045960][T32364] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1062.045996][T32364] ? ksys_write+0x242/0x270 [ 1062.046014][T32364] ? __pfx_ksys_write+0x10/0x10 [ 1062.046043][T32364] __x64_sys_sendmmsg+0xa0/0xc0 [ 1062.046068][T32364] do_syscall_64+0x166/0x520 [ 1062.046090][T32364] ? trace_irq_disable+0x3b/0x140 [ 1062.046107][T32364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.046124][T32364] ? clear_bhb_loop+0x70/0xc0 [ 1062.046145][T32364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.046200][T32364] RIP: 0033:0x7f95e579f559 [ 1062.046224][T32364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1062.046249][T32364] RSP: 002b:00007f95e39f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1062.046268][T32364] RAX: ffffffffffffffda RBX: 00007f95e5a25fa0 RCX: 00007f95e579f559 [ 1062.046280][T32364] RDX: 000000000000000d RSI: 0000200000000140 RDI: 0000000000000003 [ 1062.046290][T32364] RBP: 00007f95e39f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1062.046301][T32364] R10: 0000000004000800 R11: 0000000000000246 R12: 0000000000000001 [ 1062.046311][T32364] R13: 00007f95e5a26038 R14: 00007f95e5a25fa0 R15: 00007ffd350bf198 [ 1062.046337][T32364] [ 1062.129140][T32365] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6331'. [ 1062.293562][T32100] hsr_slave_0: entered promiscuous mode [ 1062.296659][T32100] hsr_slave_1: entered promiscuous mode [ 1062.297873][T32100] debugfs: 'hsr0' already exists in 'hsr' [ 1062.297894][T32100] Cannot create hsr debugfs directory [ 1062.418831][ T1215] wlan0: Creating new IBSS network, BSSID d6:77:17:3d:3f:29 [ 1062.455437][T32371] netlink: 'syz.6.6334': attribute type 1 has an invalid length. [ 1062.497277][T32371] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1062.633848][T32380] netlink: 'syz.6.6334': attribute type 10 has an invalid length. [ 1062.633876][T32380] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6334'. [ 1062.780961][T32371] bond3: (slave veth5): Enslaving as an active interface with a down link [ 1062.814997][T32376] bond3: (slave dummy0): making interface the new active one [ 1062.818149][T32376] dummy0: entered promiscuous mode [ 1062.818602][T32376] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1063.040553][T32395] netlink: 140 bytes leftover after parsing attributes in process `syz.5.6335'. [ 1063.061197][T32379] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6335'. [ 1063.061238][T32379] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6335'. [ 1063.114971][T32383] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6335'. [ 1063.117146][T32380] bond3: (slave dummy0): Releasing active interface [ 1063.194198][T32381] syzkaller1: entered promiscuous mode [ 1063.194227][T32381] syzkaller1: entered allmulticast mode [ 1063.268902][T32379] geneve2: entered promiscuous mode [ 1063.268931][T32379] geneve2: entered allmulticast mode [ 1063.713616][T32406] veth0: entered promiscuous mode [ 1063.813997][T32407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6343'. [ 1064.278518][T32100] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.278561][T32100] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1064.381212][T32422] ip6gre1: entered promiscuous mode [ 1064.382127][T32422] ip6gre1: entered allmulticast mode [ 1064.711556][T32441] netlink: 'syz.5.6350': attribute type 5 has an invalid length. [ 1065.477872][T32446] veth5: entered allmulticast mode [ 1065.645441][T32100] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.645483][T32100] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1065.720079][T32460] netlink: 'syz.3.6353': attribute type 10 has an invalid length. [ 1065.720128][T32460] batadv0: entered promiscuous mode [ 1065.720148][T32460] batadv0: entered allmulticast mode [ 1065.721017][T32460] bridge0: port 3(batadv0) entered blocking state [ 1065.747686][T32460] bridge0: port 3(batadv0) entered disabled state [ 1065.789542][T32460] bridge0: port 3(batadv0) entered blocking state [ 1065.789626][T32460] bridge0: port 3(batadv0) entered forwarding state [ 1066.084604][T22747] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1066.084629][T22747] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1066.269221][T32100] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.269265][T32100] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1066.680578][T32100] batman_adv: batadv0: Removing interface: vlan2 [ 1066.709783][T32100] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.709824][T32100] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1066.758278][T32455] batman_adv: batadv0: Adding interface: veth0 [ 1066.758299][T32455] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1066.758336][T32455] batman_adv: batadv0: Interface activated: veth0 [ 1066.884381][T32458] bond0: (slave bond_slave_1): Releasing backup interface [ 1066.949694][T32490] __nla_validate_parse: 75 callbacks suppressed [ 1066.949719][T32490] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6362'. [ 1067.050519][T32489] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1067.109655][T32489] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6362'. [ 1067.898750][T32100] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1067.940857][T32100] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1067.950532][T32100] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1067.985788][T32100] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1067.988263][T32512] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6365'. [ 1067.990335][T32100] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1068.054159][T32100] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1068.060454][T32100] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1068.086983][T32100] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1068.323843][T32535] bridge0: port 3(syz_tun) entered blocking state [ 1068.324054][T32535] bridge0: port 3(syz_tun) entered disabled state [ 1068.324262][T32535] syz_tun: entered allmulticast mode [ 1068.326055][T32536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6369'. [ 1068.326812][T32535] syz_tun: entered promiscuous mode [ 1068.376990][T32535] bridge0: port 3(syz_tun) entered blocking state [ 1068.377113][T32535] bridge0: port 3(syz_tun) entered forwarding state [ 1068.406555][T32535] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6370'. [ 1068.421875][T32536] ifb0: entered allmulticast mode [ 1068.488903][T32535] netlink: 4704 bytes leftover after parsing attributes in process `syz.5.6370'. [ 1068.489382][T32535] netlink: 'syz.5.6370': attribute type 1 has an invalid length. [ 1068.637955][T32100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1068.749613][T32100] 8021q: adding VLAN 0 to HW filter on device team0 [ 1068.794714][T22747] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.794828][T22747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1068.853108][T32553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6375'. [ 1068.853139][T32553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6375'. [ 1068.853168][T32553] netlink: 'syz.3.6375': attribute type 18 has an invalid length. [ 1068.855269][ T1215] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.855384][ T1215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1069.302410][T32565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1069.519247][T32585] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6386'. [ 1069.519492][T32585] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6386'. [ 1069.932113][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1070.145795][T32614] bond4: entered allmulticast mode [ 1070.184910][T32614] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1070.185867][T32614] bond4: (slave wireguard0): Error -95 calling set_mac_address [ 1070.654691][T32638] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1070.691827][T32638] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1070.769668][T32100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1070.938469][T32100] veth0_vlan: entered promiscuous mode [ 1070.968295][T32100] veth1_vlan: entered promiscuous mode [ 1071.100856][T32100] veth0_macvtap: entered promiscuous mode [ 1071.120010][T32650] IPVS: length: 14 != 8 [ 1071.128791][T32100] veth1_macvtap: entered promiscuous mode [ 1071.185836][T32100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1071.243948][T32653] netlink: 'syz.5.6404': attribute type 10 has an invalid length. [ 1071.247907][T32100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1071.422958][ T1215] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.482903][ T1215] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.482994][ T1215] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.483036][ T1215] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.681555][T32659] netlink: 'syz.3.6406': attribute type 1 has an invalid length. [ 1071.690711][ T1215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.690737][ T1215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.830062][T22750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.830089][T22750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.212908][T32678] __nla_validate_parse: 8 callbacks suppressed [ 1072.212932][T32678] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6412'. [ 1072.212954][T32678] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6412'. [ 1072.257895][T32687] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6414'. [ 1072.605799][T32701] ip_tables: iptables: counters copy to user failed while replacing table [ 1072.689706][T32709] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6420'. [ 1072.756425][T32711] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6422'. [ 1072.756686][T32711] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6422'. [ 1072.827735][T32715] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1072.828252][T32714] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1072.855733][T32713] ip_tables: iptables: counters copy to user failed while replacing table [ 1072.936682][T32720] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6423'. [ 1072.941185][T32720] openvswitch: netlink: Duplicate key (type 3). [ 1073.460302][T32729] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6427'. [ 1073.460626][T32730] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6427'. [ 1073.782855][T32747] netlink: 'syz.3.6432': attribute type 11 has an invalid length. [ 1074.177904][T32764] netlink: 34 bytes leftover after parsing attributes in process `syz.0.6438'. [ 1074.235922][T32763] rxe_eth0 speed is unknown, defaulting to 1000 [ 1074.303657][T32767] netlink: 'syz.3.6439': attribute type 1 has an invalid length. [ 1074.470036][T32767] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1075.169779][ T333] sit0: entered promiscuous mode [ 1075.657475][ T349] syzkaller1: entered promiscuous mode [ 1075.657506][ T349] syzkaller1: entered allmulticast mode [ 1075.732825][ T330] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 1075.790018][T32763] lo speed is unknown, defaulting to 1000 [ 1076.086492][ T363] netlink: ct family unspecified [ 1076.086542][ T363] openvswitch: netlink: Actions may not be safe on all matching packets [ 1076.308531][ T372] netlink: 'syz.5.6453': attribute type 21 has an invalid length. [ 1076.354803][ T372] netlink: 'syz.5.6453': attribute type 5 has an invalid length. [ 1076.620104][ T376] xt_socket: unknown flags 0x8 [ 1076.969242][ T391] ipt_ah: unknown flags FF [ 1076.988661][ T52] Bluetooth: hci0: command 0x0c20 tx timeout [ 1077.867416][ T396] netlink: 