last executing test programs: 3m42.226694724s ago: executing program 1 (id=1776): r0 = socket$inet(0xa, 0x4, 0x84) listen(0xffffffffffffffff, 0xfffffffd) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, r1) r2 = socket$inet(0xa, 0x801, 0x84) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x1000000}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000045c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000004c80)={'ip6gre0\x00', &(0x7f0000004c00)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x5a, 0x9, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x700, 0x6, 0x800000}}) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{&(0x7f00000001c0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000200)="c707ddf7c7c9abc48b72f165190713b91316929c62a547b9015b0049eb217eb46bdac8203ba134f77bdbe80753b2fdbcdcf599f462a3d9317cc4dcbacc0a3f447d3a3555d6d8b0c8839cbfa2b4ea20c904a64422e6afbed803c340d152c619a8fe8b75febc358fe5359b5cfcd97762103e41ffeb98476c3c", 0x78}, {&(0x7f0000000280)="5910358e08692063e0d0fb69883d3556cc142b051c66caa63fcc3f3c13c5f6883151ea0df06d0d0f18b5300ca046c8379e992d1c5cd8210acc40b683910f672d56a784333dbdb39aa56873d99e43b50ab6b4df9f4ff60c75a5180295dc1fef060d03e88a88b457a1b0d901b5e4e1", 0x6e}, {&(0x7f00000003c0)="1a74da033a48b3e06c1b8f00d57bddae3a955da08f1c2c90fe1e235a5b0e16a4ed8462ecc8314582b0911ba031d77e7206de62ae93ce7f995dfefa16ed61100bfc4014bb40fef0f823923146e2ee3266ce70d1b77296fbe87b10e36854c4fdf81be7dee4303046b58bd8fdcbfd6a964c7fb7552a9895f4e85904d0a5970af2acf3df3c2448b13e4b072d06f21ff739c083bd46601aeb7a527f428979c59fc68712ceaa4b205aa2558fa3754cbd64b09a7c5d7afe3850612ce3e7", 0xba}, {&(0x7f0000000480)}, {&(0x7f0000000540)="dae6e9ca98493197e1d06b040d5eee387012212a452cc4f903085da3eb568920fb1d84d19e3ee41e7c7d5d4da28eade2c90bb4ee285ce6e4acd11cc831a50d9f760d0be391efa9e9f2d928508e4114a2ac0a218d16df73c4546403750306d6e43953", 0x62}, {&(0x7f00000005c0)="693ee253b98ad2c39b867322d8d898e0f6f41d66fc39c3999af0f50ac19336d6671d1fb39c24677afdb39f7da3f8c65694974984cddb6d9876737e2abcddd8d4421b17075bf3a5db4233a85d8d978de3ea23adc211943204d39a18ccd9e2ca9fd81b25984c8c9273fff0b78af6e3d200fee12997c5b457b021c3326754a49bd37fe0a10e62fbd111fae76292a19552186251bcda8851b721aac3c651bfe0345057b2ec6f35e9370a3941", 0xaa}, {&(0x7f0000000680)="28a3e40d2335d12a844c7128eeee0eecf0d064db8a65891f35eea2097ae37b0a3429be23a1d0e7adc3dffd34a94d13a18926f406be95777a51b6252f9f248dd71e16dfd104642af1c9217420735a849a3c885b87b12a37ea5febf113ea3e38fe51bf709247221283ff405d9b9851718d6e2417974b", 0x75}, {&(0x7f0000000700)="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", 0xfb}], 0x8, &(0x7f0000000c00)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffffa}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x10}}, @ip_retopts={{0xf0, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0xfa, [@remote]}, @noop, @end, @timestamp={0x44, 0x18, 0x8f, 0x0, 0x2, [0x0, 0xf, 0x8, 0xc0000000, 0x6d]}, @rr={0x7, 0x13, 0xa0, [@private=0xa010100, @broadcast, @private=0xa010102, @private=0xa010102]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x3, [{@multicast1, 0x6}, {@multicast2, 0xd16}, {@private=0xa010102, 0xc}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x615b}, {@dev={0xac, 0x14, 0x14, 0x31}, 0xd}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @lsrr={0x83, 0x17, 0xe2, [@loopback, @multicast2, @initdev={0xac, 0x1e, 0xfd, 0x0}, @broadcast, @rand_addr=0x64010102]}, @ssrr={0x89, 0x1b, 0xb6, [@broadcast, @private=0xa010102, @local, @empty, @remote, @remote]}, @timestamp_prespec={0x44, 0x44, 0x13, 0x3, 0xf, [{@broadcast, 0x7}, {@empty, 0x2}, {@remote, 0x7d9}, {@rand_addr=0x64010102, 0x4}, {@multicast1, 0x7fff}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x42}, 0xb0}, {@rand_addr=0x64010101, 0x3}]}]}}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@cipso={0x86, 0x31, 0x3, [{0x1, 0xc, "fd76070fccb7f079fa87"}, {0x0, 0x6, '\x00\bow'}, {0x7, 0x8, "dffed04d7bf6"}, {0x5, 0xe, "6c426eb36ad4082b3fca7a5b"}, {0x6, 0x3, "aa"}]}, @generic={0x7, 0xc, "0b3a961b08ed98c401f7"}, @rr={0x7, 0x17, 0x24, [@local, @broadcast, @private=0xa010101, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x13, 0xa0, [@private=0xa010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}], 0x220}}, {{&(0x7f0000000e40)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000000e80)="4a75116e1e7efafe1b", 0x9}, {&(0x7f0000000ec0)="955192045eb407", 0x7}], 0x2, &(0x7f0000000f40)=[@ip_retopts={{0x68, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0xea, [@empty, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x29}, @loopback, @local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x13, 0x6d, [@loopback, @empty, @loopback, @loopback]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4, 0x1b}, @rr={0x7, 0x17, 0x8e, [@multicast2, @local, @private=0xa010100, @private=0xa010103, @local]}]}}}, @ip_retopts={{0x68, 0x0, 0x7, {[@rr={0x7, 0x17, 0xde, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @remote, @local]}, @timestamp={0x44, 0x20, 0x65, 0x0, 0x0, [0x1, 0x9, 0x80000000, 0x99a1, 0x0, 0x7f, 0x6]}, @timestamp={0x44, 0xc, 0x67, 0x0, 0x9, [0xefc, 0x3]}, @timestamp_prespec={0x44, 0x14, 0x99, 0x3, 0x7, [{@multicast2, 0x4}, {@multicast1, 0x1}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}], 0x100}}, {{&(0x7f0000001080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000002280)=[{&(0x7f00000010c0)="95a810214a52d1a4fc66da4fd25275e07bd3cc0cc3f68974d501dbe7eeee0365530ebb74f14d740ef37e9506d58225da2eb56377020f003f679dae9e2f5765c9a7d4c9fab14ba8f2cbff42e7bd7524c67890bcbe733dde52ed46ee7b50425fbcee899cbc28d0c833250ea8c1d76d2fea7a9cb4b1737f6da5655faa6e61ba13e06b3b563c0c7a39350db39816c8f9", 0x8e}, {&(0x7f0000001180)="652bf08429850989996323595f2a8a20a075288059660a7333de75120cbd4801620bd58884f2570144b665ebcddf57ce42ae0246d1a9e4c9dc57e2ecfaf629344fab08fc8cb0836bab06c7c8ffd047233471d58ac97b948cecddea5b2a6eb2", 0x5f}, {0x0}, {&(0x7f0000001280)="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", 0x1000}], 0x4, &(0x7f0000002380)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8c}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5dfd}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @broadcast}}}], 0x80}}, {{&(0x7f0000002400)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000002680)=[{&(0x7f0000002440)="f66d23d7effdc3ca7e0aff8256a5a85b6bac458bcbe251171ed3d47adcebba93907601c1bda3dbd96b21777c0f3456ed129b125631c086eb35a1e83bb98ed18ac28ac16c346fa41d19734b2d553e9cb19a3147f6cf1a14251184fcb1bde22de8494b17e64140add0d5e74d78d595756266f1503df9ceb41dc8019b1a0b2c7d872ca762e44653faf0573224aa5ef8dd361f4f8fc80e3adc689dfd4d140245e8c347843fb769c461cf1f8bcbeac6124efcb949f7b84077b362f1269cf70ee74e359dbc0292c75b422dd144233aa55b01b01964ecce6b18a27dd24286340e02ff33ea2a4ea60a71c2aa93a21fc9437b8bc15c2a84253b4b", 0xf6}, {&(0x7f0000002540)="3027f8272b898daeb74255e2fb957d29c510f81fdc15600d5b4c3dc7e08204e44407b60fad69a54f26", 0x29}, {&(0x7f0000002580)="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", 0xfa}], 0x3, &(0x7f00000026c0)}}, {{&(0x7f0000002740)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000002940)=[{&(0x7f0000002780)="9fc4a2ca72fa7f6b08d0cf17052e76c612006671ae8f61a960e9b5edc75dd54b510acb301bab2f17fedcba9534f9c98652d0f123c1adc1ff9e242ca3b1ded06d32d2cef2e0339498c1d7355aaae3ec388852fb885ce2094410e36b2fd0529b68ce72e937622cceaab6a755b786d61857c535ce535a4d01b93a8d3c49e52ef5518e3803a6603f562cdfd230f948f7178abf6e36e9bd60b310f9397e046442106e4393424d594a42e989867c4bf56258b4cfb022d90ee3ba7523a736d4dba0cd35a3d6c4ae1ccf427ffb2af030c267e2305768eb9244b5eccee086cbbf7e6e15a9", 0xe0}, {&(0x7f0000002880)="4d7f4c926f93129a46a62e869c12c2cbefa8509df2fe5a11e63c805349f4752833547a12cb7004e1861f7e0ded558f720a23495c82b98704962342b8319432a0d3554c007fa9da9444a2dc4b28f8c6b5b71e290c420e0813c6f5b6cac6b1fd5b5eac11cb20712f93bbd76c206b5c50d3bf553382ef51345e9fbcdf741555491e07386b2c20067b5a3671c55a6f7bf42ffe5427b02ab44fc532192ed4d16a905d3b6903b055d1ce3c7a86ded3476153ab8858cbc41aadf4304270b893ad50f0", 0xbf}], 0x2, &(0x7f00000022c0)=ANY=[@ANYBLOB="140000000000000000000000020000005f030000000000007800000000000000000000000700000083276cffffffffac1414170a010102ac1414aaffffffffac1414aae000000200000000ac1e0101071342e000e608000014bbace7f3eb13758e001186160000000307053b5579020bf112ff605813916270830b420a0101000a010102440cb323ffffffff00000003140000000000000000000000010000000f00000000000000"], 0xa8}}, {{&(0x7f0000002a00)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000003f40)=[{&(0x7f0000002a40)="9c74e766e5797dc54f9da5752efd556f10ef8dc35a1eb8b7176596b66f13ea1fe1908c4992438d0d2ea096d8b887db9b8bb06417ad8ab1ba88dc2546a7c3420db18e6cc58595d55a1aca1f13d729b013b3bed1927911365b6ac27e4d4217ed2fd142f203c71ca2f446e9cab20c943486025f6c090fa3674f4563e0c204ce28381eebc993d490aaca8a740fb2af4631775a9b0feade56d03fc8250399f57fab25b1bc45e6c3e4abc76721211ae76450a5887c908a8b262446fc30e2465fae194b85e920f89217525cda8d305406b09faaac58adc62795e7444a30011ec491e168cbc2b41c0a32f9aa666ebadb52f793d3fbaeedb76845b7890c339b1b5d092e1524b4189bfd20df3344d2a8cdad4b3a3f05d5788ec624cfa9a422cd9ebd2614e02e7f257681bad1c8b150e49b1bb224586274d3d9a2dc857697b41de1cd1bdf906b3bd33d26904426dd3012f922489177b187531ae255d8545544bb4fd53f0ce06a1ca963d72efd043bf18d3dcbb02c97b0ef5b38ca86692240d9595ec5a6dbdbb488fb7eccdb920f9fe355001d15b464b87234bd08fcc4fe449d4080b690cd51f56888647a5061f38824a7bd20f915cf686aeeda1864b8001367a1cbf47ca8f382d4a4885040de426f0873f14f73750e024fb0d2f6ee76ff6ea5ada1839a6b7617cdc30917fb543c78cc1f525323309d4740d8096528393216938fc156ad2e0598561e69ac97430cb1bc5d506b233c4844f985822c5a5c4937f5277a9ceac6c01ed91ddae172ad2775693c7b93ed698499c22d7667e8105c175cd3889386df605ce279ebc3813211bdfa8a50f78b7b5ed9b2dda61ba19a899261f8303e10bf2eec98ee38935f1a27f1fbbae94c2bae1cd0f7e003828fe6146ad2a7fd51b6cf0d283c39ee7b579498c2d7b111e6a042668c19a0a8097e961bebc529fcc4602365f32437ba52dd57dec963b117a967a4810fc7fb0276b1abcbb60772ead40e29e7115b6db5f7bb58feeade1aad5f2903ab52efddb42cb79023a550ca77bf77ab94facbe28563a0b800747e575de7b511c61127b8a260e73a1c627c6615d1fe48e25a8d269bee10f0a15337ad7725a652b68129e1a990d0de3f3d9403bcff846fc13265f217997eb736d667492d2a3c947218cba0446fc9b7f7577787010c745634474dde37a9619377cbd13725802759db0f4a9ae1307a0b3f445816e85a25a1a012f24edac7fbd5df5b3a2fa67c784fc5036427b45d6309bf49bf9a7710610bdd9bf66e62be545797654e6ec2af750f3282fb16dbcb01ce2b4ce0b87f2dc631ada15f57c6394da4744bfebf4b4455d7d4ed463f1a0f2a32ac2384b28657b6480e9db92bd23173b6e7bd44453e9a01a6d9d76c93383b61dd99d8433ddf543b05b8334e6eaa90bfc73006fa50e88d73db64062f88eb82279ffc9db4ff0eeeb506072f9a8b33f2c2dbc3410a39870fe7cdb14d48683f00a6110408f402a2f4ce9ad58a25b232ea6e134e48b085522f74927111e238e8060f7e25db8408cdc796b2ab40dcd5b740c4052fc477c9da243d119e7520574360e293a90a5b928dd2ae2cf2312eb446787387bdfca2a9810b966ee69997747a3523450cd483b4cc9042386e9e203e08270a8b7f28863a2d6579e6a59fc86cd54aceb16ef338d701498ed66c14fbe7d95dfe128b25d731b00ba9240a607f057368d3d736d5442efd5b0483c36ddb7fd2792a5224a8dd6effb206d218067ebdae62178720ba644296f46a0fce16105b0e90cff9a0708955238096a191d1d4f7772826dab2f52ff71548b1d8cf883de9dbc8d906685f4fcca975923616cf2a9c02e49e8e92cab3f40d9638cfde0cbbfe5ffa59a5fbe323a262ccf77aedc468dadee97a91b89e132844c9db088c3cf4689b88be10f2a432e2f083d95dc4d2f87e369f7be068ac2a8d9bd86d1f6b2c9bbb45535184e7e0b8d2b8342565ae1c12d8441756b3c451ff5ea8057a57a04c8caf0ef8ec591b731eb1df0825b551393e65add1de02e3f6af8846a1bcad2ef27d001536dd467d402b5e5729a369e6b6afdc1853693d57e43bbf8bd6ac4937fcae5acc6f3db3337105ebaa76abc987289490dc3583e99ce342547e60bee36e0e75e07b02baaeed6e2827f10c039c91ca2cec270f5ffb4580290883eab14343f1299b30c5cd9a26b0b47a3c6a2086c515c857f906fb8629ec12d6245fbda1d4d0fafdcd759a854bd60ff18f0f3c12a64b9ff439c0d7f37d3e2103f69dd1afae3b32136a9db1aa98b3effbb5b8a53f0ebcc5dfeac228bbaea7a341d0a68ae18c5e5e2b71f87b3f2272e5b29c82a61f6db495dabcec64568cdbe25ac687cffaefd3ce44c3b22aa4fb74d7518e1d97ec69838474b51e771234a07cec7875bbd0f52d0ff6a672d70ec75ac08aac83b35b224e49c161f8ca8651d8d3b9310655959b156bf5548bdb273af98ebccb214493e2cf71288fefb44988b626d17becae1968a8679db7e7c00311221e70baf7476383377b4b2a4ab329a226462a7080e370b18cb2054a2522ea211cb2da132c0ebca4c3f69d03049c04706adeb1d640eee4f4a1959ad123581f2e065a11882a32d6a8528ea95fe4fdbb40b018a6e6f91e0b28b6a6ae8409b97764079445848c3f63818232a93b917763a0c7ab0444669174c84ca5a0a8c3c9901bfd744cb662dca1b0b6fa60100f860d09d566f348d451842b28b2f4d415916039b07d4526bd01bcbf58aeac2e3d44e2420e9c1c1b692524285deb1ffd742e6ab667826d7052d27fa2eeac459522523fbaf1e75b631aa31f87be0a8f14b37cb16609aa8bee566b03b2aeeeaf0cab3f9f79395837c24679e4df6f7e7f217b49d0bda66705daa0a10053a70d156e96eaa3f9c1aa651276a575550138908207913069ce849d5313eaca266068ca59b36379cf5cdb3db0c07546b9521dc30c40b7cf7575558928810a760c883171d0550cf503705bd872460ea0e41d320aab1a93ea2a68d70ab3e996afd554a3cdbde305fef88d10172f36d08354aa1d636e082c9e145442e76f64ec578a90a49ea7a349f27d2dd398ab7404b172abb4c8d5ab95d1e419c7f60284e6f8cfca1cecb5ab080f9e5ab373e2f86caff8f16b184adfe8dc96320a52d4c0a934e0ee3cd5e2252fdd125aa85213fb335fdd00191e3d106174b2a0a384dd093910d31c98c67b7909098d49647113bd515ad780f2b162364f3b14508be7545a32e26763e3349d998e7d703993e07b9571972e629db48746a4b1feb94b57e9c5d1c8c49fc29a894c8ee2093c87b5a3a9a985df9255bd5534db9d725d19a75ff45458152a7bacb3c1893f869c47d176d79b721e7326e85990581e1722e016d0b9aa91d85f685d555f4336107092488b9759473c875aedf3dfce261baa6823433ef274464b4720670b0c9c08f30619285e48e0f81f2a76c200c378f9d73f5cc3de4aac04005414add266d681fdc0adef21900fae7678a1f66f236c16329f3700225ced322b9ba6aac24388a441364eb965357180868fe499abb54bda86a65fb5f09ce415d861292ec41e6b4a1994ec582f8d653986116cdb0dd943ba0b8e8a2e147a10b2852d21eea6199249b16ca6507a7e5b3f5382e1a9cc0344e5f3a704334e141385dba733d6d9865fa2e615af728de55986ce2fd74d06fdf5ecb3c8750c0ead5c33cd41626895d454d6cb95dbedd9d933c794aa9d28fc9146e6eea2227218d7ee1a2c88947e433452dfc287f38c752f009311f0ea65e68fac04950ee55c756180a8a451b3a156599e83f6e718e4b884acc7630e54601edb82125e7c2e9a33d455692991facbcef5c6e954b0b1a2d17f2fca370aff2e40bd903e5908749785d1656352443684fb6d1bfa2649cf6dd0a5b0984f8e0aafd66057dce729a5b3a5bdbf0225253688e39e3378ae1f52d4baa10e8fcaa036d4c3960285110f97703f275c305572c618e41c789d6d7f71839bc473011e9e7801d783b0c454034166faae5f497c296506d8a9159e8e46baff66adf2149ff9e544374e38ff466af3b8ac9eb8761e94aa5056108a3f5025db335d6984dc267fa399b8d0e8a461b2e93620bb4096abc94736b67902807acf1eb7e3af0550b8e00fdb23f4320c2b1a70b85e3df3a056ab7937f3c998e98b4bb28e06fb4113fe62a7e87cf4ccfc9c9e470d38109ad74310c115ea5e611f5a2ff20535a6f3c99012ea8b24ed0de8ca6a806b4d63578e33945f5f7176ce01d0a2930bf0cd0dedbd3f3716532189c5624a8c0d6045ecfce070f515bc72684ae3005203fc86b5df2c9ce7364b5b970bb80ae2301e66a50fe3de4d093b9a18ff45beffb8004ed6d3a8f769353b5033aa3da57f94df89f69e9dc4483a445f27f1faa3bca79c6b2fe6d960c210bc23849c45edfcab9b4ac3ca76c927a962a399519332c3224511d73f878b70b82999ca95cedb53f0ae6d1c0a0a486d4ab24a1a9a11080363b47bfb94198c721439fa5ff5277e026cccf735e0f8ebb7e96182971821da8dfd9db8c3c1cf2df88035e9b54cb10157c03b622f0f5460ca3dbcd0cb9791788b20e66cd82f81e038bea7314550c17ca20add24c01f5125912dbf76ccd070bdf7f69a4df6697f1ef946ee1e7a640fb6ff096d7175b13f71e08e6ff1a47fac7b2f45910c0d4f0b34d014f03f85c7c7119b85d751f0df702767b62b1244ebbb69adb4af4e31dc19e30c8ec7ccd87207b955858966b22817df7c64a3574b5af40d1350399022462ca7741e9a9b3c0e1ba05662645b6d540b0fe8a6aeef9c32bb97c2b64caada8d6aad9eeb3f6428ab612ba3024aa2412db24ea455d5a23737153f5eefb4216f3aa9824945cd630f6e9d526ffd1214c577bd7e934bbe4f99ed3ce27d691abe0cd4d9dd2fef389981dd831492399c562ee256797e4e90c02805718d35b42ac03f568ef8fa820da5752d497aaeabdc270383f8c916ee37a9b1bf1fdf3486bae27478006100b521f283f8eae17556338ded4c14f955ed0f870806afc1450605af847314e75a5d823bee411ef48868552ce45060cd49bb73525edff6b917d02ccb1a80f25ab38ca339fa0e563cd4fa1707dd647179427e0595cda9149bc54652975470684ef5cf862c1cada5811a7395268d02b622bd309103e61f0e6da353e9193a9af0f246340246fa543d9ec8e01df2b9bd6cb8b6d98558646d6960e3a4512175ea241b84e0a6084d75dd94d33e79abbf0cfff2bc8da4f4540a125af90b6841fa9ed8808f4f6f42ecdedb388d19b4de89829d01879192d1eb15104637d84b7395b66ec732a8e75a56f6e0c57de32246cb4a9efc42adcd273f86354cde6327d7bb1c0f6bdd4fe9979fd93d214c017defc36d64b84a6137b80aa4d377df130ff74fbc7a0c798ad6c4d4b9080782806934bed9d4de24172e4ed27fbaa9146ed42e5b6530988bf1ecb8a21f5c99c4f4f5eceb6ca58488730370096bcb4e326f480e705c836bbf319c80f9dc5f14a432b8c84894e248dd65c12bacc929d4c6ac80a27598368737ad7017caad31a9f27ba4daf9abc258a972464632b6beea52772f4ecfd3a179467da55dca6c27bfe56d0b034a8dc9a0802837f1634182f0e40dce9cf1ecb373115729e0036faa68bd5d66d69606adc1263e3f0c75a8769deed9c38e6cf4303becc7f6ba7c4c40b449827b8ca14705121c074a1f926b363fb53204918175cce7410f10dd96ddd8a44af078ec4f789ba2b69c9f8385dcbbbb8a66c08ac39d4b93a783fab9968eb966b17b6a3dd9a536f85b094afeca46473ebbad41a88b4d", 0x1000}, {&(0x7f0000003a40)="32bda37b1cfa6955f095d7b1542f4687c39a9e77c2ff901f7ed76a65ebcda639aa658668f44c41a466fc355b8455d858ce", 0x31}, {&(0x7f0000003ac0)="88f393e56a7e0cb3414ce4f74c137206df07ed0638045f73b2dbbf700655539f08c39c637a335b9ea70f71a4a25b10ff12dd4ebca677a17187f8f3f528843960b2463e7e0ccc7d4cd8ace614711f5a28e6ad24599a", 0x55}, {&(0x7f0000003b40)="c5638af2c21097946fff097d2fddc49e80678975e60464e7a838d2b0b332738b28f92bf225de8b62601448d43e44490d619ed2253955e6cea7d4f13efcef00f4476d69a04264a0f5ab0cc421def40df3294a147b2f5afc2ab069d9cc7cc850f4c0bf0d96705a3a78b5e34b929d6e9bd7c9a41807716370", 0x77}, {&(0x7f0000003bc0)="2b55b35d4cf2d591cf632f938e5e8fb0212584dfa117113ba054d4ae732f2774d11f114a33ca226ef1712f62a3ee535b2b3c700b322b00708ee8e8bcb4ac21d626022d78ee6836ac0b1594cc0d4f66f3ac20bf004df455fbb9243131021cc8dd8a48e41da9f4d52e461f14", 0x6b}, {&(0x7f0000003c40)="30bbd0ca6081704c33dfa1663b6fb6f01f9d99b6ad5a9c50ed51f364bacee9c64fa69292649def7e4166e3b329b373d81660e4174ccbceb052f478e19fc607d49211f52f1689c87939e91f6931315433d8fe032298cdb13d3d9c8a9a1cf3d2330f5c1d74ba899048fa5a8970ea62f70b2beac1f6266f7582bf118c238b0cf0da0355b3c9456918c9906375a935f4df1633706eb252273138225d4b9b022afafee5a11da7bff137f229ceecd9ae2e5ed4a6cd6cce672d6aeee8df9dd311", 0xbd}, {&(0x7f0000003d00)="2990cac1b5e9fc87f969f6b50cceda65ede47aaa14da711ef9a6aa394e6f24a9f9637b8cfe63d473be0f05dace3952b6ee0b0f5602fc3daa6f92a119c5e19ecdd97919a720480f7f5a5571f11fe3b0e8257936ef1120dc5c52a9c5ee117dc53fe3b2820334ba0edd9cd1493f782cd5c8ce3daccb96c411a15a01d6e9087d537c9cb3c45e4ba86a76c0c3981b3dafc6", 0x8f}, {&(0x7f0000003dc0)="cd9ba7b8fa4f722ddf48ee6b92077a177d0fef151989ea24b1fcb9761bb8e034b5b818ab0056ab844d4b8081f6670b3568f1d4eb0df6e949867328f0f49812d50566fbb8f540c3bb559a87c156402b7c45adf79c3592d7f58384f1e8f9a2d3d6e01996bfe67f5f926e2f3d4f2309e06aef4ac274209339fc5bcd2d0ea2daf9025c468a06ddbd4606ff661047478f4939761718afb13bc211ae1b9cbe9b601525b82eea4b55aa048d73356d5c98e2660f319335a3134ee610e675c73810c542ab992bf2541332ee4cc7a153c3d1034350b6a6fa444cddcde192", 0xd9}, {&(0x7f0000003ec0)="2322458aa8e7de0b857c3cbc7a5d6bcbe4b8679d9af3f1630b991b5926fba87bf59c3fa5078ee0d4636df7d582ab2e1d0300000000010000a55bb1a413cd2b6a8b6607dbde896bcaa33d6b5f73c61a55072942bc9d21dc6257fe7047ef4cb4bca39c5fea612b25392fc586aa07051cf0c4312e29e32587ccdcf52e3f", 0x7c}], 0x9, &(0x7f0000004000)}}, {{&(0x7f0000004040)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000042c0)=[{&(0x7f0000004080)="dae8035991355b4ef3a26116b938f6e0a4c620e7da1de8a530accca1b0a2cf6d20bcaf355bef5e7a00b8ebc83f4ae8d3990dadb04596bc800232cc7820223d7f78f0662163cb313eb0d2de98c1a091fc2e84e3f7edf1c839560c6d4e14eedb0c9ce402d3702e29bee7bdfaca806c624584771ae01dcf6f224a9196b3135097e0548f82b6175e3b6a48cbd15f68088e28fa3f2cebeabad8739573ce1cf18b74f79417f80190854c92700c71bd4ef97457d8f402a4977de43f64271602e5796903d9251e0198a06c0ba80b3e5cdf67a98343937840f35370f6c08b4e985c27195c", 0xe0}, {&(0x7f0000004180)="68d50049776677a3acd5eb13a35b082b13f25ee36f45bc3e8ef39432c597e05e4916937bfc3db4a86346a37cb364273484db879c66835c933501c72edf2a2b3948d8ceb6fb7a3513c85aa5e29229765737f7b13089f74565e36574ddbfc91c919e993f388f57e34b623706a19c12e71fa47087d511a99f1da00de134", 0x7c}, {&(0x7f0000004200)="5110068fcbc13cb253f755f2ab22139b4b121ab7bd73f85ed4137932a724573292b79fb830844802bf80fe69fa9b6ec7c4f013b041a27a795f07027b577539e0b4f423fa801a1e2f9ec07004be63445bb94bc561898fe327b36c019ad642396aa2ac6bc164fa4818d7922507bef3abc1032a8615dc288605770a4097cf4797699c944b8d", 0x84}], 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c00000000000000000000000800", @ANYRES32=0x0, @ANYBLOB="e000000200000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414bb7f0000010000000010000000000000000000000007000000140000000000000000000000010000000900000000000000110000000000000000000000010000000200000000000000140000000000000000000000010000000900000000000000110000000000000000000000010000001b000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="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"], 0x1c8}}, {{0x0, 0x0, &(0x7f0000004940)=[{&(0x7f0000004900)="23db559dea", 0x5}], 0x1, &(0x7f0000004980)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r3, @ANYBLOB="7f00000100000000000000005c000000000000000000000007000000444c7643ac1e010100000002ac141431000000017f00000100000005e0000002fffffe00ac1414bb00000009ac1414bb00000089caa3f00200000004ac1414bb00000000ffffffff00000007000000002c000000000000000000000007000000441c10116401010200000004ac1414aa000003ff0a0101020000040100000000200000000000000000000000070000000001070b63e0000001ac14141c0000001400000000000000000000000200000006000000000000001c000000000000000000000008000000", @ANYBLOB="ac1414bbffffffff000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1e0001ac1e010100000000110000000000000000"], 0x140}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004cc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr=0x64010102}}}], 0x20}}], 0x9, 0x8010) 3m41.975036887s ago: executing program 1 (id=1779): syz_emit_ethernet(0x76, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000002000)=ANY=[@ANYBLOB="1400000010000100000000000a20000000000a010100000000000000c4009cf797e218561900050000000900ce0073797a300000000034000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000031400000011000100"/124], 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000002440)={'nat\x00', 0x0, [0x632, 0x9, 0x7ffe, 0x80007ffd, 0x4]}, &(0x7f00000003c0)=0x54) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'veth1_virt_wifi\x00', {0x2, 0x4e24, @rand_addr=0x64010102}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x44, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r2, &(0x7f00000003c0), &(0x7f0000000580)=@tcp6}, 0x20) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x9, 0x0, r2, 0x7e74db19, '\x00', r3, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x50) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="0492259e6905e36ab83f505a860d8e24", 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r2, &(0x7f0000000680)="835529a0a127c45c8dfc81434d8bc913a1cffdac7b94a3e7b924dda11052391c49437831df9731e56e1689f728aa0e62d86ffa322c9a011740166e751155bb689a6b34b0efc720497b024b14f176882cffd0f2eb0562ce71c632b5077e305280fb78a73ec8e8db18178727e8f2f83c1fc6d184569297e428f84379a2764447f00c9154fe11f7a83c68b8019c63a7f1b5710b13e7a849926ae1f79f67e9", &(0x7f0000000640)=@tcp, 0x2}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000300)=0x9, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(0xffffffffffffffff, r6, 0x0, 0xffffffff004) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r5, &(0x7f0000000080)={@void, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1, {[@ra={0x94, 0x4}]}}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4, 0x100, @val=0x80}}}}}}}}, 0x3e) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) 3m40.96733208s ago: executing program 1 (id=1783): syz_emit_ethernet(0x1012, &(0x7f0000001040)={@broadcast, @multicast, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@generic={0xf7, "917ef951b4ccb8050d2bf85dc49ab6898bc6a2d25852d443f4b4ab1e800668c7a45db4f878bad103c32501ba31f77de749a4800dbe7fac294eb36a6a1941df2bfafb6ecf0cbccc036e0b53910b8906a4889e36c2e6ad89a9fe889d55546bf0a7a98af5358f820acbdbe8ffff04cc649f29da93cdcf2349d0f438f5f516f5057114dd467cbc20a816c993010780c047a406a566bf9079eb8ea2ef9175007956da0874058a1fff572fedd8f86969f05d95dd33bc7654dc9fda70c48420b9d473eb2d347a48477ca6d950bcefa63def604d32db804adfa65f7fd68c66517f8b9e029e9be9aa7abe908093e26074ff2c80ed67824ae7087ea33faf7f0584eac251ce0726926cfbb90f8a51b5b2d7dd26fb3f701df0d859a3e96f5968291e853f6c9179533725ce55ddb387f4c0a9668eef523b092cbe2bd97839b90674202b2553aab64048124439d7b58e487df45794be34578445545b8ab8690d901f63f281826ece292f825eb3e25ac549d8c3366d2715cd6c51e71abf5e90e8c4d272c008e833eab3db1c63cf60b45f517f8168807b681f0473b4964e9ad2e3cad2e3eb6b5aa9fc9115617c446836c2f1340e61c45319aae8a804173c6fafb06767690efa7c95fcfd8112e8ac25a7e0085d394f258467e81a922791a3e3578ac9e438b262b90ff5ebd8a87611c49a9750a794baf4517e09aeed338be37f1d6f3b076bd0345a08c721059226a3a26483f09dd3743a3704e0eb0e2a44bbe8f3ed380770f81aca2e08a34674cea7860b70b89acadc45ea787a156c066c5ff514297ad81c3eeb6580f75000c4b92459c139c27785f8d746dc6b5050cdd5deab974c5ad87db0e10250b351d6fa211490c59405ede4fea80a0d3571fb88d533f6d70f706859c99e34cc738165c9a1ecc221b5e97f04693df031d76bc1999c10f8ae68cabb99c248ac76638dd38070635108dd365bdd6cf20fe2473354fc0f05ed67bf60468879526bfca4a01e378621074a98b0666c36739aa5708fca5036317d19dfd6fd732e559798452f974f4839b9adea8bd164f9f907c0b55baa682262a0678928c6a70e10ce5af20f380c32e2126df668a4715c2eca373c8398596ec57d1228081057a7e72665385b3455a7eb9538afdcdf45605968fc0988ee251a2e265d98d7091a567a48881364bfe6c5fce088f68aeed849bfd8cc02413809435c6409403e4661474aa64d02febc4b86e568fd4cff31b6a3ab21726da32a309d0b83e92ebd2372236a3a84616c96caddb2e77ecbcf1acee8b9f070d59f3f91a21a267c272a0aab29bce7a6721f7e06d373c687f7e6be122d817d04faa9e22f0a28cc5e99fd9a4e5eee61de0c77b5b3aff160b3b197237cf6a1673869f58738f7e4b2ef0e6b2227741ea685584bab2e1f96e6dd6b5f5766f4aabdb69db9e32e9de20c9c78bd6fbdcf53a20451cabd27ad8a996358bd36276c612a79429b134f49a292c3d45ed2b36cd9c3c634bd968006946c5e1b8642607c2c4e0e7fca83c5f88b421f02931491a819695de7e2306537dec8bdae406bc40fa8f9523601974bca441a50c3fdf6bf0da4c89fed07d35face6c0e7f9de11bb9c7f4f8739102801066fd85635546f2ad16dda2a16b417f9d72417f4a1c88700b80de2b499cd73032ad2c710f9a4ec58ba4d39e8c1d564f8b5fcdb5f3e9fb003836f9953f6c2ed54e47e0a13e1d0636ff430d13056d1a303449aee606487e198f669fc964f08ff8ae6a6c8702319f1ed1b2b6ddabacebf2924b90668d98e6f8c6464507ef019e4473f18444ea726f81aafa120214370395391eeebead3d49adcafdf36ea37a6c6cc2d9af258c39f46b079d85ecf1960d39a7150ec2a733bca0827067e3455ff0eccb283ae4c3418f970b514c5943d171accffb2392dabd3f80d8aafda1eb9924a53c7d74552e574e879d4dd02ec626f0eca2edcb110b8686f53edd7db04238561422429f9e9f00a35b9a2c3e487e36d66d0ec9ca88832149ad0833a6ae3b204d93227fd81afcbabe3de7a0196f61859b438000b5bbd9be87d351892193c29fadfa75419051c9d8501f84e29bd9b51b30d74394d7b57121386071b16a23fd48101400ec7841c1e88fa040330ed5e03e6d3dd3dcd24943f3ee8d9a60c9c427afa5f62434a362d92e33999494c0bc29e6f20b8bb069f3b346539259b2ca61bca26a0447c5e4d84e76d22f9cb10bd4361ed5976be8d4da3f0e61c3d51e111c7c5a199ca7e2440fb9696623f26cd8cd77f012e2e62986019ac8c7eed1b73ca624d2146b7af0b4eb1ea1b90c7612db32be977b9f7de603a9e101c9c54dbff57458775bf576cc09f856e8b1bdb2cb19d10c2b90667d79187146f326bb2e5f1d1645267335f5b2fbbaa1c47a542e9ec9751c6e36a1111efbb30ef366ff2867453cdf7b0a47e7c1a5b1ebb91a78adae0320744fd598b8d1501fefbaf419e779db1f6ac7ab414e312a3b1ab823d5874f540b9f3eb7ad96526bc26e5a688b212e5e5872c76e9feaf04de1d382c96a227e0f45d18def3155e1faa74cc42e7bc08e29f01848cc30436c519810c98d52d556d5dfcec6d29e4df6bbeb20bc8051863c8a60d4b6178401c86fd71bde1d43768bebccb9584cabe83848c1a890522c6a4764c7cf164496e46a7e70740a4a62d8f3b950ed38675d7a69bf5218585f73fa79817ebd2af43e692d0b8fe3d57cc162d39ce71a55a0f31a859eb13c1399342e2aae5f210d185b8ea85debb2c69a320c6aa860f7c6c343211945c677e145430f1c40a51e3103631e95642a1a5d7b044d08860b63c067bd35b2e2a14872ae49561b6e5558da5407eb586fef2093068e3615b259564134aa1b08b9ad5c54552c192ded9f2becd1ea1d6e7d587d1c88403b4a8dcfee1e0aee9090ac27905b562af35401c1e58f786482f633c48face3b35e6c67ef1b49100fc52b21c2b94929ff044f8ad317deeae38ac6387dd3a06cd08495126a9f31f3eb50d401a3dafa5bb7a44040036c6f4e70e09b9b21efec39e6b12af39ebec111c0474e6e31c6d79ca425a35575f3473cbf235f41fdd8ea87fc35065db79d82b260174e074a8e459941ef73e0093123f248e55e95481a92378ba106e8164f43fffe8514b9e8a47ab56bf94910cd330c224e43e604647820edcb65da5f0f3c89d08149124f552bd412c8b4327cee82bfc5de794fab4999fa2061146fec7a70f930d17103c9b6e2574e34dd532c077fc9773a6d06c36b71c6b883cad2a309fd528df2f919217c5be40bb0a770875d4ae855f2b0364297d0bad3f3c8f6847611cb183145d306237f73b6cb2d297bd2a6c69a6e30ff563c8aed2eb14e584b1a11df8c7145e698a6c83c2b9dfee2ed85220dc1deebaec5e53694648e25a39621915b90a452db32e7f61e57fa74eb2b0bd77af1553c98e67efb442a720b0b83143cd5e58aa5df4a62ba694c1e28bf67227da506b42887252318ab991fddcb30a9518ddfda813e103de87ccea1d305deb72c93dae46903853df2eeed9e6fa29a0df5aa69aca7f3482cccc7a4e834e7591c2a30c849be5492232a98a5759c4129973433b2d05417f0e75d232e5e8bb2cf1d778954cf79deef8c8d7c995aaf85b423ce431ca843a2cd3b4cb719b7900b87b14b00c59c886d333bc9d6e848b93d8beb2da2959ba592e78b0a8f042a1f274bdd5065d30389b5c236b685f1fcd0ef72d213eb60a566fa9cb290d00937df2be776f6e3b999efb34f05b3508c56d87cb2cb933cec626f97c666308ccf67d237758ba119c0139a969fb294d9c1a666ecca4654f78ab6806e5bafc825433eb185de9af327c96050ee4d2e032739c0b33b2a0654619067983a3b002d74533d502ddead08affec0662c50002a22638fdcc6949d783e541222c7354c058f931331b5189d5532598d0bf9f1110744b3d9fe929ee69edc90ef87c59f2078b3ea94f98c5a6acb267ca83ee9601b7984becf6563d91e617787d9d433b7940732e88293b042f73fe091508e5807456c3a728f81ff0ac44b1b820eaed7b26f1fecafac8b361c0eaae3711edb50dc81753ae0188a0b91ccd681374407536cb48df4badf500ce6f2ab9b15cdac3a660e894953c41a8235e4d974e6a2a3012faaf9cf0123c75fd9fdb3f92faca8b23f97110480885e56ad8746c94b05f690ba0f265ba4fedfe2bf710cef55cba5d69ad68ce6d681870cafe07a7f990f56e985155a2eb528b3a0c04c1426408c065e1f71a491f288e0e64f7008a944519b9914562e721ce86af7d27c08699390ab194630903ff19e1ec4d955733acd0f5c465cbb7a5362ec9955b50c9ba580c976bce8b7cc01c3b8503a25abe8ab010dd64f274898482681d5441b05a23c5be0ed5961ba82f4c148353dce4891998d4943c674d40d1122b766db0b250503554063410adcf7c5524bfda4dd50326dc3d526dc3829b4a3997bdb592919562b40b112f6dfea21175f5a551420a545b83369707965a2c5a300f3df923370e59f017f0fe63cf981e217ca61534af7a05984c53f803d4a26253e9fafaa33fded19ccc4bbb8c77085285875de42b4d35c7d84ccb642993bb6862eb5bd7e8396d4241978c2a5ff4865d6858da5666c6388f098a013ccc4400e63f9c4b05671f089c8ccdee82b5ba92fe01883c5254e3763832013ff06b90e55d37eb323ed5fcc7d3cab2deda9745fd2a4241617b36c197e2c0d28f3a1bd062c2f4f23d63ee73e5be76b672a364f416afbd8035879d18334064e8ea81295773a160802fd5ddb138afb16893334d78c18c0eb114a05c1a9f1a5f2ed05f2618390d25a4bc8481f9886bf05f2ce86f7b1be63730edfa4678a90de0514e4da8ae71d1999e31aa80b6085d708c1b187bed1ed482282f2da668e8c77adb046c2455cd6218e93007d51e5db116860161c11b275163db89b41670a8f246dc428286d55754007a882b545507e623b30f71c5122851a5a3947e3536d1bbad6cc89f240e917770a5ced7f54205ca89d31624363e5548eec582b6dddb8b9c4deb37f923a8204c4eee86684964b16c94ed5fa99dd35f53c54f5cfc3ddda4c164c021772bece8e87dcd7b6d80f704fbea80377032351a81ea8201a25aeefd79038f7004e8c6db387d432fb2ae5e9ecd796f997fe5335b73bb416c7c6a34e4e47fa72df8fe051df7bad74770f025d4f826f69a9eeba3d85649aba85fdf4083387ccec31e5df8ff9e4f55842eaaa09b6ecbee27e56850ddbee51df20d8f09cfa13105c88365bcbe31fff996dfdff6b81e1b810f1419f4d12387d8c47ddcd9443aef69f3c5e35c6661e821911b45acd35dfe580bb08029e6cc4aa6cbcb36a8b08b1dbbbaa6ccf26c5861e29db7b5448fc2d29e6a2c6ebd2cb2f316ba028770479e17ddcc1af8d8a0a832e9bf26f6bcad276998a7c4712cfba5d4abd3b1b67f2b8ab86051893c593bc13f20274436aa1fe658f0ea806cb14a50405723e234b8870d86ecbd04b5321b591e368768c1628b8947f21226bf7bc5ddc0ba9684952596d0cfb85f050fcb90925eed8042793208af975e81c43efc2f5f391c537e31870895cab531b56f4d66cd48870e96d2c4fef9eeee72281274a8bc1e84dc2147dee00057b670513cdcf23e3f15f2cfbec7b9810ac43816fb2748cde21499f3fa7f10174debe0362d5301f7c8435c4576644535991b516240ff439e91d51bd794eeb9b3af4da6b35ef2fa806a7b504b813f05211738d33593ebc6ef80900f43209e0b0a9dd60a8f813c20459b231e8f21e5215e24193e8d3620290484bc9dd6979eaf"}}}, &(0x7f0000000300)={0x0, 0x3, [0x71d, 0x11e, 0x817, 0x831]}) syz_emit_ethernet(0x5a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500004c0000000000069078ac1414bbac1414aa4e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e002000090ffffff7f0200000000000000d50c66fa8369f6e78713122a9c444be69caceb3fbd4ef8047b79a3"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000200)={r0, &(0x7f0000000080)='vlan\x00', 0x80, &(0x7f0000000100)={@align=0x8000000000000000, {0x2, 0x5180, 0x9, 0xe9}}, 0xffffffff, &(0x7f0000000140)={@_ha_fsid}, &(0x7f00000001c0)}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000002c0), 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket(0x2b, 0x80801, 0x1) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000fc0)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x7, 0x772a, 0xffffffffe, 0x1]}, &(0x7f0000000000)=0x78) (async) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000fc0)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x7, 0x772a, 0xffffffffe, 0x1]}, &(0x7f0000000000)=0x78) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x6c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x10}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x100}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xffff078a}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x8048802) 3m40.500412691s ago: executing program 1 (id=1785): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) 3m40.408925495s ago: executing program 1 (id=1786): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20040000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x3c, r8, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) (fail_nth: 4) recvmsg$unix(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/8, 0x8}], 0x1}, 0x10022) sendmsg$key(r1, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}]}, 0x50}, 0x1, 0x7}, 0x20000030) r9 = socket$isdn_base(0x22, 0x3, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x40010, r9, 0x45418000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f0000000680)=""/240, 0x0, 0xf0, 0x1, 0xb}, 0x28) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r10, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000850000001800000085000000230000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000007100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x64}}, 0x0) 3m39.431689924s ago: executing program 1 (id=1790): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001400)="12b5ca8883a72c61be64d1809e4e551c8fcc795bacbc79d1a786c09a1861dfb427e430bee5b00ac73434620f11a914ef7cf7658efc365a26b4", 0x39}], 0x1}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3123e026", @ANYRES16=r3, @ANYBLOB="07002abd700000000800020000000c00018008000700", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c0000140002800600130000000000080014"], 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20006004) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a88035b96648e582003a9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180c005cb87ebddc88e2bf89d116a54ee210000c0000000700000003000000000000130400eda820a71e4664490000000000000000"], 0x0, 0x2b, 0x0, 0x1}, 0x28) 3m24.201129332s ago: executing program 32 (id=1790): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001400)="12b5ca8883a72c61be64d1809e4e551c8fcc795bacbc79d1a786c09a1861dfb427e430bee5b00ac73434620f11a914ef7cf7658efc365a26b4", 0x39}], 0x1}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3123e026", @ANYRES16=r3, @ANYBLOB="07002abd700000000800020000000c00018008000700", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c0000140002800600130000000000080014"], 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20006004) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a88035b96648e582003a9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180c005cb87ebddc88e2bf89d116a54ee210000c0000000700000003000000000000130400eda820a71e4664490000000000000000"], 0x0, 0x2b, 0x0, 0x1}, 0x28) 2m0.765264581s ago: executing program 5 (id=2606): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffffffc}]}}]}, 0x38}}, 0x800) 2m0.600092166s ago: executing program 5 (id=2609): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/time\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x2c, 0x1407, 0x100, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48890}, 0xc4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) ioctl$XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) unshare(0x8000400) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000200)={0x3, "00a96d"}, 0x4) syz_genetlink_get_family_id$ipvs(0x0, r0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac-aes-ce\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmsg$alg(r7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@iv={0x10}], 0x10, 0x48880}, 0x14000012) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd23, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x35a38, 0x4522f}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040044) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000080)=0x400) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x70, 0xb, 0xf905, 0x4, 0x2, 0x10, 0x3, 0x1}}, {0x6, 0x2, [0x10]}}, {{0x1c, 0x1, {0xf, 0x1, 0x9, 0xde, 0x0, 0x0, 0xe, 0x7}}, {0x12, 0x2, [0x1000, 0x8000, 0x9, 0xfffa, 0x9, 0x2, 0x3]}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) socket$packet(0x11, 0x3, 0x300) 1m59.810927959s ago: executing program 5 (id=2615): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002140)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_channels={0x3c, 0x1, 0x4, 0x6dd1, 0x4000212a, 0x40000004, 0x6, 0x2, 0x1}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r4}, 0x4) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000200)=0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010102, 0x4e21, 0x1, 0x4e23, 0x100, 0xa, 0x0, 0x80, 0x3a, r5, r7}, {0x3, 0x6, 0x7, 0x9, 0x7fffffffffffffff, 0x5, 0x2, 0x9}, {0xa51, 0x5, 0x8000000000000001}, 0x1ff, 0x6e6bb4, 0x1, 0x0, 0x1}, {{@in=@loopback, 0x4d6, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3505, 0x2, 0x1, 0x0, 0x8, 0xa52, 0x7}}, 0xe8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x108, 0xe, 0x0, &(0x7f0000002c40)="63eced8e46dc3f13df33c9f7c786", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02"], 0x10}}, 0x40044) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x1c) r10 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r10, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r9, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006114700000000000a6001100000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) splice(r0, 0x0, r8, 0x0, 0x10d00, 0xf) 1m59.340307522s ago: executing program 5 (id=2619): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) (async) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f00000001c0)={0xa, 0x83, 0x5, 0x0, 0x6}) (async) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f00000001c0)={0xa, 0x83, 0x5, 0x0, 0x6}) r1 = socket(0x11, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r2, 0x8955, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000800)="240000001e005f031420654400000000000000000100000001000800080008c01300ff00", 0x24) (async) write(r3, &(0x7f0000000800)="240000001e005f031420654400000000000000000100000001000800080008c01300ff00", 0x24) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gre0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendto$packet(r5, &(0x7f00000001c0)="05", 0x1, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r6, 0x1, 0x85, 0x6, @broadcast}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f00000003c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x1ad2}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x1ad2}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="900100001000130700000000000000000a0101020900000000000000000000002001000000000000000008000000000200003100"/64, @ANYRES8, @ANYRES32=0x0, @ANYBLOB="ac14142800000000000000000000000000000000330000002001000000000000000000000000000203000000000000000100000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000023500000a00040000000000000000000c001c00", @ANYRES32, @ANYRESHEX=0x0], 0x190}}, 0x881) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x0, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x0, 0x0) sendmsg$SMC_PNETID_FLUSH(r9, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="5cd8f6a5d9f800000000000000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250400000005000400020000000900030073797a300000000014000200627269646765300000000000000000001400020076657468315f746f5f626174616476000900010073797a3200000000"], 0x5c}, 0x1, 0x0, 0x0, 0x64000001}, 0xc041) (async) sendmsg$SMC_PNETID_FLUSH(r9, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="5cd8f6a5d9f800000000000000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250400000005000400020000000900030073797a300000000014000200627269646765300000000000000000001400020076657468315f746f5f626174616476000900010073797a3200000000"], 0x5c}, 0x1, 0x0, 0x0, 0x64000001}, 0xc041) 1m58.588665178s ago: executing program 5 (id=2627): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8f, 0x76, 0x0, 0x0, 0x1}, [@call={0x27, 0x0, 0x0, 0x10000000}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 1m58.484543804s ago: executing program 5 (id=2628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8}, @NFTA_HASH_DREG={0x8}, @NFTA_HASH_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002440)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x404089d}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmmsg(r5, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) sendmsg$key(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x2, 0x6, 0x8, 0x0, 0x21, 0x0, 0x70bd26, 0x25dfdbfc, [@sadb_x_sa2={0x2, 0x13, 0x0, 0x0, 0x0, 0x70bd28}, @sadb_key={0x1d, 0x8, 0x6c8, 0x0, "c3abfbefa0d6e1be4da7e40ca6de72be3149eab3e06f3807c4f53a360d5b6a1fc300ca4e31c868a130c9b84cd9b7aadaa99b0c7360c0181097142e588d8d853dea70710a9b5b449e8164954451044d09d6783eb5ce5e670dc7c021c0a12173a2e2a57e070c1629e8770bbdbae4a3601f0410097b6a268fb914900f76a30f6d1c0702adb1be59315167f85d850a659896c29c19e1b990056bfa81b3d934f8b787d97e12d6937101e0dfec73524d95a1774f6cc1e89f30d1e5ab217f5a845e08aef85389fc6f40bc659bbe890fa1f3fc89d99a17244f3ce1bd41"}]}, 0x108}}, 0x4040044) ioctl$sock_inet_SIOCDELRT(r6, 0x890c, &(0x7f0000000600)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e20, @remote}, {0x2, 0x4e23, @private=0xa010102}, 0x80, 0x0, 0x0, 0x0, 0x200, &(0x7f0000000540)='gretap0\x00', 0x101, 0x0, 0x6}) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r3, 0x84, 0x82, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x3d}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1000}, 0x4000000) 1m42.648002604s ago: executing program 33 (id=2628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8}, @NFTA_HASH_DREG={0x8}, @NFTA_HASH_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002440)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x404089d}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmmsg(r5, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) sendmsg$key(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x2, 0x6, 0x8, 0x0, 0x21, 0x0, 0x70bd26, 0x25dfdbfc, [@sadb_x_sa2={0x2, 0x13, 0x0, 0x0, 0x0, 0x70bd28}, @sadb_key={0x1d, 0x8, 0x6c8, 0x0, "c3abfbefa0d6e1be4da7e40ca6de72be3149eab3e06f3807c4f53a360d5b6a1fc300ca4e31c868a130c9b84cd9b7aadaa99b0c7360c0181097142e588d8d853dea70710a9b5b449e8164954451044d09d6783eb5ce5e670dc7c021c0a12173a2e2a57e070c1629e8770bbdbae4a3601f0410097b6a268fb914900f76a30f6d1c0702adb1be59315167f85d850a659896c29c19e1b990056bfa81b3d934f8b787d97e12d6937101e0dfec73524d95a1774f6cc1e89f30d1e5ab217f5a845e08aef85389fc6f40bc659bbe890fa1f3fc89d99a17244f3ce1bd41"}]}, 0x108}}, 0x4040044) ioctl$sock_inet_SIOCDELRT(r6, 0x890c, &(0x7f0000000600)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e20, @remote}, {0x2, 0x4e23, @private=0xa010102}, 0x80, 0x0, 0x0, 0x0, 0x200, &(0x7f0000000540)='gretap0\x00', 0x101, 0x0, 0x6}) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r3, 0x84, 0x82, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x3d}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1000}, 0x4000000) 2.961319664s ago: executing program 2 (id=3726): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2a, 0x25dfdbfe, {0x60, 0x0, 0x0, r4, {0x0, 0xe}, {0xffff, 0xffff}, {0x7, 0xffe1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048011}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="438dc77642449e6e17553493f7aeb57e36375ae9e2b947bee5", 0x19}], 0x1}, 0x0) recvmmsg(r6, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/20, 0x14}, {&(0x7f00000002c0)=""/231, 0xe7}], 0x2}, 0xe}], 0x2, 0x2021, 0x0) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000100)=""/180, &(0x7f0000000200)=0xb4) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xe, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r8, 0x0, 0x0, 0xc880, &(0x7f0000000540)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003380)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x1c, 0x0}}], 0x1, 0x4044c94) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) write$cgroup_subtree(r9, 0x0, 0xd) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000000)={'gre0\x00', r1, 0xf810, 0x20, 0xdbc, 0x101, {{0x8, 0x4, 0x1, 0x6, 0x20, 0x67, 0x0, 0x2, 0x4, 0x0, @private=0xa010100, @remote, {[@noop, @lsrr={0x83, 0xb, 0x3e, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}]}}}}}) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 2.744124442s ago: executing program 6 (id=3731): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000000000030000000003000000030000000000000000000000000000010500000010000000000000000000000a02"], 0x0, 0x4e}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000005c0)="09b80963e32b2c165d695de3784d4c78be955a4e9d", 0x15}, {0x0}, {0x0}], 0x3, &(0x7f0000000c00)}}], 0x1, 0xe882) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x40801) socket$unix(0x1, 0x5, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x208000}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40041) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x13c, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d8198ff, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}, @IFLA_BRPORT_GUARD={0x5, 0x5, 0x1}]}}}, @IFLA_VF_PORTS={0xf0, 0x18, 0x0, 0x1, [{0x9c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "0130a0d8997c33bd57f9b1d674287983"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e00783e24f0e0a79c31d02e1b1f3ea99"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b0fe79880d6be565421e95a4963bfeeb"}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "24a09e0e2d6cd006d0df57f390d76966"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xfc}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "02f2853824f9a44137fc5eb30310472f"}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, '/\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "16432e27c88f0e028a4f2aae31569cb8"}, @IFLA_PORT_PROFILE={0xa, 0x2, ',:*&(\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7e92bcffdc3dec5f298d761fa9e80a41"}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20044010}, 0xc040) 2.592338594s ago: executing program 2 (id=3734): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e24, @private=0xa010100}, {0x300, @local}, 0x6c, {0x2, 0x0, @broadcast}, 'bridge_slave_1\x00'}) 2.526103711s ago: executing program 6 (id=3736): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) (async, rerun: 64) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x5, 0x3, 0x1, 0x3, 0x4, 0x0, 0xd}, 0xc) (rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) unshare(0x64000600) (async) r3 = gettid() r4 = socket(0x10, 0x803, 0x0) r5 = accept4$rose(r4, &(0x7f00000001c0)=@full={0xb, @dev, @netrom, 0x0, [@rose, @netrom, @rose, @remote, @default, @default]}, &(0x7f0000000300)=0x40, 0x80000) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000640)) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x90e}]}}}]}, 0x54}}, 0x20040040) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@loopback, @in6=@local, 0x4e21, 0x5, 0x4e23, 0x1, 0x0, 0x0, 0x80, 0x18}, {0x0, 0x3, 0x5, 0xa400000000000000, 0x8, 0x7d, 0x1, 0x3}, {0x49c, 0x8, 0x80000001, 0x7fff}, 0x7, 0x0, 0x2, 0x0, 0x3, 0x2}, {{@in=@remote, 0x4d2, 0x6c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3506, 0x7, 0x2, 0x3, 0x1, 0x1, 0x22c}}, 0xe8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r8}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r9}, &(0x7f0000000580)=0x2, &(0x7f0000000080)=r8}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r10}, &(0x7f0000000240), &(0x7f0000000280)=r8}, 0x20) (async, rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r2, @ANYBLOB="049c01000750050008001300", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) (rerun: 64) 2.441657459s ago: executing program 2 (id=3738): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x1c, r4, 0x1ffd1684a4a9b69d, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_TYPE={0x5, 0x4, 0x5}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8021}, 0x40080) r5 = socket$inet6(0xa, 0x2, 0x3a) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000080)={@mcast1, r7}, 0x14) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_TYPE={0x5, 0x4, 0x6}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xf1}]}, 0x54}, 0x1, 0x0, 0x0, 0x44011}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map, 0xffffffffffffffff, 0x33, 0x2008}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @typed={0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r8, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x7, 0x7, 0x58, 0x0, 0x5, 0x2, 0x5, {0x0, @in6={{0xa, 0x4e20, 0x59a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x10, 0x2, 0x0, 0xffffffff, 0xb0}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000140)={r9, 0x2e, "ee72d7224023443d1c79ad49dc4475484db81aa1035a562735f91d80bf892c71f90d7de020720aea7d7bce310239"}, &(0x7f00000001c0)=0x36) 2.441032429s ago: executing program 0 (id=3739): r0 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000780)=0xe8) r2 = getgid() r3 = getpid() r4 = getgid() pipe(&(0x7f0000000680)={0xffffffffffffffff}) readv(r5, &(0x7f0000000400)=[{&(0x7f0000003600)=""/4096, 0x1000}], 0x1) r6 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000880)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000020}, 0xc, &(0x7f0000000640)={&(0x7f0000000800)={0x58, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x7}, @void, @void}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x29}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x50}}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}}}, &(0x7f00000008c0)=0xe8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r8, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x14, 0x1, 0x1, [r8]}}], 0x38, 0x40044}}], 0x1, 0x4) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000900)=0x0) r13 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r13, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000012c0)={0x30, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r14}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x30}], 0x1}, 0x0) r15 = getgid() socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) r17 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={0x1, 0xffffffffffffffff}, 0x4) r19 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r19, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r19, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x4300c000}, 0xc, &(0x7f0000000480)=[{&(0x7f00000002c0)={0x1a8, 0x3d, 0x20, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x8, 0x106, 0x0, 0x0, @uid}, @nested={0x18e, 0x123, 0x0, 0x1, [@generic="cc8946be6712aee1e87d580a5d1e77d57d3ce77419306e98cc91958438f4ea644a856213864fd908ba7e919ee3b4b1fe81b1bd8d5eaf47578ff498efe888325429ed540de8e7928bf03e5b04593f3f2705c2fd6e2a7b5b28d68105dbe600c285c8196eb8e0f478e4988b23b2433567da4a3e8cc6a4ba3a2fa228150a0f4395630c186799e26d4343e53d0c1a6ef8b145b724470a970d4bbd07dd53be7c838cfc71e98a62107d20ae2403ced06363bb7edb6e862798288897f926", @nested={0x4, 0x15b}, @generic="8a8736aa99192e4507284e227f9c2b0c01da84dd0b99d7eb70c45bcd061d33b7638ec614377264367e4c8fed842a96a9d19d88af553256f36ceecd2519bf9360f097e83a7644aa190b94287f05678d4b26c3a0fb09bd07e375915f70a8cc58d1ebee7ed95e8cfa360c8e441821dacebf93aa74298d3e409e8fedc0724b174f83410262dbc81f67e6e6f1cbf9f1c5e41d55990ed0f5d3e6e711a8bb053fb0fb6b1f9236ccbd99fe22a2904610c17a010d435afcc05a6b38ba7e949bec8f9d044b5f9f39f88019da7f", @nested={0x4, 0x26}]}]}, 0x1a8}], 0x1, &(0x7f00000009c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0, r1, r2}}}, @cred={{0x1c, 0x1, 0x2, {r3, 0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r15}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r16, r17, r18, r19]}}], 0xd0, 0x4000000}, 0x4040000) r20 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r20, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r20, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002300)=""/4073, 0xfe9}], 0x1}, 0x3}], 0x1, 0x40010100, 0x0) r21 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0xb4013, r21, 0x0) 2.001182269s ago: executing program 2 (id=3745): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) read(r1, &(0x7f00000000c0)=""/87, 0x57) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001800310700000000ffffffff0a0020000000000700050000"], 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.786501101s ago: executing program 3 (id=3747): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) 1.783760252s ago: executing program 4 (id=3748): socket$nl_crypto(0x10, 0x3, 0x15) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) close(0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="b000000010003904000000800000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012800b0001006970366772650000800002800600030080000000080004000300000006000e00020000000800040009000000040012"], 0xb0}, 0x1, 0x0, 0x0, 0x240000d2}, 0x0) 1.725026943s ago: executing program 3 (id=3749): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x3, @dev}, 0x2}}, 0x2e) close(r1) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000780)={0x3, {{0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0xb943}}, 0x0, 0x6, [{{0xa, 0x4e22, 0x5d41, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, {{0xa, 0x4e22, 0x3a42, @mcast2, 0x1}}, {{0xa, 0x4e24, 0x81, @empty, 0x100}}, {{0xa, 0x4e22, 0xb67f, @mcast1, 0x80000001}}, {{0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb}}, {{0xa, 0x4e24, 0xd5b, @remote, 0x9}}]}, 0x390) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e623950c4f67581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4}, 0x48) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000080)) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x20044084) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000000080002400000000014000000020a010800000000060000000000000014000000110001"], 0xa4}}, 0x0) close(r0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="260a0000000061116c0000000000180000000000e50000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 1.573173716s ago: executing program 3 (id=3750): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x4000) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@broadcast, 0x4e22, 0x0, 0x0, 0x48, 0x2, 0x0, 0x0, 0x2b}, {0xfffffffffffffffd, 0x0, 0x6, 0x8, 0x5, 0x2, 0x5}, {0x0, 0xffffffffffff90df, 0x0, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x4d4, 0x6c}, 0x2, @in=@broadcast, 0x3502, 0x4, 0x3, 0x0, 0x3, 0x0, 0x1ffffe}}, 0xe8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000180)) close(r4) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r3, 0xe6905000) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) readv(r1, &(0x7f0000002380)=[{&(0x7f0000002180)=""/117, 0x75}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r5) connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e) 1.500931864s ago: executing program 0 (id=3751): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008850}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000010000000a0000010900010073797a31000000002c0004802800018007009a7f23944dd13445f4c37407044000000010080002400000001105000300010000000900020073797a3200000000140000001100010000000000000000000100000a42cdc3a5aede0ad7e65ce978c920898e24127bc5a2e7d93e83b5ccef"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000002) 1.494538012s ago: executing program 4 (id=3752): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x22}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x30}, 0x1, 0x0, 0x0, 0x20480c1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) 1.333472112s ago: executing program 0 (id=3753): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000060000000000000000000000711003000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014003000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) 1.288836156s ago: executing program 0 (id=3754): socket$nl_generic(0x10, 0x3, 0x10) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f00000016c0)=ANY=[], 0x0, 0x10, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = bpf$ITER_CREATE(0xb, 0x0, 0xc) close(r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00'}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000100)="e6e4cc62f4a7cedc59dae02fcbafe0df1b20a6fc4c3649e4aacaee04d6c85f0c72f1c29909ba5394fa8dd3aec908e12c7c5a5b52af1e883f4ecfa47e16dedb078365733e125c1bff6df4f42883ca49628e18f7f30b9e80fb0500c876a00d6f1ad94365da574033a4930e08652729eabe178bf40c0bbe143806b4a4da7b7e077cc276a42758ace2c845d49f2b2a1983d7f28bf213b34225c4", &(0x7f0000000200)=""/136}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="b000000010003904000000800000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012800b0001006970366772650000800002800600030080000000080004000300000006000e0002000000"], 0xb0}, 0x1, 0x0, 0x0, 0x240000d2}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) listen(r4, 0x8) listen(r4, 0x8dd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xa0, 0x2, 0x2, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x24, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x203}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x61d2, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1, 0x4, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40040) 1.287247741s ago: executing program 4 (id=3755): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f0000000080)={0x5, 0x5, 0x7, @local, 'veth0_to_bond\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000f10000000000000020000018010000202070250000000000202020db1af87f00010000bfa100000000000007010000f8ffffffb702000008000000b703001d0000000085000000ca00000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0xd2, &(0x7f00000009c0)=""/210, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$netlink(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="100000002600000128bd6000fe56cd31"], 0x10}], 0x1, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee00, 0xee01}}}], 0x20, 0x40801}, 0x40) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000002c0)=0xe, 0x4) 1.214682672s ago: executing program 6 (id=3756): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r1) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x8042) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x408b011, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x1, 0x6, 0x3, 0x1805, r3, 0x8001, '\x00', 0x0, r3, 0x1, 0x5, 0x4, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)={0x40, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xa4, 0x0, 0x0, 0x41100, 0x75, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.061300525s ago: executing program 4 (id=3757): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x4, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0xc015) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/234, 0xea}], 0x1, &(0x7f0000000300)=""/86, 0x56}, 0x2040) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x8400, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vxcan0\x00', 0x0}) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000440)=r5) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), r0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r6, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40040) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f00000005c0)={0x56, 0xaf7000, 0x5, 0x5, 0x0, 0x8241}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000b, 0x10, r0, 0x6499d000) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000600)={0x7c, 0xffff, 0xc, 0x4, 0x9}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x101000, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0xa, &(0x7f0000000680)=0x81, 0x4) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000006c0)={0x0, 0x8}, &(0x7f0000000700)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000740)={r8, 0xffff}, 0x8) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000780)=""/25, 0x19}], 0x1, &(0x7f0000000800)=""/132, 0x84}, 0x100) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000900)={'wlan0\x00'}) writev(r2, &(0x7f0000000a40)=[{&(0x7f0000000940)="fd762a614b3e50fff6cd5b446a77b2cb03b220702b8f0bb2533f3599cda8bdeb3a5967d3c575d515e8ddf039c7b1b111c515f70314afc04f3a1aa425447748894fef67088c239dd8e51d2012977b7e404ddb964240aa5b11312131626f376da7952067b89745057a30b9d070f50124cc3d5ca1d3fe45329e98c4d2cabd8584faae3819c4bc3fc3f6d777cd6ec9eda5ce03bd92909c0a6489dd41457a0977b5", 0x9f}, {&(0x7f0000000a00)}], 0x2) r9 = socket$igmp(0x2, 0x3, 0x2) recvmsg(r9, &(0x7f0000003080)={&(0x7f0000000a80)=@xdp, 0x80, &(0x7f0000002f40)=[{&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/244, 0xf4}, {&(0x7f0000001c00)=""/29, 0x1d}, {&(0x7f0000001c40)=""/40, 0x28}, {&(0x7f0000001c80)=""/9, 0x9}, {&(0x7f0000001cc0)=""/144, 0x90}, {&(0x7f0000001d80)=""/129, 0x81}, {&(0x7f0000001e40)=""/224, 0xe0}, {&(0x7f0000001f40)=""/4096, 0x1000}], 0x9, &(0x7f0000003000)=""/114, 0x72}, 0x2000) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003100), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003400)={&(0x7f0000003140)={0x2b4, r10, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xf8, 0x2, 0x0, 0x1, [{0x4}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xb0, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xf4, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x40001}, 0x20000800) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000003580)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003540)={&(0x7f00000034c0)={0x60, r6, 0x20, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x31}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003600), r3) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f00000037c0)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003780)={&(0x7f0000003640)={0x108, r11, 0xa00, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xcc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x59c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa2}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffe00}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x49b}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003900)={@fallback=r3, 0x0, 0x1, 0x101, &(0x7f0000003800)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000003840)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000003880)=[0x0], &(0x7f00000038c0)=[0x0]}, 0x40) 1.060538854s ago: executing program 6 (id=3758): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x58081, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x1e1982, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) 1.059785184s ago: executing program 2 (id=3759): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000180)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) r2 = epoll_create1(0x80000) r3 = syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r5, 0x89f0, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r4, 0x0, 0x30000800) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231e0000400012800e0001006970366772657461700000002c0002801400060000000000000000000000ffffac1414bb14000700ff"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r2, 0xc0285840, &(0x7f00000000c0)={0xfffffffffffffff8, 0x1, 0xa6, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)=[{0x12, 0x101, 0x5}, {0xffffffff, 0x101, 0x1}]}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000180)) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) (async) epoll_create1(0x80000) (async) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) (async) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$sock_netdev_private(r5, 0x89f0, 0x0) (async) sendmsg$ETHTOOL_MSG_WOL_GET(r4, 0x0, 0x30000800) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231e0000400012800e0001006970366772657461700000002c0002801400060000000000000000000000ffffac1414bb14000700ff"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$XFS_IOC_SCRUBV_METADATA(r2, 0xc0285840, &(0x7f00000000c0)={0xfffffffffffffff8, 0x1, 0xa6, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)=[{0x12, 0x101, 0x5}, {0xffffffff, 0x101, 0x1}]}) (async) 922.2712ms ago: executing program 6 (id=3760): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x6, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f00000001c0)=[0x401], 0x0, 0x2000000026fe, 0x1, 0x1}}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, 0x0, &(0x7f00000005c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$inet6(0xa, 0x400000000001, 0x100) bind$inet6(r11, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r11, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r10, r9}, 0xc) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000240)='=', 0x1}], 0x1, 0x0) recvmmsg(r8, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) sendmsg$kcm(r5, &(0x7f0000002bc0)={&(0x7f0000002500)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x1, 0x3}}, 0x80, 0x0, 0x0, 0x0, 0x3d8}, 0xc801) setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000016c0)=@bpf_lsm={0x1d, 0x1f, &(0x7f00000014c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffff436, 0x0, 0x0, 0x0, 0xfffff801}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@alu={0x4, 0x1, 0xa, 0xa, 0xf, 0x20}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x0, 0x4, 0x1, 0x6, 0x0, 0x8}, @map_fd={0x18, 0x7, 0x1, 0x0, r5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_fd={0x18, 0x4, 0x1, 0x0, r3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000015c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x25, '\x00', r1, 0x1b, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x4, 0x7, 0x5, 0x4}, 0x10, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000001640)=[r3, r6], &(0x7f0000001680)=[{0x4, 0x4, 0x4, 0x6}, {0x5, 0x4, 0x7, 0x7}], 0x10, 0x7f}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001780)={r12, r5}, 0xc) splice(r5, 0x0, r7, 0x0, 0x4ffe0, 0x0) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e23, @local}, 0x2, 0x2, 0x2, 0x2}}, 0x26) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f00000017c0), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}]}}]}, 0x44}}, 0x4000010) 885.320884ms ago: executing program 2 (id=3761): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(rfc4106(rfc4309(morus640-sse2)))\x00'}, 0x58) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40001800000900020073797a32000000000900010073797a3000000000080005400000001d0800034000000007540000000c0a01020000000000000000010000020900020073797a320000000028000380240000800400018008000340000000011400050000000100696e6e6572000000040002800900010073797a30"], 0xe0}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="d80000001b00010000000000fcffffff7f000001000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001030000000000000000000000000c00080008"], 0xd8}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r8, 0x1ff}, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0xe, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', r12}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000003000000050010000b00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c53ffa889e48ef050befd566fa438d13d6da7c52405e5400769900210e56a6325aff3c6218a78726a298599c44718e59aa83d995c80d7a79b010e00192276b7c511a11e62d829485df038e3258e9c921ea1871b9c7d06466f7c5bba41779ff10703baa670db0a68c7b207629"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r13, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)) 760.733189ms ago: executing program 6 (id=3762): r0 = socket$igmp(0x2, 0x3, 0x2) clock_gettime(0xfffffffffffffff1, &(0x7f0000000040)) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x4}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x2, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x6}, 0x3c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r2, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x44, r5, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40080000}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)={0x20, r2, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x80) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x0, 0x10, 0x0, 0x4, 0x43, @mcast2, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x40, 0x0, 0x0, 0x6}}) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0xa, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0xb, 0xef, [@multicast1=0xe000000d, @multicast1]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0x148, 0x10, 0x1, 0x8000000, 0x0, {{@in=@private=0xa010101, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {}, {}, {0x10, 0xd29, 0xfffff9b0}, 0x0, 0x0, 0xa, 0x1}, [@replay_val={0x10, 0xa, {0x70bd2b, 0x70bd25, 0x6}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x148}}, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r10, 0xc0385868, &(0x7f00000002c0)={r4, &(0x7f00000001c0)='ip6tnl0\x00', 0x2000, &(0x7f0000000200)={@align=0x1, {0x0, 0xffff, 0x9, 0x8}}, 0x6, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x3}) ioctl$SIOCRSSL2CALL(r11, 0x89e2, &(0x7f0000000380)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) openat$cgroup_ro(r10, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x0, 0x0) 694.424831ms ago: executing program 3 (id=3763): socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8c5}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)={0x3c, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc8d5}, 0x800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x80, r3, 0x4, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x400c000}, 0x5c3b4ccbd051e336) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000280)={0x5d, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e21, @multicast1}}}, 0x108) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x116, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x3a, 0x4, 0x0, 0x0, 0x108, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@ra={0x94, 0x4}, @rr={0x7, 0x23, 0xb3, [@local, @broadcast, @private=0xa010101, @loopback, @multicast1, @empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x4c, 0x10, 0x3, 0x1, [{@rand_addr=0x64010101, 0xed}, {@loopback, 0x3ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7ff}, {@rand_addr=0x64010101, 0x2}, {@multicast1, 0x1}, {@remote, 0x4}, {@loopback, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x6}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x5a, 0x3, [{0x5, 0xd, "6bc3580429dd82175e9060"}, {0x1, 0x9, "5ef88f0702cd3e"}, {0x0, 0xa, "a6d654770d4c6c79"}, {0x6, 0x10, "e82f0a5daa7fcd9fdd2a705a444a"}, {0x6, 0xc, "a34b74b1599413e9f683"}, {0x0, 0x3, '3'}, {0x0, 0x6, "5df732a7"}, {0x2, 0x8, "150b10771333"}, {0x0, 0x7, "6544d45309"}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x5, 0x2}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x34, 0x0, 0x4000, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0xfffffffe}]}}}}}}}, 0x0) 403.9763ms ago: executing program 0 (id=3764): syz_emit_ethernet(0x7a, &(0x7f0000000200)=ANY=[@ANYRES16], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r0, 0xe8, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffffffffe6b, 0x0, 0x0, 0xfffffd3a, 0x10, 0x0, 0x0, 0x0}}, 0x7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10800, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000005c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r6, 0x0, 0x0, 0x4}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001800010100000000000000000a000000000000000000000008001f"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r8 = socket$inet6(0xa, 0x4, 0x3) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[{0xe, 0x8, 0x8, 0xfffff001}, {0x6, 0x1, 0x3, 0x401}, {0xfffe, 0x6, 0x6, 0xcd}, {0x6, 0x40, 0x6}, {0x100, 0xff, 0x1, 0xf}, {0x1, 0x14, 0x4, 0x9}]}) 250.611673ms ago: executing program 3 (id=3765): syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/ipc\x00') ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00') mkdirat$cgroup(r1, &(0x7f0000000000)='syz0\x00', 0x1ff) 121.193358ms ago: executing program 4 (id=3766): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="040000000000000008003f006563060008001b"], 0x30}}, 0x40020) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="2400000001031f001cfffd946fa2830020200a800900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 120.822417ms ago: executing program 3 (id=3767): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a310000000014000380080001"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) clock_gettime(0xfffffffb, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'tunl0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="33031600ffff140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632f470", 0x27, 0x40008c0, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x62}, 0x14) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 13.023115ms ago: executing program 4 (id=3768): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x5c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x44, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xd}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xf87}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x29}]}}]}, 