'syz.0.6460': attribute type 5 has an invalid length. [ 1077.952488][ T418] __nla_validate_parse: 102 callbacks suppressed [ 1077.952510][ T418] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6465'. [ 1078.284839][ T429] sit0: left promiscuous mode [ 1078.364713][ T426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6466'. [ 1078.565138][ T447] Bluetooth: MGMT ver 1.23 [ 1078.891471][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1078.956938][ T449] geneve1: left promiscuous mode [ 1078.968949][ T449] ipip0: left promiscuous mode [ 1079.007391][T10446] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1079.112976][T24208] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1079.156810][T22749] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1079.207832][T10451] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1079.308705][ T468] ip_tables: iptables: counters copy to user failed while replacing table [ 1079.356884][ T470] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6476'. [ 1079.357149][ T470] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6476'. [ 1079.371008][ T9580] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1079.570951][T22749] IPVS: starting estimator thread 0... [ 1079.591816][ T9580] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1079.596172][ T475] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6477'. [ 1079.652099][ T478] IPVS: using max 28 ests per chain, 67200 per kthread [ 1079.915860][ T483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6480'. [ 1079.956376][ T476] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1079.957361][ T476] bridge0: port 3(bond1) entered blocking state [ 1079.957554][ T476] bridge0: port 3(bond1) entered disabled state [ 1079.957705][ T476] bond1: entered allmulticast mode [ 1079.990496][ T476] bond1: entered promiscuous mode [ 1080.006054][ T476] bridge0: port 3(bond1) entered blocking state [ 1080.007683][ T476] bridge0: port 3(bond1) entered forwarding state [ 1080.047320][ T490] netlink: 'syz.0.6480': attribute type 1 has an invalid length. [ 1080.126813][ T1215] bridge0: port 3(bond1) entered disabled state [ 1080.169267][ T490] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1080.190855][ T483] macvlan2: entered promiscuous mode [ 1080.190877][ T483] macvlan2: entered allmulticast mode [ 1080.196275][ T483] bond1: entered promiscuous mode [ 1080.198600][ T483] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1080.259674][ T483] bond1: left promiscuous mode [ 1080.313301][ T520] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6486'. [ 1080.313394][ T520] IPv6: Can't replace route, no match found [ 1080.474347][ T524] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6487'. [ 1080.475346][ T524] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6487'. [ 1081.223164][ T552] netlink: 'syz.5.6495': attribute type 12 has an invalid length. [ 1081.565811][ T555] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6496'. [ 1081.722394][ T557] syzkaller0: entered promiscuous mode [ 1081.722421][ T557] syzkaller0: entered allmulticast mode [ 1082.457551][ T587] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1082.687053][ T599] bond0: (slave bond_slave_0): Releasing backup interface [ 1082.688592][ T599] bond_slave_0: left allmulticast mode [ 1082.717159][ T599] bond0: (slave bond_slave_1): Releasing backup interface [ 1082.732987][ T599] bond_slave_1: left allmulticast mode [ 1082.776215][ T599] team0: Port device team_slave_0 removed [ 1082.811533][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1082.812941][ T599] team0: Port device team_slave_1 removed [ 1082.819034][ T599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1082.819067][ T599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1082.856214][ T599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1082.856244][ T599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1082.859136][ T599] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1082.915973][ T600] team0: Mode changed to "broadcast" [ 1082.916725][ T602] tipc: Enabled bearer , priority 0 [ 1083.789457][ T641] __nla_validate_parse: 6 callbacks suppressed [ 1083.789478][ T641] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6521'. [ 1083.854038][ T643] netlink: 'syz.5.6521': attribute type 1 has an invalid length. [ 1083.854290][ T643] netlink: 'syz.5.6521': attribute type 1 has an invalid length. [ 1083.854486][ T643] netlink: 'syz.5.6521': attribute type 1 has an invalid length. [ 1083.854684][ T643] netlink: 'syz.5.6521': attribute type 1 has an invalid length. [ 1083.854891][ T643] netlink: 'syz.5.6521': attribute type 1 has an invalid length. [ 1083.855087][ T643] netlink: 'syz.5.6521': attribute type 1 has an invalid length. [ 1083.855327][ T643] netlink: 'syz.5.6521': attribute type 1 has an invalid length. [ 1083.855521][ T643] netlink: 'syz.5.6521': attribute type 1 has an invalid length. [ 1084.125453][ T648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6522'. [ 1084.204821][ T653] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6522'. [ 1084.376237][ T649] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1084.379952][ T8897] IPVS: starting estimator thread 0... [ 1084.396453][ T641] macvtap1: entered promiscuous mode [ 1084.407948][ T636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6520'. [ 1084.481506][ T658] IPVS: using max 25 ests per chain, 60000 per kthread [ 1084.542643][ T9580] tipc: Node number set to 3657521290 [ 1084.711043][ T673] netlink: NAT attribute has 8 unknown bytes [ 1084.711086][ T673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1085.298935][ T678] nbd: nbd0 already in use [ 1085.656242][ T700] Bluetooth: hci0: unsupported parameter 5135 [ 1085.656270][ T700] Bluetooth: hci0: unsupported parameter 8192 [ 1085.656283][ T700] Bluetooth: hci0: unsupported parameter 5135 [ 1085.656297][ T700] Bluetooth: hci0: unsupported parameter 8192 [ 1085.760110][ T711] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6540'. [ 1085.818585][ T710] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6539'. [ 1085.883615][ T711] gretap0: entered promiscuous mode [ 1086.677462][ T757] x_tables: duplicate underflow at hook 2 [ 1087.266484][ T786] lo: entered promiscuous mode [ 1087.266512][ T786] lo: entered allmulticast mode [ 1087.267769][ T786] tunl0: entered promiscuous mode [ 1087.267788][ T786] tunl0: entered allmulticast mode [ 1087.313108][ T786] gre0: entered promiscuous mode [ 1087.313166][ T786] gre0: entered allmulticast mode [ 1087.313819][ T786] gretap0: entered promiscuous mode [ 1087.313836][ T786] gretap0: entered allmulticast mode [ 1087.337257][ T786] erspan0: entered promiscuous mode [ 1087.337284][ T786] erspan0: entered allmulticast mode [ 1087.368685][ T786] ip_vti0: entered promiscuous mode [ 1087.368714][ T786] ip_vti0: entered allmulticast mode [ 1087.386934][ T786] ip6_vti0: entered promiscuous mode [ 1087.386960][ T786] ip6_vti0: entered allmulticast mode [ 1087.404704][ T786] sit0: entered promiscuous mode [ 1087.404722][ T786] sit0: entered allmulticast mode [ 1087.433892][ T787] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6559'. [ 1087.660777][ T786] ip6tnl0: entered promiscuous mode [ 1087.663640][ T786] ip6tnl0: entered allmulticast mode [ 1087.664458][ T786] ip6gre0: entered promiscuous mode [ 1087.664477][ T786] ip6gre0: entered allmulticast mode [ 1087.667163][ T786] syz_tun: entered promiscuous mode [ 1087.667185][ T786] syz_tun: entered allmulticast mode [ 1087.669455][ T786] ip6gretap0: entered promiscuous mode [ 1087.669477][ T786] ip6gretap0: entered allmulticast mode [ 1087.679460][ T786] bridge0: entered promiscuous mode [ 1087.680041][ T786] bridge0: entered allmulticast mode [ 1087.739963][ T786] vcan0: entered promiscuous mode [ 1087.739990][ T786] vcan0: entered allmulticast mode [ 1087.741067][ T786] bond0: entered promiscuous mode [ 1087.741088][ T786] bond_slave_0: entered promiscuous mode [ 1087.772916][ T786] bond_slave_1: entered promiscuous mode [ 1087.773185][ T786] bond0: entered allmulticast mode [ 1087.773205][ T786] bond_slave_0: entered allmulticast mode [ 1087.773220][ T786] bond_slave_1: entered allmulticast mode [ 1087.774719][ T786] team0: entered promiscuous mode [ 1087.774739][ T786] team_slave_0: entered promiscuous mode [ 1087.774890][ T786] team_slave_1: entered promiscuous mode [ 1087.775082][ T786] team0: entered allmulticast mode [ 1087.775094][ T786] team_slave_0: entered allmulticast mode [ 1087.775106][ T786] team_slave_1: entered allmulticast mode [ 1087.776381][ T786] dummy0: entered promiscuous mode [ 1087.776397][ T786] dummy0: entered allmulticast mode [ 1087.777013][ T786] nlmon0: entered promiscuous mode [ 1087.777031][ T786] nlmon0: entered allmulticast mode [ 1087.777630][ T786] batadv0: entered promiscuous mode [ 1087.777643][ T786] batadv0: entered allmulticast mode [ 1087.778808][ T786] vxcan0: entered promiscuous mode [ 1087.778822][ T786] vxcan0: entered allmulticast mode [ 1087.779326][ T786] vxcan1: entered promiscuous mode [ 1087.779338][ T786] vxcan1: entered allmulticast mode [ 1087.779918][ T786] veth0: entered promiscuous mode [ 1087.779934][ T786] veth0: entered allmulticast mode [ 1087.780892][ T786] veth1: entered promiscuous mode [ 1087.780905][ T786] veth1: entered allmulticast mode [ 1087.922572][ T786] wg0: entered promiscuous mode [ 1087.922599][ T786] wg0: entered allmulticast mode [ 1087.923431][ T786] wg1: entered promiscuous mode [ 1087.923450][ T786] wg1: entered allmulticast mode [ 1087.925561][ T786] wg2: entered promiscuous mode [ 1087.925581][ T786] wg2: entered allmulticast mode [ 1087.926267][ T786] veth0_to_bridge: entered promiscuous mode [ 1087.926286][ T786] veth0_to_bridge: entered allmulticast mode [ 1087.981913][ T786] veth1_to_bridge: entered promiscuous mode [ 1087.981941][ T786] veth1_to_bridge: entered allmulticast mode [ 1088.005862][ T786] veth0_to_bond: entered promiscuous mode [ 1088.005889][ T786] veth0_to_bond: entered allmulticast mode [ 1088.035473][ T802] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1088.038675][ T786] veth1_to_bond: entered promiscuous mode [ 1088.038705][ T786] veth1_to_bond: entered allmulticast mode [ 1088.069361][ T786] veth0_to_team: entered promiscuous mode [ 1088.069382][ T786] veth0_to_team: entered allmulticast mode [ 1088.070881][ T802] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6563'. [ 1088.108455][ T786] veth1_to_team: entered promiscuous mode [ 1088.108482][ T786] veth1_to_team: entered allmulticast mode [ 1088.130389][ T786] veth0_to_batadv: entered promiscuous mode [ 1088.130416][ T786] veth0_to_batadv: entered allmulticast mode [ 1088.144892][ T800] validate_nla: 26 callbacks suppressed [ 1088.144911][ T800] netlink: 'syz.0.6564': attribute type 61 has an invalid length. [ 1088.147708][ T786] batadv_slave_0: entered promiscuous mode [ 1088.147731][ T786] batadv_slave_0: entered allmulticast mode [ 1088.166193][ T786] veth1_to_batadv: entered promiscuous mode [ 1088.166256][ T786] veth1_to_batadv: entered allmulticast mode [ 1088.190652][ T786] batadv_slave_1: entered promiscuous mode [ 1088.190671][ T786] batadv_slave_1: entered allmulticast mode [ 1088.205128][ T786] xfrm0: entered promiscuous mode [ 1088.205167][ T786] xfrm0: entered allmulticast mode [ 1088.206786][ T786] veth0_to_hsr: entered promiscuous mode [ 1088.206802][ T786] veth0_to_hsr: entered allmulticast mode [ 1088.228960][ T786] hsr_slave_0: entered allmulticast mode [ 1088.242706][ T786] veth1_to_hsr: entered promiscuous mode [ 1088.242730][ T786] veth1_to_hsr: entered allmulticast