0x5c}}, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={&(0x7f0000000040), 0x0, 0x0, 0x0, 0x2000}, 0x38) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 0s ago: executing program 0 (id=3769): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="7a0a00ff000000007110bd000000000095d6"], &(0x7f0000000480)='syzkaller\x00'}, 0x3f) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x4e21, @loopback}, {0x20000010304}, 0x4, {0x2, 0x4e22, @rand_addr=0x64010101}}) kernel console output (not intermixed with test programs): tlink: 348 bytes leftover after parsing attributes in process `syz.5.2503'. [ 472.207735][T16006] bond1 (unregistering): Released all slaves [ 472.300961][T16010] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2505'. [ 472.490326][T16023] bond3: option mode: unable to set because the bond device has slaves [ 472.621490][T16032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2509'. [ 472.643784][T16023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2507'. [ 472.825325][T16041] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2510'. [ 473.558362][T16060] lo speed is unknown, defaulting to 1000 [ 473.870203][T16075] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2512'. [ 474.740243][T15998] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 474.994267][T16115] netlink: 'syz.4.2515': attribute type 1 has an invalid length. [ 475.002084][T16115] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2515'. [ 475.020404][T16112] netlink: 'syz.0.2514': attribute type 10 has an invalid length. [ 475.157360][T16123] netlink: 'syz.2.2516': attribute type 1 has an invalid length. [ 475.201309][T16122] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2517'. [ 475.405147][T16123] 8021q: adding VLAN 0 to HW filter on device bond7 [ 475.458178][T16120] bond7: (slave bridge0): making interface the new active one [ 475.494517][T16120] bond7: (slave bridge0): Enslaving as an active interface with an up link [ 475.726572][T16142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2521'. [ 475.768480][T16142] gtp2: entered promiscuous mode [ 475.776864][T16142] gtp2: entered allmulticast mode [ 475.824705][T16144] lo: Caught tx_queue_len zero misconfig [ 475.865296][T16144] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2522'. [ 475.890477][T16144] ieee802154 phy0 wpan0: encryption failed: -90 [ 475.952234][T16150] sctp: [Deprecated]: syz.2.2524 (pid 16150) Use of int in maxseg socket option. [ 475.952234][T16150] Use struct sctp_assoc_value instead [ 476.013069][T16139] bond7: (slave bond_slave_1): Device is not our slave [ 476.020598][T16139] bond7: option active_slave: invalid value (bond_slave_1) [ 476.032405][T16139] bond7 (unregistering): Released all slaves [ 476.253056][T16168] openvswitch: netlink: Multiple metadata blocks provided [ 476.264023][T16150] lo speed is unknown, defaulting to 1000 [ 476.725334][T16191] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 476.879482][T16200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2534'. [ 476.908919][T16200] gtp3: entered promiscuous mode [ 476.914219][T16200] gtp3: entered allmulticast mode [ 477.896354][T16221] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input15 [ 479.433380][T16174] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 479.853860][T16237] openvswitch: netlink: Message has 572 unknown bytes. [ 479.861461][T16237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.078660][T16251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.279406][T16258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2552'. [ 480.346834][T16261] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2551'. [ 480.397918][T16264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.467677][T16264] netlink: 'syz.3.2554': attribute type 1 has an invalid length. [ 480.488932][T16264] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2554'. [ 480.701113][T16273] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2558'. [ 480.740000][T16275] m1Ie5n: entered promiscuous mode [ 481.110919][T16297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2564'. [ 481.128005][T16278] batadv0: left promiscuous mode [ 481.135091][T16278] veth1: left allmulticast mode [ 481.155339][T16278] macsec2: left allmulticast mode [ 481.163033][T16278] ip6tnl1: left promiscuous mode [ 481.181705][T16278] ip6tnl1: left allmulticast mode [ 481.197344][T16278] xfrm1: left allmulticast mode [ 481.209817][T16278] ip6gre1: left promiscuous mode [ 481.295433][T16278] ip6gre2: left promiscuous mode [ 481.335154][T16278] erspan1: left promiscuous mode [ 481.340172][T16278] erspan1: left allmulticast mode [ 481.394033][T16278] bond3: left promiscuous mode [ 481.468235][T16278] gtp1: left promiscuous mode [ 481.486869][T16278] gtp1: left allmulticast mode [ 481.502251][T16278] ip6tnl6: left promiscuous mode [ 481.513722][T16278] ip6tnl6: left allmulticast mode [ 481.523349][T16278] hsr0: left allmulticast mode [ 481.528178][T16278] hsr_slave_0: left allmulticast mode [ 481.534171][T16278] hsr_slave_1: left allmulticast mode [ 481.564307][T16278] macvlan0: left allmulticast mode [ 481.670563][T16278] gtp2: left promiscuous mode [ 481.677389][T16278] gtp2: left allmulticast mode [ 481.692611][T16299] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 481.699036][T16299] syzkaller1: linktype set to 825 [ 481.725533][T16298] bridge0: entered allmulticast mode [ 481.735341][T16305] veth0_to_bridge: entered promiscuous mode [ 481.749532][T15392] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.768037][T15392] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.795839][T15397] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.807702][T16285] veth0_to_bridge: left promiscuous mode [ 481.823827][T15397] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.852847][T16302] lo speed is unknown, defaulting to 1000 [ 482.024489][T16324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2567'. [ 482.042735][T16325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 482.090080][ T10] lo speed is unknown, defaulting to 1000 [ 482.096329][ T10] sqz0: Port: 1 Link DOWN [ 482.100810][ T10] lo speed is unknown, defaulting to 1000 [ 482.107772][T16323] netlink: 'syz.2.2568': attribute type 1 has an invalid length. [ 482.133741][T16323] netlink: 194 bytes leftover after parsing attributes in process `syz.2.2568'. [ 482.144760][T16323] NCSI netlink: No device for ifindex 0 [ 482.364134][T16343] netlink: 'syz.4.2570': attribute type 2 has an invalid length. [ 484.637828][T16396] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2583'. [ 484.683479][T16406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2586'. [ 484.853935][T16413] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2586'. [ 484.869980][T16410] netlink: 'syz.3.2587': attribute type 1 has an invalid length. [ 485.675945][T16429] lo speed is unknown, defaulting to 1000 [ 485.697524][T16429] lo speed is unknown, defaulting to 1000 [ 485.715758][T16429] lo speed is unknown, defaulting to 1000 [ 485.732824][ T30] audit: type=1804 audit(1772328791.923:7): pid=16430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2591" name="/newroot/534/memory.events" dev="tmpfs" ino=2747 res=1 errno=0 [ 485.786903][ T30] audit: type=1800 audit(1772328791.923:8): pid=16430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2591" name="memory.events" dev="tmpfs" ino=2747 res=0 errno=0 [ 485.857893][T16429] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 485.949460][T16429] lo speed is unknown, defaulting to 1000 [ 485.979495][T16429] lo speed is unknown, defaulting to 1000 [ 486.035268][T16429] lo speed is unknown, defaulting to 1000 [ 486.060237][T16429] lo speed is unknown, defaulting to 1000 [ 486.130828][T16429] lo speed is unknown, defaulting to 1000 [ 486.138816][T16429] lo speed is unknown, defaulting to 1000 [ 486.246675][T16445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.437849][T16451] ip6tnl0: Caught tx_queue_len zero misconfig [ 486.554731][T16455] syzkaller1: entered promiscuous mode [ 486.584871][T16455] syzkaller1: entered allmulticast mode [ 487.277706][T16486] syzkaller0: entered promiscuous mode [ 487.283446][T16486] syzkaller0: entered allmulticast mode [ 487.329258][T16490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.401904][T16494] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 487.505034][T16494] bond1 (unregistering): Released all slaves [ 487.640448][T16504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2611'. [ 487.686016][T16504] macvlan4: entered allmulticast mode [ 487.701750][T16504] hsr0: entered allmulticast mode [ 487.726375][T16504] hsr_slave_0: entered allmulticast mode [ 487.752714][T16504] hsr_slave_1: entered allmulticast mode [ 488.046791][T16519] netlink: 'syz.5.2615': attribute type 30 has an invalid length. [ 488.591824][T16541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2620'. [ 488.617552][T16538] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2619'. [ 488.666952][T16541] 8021q: adding VLAN 0 to HW filter on device bond8 [ 488.675741][T16542] syz_tun: left promiscuous mode [ 488.690667][T16551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.711720][T16542] bond4: left promiscuous mode [ 488.719702][T16542] bond5: left promiscuous mode [ 488.725040][T16542] vlan2: left promiscuous mode [ 488.733613][T16542] geneve1: left promiscuous mode [ 488.738887][T16542] vlan2: left allmulticast mode [ 488.753508][T16542] geneve1: left allmulticast mode [ 488.760522][T16542] ip6erspan0: left allmulticast mode [ 488.781058][T16542] team1: left promiscuous mode [ 488.796596][T16542] team1: left allmulticast mode [ 488.811223][T16542] macvtap1: left promiscuous mode [ 488.821140][T16542] macvtap1: left allmulticast mode [ 488.832532][T16555] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2622'. [ 488.853558][T16542] batadv1: left promiscuous mode [ 488.863113][T16542] batadv1: left allmulticast mode [ 488.873624][T16542] vlan3: left promiscuous mode [ 488.885030][T16542] bridge0: left promiscuous mode [ 488.896665][T16542] bond7: left promiscuous mode [ 488.901644][T16542] bond8: left allmulticast mode [ 488.911507][T16542] bridge9: left promiscuous mode [ 488.917645][T16542] bridge9: left allmulticast mode [ 488.935449][T16542] ip6gre3: left promiscuous mode [ 488.940496][T16542] ip6gre3: left allmulticast mode [ 488.955011][T16542] vxcan0: left allmulticast mode [ 488.960283][T16542] vxcan1: left allmulticast mode [ 488.968610][T16542] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 488.990089][T15397] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.999949][T15397] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.017749][T15397] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.063731][T15397] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.246636][T16573] netlink: 'syz.4.2624': attribute type 1 has an invalid length. [ 489.263315][T16573] netlink: 'syz.4.2624': attribute type 2 has an invalid length. [ 489.476815][T16583] lo speed is unknown, defaulting to 1000 [ 489.504538][T16593] tipc: Enabling of bearer rejected, failed to enable media [ 489.577893][T16596] netlink: 'syz.4.2629': attribute type 4 has an invalid length. [ 489.884059][ T30] audit: type=1800 audit(1772328796.083:9): pid=16608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2636" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2738 res=0 errno=0 [ 490.188443][T16583] lo speed is unknown, defaulting to 1000 [ 490.274329][T16620] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2639'. [ 490.623894][T16635] : entered promiscuous mode [ 490.635141][ T30] audit: type=1800 audit(1772328796.833:10): pid=16635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2642" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2781 res=0 errno=0 [ 490.727597][T16638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2643'. [ 490.737764][T16637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2643'. [ 490.747511][T16637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2643'. [ 490.756889][T16638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2643'. [ 490.795764][T16637] geneve3: entered promiscuous mode [ 490.803638][T16637] geneve3: entered allmulticast mode [ 490.821138][T15402] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.858418][T15402] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.888681][T15402] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.913267][T15402] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.247393][T16661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2651'. [ 491.329158][T16661] 8021q: adding VLAN 0 to HW filter on device bond9 [ 491.352337][T16665] netlink: 'syz.0.2653': attribute type 10 has an invalid length. [ 491.419437][T16670] No such timeout policy "syz0" [ 491.673718][T16687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.728636][T16690] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 491.805585][T16690] bond10: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 491.833069][T16690] bond10 (unregistering): Released all slaves [ 491.927658][T16698] netlink: 'syz.2.2661': attribute type 18 has an invalid length. [ 492.192193][T16709] lo speed is unknown, defaulting to 1000 [ 492.808261][T16731] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2668'. [ 492.822645][T16731] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2668'. [ 493.163344][T16738] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2669'. [ 493.197429][T16739] netlink: 'syz.3.2670': attribute type 21 has an invalid length. [ 493.231888][T16709] lo speed is unknown, defaulting to 1000 [ 493.290217][T16739] netlink: 'syz.3.2670': attribute type 21 has an invalid length. [ 493.318736][T16739] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2670'. [ 493.508857][T16748] netlink: 'syz.3.2672': attribute type 1 has an invalid length. [ 493.526281][T16748] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2672'. [ 493.543270][T16748] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2672'. [ 493.552223][T16748] netlink: 'syz.3.2672': attribute type 1 has an invalid length. [ 493.561766][T16748] netlink: 'syz.3.2672': attribute type 8 has an invalid length. [ 493.576353][T16748] netlink: 606 bytes leftover after parsing attributes in process `syz.3.2672'. [ 493.621443][T16748] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 493.776341][T16753] syzkaller0: entered promiscuous mode [ 493.784485][T16753] syzkaller0: entered allmulticast mode [ 493.814414][T16765] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 494.134875][T16773] lo speed is unknown, defaulting to 1000 [ 494.149675][T16775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2678'. [ 494.437629][T16786] SET target dimension over the limit! [ 494.666253][T16803] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 494.861833][T16809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2686'. [ 494.996433][T16773] lo speed is unknown, defaulting to 1000 [ 495.100647][T16819] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2689'. [ 495.802212][T16841] bond10: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 495.824297][T16844] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input16 [ 496.006712][T16841] bond10 (unregistering): Released all slaves [ 496.398304][T16869] netlink: 'syz.4.2700': attribute type 96 has an invalid length. [ 497.297228][T16920] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 497.407368][T16927] netlink: 'syz.3.2720': attribute type 6 has an invalid length. [ 497.803727][T15359] wlan0: Trigger new scan to find an IBSS to join [ 497.840407][T16952] __nla_validate_parse: 7 callbacks suppressed [ 497.840427][T16952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2731'. [ 497.859198][T16954] geneve5: entered promiscuous mode [ 497.866129][T15403] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 497.874920][T15403] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 497.896815][T15403] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 497.915507][T15403] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 497.940263][T16958] netlink: 'syz.3.2734': attribute type 29 has an invalid length. [ 497.949831][T16961] netlink: 'syz.3.2734': attribute type 29 has an invalid length. [ 497.960660][T16958] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2734'. [ 498.787593][T17000] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2747'. [ 500.566001][ T24] IPVS: starting estimator thread 0... [ 500.674301][T17056] IPVS: using max 29 ests per chain, 69600 per kthread [ 500.690954][T17061] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.772363][T17061] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.849347][T17061] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.860367][T15403] wlan0: Trigger new scan to find an IBSS to join [ 500.911078][T17061] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.013013][T15403] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.046595][T15403] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.082664][T15403] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.121996][T15403] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.225780][T17079] netlink: 'syz.0.2775': attribute type 1 has an invalid length. [ 501.319705][T17085] gretap1: entered allmulticast mode [ 501.358181][T17085] bond10: (slave gretap1): making interface the new active one [ 501.367800][T17085] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 501.422367][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 501.443811][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.474969][T17092] netlink: 'syz.2.2781': attribute type 4 has an invalid length. [ 501.487555][T17093] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2780'. [ 501.501436][T17092] netlink: 'syz.2.2781': attribute type 4 has an invalid length. [ 501.778204][T17104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2787'. [ 501.875660][ T5830] block nbd0: Receive control failed (result -1) [ 501.927528][ T5831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 501.939425][ T5831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 501.963919][ T5831] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 501.993587][ T5831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 502.007633][ T5831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 502.108420][T17111] lo speed is unknown, defaulting to 1000 [ 502.498781][ T5821] team0: Port device syz_tun removed [ 502.625980][T15407] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.645268][T15407] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.673231][T15407] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 502.842754][T15407] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.874879][T15407] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.893591][T15407] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 502.947666][T17146] netlink: 'syz.2.2800': attribute type 1 has an invalid length. [ 502.963238][T17146] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2800'. [ 503.087762][T15407] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.118279][T15407] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.139071][T15407] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 503.225190][T15407] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.263699][T15407] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.284696][T15407] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 503.339450][T17111] lo speed is unknown, defaulting to 1000 [ 503.511334][T17155] vlan4: entered promiscuous mode [ 503.517311][T17155] syz_tun: entered promiscuous mode [ 503.591878][T17159] team_slave_1: Caught tx_queue_len zero misconfig [ 503.609587][T15407] vlan4: left promiscuous mode [ 503.621973][T15407] bridge0: port 3(vlan4) entered disabled state [ 503.652200][T15407] bridge_slave_1: left allmulticast mode [ 503.675638][T15407] bridge_slave_1: left promiscuous mode [ 503.681453][T15407] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.697913][T15407] bridge_slave_0: left promiscuous mode [ 503.705673][T15407] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.770559][T15407] veth0_to_bond: left allmulticast mode [ 503.776838][T15407] veth0_to_bond: left promiscuous mode [ 503.782623][T15407] bridge9: port 1(veth0_to_bond) entered disabled state [ 503.804615][T15392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.043819][ T5830] Bluetooth: hci6: command tx timeout [ 504.052100][T17174] netlink: 'syz.3.2810': attribute type 4 has an invalid length. [ 504.109937][T17175] netlink: 'syz.3.2810': attribute type 4 has an invalid length. [ 504.290746][T15407] team0: Port device geneve0 removed [ 504.598193][T15407] bond5 (unregistering): (slave bridge7): Releasing backup interface [ 504.609875][T15407] bridge7 (unregistering): left promiscuous mode [ 504.658578][T15407] bond6 (unregistering): (slave bridge8): Releasing active interface [ 504.824049][T15407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.834980][T15407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.844625][T15407] bond0 (unregistering): Released all slaves [ 504.858395][T15407] bond1 (unregistering): Released all slaves [ 504.874089][T15407] bond2 (unregistering): Released all slaves [ 504.889721][T15407] bond3 (unregistering): (slave veth7): Releasing active interface [ 504.901815][T15407] bond3 (unregistering): (slave veth9): Releasing active interface [ 504.913715][T15407] bond3 (unregistering): Released all slaves [ 504.928342][T15407] bond4 (unregistering): Released all slaves [ 504.943690][T15407] bond5 (unregistering): Released all slaves [ 504.959361][T15407] bond6 (unregistering): Released all slaves [ 504.981780][T15407] bond7 (unregistering): Released all slaves [ 505.287149][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 505.305156][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 505.314022][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 505.326319][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 505.334124][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 505.369716][T17187] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input17 [ 505.411134][T15407] m1Ie5: left promiscuous mode [ 505.444753][T17195] FAULT_INJECTION: forcing a failure. [ 505.444753][T17195] name failslab, interval 1, probability 0, space 0, times 0 [ 505.495806][T17195] CPU: 0 UID: 0 PID: 17195 Comm: syz.2.2816 Not tainted syzkaller #0 PREEMPT(full) [ 505.495834][T17195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 505.495845][T17195] Call Trace: [ 505.495852][T17195] [ 505.495860][T17195] dump_stack_lvl+0xe8/0x150 [ 505.495891][T17195] should_fail_ex+0x412/0x560 [ 505.495916][T17195] should_failslab+0xa8/0x100 [ 505.495939][T17195] __kmalloc_noprof+0xe8/0x760 [ 505.495957][T17195] ? tomoyo_encode+0x28b/0x550 [ 505.495984][T17195] tomoyo_encode+0x28b/0x550 [ 505.496015][T17195] tomoyo_realpath_from_path+0x58d/0x5d0 [ 505.496047][T17195] ? tomoyo_path_number_perm+0x219/0x630 [ 505.496065][T17195] tomoyo_path_number_perm+0x246/0x630 [ 505.496085][T17195] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 505.496106][T17195] ? __lock_acquire+0x6b5/0x2cf0 [ 505.496139][T17195] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 505.496186][T17195] ? __fget_files+0x2a/0x420 [ 505.496216][T17195] ? __fget_files+0x2a/0x420 [ 505.496240][T17195] ? __fget_files+0x3a0/0x420 [ 505.496265][T17195] ? __fget_files+0x2a/0x420 [ 505.496302][T17195] security_file_ioctl+0xc3/0x2a0 [ 505.496335][T17195] __se_sys_ioctl+0x47/0x170 [ 505.496358][T17195] do_syscall_64+0x14d/0xf80 [ 505.496384][T17195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.496405][T17195] ? clear_bhb_loop+0x40/0x90 [ 505.496431][T17195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.496452][T17195] RIP: 0033:0x7f04e439c799 [ 505.496470][T17195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.496487][T17195] RSP: 002b:00007f04e52ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 505.496508][T17195] RAX: ffffffffffffffda RBX: 00007f04e4616090 RCX: 00007f04e439c799 [ 505.496523][T17195] RDX: 0000200000000000 RSI: 00000000400448c9 RDI: 0000000000000008 [ 505.496537][T17195] RBP: 00007f04e52ff090 R08: 0000000000000000 R09: 0000000000000000 [ 505.496550][T17195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.496562][T17195] R13: 00007f04e4616128 R14: 00007f04e4616090 R15: 00007ffff83c2f28 [ 505.496596][T17195] [ 505.496766][T17195] ERROR: Out of memory at tomoyo_realpath_from_path. [ 505.617270][T17191] lo speed is