mode [ 1088.244026][ T786] hsr_slave_1: entered allmulticast mode [ 1088.245157][ T786] hsr0: entered promiscuous mode [ 1088.245177][ T786] hsr0: entered allmulticast mode [ 1088.246478][ T786] veth1_virt_wifi: entered promiscuous mode [ 1088.246506][ T786] veth1_virt_wifi: entered allmulticast mode [ 1088.247771][ T786] veth0_virt_wifi: entered promiscuous mode [ 1088.247791][ T786] veth0_virt_wifi: entered allmulticast mode [ 1088.249492][ T786] virt_wifi0: entered promiscuous mode [ 1088.249512][ T786] virt_wifi0: entered allmulticast mode [ 1088.276272][ T786] veth1_vlan: entered allmulticast mode [ 1088.297241][ T786] veth0_vlan: entered allmulticast mode [ 1088.340940][ T786] vlan0: entered promiscuous mode [ 1088.348615][ T786] vlan0: entered allmulticast mode [ 1088.359890][ T786] vlan1: entered promiscuous mode [ 1088.368459][ T786] vlan1: entered allmulticast mode [ 1088.392388][ T786] macvlan0: entered promiscuous mode [ 1088.392675][ T786] macvlan0: entered allmulticast mode [ 1088.408499][ T786] macvlan1: entered promiscuous mode [ 1088.408716][ T786] macvlan1: entered allmulticast mode [ 1088.450408][ T786] ipvlan0: entered promiscuous mode [ 1088.450437][ T786] ipvlan0: entered allmulticast mode [ 1088.487444][ T786] ipvlan1: entered promiscuous mode [ 1088.487476][ T786] ipvlan1: entered allmulticast mode [ 1088.507053][ T786] veth1_macvtap: entered allmulticast mode [ 1088.508409][ T786] veth0_macvtap: entered allmulticast mode [ 1088.509714][ T786] macvtap0: entered promiscuous mode [ 1088.543304][ T786] macvtap0: entered allmulticast mode [ 1088.548345][ T786] macsec0: entered promiscuous mode [ 1088.548691][ T786] macsec0: entered allmulticast mode [ 1088.550202][ T786] geneve0: entered promiscuous mode [ 1088.550222][ T786] geneve0: entered allmulticast mode [ 1088.559906][ T786] geneve1: entered promiscuous mode [ 1088.559999][ T786] geneve1: entered allmulticast mode [ 1088.599826][ T786] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1088.599858][ T786] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1088.619669][ T786] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 1088.621111][ T786] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 1088.639998][ T786] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 1088.640029][ T786] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 1088.660565][ T786] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 1088.660596][ T786] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 1088.697791][ T786] mac80211_hwsim hwsim54 wlan0: entered promiscuous mode [ 1088.697867][ T786] mac80211_hwsim hwsim54 wlan0: entered allmulticast mode [ 1088.844578][ T796] bridge0: port 3(syz_tun) entered disabled state [ 1088.845037][ T796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.845959][ T796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.903346][ T797] bridge0: port 3(syz_tun) entered blocking state [ 1088.903493][ T797] bridge0: port 3(syz_tun) entered forwarding state [ 1088.903996][ T797] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.904156][ T797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1088.904450][ T797] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.904598][ T797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1088.908469][ T797] bridge0: entered promiscuous mode [ 1088.908496][ T797] bridge0: entered allmulticast mode [ 1088.909492][ T811] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20004 [ 1089.092721][ T819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6567'. [ 1089.196658][ T820] netlink: 'syz.1.6567': attribute type 1 has an invalid length. [ 1089.290437][ T824] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6569'. [ 1089.291116][ T817] syzkaller0: entered promiscuous mode [ 1089.291163][ T817] syzkaller0: entered allmulticast mode [ 1089.317674][ T827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6572'. [ 1089.317707][ T827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6572'. [ 1089.354306][ T824] IPv6: sit1: Disabled Multicast RS [ 1089.590829][ T839] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6577'. [ 1089.591100][ T839] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6577'. [ 1089.956301][ T856] netlink: 168 bytes leftover after parsing attributes in process `syz.5.6582'. [ 1089.980525][ T846] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6576'. [ 1090.124957][ T862] ip_tables: iptables: counters copy to user failed while replacing table [ 1090.412601][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1090.433806][ T883] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6589'. [ 1090.434060][ T883] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6589'. [ 1090.657486][ T893] netlink: 'syz.5.6591': attribute type 1 has an invalid length. [ 1091.017668][ T913] ipvlan0: left promiscuous mode [ 1091.041007][ T913] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1091.239360][ T920] bond2: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1091.253324][ T920] bond2 (unregistering): Released all slaves [ 1091.766931][ T952] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1091.767361][ T952] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1091.767733][ T952] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1091.768063][ T952] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1091.771100][ T952] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1091.781041][ T952] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1091.800517][ T950] block nbd0: reconnected socket [ 1091.820107][ T952] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1091.872628][ T950] netlink: 'syz.0.6608': attribute type 9 has an invalid length. [ 1091.966489][ T962] xt_hashlimit: size too large, truncated to 1048576 [ 1091.966512][ T962] xt_hashlimit: max too large, truncated to 1048576 [ 1092.219577][ T4937] block nbd0: Receive control failed (result -32) [ 1092.286549][ T8897] pim6reg: left allmulticast mode [ 1092.471134][ T988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1092.733051][ T52] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 1092.733085][ T4937] Bluetooth: hci0: command 0x0c20 tx timeout [ 1093.066693][ T8897] bond4 (unregistering): (slave gretap2): Releasing active interface [ 1093.122964][ T8897] batman_adv: batadv0: Removing interface: gretap1 [ 1093.298015][ T1011] net_ratelimit: 59 callbacks suppressed [ 1093.298040][ T1011] ip_tables: iptables: counters copy to user failed while replacing table [ 1093.366371][ T8897] bond11 (unregistering): (slave geneve5): Releasing active interface [ 1093.402748][ T976] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 1093.497258][ T8897]  (unregistering): Released all slaves [ 1093.510965][ T8897] bond1 (unregistering): Released all slaves [ 1093.530955][ T8897] bond2 (unregistering): Released all slaves [ 1093.557597][ T8897] bond3 (unregistering): Released all slaves [ 1093.583987][ T8897] bond4 (unregistering): Released all slaves [ 1093.606657][ T8897] bond8 (unregistering): (slave macvlan2): Releasing backup interface [ 1093.610982][ T8897] bond0 (unregistering): Released all slaves [ 1093.648698][ T8897] bond5 (unregistering): Released all slaves [ 1093.668598][ T8897] bond6 (unregistering): Released all slaves [ 1093.694112][ T8897] bond7 (unregistering): Released all slaves [ 1093.711856][ T8897] bond8 (unregistering): Released all slaves [ 1093.736451][ T8897] bond9 (unregistering): Released all slaves [ 1093.758242][ T8897] bond10 (unregistering): Released all slaves [ 1093.790400][ T8897] bond11 (unregistering): Released all slaves [ 1093.809495][ T8897] bond12 (unregistering): (slave bond13): Releasing backup interface [ 1093.810476][ T8897] bond12 (unregistering): Released all slaves [ 1093.838985][ T8897] bond13 (unregistering): Released all slaves [ 1093.860972][ T8897] bond14 (unregistering): Released all slaves [ 1093.885616][ T8897] bond15 (unregistering): Released all slaves [ 1093.913469][ T980] hsr0: entered allmulticast mode [ 1093.913495][ T980] hsr_slave_0: entered allmulticast mode [ 1093.913517][ T980] hsr_slave_1: entered allmulticast mode [ 1093.945741][ T980] hsr0: left allmulticast mode [ 1093.945769][ T980] hsr_slave_0: left allmulticast mode [ 1093.945789][ T980] hsr_slave_1: left allmulticast mode [ 1094.337899][ T52] Bluetooth: hci3: command 0x0401 tx timeout [ 1094.407112][ T1024] __nla_validate_parse: 4 callbacks suppressed [ 1094.407166][ T1024] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6618'. [ 1094.407423][ T1024] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6618'. [ 1094.489138][ T1033] netlink: 'syz.0.6622': attribute type 4 has an invalid length. [ 1094.489167][ T1033] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6622'. [ 1094.526708][ T1032] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6620'. [ 1094.653621][ T1046] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6623'. [ 1094.660282][ T1033] .`: renamed from bond0 (while UP) [ 1094.708103][ C0] ------------[ cut here ]------------ [ 1094.708124][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 1094.708159][ C0] WARNING: net/mac80211/rate.c:411 at __rate_control_send_low+0x652/0x900, CPU#0: syz-executor/30158 [ 1094.736680][ C0] Modules linked in: [ 1094.740848][ C0] CPU: 0 UID: 0 PID: 30158 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1094.750606][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1094.760764][ C0] RIP: 0010:__rate_control_send_low+0x67c/0x900 [ 1094.767145][ C0] Code: 48 8b 34 24 48 8b 44 24 20 42 0f b6 04 38 84 c0 0f 85 da 01 00 00 8b 0e 4c 89 f7 48 8b 74 24 10 44 8b 44 24 1c 44 8b 4c 24 0c <67> 48 0f b9 3a e9 36 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c [ 1094.786945][ C0] RSP: 0018:ffffc900000078f8 EFLAGS: 00010246 [ 1094.793130][ C0] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 1094.801157][ C0] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff918c4e90 [ 1094.809220][ C0] RBP: ffff888035e932c0 R08: 0000000000000000 R09: 0000000000000000 [ 1094.817408][ C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffff888035e90fa0 [ 1094.825599][ C0] R13: ffff88807517bca8 R14: ffffffff918c4e90 R15: dffffc0000000000 [ 1094.833669][ C0] FS: 000055556db1f500(0000) GS:ffff888123aba000(0000) knlGS:0000000000000000 [ 1094.842715][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1094.849357][ C0] CR2: 00007fb11e826d58 CR3: 000000002f1a6000 CR4: 00000000003526f0 [ 1094.857459][ C0] Call Trace: [ 1094.860800][ C0] [ 1094.863760][ C0] rate_control_send_low+0x1a7/0x7b0 [ 1094.869197][ C0] rate_control_get_rate+0x20b/0x5d0 [ 1094.874606][ C0] ieee80211_beacon_get_finish+0x385/0x6c0 [ 1094.880634][ C0] ? __ieee80211_beacon_add_tim+0xa4/0x1620 [ 1094.886863][ C0] ? skb_put+0x112/0x210 [ 1094.891177][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 1094.897638][ C0] ? __ieee80211_beacon_get+0xacd/0x1920 [ 1094.903386][ C0] ? __ieee80211_beacon_get+0xc14/0x1920 [ 1094.909170][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 1094.914932][ C0] __ieee80211_beacon_get+0xe2b/0x1920 [ 1094.920471][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 1094.926167][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 1094.931763][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1094.937918][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 1094.943750][ C0] __iterate_interfaces+0x2af/0x5a0 [ 1094.949025][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1094.955291][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1094.962624][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1094.968799][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1094.975931][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1094.981975][ C0] mac80211_hwsim_beacon+0xaf/0x240 [ 1094.987248][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1094.993192][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 1094.998485][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 1095.003713][ C0] handle_softirqs+0x226/0x860 [ 1095.008594][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 1095.013467][ C0] __irq_exit_rcu+0xcb/0x220 [ 1095.018125][ C0] irq_exit_rcu+0x9/0x30 [ 1095.022585][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1095.028314][ C0] [ 1095.031348][ C0] [ 1095.034338][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1095.040547][ C0] RIP: 0010:__schedule+0x1dc9/0x58f0 [ 1095.045928][ C0] Code: 31 f6 e8 2a f9 a9 f5 4c 89 ff e8 72 0a ab f5 0f 1f 44 00 00 49 83 c7 48 4c 89 ff e8 b1 c3 01 00 e8 7c 33 e4 f5 fb 4c 8b 24 24 15 fa ff ff 90 0f 0b 90 f7 c6 01 01 00 00 0f 85 ff e7 ff ff e9 [ 1095.065629][ C0] RSP: 0018:ffffc90007227060 EFLAGS: 00000202 [ 1095.071963][ C0] RAX: 00000000000bea91 RBX: 1ffff92000e44e30 RCX: 8000000000000001 [ 1095.079988][ C0] RDX: 0000000000000006 RSI: ffffffff8e465c0c RDI: ffffffff8c6ddb80 [ 1095.088064][ C0] RBP: ffffc90007227248 R08: ffffffff917a487f R09: 1ffffffff22f490f [ 1095.096217][ C0] R10: dffffc0000000000 R11: fffffbfff22f4910 R12: ffff888029998000 [ 1095.104284][ C0] R13: dffffc0000000000 R14: ffff888029998000 R15: ffff8880b843bb08 [ 1095.112424][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1095.117521][ C0] ? __pfx___schedule+0x10/0x10 [ 1095.122498][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 1095.128201][ C0] preempt_schedule_common+0x7f/0xd0 [ 1095.133716][ C0] ? copy_pmd_range+0x5145/0x5c10 [ 1095.138979][ C0] preempt_schedule_thunk+0x16/0x40 [ 1095.144288][ C0] _raw_spin_unlock+0x41/0x50 [ 1095.149120][ C0] copy_pmd_range+0x5176/0x5c10 [ 1095.154075][ C0] ? __lock_acquire+0x747/0x2de0 [ 1095.159099][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 1095.164589][ C0] ? __lock_acquire+0x747/0x2de0 [ 1095.169606][ C0] ? mas_wr_store_type+0xf80/0x1980 [ 1095.175047][ C0] copy_page_range+0xc82/0x1290 [ 1095.180074][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 1095.185518][ C0] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 1095.192570][ C0] dup_mmap+0xf17/0x1dc0 [ 1095.196921][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 1095.201727][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1095.206885][ C0] ? lock_acquire+0x115/0x350 [ 1095.211707][ C0] copy_mm+0x115/0x480 [ 1095.215856][ C0] copy_process+0x1e79/0x4400 [ 1095.220605][ C0] ? __lock_acquire+0x747/0x2de0 [ 1095.225682][ C0] ? copy_process+0xd16/0x4400 [ 1095.230545][ C0] ? __pfx_copy_process+0x10/0x10 [ 1095.235783][ C0] kernel_clone+0x2d7/0x940 [ 1095.240363][ C0] ? cgroup1_freezing+0x20/0x350 [ 1095.245454][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 1095.250637][ C0] __x64_sys_clone+0x1b6/0x230 [ 1095.255539][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 1095.260915][ C0] ? do_user_addr_fault+0xc4c/0x1340 [ 1095.266305][ C0] do_syscall_64+0x166/0x520 [ 1095.270993][ C0] ? trace_irq_disable+0x3b/0x140 [ 1095.276123][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.282304][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1095.287050][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.293053][ C0] RIP: 0033:0x7f95e57c7fd2 [ 1095.297538][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1095.317231][ C0] RSP: 002b:00007ffd350bf3b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1095.325742][ C0] RAX: ffffffffffffffda RBX: 00007ffd350bf3b0 RCX: 00007f95e57c7fd2 [ 1095.333829][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1095.342153][ C0] RBP: 00007ffd350bf53c R08: 0000000000000000 R09: 0000000000000001 [ 1095.350172][ C0] R10: 000055556db1f7d0 R11: 0000000000000246 R12: 0000000000000001 [ 1095.358320][ C0] R13: 00000000000927c0 R14: 000000000010b32b R15: 00007ffd350bf590 [ 1095.366495][ C0] [ 1095.369577][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1095.376903][ C0] CPU: 0 UID: 0 PID: 30158 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1095.386499][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1095.396628][ C0] Call Trace: [ 1095.399974][ C0] [ 1095.402869][ C0] vpanic+0x56d/0xa60 [ 1095.406994][ C0] ? __pfx__printk+0x10/0x10 [ 1095.411639][ C0] ? __pfx_vpanic+0x10/0x10 [ 1095.416193][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 1095.421573][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1095.426875][ C0] panic+0xc5/0xd0 [ 1095.430660][ C0] ? __pfx_panic+0x10/0x10 [ 1095.435167][ C0] __warn+0x315/0x4c0 [ 1095.439218][ C0] ? __rate_control_send_low+0x652/0x900 [ 1095.444917][ C0] ? __rate_control_send_low+0x652/0x900 [ 1095.450691][ C0] __report_bug+0x276/0x570 [ 1095.455381][ C0] ? __kernel_text_address+0xd/0x30 [ 1095.460634][ C0] ? __rate_control_send_low+0x652/0x900 [ 1095.466867][ C0] ? __pfx___report_bug+0x10/0x10 [ 1095.471981][ C0] ? stack_trace_save+0xa9/0x100 [ 1095.477084][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1095.482503][ C0] ? kmem_cache_alloc_noprof+0xe1/0x600 [ 1095.488195][ C0] report_bug_entry+0x19b/0x290 [ 1095.493110][ C0] ? __rate_control_send_low+0x67c/0x900 [ 1095.498813][ C0] ? __rate_control_send_low+0x681/0x900 [ 1095.504493][ C0] handle_bug+0xce/0x200 [ 1095.508900][ C0] exc_invalid_op+0x1a/0x50 [ 1095.513544][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1095.518432][ C0] RIP: 0010:__rate_control_send_low+0x67c/0x900 [ 1095.524708][ C0] Code: 48 8b 34 24 48 8b 44 24 20 42 0f b6 04 38 84 c0 0f 85 da 01 00 00 8b 0e 4c 89 f7 48 8b 74 24 10 44 8b 44 24 1c 44 8b 4c 24 0c <67> 48 0f b9 3a e9 36 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c [ 1095.544365][ C0] RSP: 0018:ffffc900000078f8 EFLAGS: 00010246 [ 1095.550490][ C0] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 1095.558644][ C0] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff918c4e90 [ 1095.566745][ C0] RBP: ffff888035e932c0 R08: 0000000000000000 R09: 0000000000000000 [ 1095.574745][ C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffff888035e90fa0 [ 1095.582745][ C0] R13: ffff88807517bca8 R14: ffffffff918c4e90 R15: dffffc0000000000 [ 1095.590944][ C0] ? __rate_control_send_low+0x646/0x900 [ 1095.596627][ C0] rate_control_send_low+0x1a7/0x7b0 [ 1095.602042][ C0] rate_control_get_rate+0x20b/0x5d0 [ 1095.607374][ C0] ieee80211_beacon_get_finish+0x385/0x6c0 [ 1095.613213][ C0] ? __ieee80211_beacon_add_tim+0xa4/0x1620 [ 1095.619248][ C0] ? skb_put+0x112/0x210 [ 1095.623559][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 1095.629961][ C0] ? __ieee80211_beacon_get+0xacd/0x1920 [ 1095.635666][ C0] ? __ieee80211_beacon_get+0xc14/0x1920 [ 1095.641331][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 1095.646921][ C0] __ieee80211_beacon_get+0xe2b/0x1920 [ 1095.652421][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 1095.658044][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 1095.663535][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1095.669643][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 1095.675249][ C0] __iterate_interfaces+0x2af/0x5a0 [ 1095.680486][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1095.686610][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1095.693840][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1095.700186][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1095.707259][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1095.713123][ C0] mac80211_hwsim_beacon+0xaf/0x240 [ 1095.718374][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1095.724576][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 1095.729835][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 1095.735010][ C0] handle_softirqs+0x226/0x860 [ 1095.739811][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 1095.744631][ C0] __irq_exit_rcu+0xcb/0x220 [ 1095.749258][ C0] irq_exit_rcu+0x9/0x30 [ 1095.753539][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1095.759213][ C0] [ 1095.762173][ C0] [ 1095.765134][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1095.771234][ C0] RIP: 0010:__schedule+0x1dc9/0x58f0 [ 1095.776589][ C0] Code: 31 f6 e8 2a f9 a9 f5 4c 89 ff e8 72 0a ab f5 0f 1f 44 00 00 49 83 c7 48 4c 89 ff e8 b1 c3 01 00 e8 7c 33 e4 f5 fb 4c 8b 24 24 15 fa ff ff 90 0f 0b 90 f7 c6 01 01 00 00 0f 85 ff e7 ff ff e9 [ 1095.796235][ C0] RSP: 0018:ffffc90007227060 EFLAGS: 00000202 [ 1095.802344][ C0] RAX: 00000000000bea91 RBX: 1ffff92000e44e30 RCX: 8000000000000001 [ 1095.810345][ C0] RDX: 0000000000000006 RSI: ffffffff8e465c0c RDI: ffffffff8c6ddb80 [ 1095.818351][ C0] RBP: ffffc90007227248 R08: ffffffff917a487f R09: 1ffffffff22f490f [ 1095.826352][ C0] R10: dffffc0000000000 R11: fffffbfff22f4910 R12: ffff888029998000 [ 1095.834353][ C0] R13: dffffc0000000000 R14: ffff888029998000 R15: ffff8880b843bb08 [ 1095.842581][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1095.847663][ C0] ? __pfx___schedule+0x10/0x10 [ 1095.852567][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 1095.857990][ C0] preempt_schedule_common+0x7f/0xd0 [ 1095.863402][ C0] ? copy_pmd_range+0x5145/0x5c10 [ 1095.868588][ C0] preempt_schedule_thunk+0x16/0x40 [ 1095.873837][ C0] _raw_spin_unlock+0x41/0x50 [ 1095.878556][ C0] copy_pmd_range+0x5176/0x5c10 [ 1095.883451][ C0] ? __lock_acquire+0x747/0x2de0 [ 1095.888448][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 1095.893678][ C0] ? __lock_acquire+0x747/0x2de0 [ 1095.898739][ C0] ? mas_wr_store_type+0xf80/0x1980 [ 1095.903983][ C0] copy_page_range+0xc82/0x1290 [ 1095.908884][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 1095.914207][ C0] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 1095.921227][ C0] dup_mmap+0xf17/0x1dc0 [ 1095.925549][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 1095.930258][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1095.935336][ C0] ? lock_acquire+0x115/0x350 [ 1095.940067][ C0] copy_mm+0x115/0x480 [ 1095.944200][ C0] copy_process+0x1e79/0x4400 [ 1095.948937][ C0] ? __lock_acquire+0x747/0x2de0 [ 1095.953998][ C0] ? copy_process+0xd16/0x4400 [ 1095.958815][ C0] ? __pfx_copy_process+0x10/0x10 [ 1095.963909][ C0] kernel_clone+0x2d7/0x940 [ 1095.968446][ C0] ? cgroup1_freezing+0x20/0x350 [ 1095.973422][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 1095.978502][ C0] __x64_sys_clone+0x1b6/0x230 [ 1095.983305][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 1095.988649][ C0] ? do_user_addr_fault+0xc4c/0x1340 [ 1095.993992][ C0] do_syscall_64+0x166/0x520 [ 1095.998617][ C0] ? trace_irq_disable+0x3b/0x140 [ 1096.003661][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.009835][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1096.014556][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.020489][ C0] RIP: 0033:0x7f95e57c7fd2 [ 1096.024986][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1096.044882][ C0] RSP: 002b:00007ffd350bf3b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1096.053456][ C0] RAX: ffffffffffffffda RBX: 00007ffd350bf3b0 RCX: 00007f95e57c7fd2 [ 1096.061521][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1096.069917][ C0] RBP: 00007ffd350bf53c R08: 0000000000000000 R09: 0000000000000001 [ 1096.078087][ C0] R10: 000055556db1f7d0 R11: 0000000000000246 R12: 0000000000000001 [ 1096.086117][ C0] R13: 00000000000927c0 R14: 000000000010b32b R15: 00007ffd350bf590 [ 1096.094158][ C0] [ 1096.097816][ C0] Kernel Offset: disabled [ 1096.102158][ C0] Rebooting in 86400 seconds..