unknown, defaulting to 1000 [ 505.669954][T17111] chnl_net:caif_netlink_parms(): no params data found [ 505.753067][T17202] openvswitch: netlink: Invalid VLAN frame [ 505.795409][T17206] netlink: 'syz.3.2818': attribute type 4 has an invalid length. [ 505.846277][T17201] netlink: 'syz.3.2818': attribute type 4 has an invalid length. [ 505.882104][T15407] tipc: Disabling bearer [ 505.903042][T15407] tipc: Left network mode [ 505.948000][T15407] IPVS: stopping backup sync thread 9590 ... [ 505.996570][T17209] ip6tnl0: mtu less than device minimum [ 506.074975][T17218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2822'. [ 506.123550][ T5830] Bluetooth: hci6: command tx timeout [ 506.198661][T17111] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.236543][T17111] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.270875][T17111] bridge_slave_0: entered allmulticast mode [ 506.305320][T17111] bridge_slave_0: entered promiscuous mode [ 506.338875][T17111] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.372400][T17111] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.394129][T17111] bridge_slave_1: entered allmulticast mode [ 506.402083][T17111] bridge_slave_1: entered promiscuous mode [ 506.526078][T17237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2827'. [ 506.546484][T17111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.590779][T17111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.760572][T17111] team0: Port device team_slave_0 added [ 506.790666][T17243] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input18 [ 506.807302][T17243] FAULT_INJECTION: forcing a failure. [ 506.807302][T17243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.821002][T17243] CPU: 0 UID: 0 PID: 17243 Comm: syz.2.2829 Not tainted syzkaller #0 PREEMPT(full) [ 506.821031][T17243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 506.821045][T17243] Call Trace: [ 506.821054][T17243] [ 506.821063][T17243] dump_stack_lvl+0xe8/0x150 [ 506.821107][T17243] should_fail_ex+0x412/0x560 [ 506.821139][T17243] _copy_from_user+0x2d/0xb0 [ 506.821171][T17243] hidp_sock_ioctl+0x244/0x650 [ 506.821324][T17243] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 506.821392][T17243] ? do_vfs_ioctl+0x1166/0x1530 [ 506.821431][T17243] sock_do_ioctl+0x101/0x320 [ 506.821459][T17243] ? __pfx_sock_do_ioctl+0x10/0x10 [ 506.821480][T17243] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 506.821529][T17243] sock_ioctl+0x5c6/0x7f0 [ 506.821554][T17243] ? __pfx_sock_ioctl+0x10/0x10 [ 506.821577][T17243] ? __fget_files+0x2a/0x420 [ 506.821606][T17243] ? __fget_files+0x3a0/0x420 [ 506.821634][T17243] ? __fget_files+0x2a/0x420 [ 506.821667][T17243] ? bpf_lsm_file_ioctl+0x9/0x20 [ 506.821694][T17243] ? __pfx_sock_ioctl+0x10/0x10 [ 506.821716][T17243] __se_sys_ioctl+0xfc/0x170 [ 506.821743][T17243] do_syscall_64+0x14d/0xf80 [ 506.821772][T17243] ? trace_irq_disable+0x3b/0x150 [ 506.821802][T17243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.821824][T17243] ? clear_bhb_loop+0x40/0x90 [ 506.821851][T17243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.821873][T17243] RIP: 0033:0x7f04e439c799 [ 506.821893][T17243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.821911][T17243] RSP: 002b:00007f04e5320028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 506.821939][T17243] RAX: ffffffffffffffda RBX: 00007f04e4615fa0 RCX: 00007f04e439c799 [ 506.821954][T17243] RDX: 0000200000000000 RSI: 00000000400448c9 RDI: 0000000000000008 [ 506.821968][T17243] RBP: 00007f04e5320090 R08: 0000000000000000 R09: 0000000000000000 [ 506.821981][T17243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.821993][T17243] R13: 00007f04e4616038 R14: 00007f04e4615fa0 R15: 00007ffff83c2f28 [ 506.822028][T17243] [ 506.829036][T17111] team0: Port device team_slave_1 added [ 507.138968][T17253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2830'. [ 507.250105][T17191] lo speed is unknown, defaulting to 1000 [ 507.277768][T17111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.308512][T17111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.348859][T17258] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 507.368928][T17111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.414375][ T5830] Bluetooth: hci1: command tx timeout [ 507.421105][T17111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.452326][T17111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.491796][T17111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.708254][T17111] hsr_slave_0: entered promiscuous mode [ 507.719516][T17111] hsr_slave_1: entered promiscuous mode [ 507.728661][T17111] debugfs: 'hsr0' already exists in 'hsr' [ 507.734745][T17111] Cannot create hsr debugfs directory [ 507.962653][T17276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2836'. [ 508.204459][ T5830] Bluetooth: hci6: command tx timeout [ 508.212482][T17288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2838'. [ 508.364900][T17191] chnl_net:caif_netlink_parms(): no params data found [ 508.660501][T17307] netlink: 'syz.0.2842': attribute type 7 has an invalid length. [ 508.932193][T17320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2843'. [ 509.016948][T17316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2843'. [ 509.279971][T17337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2847'. [ 509.297449][T17338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2848'. [ 509.333325][T15407] hsr_slave_0: left promiscuous mode [ 509.347394][T15407] hsr_slave_1: left promiscuous mode [ 509.355424][T15407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.392781][T15407] hsr0: left allmulticast mode [ 509.484468][ T5830] Bluetooth: hci1: command tx timeout [ 509.615546][T15407] team0 (unregistering): Port device 76 removed [ 509.630608][T15407] team0 (unregistering): Port device team_slave_0 removed [ 509.728133][T15407] team0 (unregistering): Port device dummy0 removed [ 509.765510][T15360] smc: removing ib device sqz0 [ 509.779995][T17191] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.787392][T17191] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.795149][T17191] bridge_slave_0: entered allmulticast mode [ 509.804104][T17191] bridge_slave_0: entered promiscuous mode [ 509.895867][T17191] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.912968][T17191] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.921221][T17191] bridge_slave_1: entered allmulticast mode [ 509.985581][T17191] bridge_slave_1: entered promiscuous mode [ 510.199120][T17191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.284180][ T5830] Bluetooth: hci6: command tx timeout [ 510.314316][T17191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.526607][T17191] team0: Port device team_slave_0 added [ 510.599440][T17191] team0: Port device team_slave_1 added [ 510.802365][T17381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2855'. [ 510.844571][T17191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.851724][T17191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.898717][T17191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.018124][T17191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.031873][T17191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.096653][T17191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.156231][T17389] C: renamed from team_slave_0 [ 511.170854][T17389] netlink: 'syz.3.2856': attribute type 1 has an invalid length. [ 511.179316][T17389] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 511.201098][T17393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2858'. [ 511.264655][T17111] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 511.288112][T17111] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 511.465930][T17111] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 511.507594][T17111] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 511.575127][ T5830] Bluetooth: hci1: command tx timeout [ 511.779643][T17191] hsr_slave_0: entered promiscuous mode [ 511.821822][T17191] hsr_slave_1: entered promiscuous mode [ 511.843750][T17191] debugfs: 'hsr0' already exists in 'hsr' [ 511.849547][T17191] Cannot create hsr debugfs directory [ 512.435789][T17448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2868'. [ 513.214200][T15407] IPVS: stop unused estimator thread 0... [ 513.394151][T17111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.407710][T17191] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 513.443392][T17191] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 513.474930][T17111] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.505163][T17191] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 513.536465][T15393] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.543702][T15393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.560646][T17191] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 513.577412][T17480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2878'. [ 513.600843][T17480] gtp1: entered promiscuous mode [ 513.606040][T17480] gtp1: entered allmulticast mode [ 513.617182][T15407] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.624378][T15407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.653833][ T5830] Bluetooth: hci1: command tx timeout [ 513.788740][T17491] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2879'. [ 513.891053][T17191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.946976][T17191] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.971600][T15397] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.978829][T15397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.052033][T15397] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.059256][T15397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.272783][T17517] netlink: 'syz.3.2886': attribute type 1 has an invalid length. [ 514.339910][T17517] bond6: (slave geneve2): making interface the new active one [ 514.349867][T17517] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 514.360965][T15407] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 514.374901][T17517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2886'. [ 514.384459][T15407] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 514.413749][T17517] bond6 (unregistering): (slave geneve2): Releasing active interface [ 514.427361][T17517] bond6 (unregistering): Released all slaves [ 514.437266][T17521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2887'. [ 514.473971][T17521] gtp2: entered promiscuous mode [ 514.479134][T17521] gtp2: entered allmulticast mode [ 514.493465][T15407] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 514.505771][T15407] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 514.533822][T17111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.661300][T17191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.678025][T17530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.160709][T17555] netlink: 'syz.2.2893': attribute type 4 has an invalid length. [ 515.234749][T17558] netlink: 'syz.2.2893': attribute type 4 has an invalid length. [ 515.307284][T17555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.326310][T17555] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2893'. [ 515.428035][T17111] veth0_vlan: entered promiscuous mode [ 515.461180][T17111] veth1_vlan: entered promiscuous mode [ 515.550343][T17566] netlink: 'syz.3.2897': attribute type 1 has an invalid length. [ 515.558816][T17566] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2897'. [ 515.614223][T17191] veth0_vlan: entered promiscuous mode [ 515.646702][T17191] veth1_vlan: entered promiscuous mode [ 515.660840][T17111] veth0_macvtap: entered promiscuous mode [ 515.676903][T17550] lo speed is unknown, defaulting to 1000 [ 515.710640][T17111] veth1_macvtap: entered promiscuous mode [ 515.850338][T17191] veth0_macvtap: entered promiscuous mode [ 515.901156][T17191] veth1_macvtap: entered promiscuous mode [ 515.917851][T17111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.960523][T17111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.986246][T17582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.005527][T17191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.041276][T15396] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.088506][T15396] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.111422][T15396] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.145650][T17191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.159349][T15397] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.181633][T17587] ipt_rpfilter: unknown options [ 516.205319][T15397] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.216630][T17586] ipt_rpfilter: unknown options [ 516.224871][T15396] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.253077][T15396] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.311354][T15396] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.512331][T15396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.522228][T15396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.581081][T15397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.616006][T15397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.726949][T15396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.748798][T15396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.832168][T15392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.883255][T15392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.917706][T17611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2907'. [ 516.928816][T17611] netlink: 'syz.0.2907': attribute type 5 has an invalid length. [ 516.938706][T17611] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2907'. [ 517.012311][T17611] geneve4: entered promiscuous mode [ 517.050807][T17614] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2907'. [ 517.060037][T17611] geneve4: entered allmulticast mode [ 517.135106][T15396] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 517.155742][T15396] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 517.183677][T17619] FAULT_INJECTION: forcing a failure. [ 517.183677][T17619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.213402][T15396] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 517.232691][T17619] CPU: 1 UID: 0 PID: 17619 Comm: syz.3.2909 Not tainted syzkaller #0 PREEMPT(full) [ 517.232728][T17619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 517.232742][T17619] Call Trace: [ 517.232750][T17619] [ 517.232759][T17619] dump_stack_lvl+0xe8/0x150 [ 517.232794][T17619] should_fail_ex+0x412/0x560 [ 517.232825][T17619] _copy_to_user+0x31/0xb0 [ 517.232858][T17619] simple_read_from_buffer+0xe1/0x170 [ 517.232892][T17619] proc_fail_nth_read+0x1bb/0x230 [ 517.232925][T17619] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 517.232958][T17619] ? rw_verify_area+0x2a6/0x4d0 [ 517.232978][T17619] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 517.233008][T17619] vfs_read+0x20c/0xa70 [ 517.233027][T17619] ? fdget_pos+0x246/0x320 [ 517.233061][T17619] ? __pfx___mutex_lock+0x10/0x10 [ 517.233093][T17619] ? __pfx_vfs_read+0x10/0x10 [ 517.233115][T17619] ? __fget_files+0x2a/0x420 [ 517.233152][T17619] ? __fget_files+0x3a0/0x420 [ 517.233178][T17619] ? __fget_files+0x2a/0x420 [ 517.233216][T17619] ksys_read+0x150/0x270 [ 517.233240][T17619] ? __pfx_ksys_read+0x10/0x10 [ 517.233272][T17619] do_syscall_64+0x14d/0xf80 [ 517.233299][T17619] ? trace_irq_disable+0x3b/0x150 [ 517.233328][T17619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.233349][T17619] ? clear_bhb_loop+0x40/0x90 [ 517.233375][T17619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.233396][T17619] RIP: 0033:0x7fa85c35cfce [ 517.233416][T17619] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 517.233434][T17619] RSP: 002b:00007fa85d21dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 517.233456][T17619] RAX: ffffffffffffffda RBX: 00007fa85d21e6c0 RCX: 00007fa85c35cfce [ 517.233490][T17619] RDX: 000000000000000f RSI: 00007fa85d21e0a0 RDI: 0000000000000004 [ 517.233503][T17619] RBP: 00007fa85d21e090 R08: 0000000000000000 R09: 0000000000000000 [ 517.233517][T17619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.233529][T17619] R13: 00007fa85c616038 R14: 00007fa85c615fa0 R15: 00007ffc50bb0ed8 [ 517.233565][T17619] [ 517.573981][T15396] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 517.689514][T17629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2912'. [ 517.731124][T17629] netlink: 'syz.4.2912': attribute type 30 has an invalid length. [ 517.800562][T15403] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.810550][T17629] netlink: 'syz.4.2912': attribute type 30 has an invalid length. [ 517.854206][T15403] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.899238][T15403] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.932789][T15403] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.099265][T17643] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 518.109702][T17643] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 518.124139][T17643] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 518.132186][T17643] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 518.141015][T17643] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 518.343600][T17654] netlink: 'syz.2.2920': attribute type 3 has an invalid length. [ 518.848363][T15403] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.893552][T15403] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 519.015165][T15403] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.051154][T15403] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 519.108630][T17639] lo speed is unknown, defaulting to 1000 [ 519.204728][T15403] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.243438][T15403] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 519.350178][T17645] x_tables: duplicate underflow at hook 2 [ 519.424870][T15403] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.453274][T15403] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 519.801665][T17698] __nla_validate_parse: 4 callbacks suppressed [ 519.801681][T17698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2929'. [ 519.896225][T17698] gtp3: entered promiscuous mode [ 519.907954][T17698] gtp3: entered allmulticast mode [ 520.004370][T17639] chnl_net:caif_netlink_parms(): no params data found [ 520.038904][T17706] netlink: 'syz.6.2933': attribute type 12 has an invalid length. [ 520.190069][T15403] team0: left allmulticast mode [ 520.195272][T15403] team_slave_0: left allmulticast mode [ 520.200774][T15403] team_slave_1: left allmulticast mode [ 520.207566][ T5830] Bluetooth: hci7: command tx timeout [ 520.223508][T15403] bridge10: left allmulticast mode [ 520.228696][T15403] team0: left promiscuous mode [ 520.239168][T15403] team_slave_0: left promiscuous mode [ 520.245829][T15403] team_slave_1: left promiscuous mode [ 520.251458][T15403] bridge10: left promiscuous mode [ 520.257002][T15403] bridge0: port 2(team0) entered disabled state [ 520.365273][T15403] bridge_slave_0: left allmulticast mode [ 520.371901][T15403] bridge_slave_0: left promiscuous mode [ 520.388518][T15403] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.459305][T17724] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2937'. [ 520.523578][T17730] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2936'. [ 520.533124][T17730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2936'. [ 520.572539][T17730] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2936'. [ 520.715425][T15403] batman_adv: batadv0: Removing interface: ip6gretap1 [ 520.977571][T15403] bond10 (unregistering): (slave gretap1): Releasing active interface [ 521.547926][T15403] team0: Port device bridge10 removed [ 521.637231][T15403] bond0 (unregistering): (slave c5): Releasing backup interface [ 521.648853][T15403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.660150][T15403] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 521.670462][T15403] bond0 (unregistering): Released all slaves [ 521.681740][T15403] bond1 (unregistering): Released all slaves [ 521.697064][T15403] bond2 (unregistering): Released all slaves [ 521.714483][T15403] bond3 (unregistering): (slave lo): Releasing backup interface [ 521.723012][T15403] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 521.736912][T15403] bond3 (unregistering): Released all slaves [ 521.751945][T15403] bond4 (unregistering): Released all slaves [ 521.766728][T15403] bond5 (unregistering): Released all slaves [ 521.781480][T15403] bond6 (unregistering): Released all slaves [ 521.800387][T15403] bond7 (unregistering): Released all slaves [ 521.819943][T15403] bond8 (unregistering): Released all slaves [ 521.834580][T15403] bond9 (unregistering): Released all slaves [ 521.849983][T15403] bond10 (unregistering): Released all slaves [ 521.875993][T17742] netlink: 'syz.3.2938': attribute type 1 has an invalid length. [ 521.923995][ T5949] lo speed is unknown, defaulting to 1000 [ 522.125219][T17752] netlink: 'syz.6.2939': attribute type 1 has an invalid length. [ 522.133095][T17752] netlink: 14436 bytes leftover after parsing attributes in process `syz.6.2939'. [ 522.147799][T17639] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.167842][T17639] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.175882][T17753] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2940'. [ 522.183888][T17639] bridge_slave_0: entered allmulticast mode [ 522.199335][T17639] bridge_slave_0: entered promiscuous mode [ 522.211046][T15403] : left promiscuous mode [ 522.283546][ T5830] Bluetooth: hci7: command tx timeout [ 522.934541][T17754] netlink: 'syz.6.2939': attribute type 12 has an invalid length. [ 522.944981][T17754] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2939'. [ 522.965236][T17639] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.972422][T17639] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.981125][T17639] bridge_slave_1: entered allmulticast mode [ 523.012590][T17639] bridge_slave_1: entered promiscuous mode [ 523.063256][T15403] : left promiscuous mode [ 523.146209][T17770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2943'. [ 523.159996][T17639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.213733][T15403] tipc: Disabling bearer [ 523.219499][T15403] tipc: Left network mode [ 523.237528][T17639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.400305][T17639] team0: Port device team_slave_0 added [ 523.441866][T17639] team0: Port device team_slave_1 added [ 523.449824][T17786] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2944'. [ 523.676739][T17639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.705364][T17639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.799155][T17639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.848477][T17639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.876752][T17639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.959271][T17639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.275145][T17639] hsr_slave_0: entered promiscuous mode [ 524.293047][T17639] hsr_slave_1: entered promiscuous mode [ 524.306577][T17639] debugfs: 'hsr0' already exists in 'hsr' [ 524.312570][T17639] Cannot create hsr debugfs directory [ 524.371209][ T5830] Bluetooth: hci7: command tx timeout [ 524.705899][T17829] gtp4: entered promiscuous mode [ 524.711344][T17829] gtp4: entered allmulticast mode [ 524.746655][T17828] netlink: 'syz.6.2955': attribute type 39 has an invalid length. [ 525.399693][T17853] __nla_validate_parse: 5 callbacks suppressed [ 525.399715][T17853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2959'. [ 525.890033][T15403] hsr_slave_0: left promiscuous mode [ 525.907521][T15403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.237641][T17884] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2966'. [ 526.408444][T15403] team0 (unregistering): Port device team_slave_1 removed [ 526.432950][T15403] team0 (unregistering): Port device team_slave_0 removed [ 526.443857][ T5830] Bluetooth: hci7: command tx timeout [ 526.639111][T17876] netlink: 67 bytes leftover after parsing attributes in process `syz.2.2964'. [ 526.744412][T17888] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2967'. [ 527.136862][T17903] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2971'. [ 527.828030][T17942] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2977'. [ 527.891277][T17942] gtp0: entered promiscuous mode [ 527.899161][T17942] gtp0: entered allmulticast mode [ 527.921234][T15403] IPVS: stop unused estimator thread 0... [ 527.947149][T17945] xt_ecn: cannot match TCP bits for non-tcp packets [ 528.264975][T17948] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.334010][T17948] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.398135][T17959] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 528.441457][T17957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 528.505519][T17948] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.538246][T17948] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.575003][T17639] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 528.602512][T17639] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 528.637952][T17639] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 528.658923][T17639] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 528.747587][T17948] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.783734][T17948] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.998135][T17948] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.033241][T17948] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.444319][T15407] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.455707][T15407] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.548412][T15396] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.566786][T15396] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.625547][T15396] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.634468][T15396] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.756244][T15407] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.773584][T15407] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.845532][T17639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.897395][T17639] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.932483][T15396] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.939724][T15396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.997755][T15407] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.004996][T15407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.390786][T18049] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2999'. [ 530.414122][T18049] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input19 [ 530.453261][T18060] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2999'. [ 530.615193][T18070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3001'. [ 530.678333][T18070] gtp0: entered promiscuous mode [ 530.714120][T18070] gtp0: entered allmulticast mode [ 530.788847][T18076] FAULT_INJECTION: forcing a failure. [ 530.788847][T18076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.826801][T18077] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3003'. [ 530.828870][T18076] CPU: 0 UID: 0 PID: 18076 Comm: syz.3.3004 Not tainted syzkaller #0 PREEMPT(full) [ 530.828947][T18076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 530.828981][T18076] Call Trace: [ 530.829002][T18076] [ 530.829023][T18076] dump_stack_lvl+0xe8/0x150 [ 530.829116][T18076] should_fail_ex+0x412/0x560 [ 530.829196][T18076] _copy_from_user+0x2d/0xb0 [ 530.829279][T18076] ___sys_sendmsg+0x1c6/0x360 [ 530.829385][T18076] ? __pfx____sys_sendmsg+0x10/0x10 [ 530.829573][T18076] ? __fget_files+0x2a/0x420 [ 530.829644][T18076] ? __fget_files+0x3a0/0x420 [ 530.829770][T18076] __x64_sys_sendmsg+0x1bd/0x2a0 [ 530.829874][T18076] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 530.829979][T18076] ? __pfx_ksys_write+0x10/0x10 [ 530.830074][T18076] do_syscall_64+0x14d/0xf80 [ 530.830154][T18076] ? trace_irq_disable+0x3b/0x150 [ 530.830226][T18076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.830285][T18076] ? clear_bhb_loop+0x40/0x90 [ 530.830354][T18076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.830414][T18076] RIP: 0033:0x7fa85c39c799 [ 530.830466][T18076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.830519][T18076] RSP: 002b:00007fa85d21e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.830580][T18076] RAX: ffffffffffffffda RBX: 00007fa85c615fa0 RCX: 00007fa85c39c799 [ 530.830620][T18076] RDX: 0000000000000084 RSI: 0000200000000780 RDI: 0000000000000004 [ 530.830658][T18076] RBP: 00007fa85d21e090 R08: 0000000000000000 R09: 0000000000000000 [ 530.830690][T18076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.830727][T18076] R13: 00007fa85c616038 R14: 00007fa85c615fa0 R15: 00007ffc50bb0ed8 [ 530.830809][T18076] [ 531.141744][T17639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.360567][T17639] veth0_vlan: entered promiscuous mode [ 531.412610][T17639] veth1_vlan: entered promiscuous mode [ 531.539388][T17639] veth0_macvtap: entered promiscuous mode [ 531.596409][T17639] veth1_macvtap: entered promiscuous mode [ 531.651690][T17639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.687695][T17639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.729016][T15393] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.739891][T15360] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.760545][T15360] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.792717][T15360] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.824051][T18106] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3009'. [ 531.857684][T18106] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3009'. [ 531.933090][T18114] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input20 [ 531.975913][T18122] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3013'. [ 532.127276][T18128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3013'. [ 532.192215][T18130] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3014'. [ 532.237056][T15360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.257380][T15360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.274186][T18126] xt_hashlimit: max too large, truncated to 1048576 [ 532.375153][T18134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.413839][T18134] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 532.462401][T18130] gtp1: entered promiscuous mode [ 532.471313][T18130] gtp1: entered allmulticast mode [ 532.588500][T15403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.605158][T15403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.641935][T18148] TCP: TCP_TX_DELAY enabled [ 532.840532][T18154] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3020'. [ 532.869847][T18159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 532.903072][T18154] vlan2: entered promiscuous mode [ 532.924467][T18154] gretap0: entered promiscuous mode [ 533.146777][T17643] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 533.157147][T17643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 533.170675][T17643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 533.193349][T17643] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 533.205200][T17643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 533.550432][T18186] tipc: Started in network mode [ 533.579444][T18186] tipc: Node identity eae6926cce56, cluster identity 4711 [ 533.609912][T18186] tipc: Enabled bearer , priority 0 [ 533.629416][T18190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3028'. [ 533.671861][T18185] tipc: Resetting bearer [ 533.690264][T18189] gtp4: entered promiscuous mode [ 533.736651][T18189] gtp4: entered allmulticast mode [ 533.810106][T18195] FAULT_INJECTION: forcing a failure. [ 533.810106][T18195] name failslab, interval 1, probability 0, space 0, times 0 [ 533.853360][T18195] CPU: 1 UID: 0 PID: 18195 Comm: syz.6.3029 Not tainted syzkaller #0 PREEMPT(full) [ 533.853390][T18195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 533.853403][T18195] Call Trace: [ 533.853412][T18195] [ 533.853421][T18195] dump_stack_lvl+0xe8/0x150 [ 533.853456][T18195] should_fail_ex+0x412/0x560 [ 533.853486][T18195] should_failslab+0xa8/0x100 [ 533.853513][T18195] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 533.853548][T18195] ? __alloc_skb+0x186/0x7d0 [ 533.853575][T18195] ? __alloc_skb+0x1d0/0x7d0 [ 533.853599][T18195] ? __local_bh_enable_ip+0xd0/0x130 [ 533.853651][T18195] __alloc_skb+0x1d0/0x7d0 [ 533.853699][T18195] netlink_sendmsg+0x5d4/0xb40 [ 533.853736][T18195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.853765][T18195] ? aa_sock_msg_perm+0xf1/0x1b0 [ 533.853792][T18195] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 533.853823][T18195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.853848][T18195] ____sys_sendmsg+0xa68/0xad0 [ 533.853888][T18195] ? __pfx_____sys_sendmsg+0x10/0x10 [ 533.853928][T18195] ? import_iovec+0x73/0xa0 [ 533.853961][T18195] ___sys_sendmsg+0x2a5/0x360 [ 533.853997][T18195] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.854085][T18195] ? __fget_files+0x2a/0x420 [ 533.854114][T18195] ? __fget_files+0x3a0/0x420 [ 533.854155][T18195] __x64_sys_sendmsg+0x1bd/0x2a0 [ 533.854190][T18195] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 533.854232][T18195] ? __pfx_ksys_write+0x10/0x10 [ 533.854267][T18195] do_syscall_64+0x14d/0xf80 [ 533.854296][T18195] ? trace_irq_disable+0x3b/0x150 [ 533.854328][T18195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.854350][T18195] ? clear_bhb_loop+0x40/0x90 [ 533.854377][T18195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.854397][T18195] RIP: 0033:0x7fc610f9c799 [ 533.854414][T18195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.854430][T18195] RSP: 002b:00007fc611dbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.854449][T18195] RAX: ffffffffffffffda RBX: 00007fc611215fa0 RCX: 00007fc610f9c799 [ 533.854462][T18195] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 533.854478][T18195] RBP: 00007fc611dbd090 R08: 0000000000000000 R09: 0000000000000000 [ 533.854489][T18195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.854499][T18195] R13: 00007fc611216038 R14: 00007fc611215fa0 R15: 00007ffeda080d88 [ 533.854526][T18195] [ 534.206969][T18183] tipc: Disabling bearer [ 534.311099][T18209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.328204][T17643] Bluetooth: hci0: command tx timeout [ 535.364617][T18167] chnl_net:caif_netlink_parms(): no params data found [ 535.735833][T18167] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.743207][T18256] netlink: 'syz.3.3039': attribute type 1 has an invalid length. [ 535.751001][T18256] netlink: 'syz.3.3039': attribute type 2 has an invalid length. [ 535.781761][T18167] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.816011][T18167] bridge_slave_0: entered allmulticast mode [ 535.847709][T18167] bridge_slave_0: entered promiscuous mode [ 535.890978][T18167] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.905954][T18167] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.927407][T18167] bridge_slave_1: entered allmulticast mode [ 535.953461][T18167] bridge_slave_1: entered promiscuous mode [ 536.071881][T18167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.107031][T18167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.221074][T18167] team0: Port device team_slave_0 added [ 536.247692][T18167] team0: Port device team_slave_1 added [ 536.386732][T18167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.401654][T18167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.439783][T18167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.469505][T18167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.479777][T18167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.508284][T18167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.597569][T18277] __nla_validate_parse: 2 callbacks suppressed [ 536.597589][T18277] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3043'. [ 536.639855][T18167] hsr_slave_0: entered promiscuous mode [ 536.646632][T18167] hsr_slave_1: entered promiscuous mode [ 536.656545][T18167] debugfs: 'hsr0' already exists in 'hsr' [ 536.662369][T18167] Cannot create hsr debugfs directory [ 536.673019][T18277] gtp2: entered promiscuous mode [ 536.678866][T18277] gtp2: entered allmulticast mode [ 536.849103][T18280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.406069][T17643] Bluetooth: hci0: command tx timeout [ 537.592918][T18298] FAULT_INJECTION: forcing a failure. [ 537.592918][T18298] name failslab, interval 1, probability 0, space 0, times 0 [ 537.620196][T18298] CPU: 0 UID: 0 PID: 18298 Comm: syz.0.3051 Not tainted syzkaller #0 PREEMPT(full) [ 537.620224][T18298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 537.620238][T18298] Call Trace: [ 537.620246][T18298] [ 537.620255][T18298] dump_stack_lvl+0xe8/0x150 [ 537.620294][T18298] should_fail_ex+0x412/0x560 [ 537.620329][T18298] should_failslab+0xa8/0x100 [ 537.620356][T18298] ? skb_clone+0x212/0x3a0 [ 537.620429][T18298] kmem_cache_alloc_noprof+0x87/0x650 [ 537.620462][T18298] ? __netlink_lookup+0xc6/0x8b0 [ 537.620498][T18298] skb_clone+0x212/0x3a0 [ 537.620532][T18298] __netlink_deliver_tap+0x404/0x850 [ 537.620571][T18298] ? netlink_deliver_tap+0x2e/0x1b0 [ 537.620608][T18298] netlink_deliver_tap+0x19c/0x1b0 [ 537.620636][T18298] netlink_unicast+0x7e3/0x9b0 [ 537.620665][T18298] ? __pfx_netlink_unicast+0x10/0x10 [ 537.620689][T18298] ? netlink_sendmsg+0x650/0xb40 [ 537.620713][T18298] ? skb_put+0x11b/0x210 [ 537.620745][T18298] netlink_sendmsg+0x813/0xb40 [ 537.620782][T18298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.620812][T18298] ? aa_sock_msg_perm+0xf1/0x1b0 [ 537.620842][T18298] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 537.620869][T18298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.620894][T18298] ____sys_sendmsg+0xa68/0xad0 [ 537.620936][T18298] ? __pfx_____sys_sendmsg+0x10/0x10 [ 537.620991][T18298] ? import_iovec+0x73/0xa0 [ 537.621026][T18298] ___sys_sendmsg+0x2a5/0x360 [ 537.621062][T18298] ? __pfx____sys_sendmsg+0x10/0x10 [ 537.621131][T18298] ? __fget_files+0x2a/0x420 [ 537.621160][T18298] ? __fget_files+0x3a0/0x420 [ 537.621200][T18298] __x64_sys_sendmsg+0x1bd/0x2a0 [ 537.621234][T18298] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 537.621277][T18298] ? __pfx_ksys_write+0x10/0x10 [ 537.621311][T18298] do_syscall_64+0x14d/0xf80 [ 537.621341][T18298] ? trace_irq_disable+0x3b/0x150 [ 537.621372][T18298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.621394][T18298] ? clear_bhb_loop+0x40/0x90 [ 537.621421][T18298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.621442][T18298] RIP: 0033:0x7f6c0859c799 [ 537.621462][T18298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.621482][T18298] RSP: 002b:00007f6c09480028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.621506][T18298] RAX: ffffffffffffffda RBX: 00007f6c08815fa0 RCX: 00007f6c0859c799 [ 537.621521][T18298] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 537.621534][T18298] RBP: 00007f6c09480090 R08: 0000000000000000 R09: 0000000000000000 [ 537.621566][T18298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.621579][T18298] R13: 00007f6c08816038 R14: 00007f6c08815fa0 R15: 00007ffc244e99f8 [ 537.621624][T18298] [ 537.621646][T18298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3051'. [ 537.926430][T18167] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 537.938492][T18167] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 537.980651][T18167] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 538.019460][T18167] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 538.227787][T18167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.241652][T18307] bond0: (slave rose0): Releasing backup interface [ 538.286819][T18167] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.311058][T15359] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.318314][T15359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.388089][T15403] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.395330][T15403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.484900][T18320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3055'. [ 538.524978][T18320] gtp1: entered promiscuous mode [ 538.544283][T18320] gtp1: entered allmulticast mode [ 538.718618][T18328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.916161][T18167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.185210][T18167] veth0_vlan: entered promiscuous mode [ 539.192240][T18340] tipc: Started in network mode [ 539.212465][T18340] tipc: Node identity 7a0dc3ac2e01, cluster identity 4711 [ 539.225762][T18340] tipc: Enabled bearer , priority 0 [ 539.261214][T18340] tipc: Resetting bearer [ 539.306445][T18339] tipc: Disabling bearer [ 539.364382][T18167] veth1_vlan: entered promiscuous mode [ 539.483480][T17643] Bluetooth: hci0: command tx timeout [ 539.513096][T18167] veth0_macvtap: entered promiscuous mode [ 539.597328][T18167] veth1_macvtap: entered promiscuous mode [ 539.606964][T18354] netlink: 'syz.6.3061': attribute type 1 has an invalid length. [ 539.658361][T18355] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3061'. [ 539.672997][T18355] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3061'. [ 539.715333][T18354] bond1: entered promiscuous mode [ 539.721057][T18354] 8021q: adding VLAN 0 to HW filter on device bond1 [ 539.822602][T18361] bond1: (slave bridge1): making interface the new active one [ 539.895186][T18361] bridge1: entered promiscuous mode [ 539.902857][T18361] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 539.918378][T18167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.972643][T18167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.014592][T15403] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.050500][T15403] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.124378][T15403] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.152283][T15403] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.421087][T18380] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3065'. [ 540.464203][T15393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.488700][T18380] gtp3: entered promiscuous mode [ 540.493807][T15393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.556544][T18380] gtp3: entered allmulticast mode [ 540.573502][T18389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.737231][T15403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.754939][T15403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.375551][T18419] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 541.407140][T18418] tipc: Enabled bearer , priority 0 [ 541.447342][T18418] tipc: Resetting bearer [ 541.564581][T17643] Bluetooth: hci0: command tx timeout [ 541.645137][T18413] tipc: Disabling bearer [ 541.847452][T18427] syzkaller0: entered promiscuous mode [ 541.853099][T18427] syzkaller0: entered allmulticast mode [ 542.004332][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 542.034005][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 542.045681][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 542.056695][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 542.064616][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 542.142161][T18436] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3075'. [ 542.223399][T18436] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3075'. [ 542.317985][T18436] dummy0: entered promiscuous mode [ 542.325171][T18436] team0: entered promiscuous mode [ 542.332292][T18436] team_slave_0: entered promiscuous mode [ 542.338707][T18436] team_slave_1: entered promiscuous mode [ 542.628845][T18448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3077'. [ 542.690126][T18448] gtp2: entered promiscuous mode [ 542.698056][T18448] gtp2: entered allmulticast mode [ 542.706060][T18446] syzkaller0: entered promiscuous mode [ 542.711842][T18446] syzkaller0: entered allmulticast mode [ 542.778142][T18451] x_tables: duplicate underflow at hook 1 [ 542.799575][T18453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 543.036284][T18459] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3080'. [ 543.085819][T18457] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.342709][T18459] wg1 speed is unknown, defaulting to 1000 [ 543.447401][T18459] wg1 speed is unknown, defaulting to 1000 [ 543.479077][T18457] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.576693][T18459] wg1 speed is unknown, defaulting to 1000 [ 543.664744][T18459] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 543.886231][T18457] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.904375][T18459] wg1 speed is unknown, defaulting to 1000 [ 543.969005][T18457] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.990554][T18459] wg1 speed is unknown, defaulting to 1000 [ 544.022162][T18459] wg1 speed is unknown, defaulting to 1000 [ 544.053341][T18459] wg1 speed is unknown, defaulting to 1000 [ 544.100650][T18459] wg1 speed is unknown, defaulting to 1000 [ 544.133798][T18459] wg1 speed is unknown, defaulting to 1000 [ 544.145296][T18459] wg1 speed is unknown, defaulting to 1000 [ 544.169415][T18459] wg1 speed is unknown, defaulting to 1000 [ 544.177633][T18459] wg1 speed is unknown, defaulting to 1000 [ 544.210293][ T5831] Bluetooth: hci3: command tx timeout [ 544.264694][T15403] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.321403][T15403] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.332524][T18435] chnl_net:caif_netlink_parms(): no params data found [ 544.350109][T18480] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 544.406263][T15360] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.503331][T15359] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.711393][T18501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3087'. [ 544.775810][T18435] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.796075][T18504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 544.803595][T18435] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.823789][T18435] bridge_slave_0: entered allmulticast mode [ 544.852225][T18435] bridge_slave_0: entered promiscuous mode [ 544.874331][T18435] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.893270][T18435] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.902372][T18435] bridge_slave_1: entered allmulticast mode [ 544.910526][T18435] bridge_slave_1: entered promiscuous mode [ 545.042837][T18435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.056243][T18507] netlink: 'syz.2.3089': attribute type 13 has an invalid length. [ 545.076555][T18435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.498333][T18435] team0: Port device team_slave_0 added [ 545.517264][T18435] team0: Port device team_slave_1 added [ 545.545411][T18525] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3093'. [ 545.655666][T18530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3095'. [ 545.672234][T18435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.681615][T18435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.707920][T18435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.755406][T18435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.762452][T18435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.810032][T18435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.032037][T18435] hsr_slave_0: entered promiscuous mode [ 546.054442][T18435] hsr_slave_1: entered promiscuous mode [ 546.076896][T18435] debugfs: 'hsr0' already exists in 'hsr' [ 546.099578][T18435] Cannot create hsr debugfs directory [ 546.240754][T18550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.283298][ T5831] Bluetooth: hci3: command tx timeout [ 546.451214][T18553] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3100'. [ 546.623881][T18563] ip6tnl0: Caught tx_queue_len zero misconfig [ 546.793863][T18576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3106'. [ 546.806440][T18578] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3107'. [ 546.866230][ T5831] block nbd1: Receive control failed (result -1) [ 546.933580][T18584] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 547.082224][T18588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 547.274828][T18595] __nla_validate_parse: 1 callbacks suppressed [ 547.274849][T18595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3113'. [ 547.319241][T18596] netlink: 'syz.6.3112': attribute type 1 has an invalid length. [ 547.350524][T18595] gtp0: entered promiscuous mode [ 547.360351][T18596] netlink: 'syz.6.3112': attribute type 2 has an invalid length. [ 547.370429][T18595] gtp0: entered allmulticast mode [ 547.414320][T18596] netlink: 'syz.6.3112': attribute type 1 has an invalid length. [ 547.434053][T18435] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 547.441373][T18596] netlink: 'syz.6.3112': attribute type 3 has an invalid length. [ 547.449987][T18596] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3112'. [ 547.465228][T18435] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 547.479016][T18435] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 547.503015][T18435] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 547.548339][T18602] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3114'. [ 547.762403][T18435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.817016][T18435] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.845494][T15359] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.852721][T15359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.947391][T15359] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.954766][T15359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.988651][T18626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 548.368600][ T5831] Bluetooth: hci3: command tx timeout [ 548.569590][T18435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.661333][T18654] netlink: 'syz.4.3126': attribute type 9 has an invalid length. [ 548.688760][T18435] veth0_vlan: entered promiscuous mode [ 548.738251][T18435] veth1_vlan: entered promiscuous mode [ 548.812002][T18435] veth0_macvtap: entered promiscuous mode [ 548.832989][T18635] wg1 speed is unknown, defaulting to 1000 [ 548.847740][T18658] netlink: 'syz.0.3127': attribute type 1 has an invalid length. [ 548.855984][T18658] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3127'. [ 548.866822][T18658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3127'. [ 548.931544][T18435] veth1_macvtap: entered promiscuous mode [ 549.073356][T18435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.106856][T18435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.133712][T15397] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.146606][T15397] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.174230][T15397] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.202481][T15397] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.390811][T18645] wg1 speed is unknown, defaulting to 1000 [ 549.429820][T15393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.445954][T15393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.766881][T15397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.806944][T15397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.088821][T18690] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3133'. [ 550.138285][T18690] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3133'. [ 550.337753][T18690] tap0: tun_chr_ioctl cmd 1074025676 [ 550.346435][T18690] tap0: owner set to 0 [ 550.443527][ T5831] Bluetooth: hci3: command tx timeout [ 550.478442][T18708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3137'. [ 550.520678][T18710] netlink: 'syz.4.3138': attribute type 4 has an invalid length. [ 550.542632][T18710] netlink: 'syz.4.3138': attribute type 4 has an invalid length. [ 550.734451][T18721] "syz.0.3140" (18721) uses obsolete ecb(arc4) skcipher [ 550.906020][T18728] netlink: 288 bytes leftover after parsing attributes in process `syz.4.3141'. [ 550.958339][T18730] openvswitch: netlink: IPv4 tun info is not correct [ 550.975246][T18730] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3142'. [ 551.194223][T18741] ipt_rpfilter: unknown options [ 551.402234][T18752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.714724][T18765] gtp1: entered promiscuous mode [ 551.730693][T18765] gtp1: entered allmulticast mode [ 552.242570][T18778] netlink: 'syz.4.3159': attribute type 3 has an invalid length. [ 552.250726][T18778] netlink: 'syz.4.3159': attribute type 1 has an invalid length. [ 552.309235][T18794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 552.558768][T18809] __nla_validate_parse: 5 callbacks suppressed [ 552.558788][T18809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3167'. [ 552.575489][T18770] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3155'. [ 552.595175][T18770] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3155'. [ 552.635099][T18809] gtp2: entered promiscuous mode [ 552.640305][T18809] gtp2: entered allmulticast mode [ 552.657598][T18810] syzkaller0: entered promiscuous mode [ 552.674685][T18810] syzkaller0: entered allmulticast mode [ 553.085126][T18828] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3172'. [ 553.139840][T18833] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3171'. [ 553.392136][T18843] netlink: 71 bytes leftover after parsing attributes in process `syz.0.3174'. [ 553.410163][T18841] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 553.448045][T18847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3174'. [ 553.482775][T18843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3174'. [ 553.584930][T18829] wg1 speed is unknown, defaulting to 1000 [ 553.691296][T18853] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.703239][T18853] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.915944][T18853] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.969298][T18853] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.204393][T18866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3179'. [ 554.290057][T18853] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.317038][T18853] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.403195][T18828] wg1 speed is unknown, defaulting to 1000 [ 554.497252][T18853] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.529293][T18853] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.542214][T18875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3182'. [ 554.842545][T18884] ip6erspan0: entered allmulticast mode [ 554.890405][T15392] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.910150][T15392] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.058743][T15360] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.077583][T15360] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.112526][T15360] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.133324][T15360] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.209226][T15360] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.218730][T15360] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.232511][T18905] netlink: 'syz.0.3191': attribute type 4 has an invalid length. [ 555.716737][T18940] netlink: 'syz.6.3200': attribute type 33 has an invalid length. [ 555.733414][T18940] `: renamed from team0 (while UP) [ 556.475477][T18966] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 556.572633][T18965] netlink: 'syz.2.3206': attribute type 1 has an invalid length. [ 556.894690][T18956] wg1 speed is unknown, defaulting to 1000 [ 557.013102][T18988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 557.347870][T18995] gtp3: entered promiscuous mode [ 557.360594][T18995] gtp3: entered allmulticast mode [ 557.375914][T18979] wg1 speed is unknown, defaulting to 1000 [ 557.549376][T19003] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.560550][T19003] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.741902][T18983] wg1 speed is unknown, defaulting to 1000 [ 557.754211][T18997] rdma_rxe: rxe_newlink: failed to add lo [ 557.945503][T19003] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.968256][T19003] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.218648][T19003] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.239955][T19003] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.361594][T19003] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.388160][T19003] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.903627][T19041] bridge4: entered promiscuous mode [ 558.909016][T19041] bridge4: entered allmulticast mode [ 558.934469][T19039] __nla_validate_parse: 13 callbacks suppressed [ 558.934490][T19039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3225'. [ 558.989696][T19042] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3224'. [ 559.021926][T19039] gtp3: entered promiscuous mode [ 559.058604][T19039] gtp3: entered allmulticast mode [ 559.560221][T19062] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3233'. [ 559.742257][T19066] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3235'. [ 559.859812][T15359] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.871792][T15359] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.913221][T15359] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.921448][T15359] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.957689][T19038] wg1 speed is unknown, defaulting to 1000 [ 559.968873][T19076] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 560.032562][T19072] lo speed is unknown, defaulting to 1000 [ 560.050513][T15359] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.059258][T15359] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.078953][T19072] lo speed is unknown, defaulting to 1000 [ 560.151987][T15359] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.177604][T15359] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.187192][T19072] lo speed is unknown, defaulting to 1000 [ 560.210428][T19072] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 560.293836][T19072] lo speed is unknown, defaulting to 1000 [ 560.340527][T19072] lo speed is unknown, defaulting to 1000 [ 560.402644][T19072] lo speed is unknown, defaulting to 1000 [ 560.411707][T19080] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3238'. [ 560.455732][T19072] lo speed is unknown, defaulting to 1000 [ 560.465941][T19080] netlink: 'syz.3.3238': attribute type 2 has an invalid length. [ 560.474349][T19072] lo speed is unknown, defaulting to 1000 [ 560.504536][T19080] hmac(sha224: entered promiscuous mode [ 560.858403][T19072] lo speed is unknown, defaulting to 1000 [ 560.891552][T19072] lo speed is unknown, defaulting to 1000 [ 560.899522][T19072] lo speed is unknown, defaulting to 1000 [ 560.908658][T19072] lo speed is unknown, defaulting to 1000 [ 560.924118][T19072] lo speed is unknown, defaulting to 1000 [ 561.526362][T19125] FAULT_INJECTION: forcing a failure. [ 561.526362][T19125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.590060][T19125] CPU: 0 UID: 0 PID: 19125 Comm: syz.2.3248 Not tainted syzkaller #0 PREEMPT(full) [ 561.590091][T19125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 561.590107][T19125] Call Trace: [ 561.590115][T19125] [ 561.590124][T19125] dump_stack_lvl+0xe8/0x150 [ 561.590162][T19125] should_fail_ex+0x412/0x560 [ 561.590193][T19125] _copy_from_user+0x2d/0xb0 [ 561.590229][T19127] gretap1: entered promiscuous mode [ 561.590226][T19125] do_ip_vs_set_ctl+0x354/0xbf0 [ 561.590461][T19125] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 561.590632][T19125] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 561.590733][T19125] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 561.590827][T19125] ? __pfx_aa_sk_perm+0x10/0x10 [ 561.590928][T19125] nf_setsockopt+0x26f/0x290 [ 561.591055][T19125] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 561.591132][T19125] do_sock_setsockopt+0x17c/0x1b0 [ 561.591213][T19125] __x64_sys_setsockopt+0x13d/0x1b0 [ 561.591301][T19125] do_syscall_64+0x14d/0xf80 [ 561.591378][T19125] ? trace_irq_disable+0x3b/0x150 [ 561.591443][T19125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.591501][T19125] ? clear_bhb_loop+0x40/0x90 [ 561.591563][T19125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.591629][T19125] RIP: 0033:0x7ff5e579c799 [ 561.591677][T19125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.591717][T19125] RSP: 002b:00007ff5e6578028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 561.591782][T19125] RAX: ffffffffffffffda RBX: 00007ff5e5a15fa0 RCX: 00007ff5e579c799 [ 561.591838][T19125] RDX: 0000000000000489 RSI: 0000000000000000 RDI: 0000000000000004 [ 561.591873][T19125] RBP: 00007ff5e6578090 R08: 0000000000000044 R09: 0000000000000000 [ 561.591916][T19125] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 561.591945][T19125] R13: 00007ff5e5a16038 R14: 00007ff5e5a15fa0 R15: 00007fffd5f737b8 [ 561.592032][T19125] [ 561.822014][T19130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3249'. [ 562.075205][T15360] bond0: (slave bond_slave_0): interface is now down [ 562.094880][T15360] bond0: (slave bond_slave_1): interface is now down [ 562.106944][T15360] bond0: now running without any active interface! [ 562.153741][T19142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 562.317914][T19148] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3256'. [ 562.877013][T19172] openvswitch: netlink: IPv4 tunnel dst address is zero [ 563.550203][T19191] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3269'. [ 564.986420][T19208] netlink: 'syz.6.3272': attribute type 6 has an invalid length. [ 564.996311][T19208] netlink: 'syz.6.3272': attribute type 5 has an invalid length. [ 565.012886][T19208] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.3272'. [ 565.045400][T19208] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3272'. [ 565.056509][T19212] batadv_slave_1: entered promiscuous mode [ 565.065934][T19208] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3272'. [ 565.083080][T19211] batadv_slave_1: left promiscuous mode [ 565.182139][T19218] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3276'. [ 565.459466][T19239] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3281'. [ 565.509677][T19239] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3281'. [ 565.779403][T19249] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3283'. [ 565.878776][T19249] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3283'. [ 565.917649][T19261] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3287'. [ 566.072309][T19265] pimreg: entered allmulticast mode [ 566.127499][T19265] pimreg: left allmulticast mode [ 566.146111][T19269] xt_hashlimit: size too large, truncated to 1048576 [ 566.766082][T19302] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3301'. [ 566.882466][T19310] netlink: 'syz.0.3301': attribute type 15 has an invalid length. [ 567.663630][T19356] bond0: Caught tx_queue_len zero misconfig [ 567.888205][T19314] wg1 speed is unknown, defaulting to 1000 [ 567.904402][T19314] lo speed is unknown, defaulting to 1000 [ 568.708973][T19404] openvswitch: netlink: Missing valid actions attribute. [ 568.743615][T19404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 568.884718][T19411] netlink: 'syz.2.3333': attribute type 22 has an invalid length. [ 568.894426][T19411] netlink: 'syz.2.3333': attribute type 22 has an invalid length. [ 569.135168][T19431] netlink: 'syz.3.3339': attribute type 5 has an invalid length. [ 569.959388][T19420] wg1 speed is unknown, defaulting to 1000 [ 570.122552][T19420] lo speed is unknown, defaulting to 1000 [ 570.658084][T19443] wg1 speed is unknown, defaulting to 1000 [ 570.666354][T19443] lo speed is unknown, defaulting to 1000 [ 570.967886][T19451] wg1 speed is unknown, defaulting to 1000 [ 570.996909][T19451] lo speed is unknown, defaulting to 1000 [ 572.044905][T19423] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 572.629072][T19492] netlink: 'syz.3.3349': attribute type 2 has an invalid length. [ 572.780777][T19513] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 572.927385][T19522] __nla_validate_parse: 12 callbacks suppressed [ 572.927405][T19522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3357'. [ 573.277040][T19535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3360'. [ 573.399608][T19541] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3364'. [ 573.700256][T19562] netlink: 'syz.6.3369': attribute type 1 has an invalid length. [ 573.709939][T19563] netlink: 'syz.6.3369': attribute type 1 has an invalid length. [ 573.736123][T19565] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 573.802471][T19565] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3370'. [ 574.016706][T19580] Bluetooth: MGMT ver 1.23 [ 574.024770][T19583] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3377'. [ 574.092368][T19583] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3377'. [ 574.105779][T19583] 8021q: VLANs not supported on ip6_vti0 [ 574.115855][T19583] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3377'. [ 574.180033][T19602] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3378'. [ 574.190312][T19602] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3378'. [ 574.234231][T19604] sit1: entered promiscuous mode [ 574.326264][T19611] "syz.3.3384" (19611) uses obsolete ecb(arc4) skcipher [ 574.671503][T19621] netlink: 'syz.4.3387': attribute type 1 has an invalid length. [ 574.807015][T19580] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 574.818212][T19618] netlink: 'syz.0.3386': attribute type 23 has an invalid length. [ 574.877166][T19626] syzkaller0: entered promiscuous mode [ 574.882671][T19626] syzkaller0: entered allmulticast mode [ 574.977342][T19630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3390'. [ 575.099702][T19641] xt_hashlimit: size too large, truncated to 1048576 [ 575.181730][T19646] team_slave_0: entered promiscuous mode [ 575.188099][T19646] team_slave_1: entered promiscuous mode [ 575.268310][T19646] vlan2: entered promiscuous mode [ 575.280739][T19646] team0: entered promiscuous mode [ 575.662844][T19656] ip6gre2: entered promiscuous mode [ 575.682712][T19656] ip6gre2: entered allmulticast mode [ 576.054377][T19681] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 576.342572][T19695] batadv1: entered promiscuous mode [ 576.348030][T19695] batadv1: entered allmulticast mode [ 576.576221][T19706] : renamed from veth0_to_bond (while UP) [ 576.840404][T19711] geneve2: entered promiscuous mode [ 576.869728][T19713] tipc: New replicast peer: 255.255.255.255 [ 576.904627][T19713] tipc: Enabled bearer , priority 6 [ 576.966038][T19713] xfrm1: entered allmulticast mode [ 577.007202][T19717] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.043694][T19717] bridge_slave_1: left allmulticast mode [ 577.059651][T19717] bridge_slave_1: left promiscuous mode [ 577.083645][T19717] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.137491][T19717] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 577.199452][T19721] netlink: 'syz.0.3418': attribute type 1 has an invalid length. [ 577.368933][T19725] Bluetooth: MGMT ver 1.23 [ 577.578770][T19734] nbd: must specify at least one socket [ 578.115487][ T5949] tipc: Node number set to 615551596 [ 578.708061][T19775] syzkaller0: entered promiscuous mode [ 578.716511][T19775] syzkaller0: entered allmulticast mode [ 579.151898][T19790] __nla_validate_parse: 7 callbacks suppressed [ 579.151917][T19790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3442'. [ 579.246379][T19790] bond0: (slave bridge_slave_1): Releasing backup interface [ 579.389065][T19805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3446'. [ 579.442740][T19807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3446'. [ 579.461614][T19805] 8021q: adding VLAN 0 to HW filter on device bond1 [ 579.472890][T19807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3446'. [ 579.549102][T19807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.591966][T19805] netlink: 'syz.2.3446': attribute type 4 has an invalid length. [ 579.624275][T19807] bond1: (slave bond0): making interface the new active one [ 579.633656][T19805] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3446'. [ 579.647154][T19807] bond1: (slave bond0): Enslaving as an active interface with an up link [ 579.666709][T19805] .`: renamed from bond0 (while UP) [ 579.766572][T15397] bond1: (slave .`): link status definitely down, disabling slave [ 579.777777][T15397] bond1: now running without any active interface! [ 579.808426][T19814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3449'. [ 579.819601][T19814] netlink: 348 bytes leftover after parsing attributes in process `syz.2.3449'. [ 579.829429][T19814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3449'. [ 579.838529][T19814] netlink: 348 bytes leftover after parsing attributes in process `syz.2.3449'. [ 579.850657][T19814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3449'. [ 580.167430][T19821] bond0: Unable to set up delay as MII monitoring is disabled [ 580.180886][T19821] bond0 (unregistering): Released all slaves [ 580.422026][T19838] netlink: 'syz.6.3454': attribute type 1 has an invalid length. [ 580.479877][T19837] netlink: 'syz.2.3455': attribute type 3 has an invalid length. [ 580.565811][T19838] 8021q: adding VLAN 0 to HW filter on device bond2 [ 580.631836][T19840] netlink: 'syz.6.3454': attribute type 1 has an invalid length. [ 581.076661][T19872] xt_hashlimit: max too large, truncated to 1048576 [ 581.095005][T19872] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 581.471198][T19853] wg1 speed is unknown, defaulting to 1000 [ 581.479190][T19853] lo speed is unknown, defaulting to 1000 [ 582.110671][T19908] netlink: 'syz.4.3473': attribute type 1 has an invalid length. [ 582.158335][T19910] : entered promiscuous mode [ 582.306858][T19913] veth0_macvtap: left promiscuous mode [ 582.718721][T19932] netlink: 'syz.3.3479': attribute type 1 has an invalid length. [ 582.781991][T19932] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 584.264686][T19991] __nla_validate_parse: 14 callbacks suppressed [ 584.264705][T19991] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3494'. [ 584.318464][T19991] vlan3: entered promiscuous mode [ 584.469695][T19960] wg1 speed is unknown, defaulting to 1000 [ 584.521254][T19960] lo speed is unknown, defaulting to 1000 [ 584.709785][T20005] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3499'. [ 584.719940][T20005] netlink: ct family unspecified [ 584.734148][T20005] netlink: 'syz.0.3499': attribute type 1 has an invalid length. [ 584.742221][T20005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3499'. [ 584.753736][T20005] nbd: must specify a size in bytes for the device [ 584.868109][T20008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3500'. [ 584.916628][T20011] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 585.256563][T20008] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3500'. [ 585.612029][T20034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3507'. [ 585.705509][T20034] bridge_slave_1: left allmulticast mode [ 585.728182][T20034] bridge_slave_1: left promiscuous mode [ 585.742386][T20034] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.765863][T20034] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 585.786605][T20039] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 585.793913][T20039] IPv6: NLM_F_CREATE should be set when creating new route [ 585.801260][T20039] IPv6: NLM_F_CREATE should be set when creating new route [ 585.808545][T20039] IPv6: NLM_F_CREATE should be set when creating new route [ 585.917109][T20044] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 586.205270][T20052] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3510'. [ 586.284045][T20052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3510'. [ 586.292985][T20052] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 586.326947][T20052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3510'. [ 586.356717][T20052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3510'. [ 586.533242][T20062] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20002 [ 586.677409][T20066] tipc: Enabled bearer , priority 0 [ 586.726088][T20071] tipc: Enabling of bearer rejected, already enabled [ 586.764691][T20066] syzkaller0: entered promiscuous mode [ 586.787949][T20066] syzkaller0: entered allmulticast mode [ 586.885270][T20066] tipc: Resetting bearer [ 586.916610][T20065] tipc: Resetting bearer [ 586.965442][T20065] tipc: Disabling bearer [ 587.210805][T20103] siw: device registration error -23 [ 587.519845][T20130] netlink: 'syz.2.3530': attribute type 1 has an invalid length. [ 587.583678][T20130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.830865][T20133] bond0: (slave geneve3): making interface the new active one [ 587.856748][T20133] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 588.374853][T20160] batadv_slave_1: entered promiscuous mode [ 588.494695][T20159] batadv_slave_1: left promiscuous mode [ 588.847753][T20182] mac80211_hwsim hwsim44 syzkaller0: entered promiscuous mode [ 588.865569][T20182] mac80211_hwsim hwsim44 syzkaller0: entered allmulticast mode [ 589.321916][T20178] wg1 speed is unknown, defaulting to 1000 [ 589.350779][T20178] lo speed is unknown, defaulting to 1000 [ 589.715446][T20195] netlink: 'syz.6.3547': attribute type 3 has an invalid length. [ 589.830047][T20213] syzkaller1: entered promiscuous mode [ 589.835799][T20213] syzkaller1: entered allmulticast mode [ 589.982747][T20215] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 590.005990][T20193] wg1 speed is unknown, defaulting to 1000 [ 590.020189][T20193] lo speed is unknown, defaulting to 1000 [ 590.352322][T20223] __nla_validate_parse: 4 callbacks suppressed [ 590.352341][T20223] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3556'. [ 590.372975][T20225] tunl0: Caught tx_queue_len zero misconfig [ 590.395438][T20223] vlan3: entered promiscuous mode [ 590.408709][T20226] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3556'. [ 590.432369][T20223] bond0: entered promiscuous mode [ 590.442305][T20223] bond_slave_0: entered promiscuous mode [ 590.457163][T20223] bond_slave_1: entered promiscuous mode [ 590.506053][T20228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3557'. [ 590.801787][T20240] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 590.945397][T20240] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.089201][T20205] wg1 speed is unknown, defaulting to 1000 [ 591.095131][T20246] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3561'. [ 591.095348][T20246] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3561'. [ 591.252949][T20240] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.326326][T20205] lo speed is unknown, defaulting to 1000 [ 591.362256][T20240] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.442794][T20207] wg1 speed is unknown, defaulting to 1000 [ 591.491660][T20207] lo speed is unknown, defaulting to 1000 [ 591.575674][T20240] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.828668][T15396] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.983965][T15359] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.003064][T15359] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.040435][T15359] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.498198][T20249] wg1 speed is unknown, defaulting to 1000 [ 592.535159][T20249] lo speed is unknown, defaulting to 1000 [ 592.678698][T20288] sit2: entered promiscuous mode [ 592.687472][T20247] wg1 speed is unknown, defaulting to 1000 [ 592.883362][T20247] lo speed is unknown, defaulting to 1000 [ 593.018812][T20302] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3579'. [ 593.060726][T20304] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 593.070312][T20296] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3576'. [ 593.305413][T20309] xfrm0: entered promiscuous mode [ 593.310724][T20309] xfrm0: entered allmulticast mode [ 593.769610][T20332] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3588'. [ 594.445503][T20370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3595'. [ 594.529430][ T930] IPVS: starting estimator thread 0... [ 594.643442][T20376] IPVS: using max 31 ests per chain, 74400 per kthread [ 594.650669][T20380] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3601'. [ 594.660785][T20382] netlink: 'syz.4.3599': attribute type 10 has an invalid length. [ 594.669739][T20385] tipc: Enabling of bearer rejected, failed to enable media [ 595.011357][T20405] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 595.046814][T20405] netlink: 'syz.6.3608': attribute type 10 has an invalid length. [ 595.063530][T20405] wlan1: mtu greater than device maximum [ 595.069435][T20405] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 595.353098][T17597] IPVS: starting estimator thread 0... [ 595.456280][T20423] IPVS: using max 26 ests per chain, 62400 per kthread [ 596.185834][T20464] __nla_validate_parse: 3 callbacks suppressed [ 596.185853][T20464] netlink: 260 bytes leftover after parsing attributes in process `syz.6.3626'. [ 596.404064][T20475] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3629'. [ 596.413485][T20475] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3629'. [ 596.486699][T20475] block nbd6: not configured, cannot reconfigure [ 596.738872][T20488] SET target dimension over the limit! [ 596.754913][T20488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3633'. [ 597.025982][T20478] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.033818][T20478] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.130740][T20478] bridge0: entered allmulticast mode [ 597.136257][T20489] sctp: [Deprecated]: syz.4.3624 (pid 20489) Use of int in max_burst socket option. [ 597.136257][T20489] Use struct sctp_assoc_value instead [ 597.199635][T20478] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 597.280909][T20514] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3637'. [ 597.495038][T20526] netlink: 'syz.0.3641': attribute type 4 has an invalid length. [ 597.838308][T20545] mac80211_hwsim hwsim53 syzkaller0: entered promiscuous mode [ 597.850088][T20545] mac80211_hwsim hwsim53 syzkaller0: entered allmulticast mode [ 598.095380][T20560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3654'. [ 598.130541][T20562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3655'. [ 598.230578][T20568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3657'. [ 598.346860][T20571] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3658'. [ 598.348773][T20572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3658'. [ 598.411756][T20572] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 598.419047][T20578] netlink: 'syz.4.3660': attribute type 32 has an invalid length. [ 598.438129][T20577] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 598.445439][T20577] IPv6: NLM_F_CREATE should be set when creating new route [ 598.452700][T20577] IPv6: NLM_F_CREATE should be set when creating new route [ 598.586748][T20578] bond1: Setting coupled_control to off (0) [ 598.647300][T15393] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.669329][T15407] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.688259][T15407] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.717573][T15407] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.826389][T20592] bond1: entered promiscuous mode [ 598.851732][T20592] 8021q: adding VLAN 0 to HW filter on device bond1 [ 598.899450][T20596] 8021q: adding VLAN 0 to HW filter on device bond1 [ 598.917004][T20596] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 598.951537][T20596] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 599.379086][T20621] pimreg: entered allmulticast mode [ 599.528284][T20633] netlink: zone id is out of range [ 599.534400][T20633] netlink: zone id is out of range [ 599.539704][T20633] netlink: zone id is out of range [ 599.546513][T20633] netlink: zone id is out of range [ 599.551807][T20633] netlink: zone id is out of range [ 599.557639][T20633] netlink: get zone limit has 4 unknown bytes [ 600.058673][T20660] IPVS: set_ctl: invalid protocol: 22 172.30.0.4:20003 [ 600.627967][T20690] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.723616][T20701] netlink: 'syz.6.3693': attribute type 6 has an invalid length. [ 600.742696][T20701] netlink: 'syz.6.3693': attribute type 6 has an invalid length. [ 600.911405][T20714] dvmrp1: entered allmulticast mode [ 600.940562][T20714] dvmrp1: left allmulticast mode [ 601.203833][T20731] x_tables: duplicate underflow at hook 2 [ 601.520337][T20724] wg1 speed is unknown, defaulting to 1000 [ 601.545121][T20724] lo speed is unknown, defaulting to 1000 [ 601.610581][T20751] xt_CT: You must specify a L4 protocol and not use inversions on it [ 601.719318][T20756] __nla_validate_parse: 55 callbacks suppressed [ 601.719339][T20756] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3708'. [ 601.928557][T20757] xt_hashlimit: size too large, truncated to 1048576 [ 601.995125][T20766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3710'. [ 602.023996][T20766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3710'. [ 602.054769][T20761] lo: Caught tx_queue_len zero misconfig [ 602.071014][T20768] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3712'. [ 602.170555][T20770] openvswitch: netlink: Flow actions attr not present in new flow. [ 602.423909][T20778] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3715'. [ 602.907108][T20793] rdma_rxe: rxe_newlink: failed to add lo [ 603.048804][T20803] sctp: [Deprecated]: syz.6.3720 (pid 20803) Use of int in max_burst socket option. [ 603.048804][T20803] Use struct sctp_assoc_value instead [ 603.070927][T20795] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3720'. [ 603.076348][T20798] syzkaller0: entered promiscuous mode [ 603.084226][T20795] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3720'. [ 603.094982][T20798] syzkaller0: entered allmulticast mode [ 604.870292][T20834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3730'. [ 605.026553][T20834] netlink: 'syz.0.3730': attribute type 23 has an invalid length. [ 605.269253][T20860] ip6erspan1: entered allmulticast mode [ 605.816400][T20899] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3745'. [ 605.819851][T20898] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3746'. [ 605.842336][T20861] wg1 speed is unknown, defaulting to 1000 [ 605.862986][T20861] lo speed is unknown, defaulting to 1000 [ 606.009795][T20901] pim6reg1: entered promiscuous mode [ 606.018195][T20901] pim6reg1: entered allmulticast mode [ 606.157629][ T30] audit: type=1804 audit(1772328912.353:11): pid=20908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3750" name="/newroot/135/cgroup.controllers" dev="tmpfs" ino=711 res=1 errno=0 [ 606.221212][ T30] audit: type=1800 audit(1772328912.353:12): pid=20908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3750" name="cgroup.controllers" dev="tmpfs" ino=711 res=0 errno=0 [ 606.379730][T20916] netlink: 'syz.0.3753': attribute type 21 has an invalid length. [ 606.469311][T20919] pim6reg: entered allmulticast mode [ 606.478864][T20919] pim6reg: left allmulticast mode [ 606.937956][T20944] netlink: 'syz.2.3761': attribute type 5 has an invalid length. [ 606.981478][T20944] netlink: 'syz.2.3761': attribute type 5 has an invalid length. [ 607.025030][T20948] __nla_validate_parse: 6 callbacks suppressed [ 607.025049][T20948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3761'. [ 607.066732][T20944] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3761'. [ 607.257089][T20944] bond0: entered promiscuous mode [ 607.270216][T20944] geneve3: entered promiscuous mode [ 607.318945][T20944] gretap0: entered promiscuous mode [ 607.345285][T20944] debugfs: 'hsr1' already exists in 'hsr' [ 607.352758][T20944] Cannot create hsr debugfs directory [ 607.374105][T20944] hsr1: entered promiscuous mode [ 607.631525][T20975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3766'. [ 607.658791][T20977] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3767'. [ 607.786891][T20945] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 607.794043][T20945] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 607.908768][T20945] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 607.925804][T20945] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 608.158028][T20945] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 608.186250][T21004] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.211383][T20945] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 608.239239][T20945] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 608.263659][T20945] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 608.339605][T21004] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.486044][T21004] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.560116][T20945] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 608.573406][T20945] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 608.591739][T21004] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.720751][T15393] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.730153][T20945] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 608.753084][T15393] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.764949][T20945] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 608.844862][T20945] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 608.850824][T20945] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 608.858816][T15393] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.892947][T15393] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.938378][T15403] bond5 (unregistering): (slave bridge5): Releasing active interface [ 634.986728][T15403] bond7 (unregistering): (slave bridge0): Releasing active interface [ 635.029856][T15403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.040828][T15403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.051445][T15403] bond0 (unregistering): Released all slaves [ 635.062714][T15403] bond1 (unregistering): Released all slaves [ 635.080173][T15403] bond2 (unregistering): Released all slaves [ 635.096021][T15403] bond3 (unregistering): Released all slaves [ 635.110962][T15403] bond4 (unregistering): (slave lo): Releasing backup interface [ 635.119818][T15403] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 635.134742][T15403] bond4 (unregistering): Released all slaves [ 635.151601][T15403] bond5 (unregistering): Released all slaves [ 635.169220][T15403] bond6 (unregistering): Released all slaves [ 635.186993][T15403] bond7 (unregistering): Released all slaves [ 635.201616][T15403] bond8 (unregistering): Released all slaves [ 635.217991][T15403] bond9 (unregistering): Released all slaves [ 635.361666][T15403] !9: left promiscuous mode [ 635.422615][T15403] tipc: Disabling bearer [ 635.432160][T15403] tipc: Disabling bearer [ 635.437809][T15403] tipc: Left network mode [ 635.728428][T15403] hsr_slave_0: left promiscuous mode [ 635.735318][T15403] hsr_slave_1: left promiscuous mode [ 635.741486][T15403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.763637][T15403] pimreg (unregistering): left allmulticast mode [ 636.256439][T15403] IPVS: stop unused estimator thread 0... [ 653.093557][ T31] INFO: task syz.5.2628:16576 blocked for more than 143 seconds. [ 653.101435][ T31] Not tainted syzkaller #0 [ 653.106600][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 653.115511][ T31] task:syz.5.2628 state:D stack:26336 pid:16576 tgid:16575 ppid:13600 task_flags:0x400140 flags:0x00080002 [ 653.127624][ T31] Call Trace: [ 653.130941][ T31] [ 653.134273][ T31] __schedule+0x1585/0x5340 [ 653.138849][ T31] ? __pfx___schedule+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 653.143848][ T31] ? schedule+0x90/0x360 [ 653.153217][ T31] schedule+0x164/0x360 [ 653.157518][ T31] schedule_preempt_disabled+0x13/0x30 [ 653.162987][ T31] __mutex_lock+0x7fe/0x1300 [ 653.174881][ T31] ? __mutex_lock+0x5ac/0x1300 [ 653.179732][ T31] ? nfsd_nl_threads_get_doit+0x1c0/0x790 [ 653.213391][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 653.218536][ T31] ? __nlmsg_put+0xef/0x1b0 [ 653.231459][ T31] ? genlmsg_put+0x137/0x2e0 [ 653.240102][ T31] nfsd_nl_threads_get_doit+0x1c0/0x790 [ 653.252070][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 653.259010][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 653.304023][ T31] ? __asan_memcpy+0x40/0x70 [ 653.308707][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 653.328163][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 653.333232][ T31] genl_rcv_msg+0x61c/0x7a0 [ 653.338036][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 653.345097][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 653.351222][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 653.373926][ T31] netlink_rcv_skb+0x232/0x4b0 [ 653.378863][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 653.403131][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 653.409450][ T31] ? down_read+0x272/0x2e0 [ 653.433244][ T31] ? genl_rcv+0xd/0x40 [ 653.437408][ T31] genl_rcv+0x28/0x40 [ 653.441428][ T31] netlink_unicast+0x80f/0x9b0 [ 653.473808][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 653.479216][ T31] ? netlink_sendmsg+0x650/0xb40 [ 653.513574][ T31] ? skb_put+0x11b/0x210 [ 653.517995][ T31] netlink_sendmsg+0x813/0xb40 [ 653.522813][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 653.553175][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 653.558216][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 653.587173][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 653.592545][ T31] ____sys_sendmsg+0xa68/0xad0 [ 653.620546][ T31] ? futex_unqueue+0x211/0x240 [ 653.626148][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 653.631499][ T31] ? import_iovec+0x73/0xa0 [ 653.653814][ T31] ___sys_sendmsg+0x2a5/0x360 [ 653.658582][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 653.663910][ T31] ? futex_wait+0x29a/0x380 [ 653.668483][ T31] ? __fget_files+0x2a/0x420 [ 653.686560][ T31] ? __fget_files+0x3a0/0x420 [ 653.691336][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 653.713956][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 653.719522][ T31] ? rcu_is_watching+0x15/0xb0 [ 653.733183][ T31] do_syscall_64+0x14d/0xf80 [ 653.737851][ T31] ? trace_irq_disable+0x3b/0x150 [ 653.742925][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.773892][ T31] ? clear_bhb_loop+0x40/0x90 [ 653.778664][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.793127][ T31] RIP: 0033:0x7fc64eb9c799 [ 653.797690][ T31] RSP: 002b:00007fc64f99e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 653.823159][ T31] RAX: ffffffffffffffda RBX: 00007fc64ee15fa0 RCX: 00007fc64eb9c799 [ 653.831213][ T31] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 653.863797][ T31] RBP: 00007fc64ec32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 653.871847][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 653.893785][ T31] R13: 00007fc64ee16038 R14: 00007fc64ee15fa0 R15: 00007fffe2ea0668 [ 653.901859][ T31] [ 653.933212][ T31] [ 653.933212][ T31] Showing all locks held in the system: [ 653.941115][ T31] 1 lock held by khungtaskd/31: [ 653.973151][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 653.993190][ T31] 2 locks held by getty/5583: [ 653.998085][ T31] #0: ffff888035dd10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 654.035967][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 654.063187][ T31] 3 locks held by kworker/1:5/5942: [ 654.068479][ T31] 2 locks held by syz.1.1790/13075: [ 654.084858][ T31] #0: ffffffff8fc3a7b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 654.103171][ T31] #1: ffffffff8ea86c28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 654.124647][ T31] 5 locks held by kworker/u8:16/15360: [ 654.130219][ T31] 2 locks held by syz.5.2628/16576: [ 654.137417][ T31] #0: ffffffff8fc3a7b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 654.148174][ T31] #1: ffffffff8ea86c28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790 [ 654.158641][ T31] 2 locks held by kworker/1:4/17597: [ 654.164272][ T31] #0: ffff88813fe0f548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 654.176080][ T31] #1: ffffc90003767c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 654.186492][ T31] 1 lock held by syz-executor/17639: [ 654.191797][ T31] #0: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 654.202860][ T31] 2 locks held by syz-executor/18435: [ 654.208915][ T31] #0: ffffffff8fbccb48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 654.218191][ T31] #1: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 654.229287][ T31] [ 654.236469][ T31] ============================================= [ 654.236469][ T31] [ 654.286608][ T31] NMI backtrace for cpu 0 [ 654.286630][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 654.286670][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 654.286683][ T31] Call Trace: [ 654.286691][ T31] [ 654.286700][ T31] dump_stack_lvl+0xe8/0x150 [ 654.286736][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 654.286837][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 654.286881][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 654.286906][ T31] sys_info+0x135/0x170 [ 654.286924][ T31] watchdog+0xfd9/0x1030 [ 654.286960][ T31] ? watchdog+0x21a/0x1030 [ 654.286997][ T31] kthread+0x388/0x470 [ 654.287023][ T31] ? __pfx_watchdog+0x10/0x10 [ 654.287050][ T31] ? __pfx_kthread+0x10/0x10 [ 654.287071][ T31] ret_from_fork+0x51e/0xb90 [ 654.287100][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 654.287125][ T31] ? __switch_to+0xc7d/0x1450 [ 654.287166][ T31] ? __pfx_kthread+0x10/0x10 [ 654.287187][ T31] ret_from_fork_asm+0x1a/0x30 [ 654.287230][ T31] [ 654.287238][ T31] Sending NMI from CPU 0 to CPUs 1: [ 654.404182][ C1] NMI backtrace for cpu 1 [ 654.404200][ C1] CPU: 1 UID: 0 PID: 17639 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 654.404226][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 654.404238][ C1] RIP: 0010:debug_check_no_obj_freed+0x1d9/0x550 [ 654.404338][ C1] Code: 00 00 48 ba 00 00 00 00 00 fc ff df ff c3 48 8b 04 24 48 89 c5 48 85 c0 0f 84 44 03 00 00 49 89 ee 49 c1 ee 03 41 80 3c 16 00 <74> 12 48 89 ef e8 7d 71 77 fd 48 ba 00 00 00 00 00 fc ff df 48 8b [ 654.404354][ C1] RSP: 0018:ffffc900046efa88 EFLAGS: 00000046 [ 654.404371][ C1] RAX: ffff888022300658 RBX: 000000000000000a RCX: 0000000000000001 [ 654.404383][ C1] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc900046ef9e0 [ 654.404396][ C1] RBP: ffff888022300658 R08: 0000000000000003 R09: 0000000000000004 [ 654.404407][ C1] R10: dffffc0000000000 R11: fffff520008ddf3c R12: ffff88808065f000 [ 654.404421][ C1] R13: ffff88808065e000 R14: 1ffff110044600cb R15: ffff88805770d058 [ 654.404434][ C1] FS: 0000000000000000(0000) GS:ffff888125567000(0000) knlGS:0000000000000000 [ 654.404448][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 654.404460][ C1] CR2: 000055c035fd8ee8 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 654.404476][ C1] Call Trace: [ 654.404484][ C1] [ 654.404499][ C1] __free_frozen_pages+0x549/0xdb0 [ 654.404536][ C1] ? ___free_pages+0xb2/0x220 [ 654.404559][ C1] vfree+0x25a/0x400 [ 654.404586][ C1] ? __pfx_kcov_close+0x10/0x10 [ 654.404614][ C1] kcov_close+0x28/0x50 [ 654.404638][ C1] __fput+0x44f/0xa70 [ 654.404692][ C1] task_work_run+0x1d9/0x270 [ 654.404720][ C1] ? __pfx_task_work_run+0x10/0x10 [ 654.404738][ C1] ? kmem_cache_free+0x187/0x630 [ 654.404756][ C1] ? do_exit+0x696/0x2320 [ 654.404776][ C1] do_exit+0x69b/0x2320 [ 654.404798][ C1] ? __pfx_do_exit+0x10/0x10 [ 654.404813][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 654.404838][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 654.404895][ C1] do_group_exit+0x21b/0x2d0 [ 654.404917][ C1] __x64_sys_exit_group+0x3f/0x40 [ 654.404935][ C1] x64_sys_call+0x221a/0x2240 [ 654.404962][ C1] do_syscall_64+0x14d/0xf80 [ 654.404986][ C1] ? trace_irq_disable+0x3b/0x150 [ 654.405011][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.405029][ C1] ? clear_bhb_loop+0x40/0x90 [ 654.405050][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.405067][ C1] RIP: 0033:0x7f6c0859c799 [ 654.405082][ C1] Code: Unable to access opcode bytes at 0x7f6c0859c76f. [ 654.405091][ C1] RSP: 002b:00007ffc244e9c48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 654.405109][ C1] RAX: ffffffffffffffda RBX: 00007f6c08633b21 RCX: 00007f6c0859c799 [ 654.405122][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 654.405133][ C1] RBP: 00007f6c08633b33 R08: 0000000000000000 R09: 00000000000927c0 [ 654.405144][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 654.405154][ C1] R13: 00000000000927c0 R14: 0000000000094a8d R15: 00007ffc244e9df0 [ 654.405177][ C1] [ 654.726101][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 654.733037][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 654.742185][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 654.752271][ T31] Call Trace: [ 654.755578][ T31] [ 654.758538][ T31] vpanic+0x56c/0xa60 [ 654.762573][ T31] ? __pfx___schedule+0x10/0x10 [ 654.767470][ T31] ? __pfx_vpanic+0x10/0x10 [ 654.772007][ T31] ? __pfx_console_unlock+0x10/0x10 [ 654.777241][ T31] panic+0xc5/0xd0 [ 654.780987][ T31] ? __pfx_panic+0x10/0x10 [ 654.785428][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 654.790848][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 654.797024][ T31] watchdog+0x1023/0x1030 [ 654.801393][ T31] ? watchdog+0x21a/0x1030 [ 654.805845][ T31] kthread+0x388/0x470 [ 654.809926][ T31] ? __pfx_watchdog+0x10/0x10 [ 654.814624][ T31] ? __pfx_kthread+0x10/0x10 [ 654.819237][ T31] ret_from_fork+0x51e/0xb90 [ 654.823860][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 654.828998][ T31] ? __switch_to+0xc7d/0x1450 [ 654.833721][ T31] ? __pfx_kthread+0x10/0x10 [ 654.838328][ T31] ret_from_fork_asm+0x1a/0x30 [ 654.843133][ T31] [ 654.846769][ T31] Kernel Offset: disabled [ 654.851096][ T31] Rebooting in 86400 seconds..